Privacy Policy

1. Introduction

Ionic Ventures LLC, an Alabama limited liability company (“we,” “us,” or “our”), is committed to protecting your privacy and the privacy of your family's data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Rojo mobile application (“App”), operated by Ionic Ventures LLC.

Please read this Privacy Policy carefully. By using the App, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, email address, and password when you register. If you use Google or Apple Sign-In, we receive your name and email from those providers.
• Baby Profile Data: Baby name(s), date of birth, and any optional profile information you choose to enter.
• Tracking Logs: Feeding logs (time, type, duration, amount), diaper change logs (time, type), sleep logs (start/end time, duration), pumping logs (time, amount, duration), growth logs (weight, length, head circumference), and medicine logs (medicine name, dosage, saved medicines per baby, and reminder schedule preferences).

2.2 Information Collected Automatically

• Device Information: Device type, operating system version, unique device identifiers, and app version.
• Push Notification Tokens: A device-specific token used to deliver notifications and reminders (e.g., medicine reminders, Live Activity updates).

2.3 Information We Do NOT Collect

• We do not collect precise GPS location data.
• We do not access your camera, microphone, or contacts unless explicitly requested for a specific feature.
• We do not sell your personal data to third parties.
• We do not use your data for advertising purposes.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the App and its features
• Create and manage your account
• Sync your data across devices
• Generate personal statistics and insights within the App
• Respond to your support requests and communications
• Send important notices about the App (e.g., service updates, security alerts)
• Detect, prevent, and address technical issues
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Contract Performance: Processing necessary to provide the App's services to you
• Legitimate Interests: Improving the App, ensuring security, and preventing fraud
• Legal Obligation: Complying with applicable laws
• Consent: Where you have given explicit consent

5. Data Storage and Security

5.1 Storage: Your data is stored securely using Supabase, a third-party database provider with industry-standard security practices including encryption at rest and in transit.

5.2 Encryption: All data transmitted between the App and our servers is encrypted using TLS/SSL.

5.3 Access Controls: Access to your personal data is restricted to authorized personnel who need it to operate and maintain the App.

5.4 Security Measures: We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

5.5 No Guarantee: Despite our efforts, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:

6.1 Service Providers

We share data with trusted third-party service providers who assist us in operating the App, subject to confidentiality agreements:

• Supabase — Database hosting and authentication
• Apple — App distribution and Sign in with Apple
• Google — Sign in with Google

6.2 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request.

6.3 Protection of Rights

We may disclose information to protect the rights, property, or safety of Rojo, our users, or the public.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your data may be transferred as part of that transaction. We will notify you via email or prominent in-app notice of any such change.

7. Data Retention

7.1 We retain your personal data for as long as your account is active or as needed to provide you services.

7.2 You may request deletion of your account and associated data at any time (see Section 9).

7.3 We may retain certain information as required by law or for legitimate business purposes, such as fraud prevention, even after account deletion.

7.4 Anonymized, aggregated data that cannot identify you may be retained indefinitely.

8. Children's Privacy

8.1 Rojo is designed for use by adults (18+) to track data about their infant or young children.

8.2 We do not knowingly collect personal information directly from children under the age of 13 (or 16 in the EEA).

8.3 Data about babies and children entered into the App is entered by adult users and is treated as personal data of those adult users.

8.4 If you believe we have inadvertently collected information from a child without parental consent, please contact us immediately at support@rojobaby.app.

9. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and personal data
• Portability: Request your data in a portable, machine-readable format
• Objection: Object to certain types of processing
• Restriction: Request restriction of processing in certain circumstances
• Withdraw Consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at support@rojobaby.app. We will respond within 30 days.

To delete your account: Go to Settings → Caregivers → Delete Account within the App, or email us at support@rojobaby.app.

10. California Privacy Rights (CCPA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act:

• The right to know what personal information we collect, use, disclose, and sell
• The right to delete your personal information
• The right to opt-out of the sale of your personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

To submit a CCPA request, contact us at support@rojobaby.app.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses where required by applicable law.

12. Third-Party Links and Services

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any information.

13. Push Notifications

With your permission, we may send push notifications to your device. You can manage notification preferences in the App settings or your device settings at any time.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Updating the “Last Updated” date at the top of this policy
• Sending an in-app notification or email for significant changes

Your continued use of the App after changes are posted constitutes your acceptance of the revised Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: support@rojobaby.app

16. Supervisory Authority

If you are located in the EEA and believe we have not addressed your concern adequately, you have the right to lodge a complaint with your local data protection supervisory authority.