This policy explains how the Miabeli app collects, uses, and protects personal data.
Who is responsible for your data
The data controller for personal data in the Miabeli app is Kristina Valenčak. For all privacy questions, email info.miabeli@gmail.com.
In short
We do not sell your data or use it for advertising. We share data only with services needed to operate the app, or when required by law.
Website cookie
On malckovkartoncek.si, when you choose a language (SL/EN), we may store one functional cookie (locale) to remember your choice. The cookie is not used for advertising or tracking. If you do not set the cookie, we choose the website language from your browser settings: if your browser does not indicate Slovenian, we show the English version.
What data we collect
We collect only the data needed to operate the app:
- Account data: email address, password (in encrypted form), registration date.
- Child profiles: name, date of birth, gender, body measurements, notes, selected profile illustration (built into the app; we store only the illustration identifier on the server, not photos from your gallery).
- Health and other records you enter: temperature, medicines, symptoms, check-ups, vaccinations, events, sleep, feeding, diapers, growth, complementary feeding, teeth, illness episodes, milestones, reminders.
- Uploaded documents (e.g. PDF or images of reports and referrals, with Premium).
- Technical data: basic logs needed for security and reliable operation.
- Push notifications (if enabled): device identifier for notifications, platform, time zone.
- Subscription: subscription status and identifier with the subscription provider (we do not store payment card details).
Why we use data
- To sign you in and manage your account.
- To store and display your records in the app.
- To operate reminders and send notifications (only if you enable them).
- For transactional email (email confirmation, password reset, family invitations).
- To manage Premium subscriptions.
- For app security and abuse prevention.
Family access
If you invite another adult into your family, they will have access to the same child profiles and records you see in that family. We send the invitation to the email address you enter.
Who helps us operate the app
We use trusted third-party services to operate the app:
- Hetzner: database hosting provider,
- Cloudinary: storage for uploaded documents,
- Resend: email delivery,
- Google Firebase: notification delivery (only if you enable notifications),
- RevenueCat, Apple App Store, and Google Play: subscription and payment management.
How long we keep data
- We keep data while your account is active.
- After account deletion, we delete your data from our systems.
- Backups may temporarily retain data for a short period for technical reasons.
- We keep technical logs for a limited time, usually up to 90 days.
How to delete data
- You can delete individual records in the app.
- You can delete your entire account in the app settings.
- You can also request deletion by email at info.miabeli@gmail.com.
How we protect data
- We store passwords in encrypted form.
- Communication uses a secure connection (HTTPS).
- Only the signed-in user of an account has access to their data (and your family members, if you invited them).
Your choices
You can:
- request access to your data,
- correct inaccurate data in the app,
- request deletion of data,
- withdraw consent for notifications in device or app settings.
Changes to this policy
- We may update this policy when app features change.
- We will notify you of material changes in the app or by email.
- The date of the latest version is shown at the top of this document.