Privacy Policy

This Privacy Policy (the "Policy") describes how Zyvenxa Technologies Private Limited ("Anvikare", "we", "us", or "our") collects, uses, discloses, stores, and protects information when you use the Anvikare mobile application (the "App"), our website at https://anvikare.com (the "Site"), and any related services we offer (collectively, the "Services").

By downloading, accessing, or using the Services, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree, please do not use the Services.

1. Who We Are (Data Controller)

The data controller responsible for your personal data is:

• Legal entity: Zyvenxa Technologies Private Limited
• Registered address: Kerala, India
• Country of incorporation: India
• Contact email (all enquiries, including privacy and grievances): support@zyvenxa.in

2. About the App and the Nature of the Data

Anvikare is a personal tracker designed to help parents, guardians, and caregivers record and monitor information related to a baby's and a mother's wellbeing — including sleep, feeding, pumping, diapers, growth measurements, vaccinations, medicines, milestones, moods, reminders, journal notes, and similar caregiving information.

Important nature-of-data notice. Some information you enter (for example, weight, growth measurements, feeding patterns, vaccinations, moods, medicines, or maternal information) may constitute "health-related", "sensitive", or "special category" personal data under laws such as the EU/UK GDPR (Art. 9), the California Consumer Privacy Act / California Privacy Rights Act ("CCPA/CPRA"), Brazil's LGPD, India's Digital Personal Data Protection Act 2023, and similar laws. You provide such data voluntarily, and where required by law we rely on your explicit consent (see Section 7).

Anvikare is not a medical device. The App does not provide medical advice, diagnosis, or treatment, is not intended to replace consultation with qualified healthcare professionals, and is not regulated as a medical device. Always consult a qualified healthcare provider for medical decisions.

3. Who May Use the App

The App is intended for use by adults aged 18 years or older who are parents, legal guardians, or authorised caregivers recording information about themselves and/or a child in their care.

Children do not use the App directly. The App is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly allow children to create accounts or use the App on their own behalf. Information about a child is entered, controlled, and managed solely by the parent or legal guardian. If you are a parent or guardian and believe a child has provided personal information to us directly, please contact us at support@zyvenxa.in and we will take appropriate steps to delete it.

4. Information We Collect

4.1 Information you provide directly

• Caregiver / mother profile: your name, optional date of birth, and your relationship to each baby. We do not ask for an email address to use the App.
• Baby/child profile: name (and optional nickname), date of birth, sex (if provided), birth measurements, and a colour tag.
• Caregiving and health-related entries: sleep, feeding, pumping and diaper logs, growth measurements (height/weight/head circumference), vaccination records, medicine logs, milestones, reminders, your own mood, water and weight logs, journal entries, notes, photos (if any), and any other data you choose to record.
• Voice, camera and photos (only when you use those features): speech you dictate to the voice log is turned into text, voice notes you record on a milestone are saved with that milestone, photos you add to milestones are saved with your data, and pages you scan (vaccination cards, prescription labels) are read for text. See Section 4.4 for how each is handled.
• Support communications: when you contact us (e.g., via the in-app support form or email), we receive your email address, the contents of your message, any attachments you add, and basic technical details attached automatically to help us investigate (app version and build, iOS version, and device model). Support tickets are processed through Zoho Desk.
• Purchase information: subscription tier, transaction identifiers, purchase/restore history, and entitlement status. Payment is handled by Apple; we do not receive or store your full payment card details.

4.2 Information collected automatically

• Device and technical data: device model, operating system and version, language, region, time zone, app version, build, crash logs, diagnostic logs, error stack traces, and performance metrics.
• Usage data: features used, screens viewed, taps, navigation paths, session duration, in-app events, and similar interaction data (see Microsoft Clarity in Section 6).
• Identifiers: a randomly-generated installation identifier, RevenueCat anonymous user ID, and Firebase installation ID / push token. The App does not request or use the Apple Identifier for Advertisers (IDFA).
• Approximate location: derived from your IP address and device locale (we do not collect precise GPS location).
• Advertising attribution: Apple SKAdNetwork / AdAttributionKit signals used to measure ad performance in a privacy-preserving way.

4.3 Information from third parties

• Apple: subscription receipts, renewal events, and refund notifications relayed to us through RevenueCat.
• Apple iCloud / CloudKit: when you enable iCloud sync or co-parent sharing, your data is synchronised through your Apple ID via Apple's CloudKit service.

4.4 Voice, camera, photos, Health, and what we do not collect

• Apple Health (optional): if you allow it, Anvikare reads your sleep, steps and weight from Apple Health to show beside your own logs, and saves the moods, water and weight you log to Apple Health. This stays on your device, is never used for advertising, and you can change access at any time in iOS Settings → Health.
• Microphone and speech: the microphone is used only while the voice log is open and listening. Recognition runs on your device where your device supports it; otherwise it is handled by Apple's speech service under Apple's privacy practices. Anvikare does not keep the audio of voice logging. Voice notes you choose to record on a milestone are stored only with your data (on your device and in your iCloud).
• Camera and photos: the camera is used only when you scan a vaccination card or prescription label. Text is read on your device and the scan photos are not kept. Photos you choose to add to milestones and memories are picked through Apple's photo picker, so the App only receives the photos you select and never has access to the rest of your library. They are resized and saved as a copy without location or other camera metadata, and are stored with your data (on your device and in your iCloud).
• Widgets, Lock Screen, Live Activities, Apple Watch, Siri and Spotlight: if you use these, your baby's name and recent logs (for example the last feed or a running timer) are shown on your devices and in iPhone search. This happens on your devices only, but anyone who can see your screen may see it. You can turn these off in iOS Settings or by removing the widget.
• We do not collect precise GPS location, contacts, calendars, or your wider photo library.
• We do not sell your personal information for money (see Section 11 for the CCPA-defined meaning of "sell" / "share").

5. How We Use Your Information (Purposes & Legal Bases)

We use personal data for the following purposes. Where the GDPR/UK GDPR applies, the corresponding legal bases are indicated.

Automated decision-making (GDPR Art. 22). We do not carry out solely automated decision-making — including profiling — that produces legal effects concerning you or similarly significantly affects you. Any AI-generated insights, charts, percentiles, or summaries within the App are informational only and are not used to make any decision about you or your child.

6. Third-Party Services and Processors

To deliver the Services, we share limited personal data with carefully selected third-party providers acting as our processors or as independent controllers. We require each provider to maintain appropriate security and confidentiality measures.

We do not authorise these providers to use your personal data for their own independent marketing purposes.

7. Consent, Tracking & Advertising

7.1 No tracking

Anvikare does not "track" you across apps and websites owned by other companies (as Apple defines that term), does not request App Tracking Transparency permission, and does not access your Identifier for Advertisers (IDFA).

7.2 EEA / UK / Swiss users — Google UMP consent

If you are located in the EEA, the United Kingdom, or Switzerland, we present a Google-certified consent management prompt (UMP) on first launch to obtain your consent (or signal your objection) for advertising and analytics cookies and identifiers, consistent with the EU ePrivacy Directive, GDPR, and the IAB Transparency & Consent Framework. You may withdraw or change your choices at any time from More → Settings → Privacy → Manage privacy options in the App.

7.3 Advertising

The free version of the App displays advertisements served by Google AdMob. Pro subscribers do not see ads. Every ad request is sent as non-personalised: ads are chosen from context (such as the App and your approximate region) and are not based on a profile of you. Google may still use cookies, device identifiers, or similar technologies for purposes such as frequency capping, fraud prevention, and aggregated ad measurement, subject to your consent choices where required. For more information about Google's advertising practices, please see policies.google.com/technologies/ads.

8. How We Store and Secure Your Data

8.1 Storage locations

• On your device: the majority of your personal and caregiving data is stored locally on your device in an on-device database protected by iOS Data Protection.
• Your iCloud account: if iCloud sync or co-parent sharing is enabled, your data is replicated through Apple's CloudKit infrastructure under your Apple ID. We do not have administrative access to your iCloud container contents; access is governed by Apple.
• Our processors: limited operational data (crash logs, subscription metadata, support tickets, analytics events) is stored on infrastructure operated by the providers listed in Section 6, which may be located in the United States, the European Union, India, or other jurisdictions.
• Website hosting: the Site at anvikare.com is hosted as static content on Amazon S3 (Amazon Web Services) in the Mumbai region (ap-south-1), India, and delivered through Amazon CloudFront. The domain is registered through GoDaddy, but GoDaddy does not host the Site content.

8.2 International data transfers

Where personal data is transferred outside your country of residence — including to the United States (Apple, Google, Microsoft, RevenueCat), India (Zyvenxa; Zoho Desk on the zoho.in data centre; Amazon Web Services in the Mumbai ap-south-1 region for website hosting), or other jurisdictions — we rely on appropriate safeguards such as:

• the European Commission's Standard Contractual Clauses (SCCs) together with the UK International Data Transfer Addendum for transfers from the EEA/UK to the United States and to India;
• the EU–U.S. Data Privacy Framework (and the UK and Swiss extensions) for transfers to U.S.-based providers that are certified under the framework;
• adequacy decisions of the European Commission or the UK Government where applicable;
• your explicit consent, where consent is the lawful basis we rely on.

You may request a copy of the relevant safeguards (including the SCCs we have entered into with our processors) by contacting us at support@zyvenxa.in.

8.3 Security measures

We implement administrative, technical, and physical safeguards designed to protect your information, including: encryption in transit (TLS), encryption at rest on device, file-protection classes on sensitive caches, principle-of-least-privilege access for staff, secure software development practices, dependency monitoring, and incident response procedures. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

8.4 Data breach notification

If we become aware of a personal-data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority (including, where applicable, the Indian Computer Emergency Response Team (CERT-In) and the Data Protection Board of India) and affected users without undue delay and, where feasible, within 72 hours, as required by applicable law.

8.5 Where your caregiving data actually lives

Zyvenxa does not hold a server-side copy of your caregiving data. All data you enter into the App — including baby and mother profiles, feeds, sleep logs, diapers, growth measurements, vaccinations, medicines, moods, journal entries, and photos — is stored exclusively on your device and, if you have iCloud sync enabled, in your personal Apple iCloud account under your Apple ID. Only you have access to your iCloud container; Zyvenxa has no administrative access to it.

The data Zyvenxa and its processors hold is limited to what is described in Sections 4.2 and 4.3 (device and technical data, support communications, subscription metadata, and analytics events). Your caregiving and health-related entries are not among them.

Exports and sharing. When you export your data (for example as CSV files) or create a doctor visit summary PDF, the file is created on your device and goes only where you choose to send it through the iOS share sheet. Once shared, that copy is outside the App and outside our control.

9. How Long We Keep Your Data (Retention)

• Caregiving and health-related data (sleep, feeding, diapers, growth, vaccinations, medicines, moods, notes, photos): retained for as long as you keep the data in the App. You can delete individual entries at any time, or erase all of your data from this device and your iCloud from More → Your data → Delete all data. Health-related data is retained for the same duration as other caregiving entries; it is not retained longer.
• App data on your device: retained on the device until you delete it inside the App or uninstall the App. Note that uninstalling the App removes the local copy from that device only.
• iCloud-synced data: if iCloud sync is enabled, your data is stored in your personal iCloud account under your Apple ID. Uninstalling the App does not delete the iCloud copy — that copy remains in your iCloud until (a) you delete it from inside the App on any signed-in device, (b) you remove the Anvikare iCloud data from iOS Settings → Apple ID → iCloud → Manage Account Storage → Anvikare, or (c) you delete your Apple ID. Zyvenxa does not have administrative access to your iCloud container and cannot delete iCloud-stored content on your behalf.
• Subscription / billing records: retained for the period required by tax, accounting, and consumer-protection laws (typically up to 7–10 years).
• Support tickets: retained for up to 24 months after resolution.
• Crash logs and diagnostic data: retained for up to 90 days, then aggregated or deleted.
• Analytics (Microsoft Clarity): retained per Microsoft's retention schedule (currently up to 12 months).
• Advertising identifiers: retained per Google's retention schedule.

When retention periods expire, we delete or anonymise the data so that it can no longer be associated with you.

10. Your Rights (Global)

Depending on where you live, you may have some or all of the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure ("right to be forgotten") — request deletion of your data.
• Restriction — limit how we process your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests or direct marketing.
• Withdraw consent — at any time, without affecting prior lawful processing.
• Lodge a complaint with a supervisory authority (e.g., your national data-protection regulator, the UK ICO, the Data Protection Board of India, or your EU member-state authority).
• Not be subject to a decision based solely on automated processing producing legal effects.

To exercise these rights, email support@zyvenxa.in, or use the in-app controls: More → Your data → Export data for a copy of your data, and More → Your data → Delete all data to erase it. We will respond within the period required by applicable law (typically 30 days under GDPR; 45 days under CCPA, extendable once).

11. California Residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, provides you with the rights summarised below.

11.1 Categories of personal information collected (last 12 months)

• Identifiers — name, email, device identifiers, IP-derived region.
• Customer records — caregiver and child profile fields.
• Commercial information — subscription transactions.
• Internet/network activity — app usage, interaction events, crash logs.
• Sensitive personal information — health-related entries you choose to record; we use this only to provide the Service you requested and do not use or disclose it for purposes that would trigger the "right to limit" under CPRA.

11.2 "Sale" and "Sharing"

We do not "sell" your personal information, and we do not "share" it for cross-context behavioural advertising. Ads in the free version are requested as non-personalised and without the IDFA (see Section 7). If this ever changes, we will update this Policy and provide an opt-out before it takes effect.

11.3 Your CCPA/CPRA rights

• Right to know / access;
• Right to delete;
• Right to correct;
• Right to opt out of sale/sharing and targeted advertising;
• Right to limit use of sensitive personal information;
• Right to non-discrimination for exercising your rights.

Authorised agents may submit requests on your behalf with proof of authorisation. Because we do not hold an account for you or a server-side copy of your caregiving data, we verify requests using the email address you contact us from and, where appropriate, additional information to confirm identity.

12. European Economic Area, United Kingdom & Switzerland (GDPR / UK GDPR / FADP)

If you are located in the EEA, UK, or Switzerland, the legal bases for processing are listed in Section 5. You have all the rights listed in Section 10. For all data-protection enquiries and requests, please contact us at support@zyvenxa.in. You may also lodge a complaint with your local supervisory authority, including:

• UK: Information Commissioner's Office — ico.org.uk
• Ireland: Data Protection Commission — dataprotection.ie
• Other EU member states: edpb.europa.eu

13. India — Digital Personal Data Protection Act 2023

As we are incorporated in India, our processing of personal data is also governed by the Digital Personal Data Protection Act, 2023 ("DPDP Act"). Under the DPDP Act, you (the "Data Principal") have the right to:

• obtain a summary of the personal data being processed and the processing activities;
• request correction, completion, updating, and erasure of your personal data;
• nominate another individual to exercise your rights in the event of your death or incapacity;
• readily-available grievance redressal.

Our designated grievance officer under the DPDP Act and the Information Technology Act, 2000 (and rules thereunder) is:

• Grievance Officer: The Designated Officer, Zyvenxa Technologies Private Limited
• Email: support@zyvenxa.in
• Address: Zyvenxa Technologies Private Limited, Kerala, India 682308

We will acknowledge grievances within 48 hours and resolve them within 30 days of receipt. Unresolved complaints may be escalated to the Data Protection Board of India.

13.1 Data Protection Officer (DPO)

We have assessed the criteria for the mandatory appointment of a Data Protection Officer under Article 37 of the GDPR / UK GDPR and under the Indian DPDP Act, and have determined that the appointment of a formal DPO is not currently mandatory for our processing activities, given the scale of our operations and the fact that our core activity is not large-scale systematic monitoring of data subjects or large-scale processing of special-category data on behalf of third parties. All privacy enquiries, complaints, and data-subject-rights requests should be directed to support@zyvenxa.in, which is monitored by the team responsible for privacy compliance. We will re-assess this position if the scale or nature of our processing changes.

13.2 EU / UK Representative (GDPR Art. 27)

Because we are established outside the EEA and the UK but offer the Services to users in those regions, the requirement under Article 27 GDPR (and the corresponding UK GDPR provision) to designate a representative in the Union and the UK may apply to us. We are in the process of formalising such a designation. In the meantime, EEA, UK, and Swiss data subjects may exercise all of their rights — and lodge any complaint, query, or data-subject-rights request — directly with us at support@zyvenxa.in, and we will respond within the periods required by applicable law.

14. Other Jurisdictions

• Brazil (LGPD): you have rights of confirmation, access, correction, anonymisation, portability, deletion, information about sharing, and revocation of consent. ANPD complaints: gov.br/anpd.
• Canada (PIPEDA / Quebec Law 25): you may access and correct your data; complaints to the Office of the Privacy Commissioner of Canada.
• Australia (Privacy Act 1988): you have rights under the Australian Privacy Principles; complaints to the OAIC.
• South Korea (PIPA), Japan (APPI), Singapore (PDPA), South Africa (POPIA), UAE, Saudi Arabia (PDPL), Turkey (KVKK), and others: you have rights substantially similar to those described above, and you may contact your national data-protection authority.
• U.S. state laws (Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, Tennessee, Indiana, New Jersey, etc.): you have rights of access, correction, deletion, and portability, exercisable as described in Section 10. We do not sell personal data or use it for targeted advertising.

15. Children's Privacy

The App is intended for adults caring for children.

• We do not knowingly collect personal information directly from a child. Only an adult (aged 18 or over) may install the App, create the parent/caregiver profile, and add information about a child.
• Information about an identifiable minor (your child) that you enter into the App is treated as sensitive personal data under the GDPR/UK GDPR, the DPDP Act, and analogous laws, even though it is provided by you rather than by the child.
• We do not use any data about your child for advertising, profiling, marketing, or analytics targeting. Child data is used solely to provide the tracking, syncing, sharing, and AI-insight features you request.
• When you delete your data from the App, the associated child data is removed from the device immediately and from your iCloud as described in Section 9.
• Under the U.S. Children's Online Privacy Protection Act (COPPA), the App is not directed to children, and data about a child entered by their parent/guardian is held under that parent's/guardian's account.
• Under the DPDP Act, processing of a child's personal data requires verifiable consent of the parent or lawful guardian; we obtain this by requiring that an adult creates and controls the account and by limiting child-related entries to the account-holder's input.

If you believe a child has used the App without parental consent, please contact support@zyvenxa.in and we will investigate and delete the data as appropriate.

15.1 Advertising and minors

Advertisements in the App are served by Google AdMob and are intended for the parent/caregiver — i.e. an adult user — not for the child. We do not share any data about your child with AdMob, Google, or any other ad provider. AdMob is configured in our App so that ad requests are not treated as directed to children, and every ad request is non-personalised, as described in Section 7.

16. Health & Medical Disclaimer

The information in the App, including any AI-generated insights, summaries, charts, or growth-percentile indications, is provided for general informational and tracking purposes only. It is not medical advice and is not a substitute for consultation with a qualified healthcare professional. Never disregard professional medical advice or delay seeking it because of something in the App. If you believe your child or you may have a medical emergency, contact your local emergency services immediately.

17. AI Features Disclaimer

Certain features generate text, summaries, or insights, or interpret what you say or scan (such as Insights, Ask Anvikare, the weekly digest, voice logging and scanning), using Apple Intelligence on-device Foundation Models. This processing runs on your device; your data is not sent to us or to any external AI provider (such as OpenAI, Anthropic, or Google Gemini). AI features are only available on devices that support Apple Intelligence and when it is turned on; you can turn it off at any time in iOS Settings → Apple Intelligence & Siri. AI output may be inaccurate, incomplete, or misleading. You should not rely on AI output for medical, safety-critical, financial, or legal decisions.

18. Push Notifications & Communications

With your permission, the App schedules reminders on your device (as notifications or, if you allow it, iOS alarms), and we may send service updates as push notifications via Apple Push Notification Service and Firebase Cloud Messaging, or show them as in-app messages via Firebase In-App Messaging. You can disable notifications at any time in iOS Settings or in the App. We do not currently send marketing emails; if this changes, you will receive a clear opt-in and an unsubscribe mechanism.

19. Co-Parent Sharing

If you choose to share your child's record with a co-parent or caregiver, we use Apple's CloudKit Sharing to send an invitation, either through Apple's sharing sheet or to an iCloud email address or phone number you enter, which Apple uses to find the person's account and deliver the invitation. Anyone you grant access to will see the data you have shared (including milestone and memory photos and voice notes) and, if you give them read/write rather than read-only access, may add, edit, or delete entries. You are responsible for whom you invite. You may revoke access at any time from the App.

20. Subscriptions, Free Trials & Billing

The App offers auto-renewable subscriptions (monthly, quarterly, and yearly tiers) managed through your Apple ID via Apple's App Store. Pro subscribers do not see ads. Payment is charged to your store account on confirmation of purchase. Subscriptions automatically renew unless cancelled at least 24 hours before the end of the current period. You can manage and cancel subscriptions in your store account settings. We use RevenueCat to verify entitlements; RevenueCat receives a pseudonymous user identifier and your transaction metadata.

21. Cookies and Similar Technologies (Site)

Our Site at anvikare.com does not use analytics, advertising, or tracking cookies. Our hosting provider keeps standard server access logs (see Section 6). The App itself does not use browser cookies but uses functionally equivalent local-storage identifiers as described above.

22. "Do Not Track" Signals

Some browsers transmit "Do Not Track" (DNT) signals. Because we do not track visitors across websites or sell or share personal information, there is nothing for DNT or Global Privacy Control (GPC) signals to switch off.

22A. Acknowledgements & Data Sources

Growth percentile curves and reference data displayed within the App are reproduced from the World Health Organization (WHO) Child Growth Standards, published by WHO, Geneva. The World Health Organization does not endorse this product, is not affiliated with Anvikare or Zyvenxa Technologies Private Limited, and is not responsible for the interpretation, presentation, or use of WHO data within the App. The views and content of Anvikare do not necessarily reflect the views of WHO. A full list of third-party libraries and data sources is available in the App under More → Legal → Acknowledgements.

23. Third-Party Links

The App and Site may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties; please review their privacy policies before providing them with information.

24. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will notify you through the App, by email, or by prominent notice on our Site before the changes take effect, and we will update the "Last updated" date above. Your continued use of the Services after the effective date constitutes acceptance of the revised Policy.

25. How to Contact Us

For any questions, complaints, privacy requests, data-subject-rights requests, or grievances relating to this Policy or our handling of your personal data, please contact us using the details below. We answer all enquiries from a single mailbox to ensure timely response:

• Email (all enquiries): support@zyvenxa.in
• Postal address: Zyvenxa Technologies Private Limited, Kerala, India

26. Governing Law & Jurisdiction

This Policy is governed by the laws of India, without regard to its conflict-of-laws principles, and subject to the exclusive jurisdiction of the competent courts at Ernakulam, Kerala, India, except where mandatory local consumer-protection or data-protection law in your country of residence grants you additional rights or a different forum.

27. App Store Privacy Label

For convenience, the data categories shown in our Apple App Privacy label reflect the practices described in this Policy. In the event of any conflict between the label and this Policy, this Policy controls.