DRAFT. Not legal advice. A Saudi lawyer must review this before publishing. Items in [brackets] still need to be filled in.

Kanaf Care Privacy Policy

Effective date: [EFFECTIVE DATE]

Kanaf Care helps parents and caregivers record a child's daily care and medical information. This information is sensitive, so this policy explains plainly what we collect, why, where it is kept, and how you control it.

1. Who we are

Kanaf Care is operated by [COMPANY LEGAL NAME], [ADDRESS], Kingdom of Saudi Arabia. We decide how the data in this policy is used.

Contact: [CONTACT EMAIL]

2. What we collect

Your account

• Your email address, used to sign in with a one-time code
• The name you show to family members who share a child's file
• The date and version of the consent you gave
• The last time your account was active, and whether it is ad-free

Your child's file, which you enter yourself

• Name, date of birth, sex, blood type, weight and height
• Guardian name and emergency phone number
• Hospital, medical file number, insurance details and doctors
• Diagnoses, birth history, allergies, surgeries and medical devices
• Feeding method, formula, and tube type and size
• Medicines, doses and refills
• Daily entries such as feeds, water, stool, urine, vomiting, seizures, vital signs, notes and anything you choose to track
• Medical records and appointments, with any photos or PDF files you attach
• Pictures of medicines and milk that you add

Technical information

• Your server requests may be recorded in technical logs, including your IP address and the time of the request. We keep these logs for [LOG DAYS] days to run and protect the service.

Ads and sign-in protection

• The History tab shows one small ad from Google AdMob. Google receives technical information such as your IP address and device type, and knows the ad appears in Kanaf Care. Ads are not personalized, and we do not use your phone's advertising ID.
• If you pay to remove ads, Google or Apple handles the payment. We do not receive your card details.
• When you ask for a sign-in code, Cloudflare Turnstile checks that you are not a bot. Cloudflare receives technical information such as your IP address and browser details.

What we do not collect

• We do not use analytics tools.
• We do not collect your location or your contacts.
• We do not receive your fingerprint or face data. App lock is handled by your device.
• The camera and photos are used only when you choose to attach a file.

3. Why we use it

We use this information only to:

• Keep your child's file and sync it across your devices
• Share it with the family members you invite
• Show reminders, charts and reports
• Show one small ad in the History tab
• Sign you in and protect your account
• Keep the service secure, back it up and restore it
• Reply to you when you contact us
• Meet our legal obligations

We do not sell your data. We never use your child's data or your account details for advertising, and we never send them to an ad company.

4. Our legal basis

We store and process your child's health data on the basis of your explicit consent, which you give in the app before any data is saved to our server. You confirm that you are the child's parent or legal guardian, or that you have their permission.

5. Who can see the data

• People you invite. The owner of a child's file invites others with a one-time code that expires after 48 hours, and can remove them at any time. A caregiver can view the file and add entries. A viewer can only view it. Entries show the name of the person who made them.
• Our service providers. We use [HOSTING PROVIDER] to host the servers and [EMAIL PROVIDER] to send sign-in emails. The email provider receives your email address only, not your child's data. Google (AdMob) and Cloudflare (Turnstile) receive only the technical information described in section 2.
• Authorities. We disclose data only when the law requires it.
• Doctors and others you choose. PDF reports are created on your device. Once you send one, it leaves our control.

Our admin console shows staff account details: your email, your join and last active dates, the number of files you own, and whether you are ad-free. It does not show your child's data. Our authorised staff do not view your child's data except where this is needed to fix a problem you reported, to keep the service secure, or to comply with the law.

6. Where the data is kept

Our servers are in the Kingdom of Saudi Arabia, and our backups are kept in a second region inside the Kingdom. We do not transfer your child's health data outside the Kingdom. Google and Cloudflare may process the technical information they receive outside the Kingdom.

7. How we protect it

• Data saved on your phone is encrypted with AES-256.
• Data travels between the app and the server over an encrypted connection.
• The server disk and our backups are encrypted.
• Access rules on the server limit each file to its owner and the people invited to it.
• You can turn on App lock with your device's fingerprint, face or passcode.

Please note: data on our server is not end-to-end encrypted, because the service must be able to sync it and share it with your family. No system is completely secure. If a breach affects your data, we will notify you and the competent authority as the law requires.

8. How long we keep it

We keep your data until you delete it or delete your account, even if you stop using the app. We never delete an account for being inactive. If you have not used the app for 6 months, we email you a reminder, at most once every 6 months. The reminder does not name your child or any health detail.

• Removing an entry, record or file: its content is removed from the server when your device syncs.
• Deleting your account: your account and the child files you own are permanently removed from the server and from all family devices.
• Backups: deleted data can remain in encrypted backups for up to 14 days, then it is erased.
• Signing out: this removes the data from that device only. It stays on the server until you delete it.

If the owner transfers a child's file to a family member, that person becomes responsible for the file and the old owner stays on as a caregiver.

If you are a caregiver or viewer and you delete your account or leave a file, the child's file stays with its owner. This includes the entries you made, with your name on them.

9. Your rights

You can:

• Know how your data is used, through this policy or by asking us
• See and get a copy of your data, using the app, a PDF report, or by asking us at [CONTACT EMAIL]
• Correct your data by editing it in the app
• Delete your data and account at any time, in the app under Family, or at [ACCOUNT DELETION WEB PAGE]
• Withdraw your consent by deleting your account. We cannot run the service without storing data on the server, so withdrawing consent ends your use of the service.
• Complain to us first, and to the Saudi Data and AI Authority (SDAIA)

We will reply to requests within [RESPONSE PERIOD].

10. Children

Kanaf Care is for adults who care for children. Children should not create accounts. All information about a child is entered and controlled by the adult who holds the account.

11. Reminders on your device

Reminders are created on your device, not sent from our server. Depending on your phone's settings, they may show a child's or medicine's name on the lock screen. You can change this in your phone's notification settings.

12. Changes to this policy

If we make an important change, we will tell you in the app before it applies and ask for your consent again when the law requires it.

13. Contact us

[COMPANY LEGAL NAME], [ADDRESS]

Email: [CONTACT EMAIL]