Last updated: [DATE — update this each time the policy changes]
BrightPath Journal ("BrightPath," "we," "us") is a mobile app that helps parents and caregivers log a child's daily behaviour, eating, learning, sleep, and medication. This policy explains what information the app collects, why, and how you can access, export, or delete it.
Account information. When you sign up, we collect your name and email address, whether you sign up directly or via Google or Apple Sign-In.
Child profile information you enter. Name, date of birth, diagnosis or condition notes, and an avatar you choose for each child profile you create. This is health-related information about your child that you choose to record.
Activity logs you enter. Behaviour entries (type, trigger, intensity, notes), eating entries (meals, foods, appetite), learning entries (activities, mood, milestones), sleep entries (bedtime, wake time, quality), and medication entries (doses given, missed, or refused, and any side-effect notes). All of this is information you choose to record about your child.
Purchase information. If you buy BrightPath Premium, the purchase is processed by Apple's App Store or Google Play, using RevenueCat to confirm your entitlement. We see that you own Premium — we never see your card number or other payment details.
Diagnostic and usage information. Crash reports and performance data collected automatically through Sentry, so we can find and fix bugs. We configure this to strip obviously sensitive fields (like notes or passwords) before it leaves your device.
Advertising identifier. If you're on the free tier, we show ads through Google AdMob using your device's advertising identifier and non-personalised, family-safe targeting. Premium removes ads entirely, and no advertising identifier is used for Premium accounts.
We do not use your children's health information to train any AI or machine learning model, and we do not sell it.
We use a small number of service providers to run the app. Each only receives the data it needs to do its job, and none are permitted to use it for their own marketing:
We may also disclose information if required by law, or to protect the safety of a user or the public.
Your data is stored on our database provider's (Supabase) infrastructure and transmitted using encrypted (HTTPS/TLS) connections. [State your Supabase project's hosting region here, e.g. "in the EU" or "in the UK," once you know it.]
We keep your account and logs for as long as your account is active. If you delete your account, we delete your account record and your children's profiles and logs — see "Deleting your data" below for the small set of records we're required to keep for a limited time regardless (for example, purchase records needed for tax or fraud-prevention purposes).
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict some of our processing. To exercise any of these rights, use in-app account deletion, our account deletion page, or contact us at the email below.
BrightPath is not directed at children and is not intended for children to use directly — it's a tool for the adult caring for them. Information about a child is entered by their parent or guardian, who remains in control of that information and can delete it at any time.
We use industry-standard measures — encrypted connections, access controls, and row-level security on our database — to protect your information. No method of storage or transmission is 100% secure, and we can't guarantee absolute security.
If we make material changes to this policy, we'll update the date at the top of this page and, where appropriate, notify you in the app.
Questions about this policy or your data: Support@brightpath.kids