Nuvia Privacy Policy
Nuvia is a baby care record app for parents and caregivers, not for direct use by children. We follow local-first, data-minimization, no-ads, and no-tracking principles, and we collect only the minimum data necessary to provide app features. Except for subscription and redemption-code entitlement checks, family collaboration relay, iCloud sync you enable, sharing, or export, baby records are stored on your device by default.
Data controller / developer
- Developer: Nuvia
- App filing number: 蜀ICP备2026013791号-2A
- Privacy contact: lyzhang@arkexa.com
- Support email: lyzhang@arkexa.com
Data we process
- Baby profiles: name, birthday, sex, height, weight, head circumference, and other information you enter.
- Record data: feeding, sleep, diaper, solids, growth, temperature, vaccines, checkups/doctor appointments, notes, and photo attachments that you choose to add for records, sharing, or export.
- Family collaboration data: member roles, permissions, local network sync status, device identifiers, and who added or synced records.
- Subscription and entitlement data: app user ID, an anonymous device verification identifier used for entitlement restoration, subscription transaction or redemption-code entitlement status, and expiration time.
- Technical data: error information, request time, nonces, signatures, and IP rate-limit records used for security checks.
How we use data
- Provide baby records, timeline, trend insights, reference interpretation, reminders, widgets, and export features.
- Verify Pro subscriptions, redemption codes, and entitlement restoration, and prevent redemption-code abuse.
- Support local-network family collaboration and member permission control.
- Generate PDF/CSV files, doctor visit material, WeChat summaries, or other system share content based on your actions.
- Protect service security, troubleshoot issues, and respond to support requests.
System permissions and feature use
- Photo / media permission is used only when you choose to take, select, upload, share, or export photo attachments so the related record can include images.
- Local network permission is used only to discover and sync devices within the same family. It is not used to scan for or collect information about other devices on your local network.
- Notification permission is used for feeding, sleep, vaccine, reminder, and family sync status notifications.
- The app does not read your system contacts, SMS messages, or call history.
- Network communication uses HTTPS / TLS encryption by default.
Children and care records
Nuvia is intended for parents and caregivers, not for direct use by children. It stores data that parents or caregivers enter to care for a baby. We do not use this data for advertising profiles or third-party tracking. Trends and references are for record interpretation and visit preparation only, not medical diagnosis, treatment, or a replacement for physician advice.
Storage and sharing
- Local records are mainly stored in the device SQLite database. Widgets and Live Activities read necessary summaries through the system App Group shared container.
- When you enable iCloud sync, baby profiles, records, reminders, and vaccine/checkup plans sync to your Apple iCloud Private Database for restoration and sync across devices under the same Apple ID.
- Family collaboration prioritizes sync between the owner device and member devices on the same local network. When local networking is unavailable, a cloud relay may transmit end-to-end encrypted sync messages.
- The cloud relay does not store plaintext baby records. It stores only necessary family routing metadata, APNs tokens, connection/push statistics, and short-lived encrypted relay queues that are cleared after confirmation or expiration.
- Subscription, redemption-code, and entitlement restoration connect to https://baby.arkexa.com over HTTPS / TLS encrypted connections.
- When you export, share, or upload photo attachments, related data is provided to the system share target, doctor, or family member you choose.
Anonymous device verification identifier and entitlement restoration
To restore redemption-code benefits after reinstalling on the same device, the app generates an anonymous device verification identifier locally and sends it to the server. This identifier is derived from the platform device identifier through a one-way transformation, and the server does not store the raw identifier.
Third-party services
The app uses Apple / Google in-app purchase services for subscriptions and Apple iCloud Private Database for iCloud sync that you enable. The app does not include third-party ad SDKs and does not track you across apps or websites.
Your choices and deletion requests
- You can delete local records and baby profiles in the app. Shared family data is handled according to permissions and sync status.
- To delete server-side device entitlement records, redemption-code bindings, or support request information, contact us through the privacy email.
- Deleting server entitlement records may prevent automatic restoration of redemption-code benefits. Apple / Google subscriptions can still be restored through the store.
Retention
Local baby records remain on your device until you delete them in the app or uninstall the app. After you enable iCloud sync, synced data remains in your iCloud Private Database until you delete the relevant data in the app or manage it through your iCloud account. Server-side subscription, redemption-code, security audit, and support request records are retained as needed for entitlement restoration, abuse prevention, accounting checks, security troubleshooting, and responding to your requests.
Deletion request timeline
After receiving a complete data deletion request, we verify the request’s association with the device or entitlement record and respond within 15 business days. If subscription, refund, tax, security, or legal reasons require keeping some records, we will explain why.
Policy updates
When app features, data processing, or third-party services change materially, we will update this policy and, when necessary, notify you through the app or webpage.