Privacy Policy

1. What this policy covers

This Privacy Policy explains how Sherif Studios LLC, doing business as Pregnancy Safe, collects, uses, shares, and safeguards information when you use the App and Site. Please read it to understand our practices and the choices available to you.

2. Information we collect

We aim to collect only what we need to provide core functionality.

Account & profile

• Email address and authentication information (handled by our identity provider).
• Optional profile fields you choose to provide (e.g., due date, pregnancy stage).

Pregnancy and check-in information

If you use these features, we collect the due date, symptoms, moods and other check-in responses you choose to provide, together with the dates of your check-ins. We associate this information with your account and may calculate an estimated pregnancy week from your due date. This can include sensitive health-related information.

Scan & content inputs

• Product lookups you perform (e.g., product name, barcode).
• Photos you submit for ingredient text recognition (OCR).
• Derived data created by the App from your inputs (e.g., parsed ingredient lists, product metadata, risk scoring results).

Pregnancy test checker

If you submit a pregnancy test photo on our website, we process that photo to generate a line reading and visual report. Photos and readings can contain sensitive health information. No account is required. The processing and retention details for this tool are described below.

Technical/usage

• Device and app metadata (e.g., device model, OS/app version, language, approximate region derived from IP).
• Event logs (e.g., sign‑in, scan started/completed, paywall impressions, subscription state changes) and crash reports.

Payments & subscriptions

Subscription status and purchase receipts as provided by Apple. We do not receive your full payment card details.

Support & communications

Messages you send to support and your communication preferences.

We do not intentionally collect government IDs, precise GPS location, or sensitive health diagnoses. The App may reference publicly available health resources, but those are not linked to you as medical records.

3. Sources of information

• Directly from you when you sign up or use features.
• Automatically via the App/Site (e.g., telemetry, crash logs).
• Service providers acting on our behalf.
• Public/product sources for product and ingredient information (e.g., product labels, manufacturer or retailer pages). We do not control the accuracy or availability of third‑party content.

4. How we use information

• Provide, operate, troubleshoot, and improve the App/Site.
• Provide pregnancy tracking, check-in history and personalized pregnancy-week content using the information you choose to provide.
• Perform OCR and text parsing to extract ingredient lists from images you submit.
• Generate, display, and improve product "pregnancy‑safety" scores and explanations.
• Authenticate users, prevent fraud/abuse, enforce our Terms, and secure the service.
• Operate subscriptions, paywalls, experiments, and surveys.
• Provide customer support and communicate important updates.
• Comply with legal obligations.

We analyze product-check activity and pregnancy check-ins to understand patterns, improve Pregnancy Safe and create aggregate statistics. We may publish these statistics in charts, articles and reports on our website, including educational content that promotes Pregnancy Safe. The publication safeguards below apply to these statistics.

5. AI/automation disclosures

The App uses automated systems (including third‑party AI/ML services) to help: (a) extract text from images, (b) find product/ingredient data, and (c) draft explanations. Automated outputs can be inaccurate or incomplete; all results should be independently verified and treated as informational only.

6. Sharing of information

We do not sell your personal information. We share data only as described:

Service providers / processors

That help us run the App, bound by contracts to protect your information:

• Identity/Auth & Database: Supabase
• Hosting/edge compute & static hosting: Cloudflare (Workers/Pages)
• Paywalls/experiments: Superwall
• In‑App Purchases & receipts: Apple
• OCR for text recognition: Google Cloud Vision
• Search/lookups: Serper (search API)
• Generative/analysis API: Perplexity (LLM)
• (Optional/replacable) Error/crash analytics and telemetry providers.

Published statistics

Our research publications contain combined statistics rather than individual account records. They do not include names, email addresses, account identifiers, individual due dates, raw search text or individual check-in histories. Before publication, we review the results for identification risk and combine or withhold information where needed. We do not attempt to identify individuals from published statistics. Published charts and reports are publicly accessible and may be downloaded or republished by others.

Legal reasons if we believe disclosure is necessary to comply with law, protect rights, or respond to lawful requests.

Business transfers (e.g., merger, acquisition). We will notify you of material changes.

We do not share data for third‑party interest‑based advertising.

7. Data retention

We retain personal data only as long as necessary for the purposes above, then delete or de‑identify it. Illustrative defaults:

• Account & profile: retained while your account is active and up to 24 months after last activity.
• Check-in history: retained to provide pregnancy tracking and your check-in history until you delete those entries or your account, subject to any applicable legal retention requirements.
• Scan inputs (images) sent for OCR: processed and discarded after extraction; derived text and metadata may be retained to improve accuracy and for auditability.
• Logs/telemetry: 12–24 months.
• Purchases/receipts: for tax/compliance per applicable law.

Published aggregate statistics that do not identify you and cannot reasonably be linked to you may remain available after you delete check-ins or your account. Copies of charts or reports that others have downloaded or republished may also remain available.

Pregnancy test photo processing and retention

Selecting a photo does not upload it. After you press Check photo and complete verification, your photo is sent through our Cloudflare hosted backend to OpenRouter and its model processing provider to generate the reading and report. Keep faces, names and medical paperwork out of the photo.

Cloudflare Turnstile processes browser and network information for bot verification. Our backend uses your IP address for rate limiting. See Cloudflare’s privacy policy.

We require OpenRouter Zero Data Retention routing on every checker analysis request. If no eligible endpoint is available, analysis fails rather than falling back to a route without that restriction. OpenRouter input/output logging and data discount sharing are disabled for our workspace, and permission to use paid endpoints that train on request data is disabled. OpenRouter’s ZDR definition allows temporary memory caching, and request metadata is retained separately. This is not a promise of immediate deletion from every system. See OpenRouter’s ZDR policy and data collection details.

Our checker backend processes photos and reports in memory without saving them to disk or application logs. It stores admission counts, request IDs, verification token hashes, timestamps and an active processing reservation to prevent abuse and duplicate requests. Submission records older than 24 hours and prior day counts are removed on subsequent admission attempts, not on an exact deletion timer. These records do not contain photos or readings.

Start over clears the selected photo and report links from the page; it does not erase provider records or reports you downloaded. Downloaded reports remain on your device until you delete them. These checker specific details are separate from the App’s ingredient OCR and account retention practices above.

8. Your choices & rights

Access/Deletion/Correction. You can request a copy of your data or deletion of your account; some data (e.g., receipts) may be retained as required by law.

Pregnancy and check-ins. You can choose whether to provide pregnancy information or submit check-ins. You can update your due date and remove check-in entries in the app. To delete your account, choose Delete Account in your Profile. You can also contact shane@pregnancysafeapp.com to request access, correction or deletion of your pregnancy and check-in information.

Analytics/communications. You may opt out of non‑essential communications. Platform settings (iOS) may allow limiting certain tracking.

Region‑specific rights. If you are in the EEA/UK, you have GDPR rights (access, rectification, erasure, portability, restriction, objection). If you are in California, you have rights under the CCPA/CPRA (know, delete, correct, opt‑out of "sharing"/"sale"—we do not sell). To exercise rights, email shane@pregnancysafeapp.com.

9. Legal bases for processing (EEA/UK)

• Performance of a contract (providing the App).
• Legitimate interests (security, improvement, fraud prevention, research, product development).
• Consent (where required by law, e.g., certain analytics/communications).
• Legal obligation (records/receipts, compliance).

10. International data transfers

We may process data in the United States and other countries. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses) for transfers.

11. Security

We use administrative, technical, and physical safeguards appropriate to the nature of the data. No system is 100% secure; you are responsible for safeguarding your account credentials.

12. Children's privacy

The App is not directed to children under 13 (or the minimum age required in your jurisdiction). If you believe a child used the App, contact us and we will take appropriate steps.

13. Third‑party content & links

The App may reference third‑party sites and content (e.g., manufacturer labels). We are not responsible for their practices. Review their policies.

14. Changes to this Policy

We may update this Policy and will change the "Last updated" date above. For material changes to how we use or share personal information, we will provide notice in-app or by email and obtain any consent required by applicable law before the new use. Updating this Policy does not by itself provide consent for a new use of information already collected.