Privacy Policy

This Privacy Policy applies to the mobile application OmniBaby: Pregnancy & Baby (also listed in Vietnamese as OmniBaby: Thai kỳ & Chăm bé; Android package vn.kidoso.omnibaby), and to no other product.

The app is published by DIGITAL BUSINESS SOLUTION COMPANY LIMITED (Công ty TNHH Giải Pháp Kinh Doanh Số), 436/8 Street 3/2, Quarter 11, Hoa Hung Ward, Ho Chi Minh City, Viet Nam — the same developer account under which the app is listed on Google Play. In this policy "we", "us" and "our" mean that company. You can reach us at ceo@kidoso.vn.

It sets out what the app keeps on your device, the little it sends off the device, who receives it, how long each kind of data is kept, and the exact steps to delete it. We follow the Google Play User Data policy and Apple App Store Guideline 5.1.1.

All records you input into OmniBaby remain strictly within your device's isolated secure database (SQLite Sandbox):

• Baby Profile: Nickname/name, date of birth or estimated due date, gender.
• Daily Care Logs: Nursing/breastfeeding timers, bottle amounts, sleep tracking, diaper changes, and solid foods.
• Activity & Development: The motor and play exercises you run with your baby — which exercise, how long it lasted and how your baby took it — together with the developmental milestones you tick off.
• Growth Metrics: Weight, height, and head circumference (benchmarked against public WHO growth standards on-device).
• Health & Medical Logs: Temperature during fever episodes, vaccination reminders, and medication notes recorded by you.
• Fertility & Pregnancy: Menstrual cycles, estimated ovulation dates, fetal kick counters, and contraction timer records.
• Device Permissions & Local Access: Notifications (POST_NOTIFICATIONS) and Exact Alarms (SCHEDULE_EXACT_ALARM) are used solely to schedule on-device reminders (feeding, sleep, vaccination, and prenatal checkups). System photo and file pickers are used only when you choose a profile picture for your baby or export/restore a file on your device.

These records are not sent to our servers. They leave your device only if you use Google Drive backup (section 4) or export and share a report yourself. All data transmitted over the network (Google Drive backup, content-pack downloads, and Firebase Analytics) is encrypted in transit using HTTPS/TLS.

To guarantee maximum privacy and safety, we strictly adhere to non-collection principles:

• We DO NOT collect your contact book, SMS messages, or call logs.
• We DO NOT track your precise physical GPS location.
• We DO NOT capture biometric identity data.
• We DO NOT track you across other companies' apps or websites. The advertising ID that may be collected on Android is described in section 8.

The app works in full without an account. Signing in with Google is required only if you choose to back up your records, and you can switch it off at any time under "Tools & Data" → "Backup & Restore Data".

• What leaves your device: when you tap Back up — or once a day if you turn on automatic backup — the app writes a copy of your records to a folder named "OmniBaby_Backups" in your own Google Drive.
• What we receive: nothing. The backup travels from your device straight to your Drive. There is no server of ours in between, we have no access to your Drive and we hold no copy of the file.
• What the app can read: OmniBaby requests only the Google Drive scope "drive.file", which grants access solely to files the app itself created. It cannot see, open or list anything else in your Drive.
• Your account name and email address: Google hands these to the app when you sign in, and the app keeps them on your device so it can show which account is connected. They are used for no other purpose, are never sent to us, and are removed when you disconnect the account.
• Switching it off: open "Tools & Data" → "Backup & Restore Data" to disable automatic backup or disconnect your Google account. Backups already in your Drive remain there until you delete them (section 5).

OmniBaby’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You own your records. None of them are ever stored on our servers, so every step below is in your hands and takes effect immediately.

• Delete a single record: open the entry — a feed, sleep, diaper, temperature or growth record — and choose Delete.
• Delete everything on the device: open "App Settings" and tap "Delete data" at the bottom of the screen, then confirm. This erases the entire on-device database at once.
• Uninstall the app: Android and iOS permanently erase the app’s database when the app is removed. Nothing survives and it cannot be recovered.
• Delete your Google Drive backups: go to drive.google.com, open the folder "OmniBaby_Backups", delete the backup files, then empty the Drive Trash.
• Keep a copy first if you want one: "Tools & Data" → "Export Health Report" produces a PDF of your growth and medical logs.
• Ask us: email ceo@kidoso.vn and we will reply within 30 days. Because your records never reach our servers, and the app cannot read anything in your Drive except the files it created itself, we cannot delete those for you — we can delete the analytics data described in section 8 and guide you through the steps above.

Deletion is immediate and cannot be undone. Deleting records on the device does not touch backups you previously saved to your own Google Drive; those stay until you delete them.

We hold no account for you and keep no copy of your records, so retention is mostly a matter of data that stays with you or with Google:

• Records you enter: kept on your device for as long as the app is installed, and erased the moment you delete them or uninstall the app.
• Google Drive backups: kept in your own Google Drive until you delete them. We cannot see them and cannot delete them on your behalf.
• Your Google account name and email address: kept only on your device, and only while the Google Drive connection is switched on. Removed when you disconnect the account or delete the app data.
• Content-pack requests (section 7): our server keeps short technical logs containing your IP address for no longer than 30 days and then deletes them. They serve only to operate and protect the service and are never linked to you.
• Analytics (section 8): Google retains the Firebase analytics events for no longer than 14 months, in line with the retention period set on our Firebase project, after which Google deletes them.

On our own systems there is no copy of your health records, no user profile and no mailing list. There is no account for you to close.

To keep guides, schedules and checklists up to date in your language, the app downloads content packs from our server (omnibaby-api.kidoso.vn) over HTTPS when it is first opened, when you change the language, and occasionally afterwards. Each request contains only:

• The app's language and your device's country/region setting.
• The version of the content already installed and the content format version supported by the app.

No account, device identifier, baby profile, health record or anything you enter in the app is sent. Like any web server, our server receives your IP address to answer the request; it is used only in short-lived technical logs and rate limiting to operate and protect the service, and is never linked to you or shared. Content packs are digitally signed and verified on your device before use.

The app uses Google Analytics for Firebase to understand how it is used, for example how many people open it and which screens are used most. Google Analytics collects:

• App opens and the names of the screens you visit (for example, the vaccination screen), never what you type or record.
• An app instance ID created by Firebase, plus device model, operating system, app version, language and approximate location (country or city) that Google derives from your IP address.
• On Android, the device's advertising ID (AAID), according to your Google settings. You can reset or delete this ID in your device's Google settings.

Your baby profile, health records, notes and measurements are never sent to Google Analytics. Google processes this data under its own privacy policy (policies.google.com/privacy); Google Sign-In and Google Drive (section 4) are also provided by Google. If you allow it in your device settings, Apple or Google may also share anonymous crash reports with us.

OmniBaby is made for adult parents and legal guardians to record and follow their children's growth and health. It is not directed to children, and we do not knowingly collect personal information directly from children under 13.

This policy is issued by DIGITAL BUSINESS SOLUTION COMPANY LIMITED (Công ty TNHH Giải Pháp Kinh Doanh Số), 436/8 Street 3/2, Quarter 11, Hoa Hung Ward, Ho Chi Minh City, Viet Nam, publisher of OmniBaby: Pregnancy & Baby on Google Play and the App Store.

Write to us with any question, privacy request or data-deletion request. We answer within 30 days.