Privacy Policy

Last Updated: January 2026

This Privacy Policy explains how Eodin Inc. ("we," "us," or "our") collects, uses, and protects your personal information when you use the Tempy mobile application ("App").

Information We Collect

Information You Provide

• Account Information: Email address when you create an account; name if you choose to provide it
• Child Health Data: Temperature readings, medication types, dosages, and administration times that you enter
• Child Profile Data: Child's name, date of birth, and weight (optional)
• Family Data: Family group membership and sharing preferences

Information Collected Automatically

• Device Information: Device type, operating system version, unique device identifiers
• Usage Data: App interactions, feature usage, timestamps
• Push Notification Tokens: For sending medication reminders and alerts
• Crash Reports: Technical data when the App encounters errors

Information from Third Parties

• Authentication Providers: If you sign in with Google or Apple, we receive your email address and basic profile information as permitted by your account settings

How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Tempy service
• Calculate medication dosage references based on your child's weight
• Send medication reminders and health alerts you have enabled
• Share health data with family members you authorize
• Respond to your requests and provide customer support
• Analyze usage patterns to improve the App (using anonymized data)
• Comply with legal obligations

We do NOT use your health data for:

• Advertising or marketing purposes
• Selling to third parties
• Creating health profiles for commercial purposes

Health Data Protection

Special Category Data

Health data is considered sensitive personal information under many privacy laws. We implement enhanced protections:

• Encryption: All health data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Strict access limitations to health data
• Minimal Collection: We only collect health data necessary for App functionality
• No Secondary Use: Health data is never used for purposes other than providing the service

Medical Disclaimer

The App provides dosage information for reference purposes only, based on publicly available FDA/AAP guidelines. Always consult your pediatrician before giving any medication to your child.

Data Storage and Security

Where We Store Your Data

Your data is stored on secure servers provided by:

• Supabase (Database) - Servers located in the United States
• Firebase (Google Cloud) - Servers located in the United States

International Data Transfers

If you are located outside the United States, your data will be transferred to and processed in the United States. We ensure appropriate safeguards through:

• Standard Contractual Clauses (for EU/EEA users)
• Compliance with applicable data transfer regulations

Security Measures

• TLS/SSL encryption for all data transmission
• AES-256 encryption for data at rest
• Regular security audits and penetration testing
• Employee access controls and training
• Incident response procedures

Data Sharing

We Do NOT:

• Sell your personal or health data to anyone
• Share your data with advertisers
• Use your health data for marketing

We May Share With:

Legal Disclosure

We may disclose your data if required by:

• Law, regulation, or court order
• Government or regulatory request
• Protection of our rights, safety, or property
• Emergency situations involving potential threats to safety

Data Retention

Inactive Accounts

If your account is inactive for 24 consecutive months, we will notify you by email before taking any action regarding your data.

Your Rights

Depending on your location, you may have the following rights:

All Users

• Access: Request a copy of your personal data
• Correction: Correct inaccurate data
• Deletion: Delete your account and all associated data
• Export: Export your health data in a portable format
• Opt-out: Disable non-essential notifications

European Union/EEA Users (GDPR)

• Legal Basis: We process your data based on consent (health data) and contract performance (account data)
• Restriction: Request restriction of processing
• Portability: Receive your data in a machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time without affecting prior processing
• Complaint: Lodge a complaint with your local data protection authority

California Residents (CCPA/CPRA)

• Know: Know what personal information we collect and how it's used
• Delete: Request deletion of your personal information
• Opt-Out: Opt out of the sale of personal information (we do not sell your data)
• Non-Discrimination: Not be discriminated against for exercising your rights

Brazilian Residents (LGPD)

• You have rights similar to GDPR, including access, correction, deletion, and portability

Other Jurisdictions

• We comply with applicable local privacy laws in your jurisdiction

How to Exercise Your Rights

To exercise any of these rights:

1. In-App: Use the Account Settings to delete your account or export data
2. Email: Contact us at privacy@tempy.app
3. Response Time: We will respond within 30 days (or as required by law)

We may need to verify your identity before processing your request.

Children's Privacy

About This App

Tempy is designed for parents and guardians to track their children's health. We do not allow children to create accounts or use the App independently.

COPPA Compliance (US)

• We do not knowingly collect personal information directly from children under 13
• All child health data is entered and managed by parents or guardians
• Parents can view, modify, or delete their child's data at any time

If You Believe We Have Children's Data

If you believe we have inadvertently collected information directly from a child under 13, please contact us immediately at privacy@tempy.app and we will delete it.

Cookies and Tracking

What We Use

• Firebase Analytics: App usage patterns (can be disabled in settings)
• Device Identifiers: For push notifications only
• No Third-Party Advertising Trackers

Your Choices

You can opt out of analytics tracking in the App's notification settings.

Data Breach Notification

In the event of a data breach that affects your personal information:

• We will notify affected users within 72 hours of discovery (or as required by law)
• We will notify relevant regulatory authorities as required
• We will provide information about what data was affected and steps you can take

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes at least 30 days before they take effect by:

• Posting a notice in the App
• Sending an email to your registered address

Your continued use after the effective date constitutes acceptance of the updated policy.

Contact Us

For questions about this Privacy Policy or to exercise your rights:

Eodin Inc.

Privacy Inquiries: official@eodin.app

Legal Basis for Processing (GDPR)