Privacy Policy

The data controller is Gabriel Márquez, an individual operating under the commercial brand mi·ma. You can contact us at primerasmiradas.sapi@gmail.com for any privacy-related matter.

Although we use third-party providers to store and process data (see third parties section), we remain responsible to you.

Account data: your email and password (encrypted). Optionally, your preferred language.

Baby data you enter: name, date of birth, country, and the records you choose to save (feeding, sleep, diapers, symptoms, growth measurements, milestones, vaccines, and neonatal screenings).

Sensitive health data: some records (symptoms, vaccines, screenings, measurements) are health data of a minor. We treat them with reinforced protection and only to provide you the service.

Voice: if you use voice dictation to log entries, your browser converts audio into text. We do NOT store audio recordings; only the text you confirm is saved.

Technical data: to keep your session active we use strictly necessary cookies. We do not use advertising or third-party tracking cookies.

We use your data to: create and maintain your account, store and display your baby's records, send notifications you enable (vaccine reminders, appointments, milestones), and, if you activate it, process payments.

The legal basis is the performance of the service you request and your consent, which you may withdraw at any time by deleting your account.

We do not sell your data or your baby's data. Ever. We do not use health data for advertising.

mi·ma is intended for adults (mothers, fathers, or caregivers). The minor does not have their own account. By entering a baby's data, you declare that you are their parent or authorized caregiver and that you have the authority to provide and consent to the processing of that data on their behalf.

To operate the service we use providers acting as data processors: Supabase (database and authentication), Vercel (hosting), and Polar (payments). Their servers may be located in the United States, which involves an international transfer of data.

These providers only process data to provide their service to us and are subject to their own security and privacy obligations.

We keep your data while your account is active. If you delete your account, we erase your personal data and your baby's data from our databases, except what we must retain by legal obligation (for example, billing records if you made a payment).

You have the right to Access, Rectify, Cancel, and Oppose the processing of your data (ARCO rights under Mexican law). If you are in the European Union, you also have the right to portability and erasure (GDPR).

You can exercise most of these rights directly in the app (by editing or deleting records and your account) or by writing to us at primerasmiradas.sapi@gmail.com. We will respond within a reasonable timeframe.

We apply reasonable technical measures: password encryption, row-level access control (RLS) so each user sees only their own data, and encrypted connections. No system is 100% foolproof, but we work to protect your information.

We may update this policy. We will publish the current version on this page with its update date. Continued use of the service implies acceptance of the changes.