Sanady — For Families

1. Introduction

Sanady ("we", "our", or "us") operates the Sanady family and child development app ("Service"). This Privacy Policy explains how we collect, use, and protect information about you and your family when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information

When you create an account, we collect your email address and authentication details. Authentication is handled securely by Clerk, Inc.

Child and Family Information

To personalise plans and assessments, we store information about the child or family member you are tracking (such as name, date of birth, and development stage). You choose what information to provide.

Progress and Assessment Data

We store assessment results, intervention plan progress, exercise completion records, and milestone tracking data associated with your child's profile.

Messages

If you communicate with a specialist through the app, message content is stored to maintain conversation history.

Usage Data

We collect standard app usage information (pages visited, features used) to improve the Service and diagnose issues.

3. How We Use Your Information

To provide and personalise your child's intervention plans and assessments
To authenticate you and maintain account security
To enable communication between you and linked specialist centres
To send important notifications about your child's progress or appointments
To improve the accuracy and usefulness of AI-assisted features

4. Children's Privacy & Data Handling

Our Service involves storing developmental data about children. We take this responsibility seriously. All child data is stored under the parent or guardian's account and is never shared with third parties for marketing purposes. We do not knowingly collect data directly from children.

Parent & Guardian Consent

Only a parent or legal guardian may add a child and provide their information. By doing so, you confirm you are authorised to act on the child's behalf and you consent to us collecting, storing, and processing the child's developmental data to provide the Service. You may withdraw consent and request deletion at any time via our Data Deletion page.

Access & Sharing

A child's data is visible only to you and any specialist centre you explicitly choose to link. Some features use AI to generate draft plans and insights — see our AI Disclaimer and Medical Disclaimer.

5. Third-Party Services

Supabase — secure database and file storage
Clerk — user authentication
Groq — AI-powered plan generation (data is not retained by Groq beyond the API call)
Resend — transactional email notifications

6. Data Retention

Your account and associated data (including your child's developmental data) is retained for as long as your account remains active. We apply the following retention windows:

AI prompts & outputs (plans, summaries, insights) — tied to the related record and deleted with it; any not linked to a record are deleted within 30 days
Analytics & usage data — aggregated or anonymised within 90 days; raw event-level data is not retained beyond that
Audit logs — 12–24 months, unless a longer period is required for security or legal reasons
Notification logs — 90–180 days
Backups — encrypted; deleted or rotated within 30–90 days

You may request deletion at any time — see our Data Deletion page.

7. Data Security

All data is encrypted in transit (TLS) and at rest. Access controls ensure that your family's data is only visible to you and any specialist centre you explicitly choose to link to.

8. Your Rights

You have the right to:

Access the personal data we hold about you and your family
Request correction of inaccurate information
Request deletion of your account and all associated data
Withdraw consent for data processing at any time

9. Governing Law

This Privacy Policy is governed by the laws of the State of Qatar, including Law No. (13) of 2016 Concerning the Protection of Personal Data (PDPPL).

10. Contact Us

For privacy questions: privacy@sanady.care