Kiddica helps parents and clinics keep a child's growth, vaccination and visit records in one place. This policy explains what information the app handles, why, who sees it, how long it is kept and how you can have it deleted. It applies to the Kiddica apps for Android, iOS and the web.
Who we are
Kiddica is built and operated by Zenocta Solutions ("Zenocta", "we"). Kiddica is used by clinics (also called organisations). When you join a clinic's Kiddica space, that clinic decides which health records it keeps about your child and uses Kiddica to do so. Zenocta provides the platform and handles the data on the clinic's behalf and for the purposes described here.
Contact: contact@zenocta.com.
Information we collect
Account information: name, email address, phone number, password (stored by Firebase Authentication, never visible to us), profile photo, date of birth, gender, your role (parent, doctor, nurse, reception or admin) and the clinic you belong to.
Child information entered by a parent or clinic: name, date of birth, gender, blood group, allergies, birth weight, length and head size, and preterm weeks.
Health records: growth measurements, milestones, vaccinations, wellness logs, uploaded reports and images or PDFs, prescriptions, medical certificates and notes written by your clinic.
Visits and clinic services: appointments, queue tokens, invoices and payments recorded by the clinic, and feedback you send.
Clinic subscriptions: for clinic administrators, plan, order and payment status. Card or UPI details are handled by the payment provider and never reach us.
Appearance and device data: crash reports and performance data, an app version, and on the free and Value plans an advertising identifier used by Google AdMob to show banner ads. Ads are never shown on emergency, symptom-checker, first aid or dose screens, and are not directed at children.
Consent record: the version of these documents you accepted and when.
Why we use it
• To create your account and keep it secure.
• To show a child's growth charts, vaccination schedule and records to the parent and to the clinic that looks after the child.
• To book, reschedule and manage appointments and the clinic queue, and to issue prescriptions, certificates and invoices.
• To let clinics manage their staff, subscription and settings.
• To keep the service running: fixing crashes, preventing abuse and limiting how often certain actions can be repeated.
• To show non-personalised or limited ads on plans that include them, and to process clinic subscription payments.
We do not sell personal information and we do not use children's data for advertising or profiling.
Consent, parents and children
Kiddica is meant for parents, guardians and clinic staff. Children do not create accounts. A parent or legal guardian creates the account and enters the child's information, and by registering confirms they are the parent or guardian and consent to the processing of the child's data as described here. You can withdraw consent at any time by deleting the child's profile or your account (see "Deleting your data"). If you believe a child has created an account or that information was entered without a guardian's permission, contact us and we will remove it.
Who can see your information
• You see your own account and your children's records.
• Staff of the clinic you joined see the records of patients of that clinic, limited by role: doctors, administrators and nurses see clinical data; reception staff see appointments, queue and billing but not clinical records; only doctors and administrators issue prescriptions and certificates.
• Other parents never see your information, and one clinic never sees another clinic's information.
• Zenocta staff do not browse health records. Access for support or legal reasons is limited, logged where possible and only as needed.
Service providers and third parties
We rely on the following providers, who process data to run the service:
• Google Firebase / Google Cloud (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Crashlytics, Performance Monitoring and Remote Config) to store data and run the app. Functions run in the Mumbai region (asia-south1).
• Razorpay and Google Play Billing, to take payment for clinic subscriptions.
• Google AdMob, to show banner ads on plans that include ads.
• An optional AI text service. If your clinic turns on AI drafting, the text of a clinician's notes or a symptom summary, with names and contact details automatically removed where possible, is sent to an AI model endpoint to produce a draft that a person reviews. We do not use this text to train models. AI output is only a draft and is always labelled as such.
• Google Fonts, loaded by the app to display text.
These providers have their own privacy policies. We share information with authorities only where the law requires.
How long we keep it
We keep your information while your account is active. When you delete your account we delete your profile, your children's profiles and their growth, vaccination, wellness and record entries, your appointments, queue tokens, notifications, feedback, uploaded files and prescriptions and certificates issued to you, usually within minutes and no later than 30 days. Financial records a clinic must keep, such as invoices, are kept without your name or other identifying details. Copies held in routine provider backups are removed on their normal schedule. A clinic may keep clinical records about a patient that it is legally required to keep; ask the clinic if you want to know what it holds.
Security
Data is encrypted in transit and at rest by Google Cloud. Access is controlled by role and clinic using server-enforced rules. Staff roles are assigned by invite codes issued by the clinic administrator. No system is perfectly secure; please use a strong password and sign out on shared devices. If we learn of a breach affecting you we will tell you and the authorities as the law requires.
Your rights and choices
You can view and edit your profile and your children's profiles in the app. You can ask us or your clinic to correct, export or delete information, and you can withdraw consent. To exercise these rights use the in-app options or write to contact@zenocta.com. We may need to confirm it is really you before acting. You may also complain to us about how your data is handled, and if you are not satisfied, to the relevant data protection authority.
Deleting your data
In the app: Profile, then Delete account (for clinic staff: Admin profile, then Delete account). You will be asked to sign in again to confirm. The last administrator of a clinic must first make someone else an administrator, or choose to delete the clinic too.
On the web: see the Delete account page at /delete-account.html, which also explains how to ask by email.
By email: write to contact@zenocta.com from the address you registered with.
Where data is processed
Our servers are with Google Cloud. Some providers may process data in other countries. Where we transfer data we rely on the provider's contractual safeguards.
Changes to this policy
If we change this policy in a way that matters, we will update the version shown above and ask you to accept it again in the app. The date at the top tells you when it last changed.
Contact and grievances
Zenocta Solutions, contact@zenocta.com. Write to this address for questions, requests to access, correct or delete data, and complaints. We aim to reply within 7 days and to resolve requests within 30 days.
