Privacy Policy

Last updated: June 8, 2026

Mahd ("we", "our", or "us") is a child development tracking application. This Privacy Policy explains how we collect, use, and protect your information.

1. Information We Collect

We collect the following information when you use Mahd:

• Account Information: Email address, display name, and password (encrypted)
• Child Profile Data: Child's name, birth date, and gender
• Health & Development Data: Growth measurements (weight, height, head circumference), milestone tracking, vaccination records, teeth eruption records, and doctor visit notes
• Community Content: Questions, answers, votes, and reports you submit in the community, along with any journal entries or notes you create
• Device Information: Device type, operating system version, and push notification tokens
• Feedback: Category, description, device info, and optional screenshots when you submit feedback
• Website Analytics: When you visit our website (mahd.app), we collect anonymous, cookieless usage statistics (such as page views, referrers, and country) using our own self-hosted analytics. This data is aggregated, contains no personal information, is not linked to your account, and is not shared with any third party.

2. How We Use Your Information

• To provide and maintain the Mahd service
• To track your child's growth and developmental milestones
• To operate the community and show the content you post to other users
• To send vaccination reminders and milestone notifications
• To send weekly digest emails (if enabled)
• To generate PDF reports of your child's data
• To improve our service based on feedback

3. Data Storage & Security

Your data is stored on secure servers hosted by Railway. We use:

• HTTPS encryption for all data in transit
• bcrypt hashing for passwords (never stored in plain text)
• Session-based authentication with HTTP-only cookies
• PostgreSQL database with access controls

4. Data Sharing

We do not sell, trade, or share your personal data with third parties. Your child's tracking data — profiles, measurements, and health records — is private and accessible only to you. We may share data only:

• When required by law or legal process
• To protect the safety of our users

5. Community

Mahd includes an optional community where parents ask and answer questions. Content you choose to post in the community — questions and answers — is visible to other users of the app and is not private. To protect your privacy and others':

• You can post anonymously, so your name is not shown on that post.
• You can block other users and report content. Reported content is reviewed and may be removed.
• When you delete your account, your community contributions are anonymized so existing discussions remain intact for other users.

Please do not share personal or sensitive information (such as full names, addresses, phone numbers, or photos of children) in community posts.

6. Guest Accounts

You can use Mahd as a guest without providing an email address. Guest data is stored on our servers and linked to a device token. If you uninstall the app without verifying your profile, your guest data may become inaccessible.

7. Data Retention & Deletion

Your data is retained as long as your account is active. You can delete your account at any time from Settings, which permanently removes your data — including child profiles, measurements, tracking records, photo-journal images, and feedback you submitted. Two exceptions: community contributions are anonymized rather than deleted so discussions other parents rely on are preserved, and if you filed a report or your content was reported, a safety record may be kept for child-safety auditing even after deletion — reports you filed are detached from your account, and a snapshot of reported content is retained for the audit. See the account deletion page for the full breakdown.

8. Children's Privacy

Mahd is designed for parents and guardians to track their children's development. The app is not intended for use by children under 13. We do not knowingly collect data directly from children.

9. Push Notifications

With your permission, we send push notifications for vaccination reminders, milestone alerts, measurement reminders, and community activity (such as answers to your questions). You can disable notifications in Settings or through your device settings.

10. Email Communications

We may send weekly digest emails and password reset emails. Digest emails can be disabled in notification preferences. We use Resend as our email service provider.

11. Your Rights

You have the right to:

• Access your data (via the Export feature in Settings)
• Correct your data (edit profile and child information)
• Delete your data (delete account in Settings)
• Opt out of notifications and emails

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes through the app.

13. Contact Us

If you have questions about this Privacy Policy, contact us at:
[email protected]