Privacy Policy

Last updated: April 2026

This is placeholder text. The final wording will be reviewed by an EU-licensed lawyer before public release.

Who we are

Mara is developed by Alexandru Romanescu, an independent developer based in the European Union. For any privacy-related questions, you can reach us at privacy@knowbs.eu.

We are the data controller for personal data processed through the Mara Cloud sync service.

What Mara is

Mara is a personal tracking and logging tool for breastfeeding, pumping, diapers, and baby weight. It helps parents keep a record of their baby's routine.

Mara is not a medical device and is not intended to diagnose, treat, cure, or prevent any disease or health condition. The information displayed is based solely on data you enter and is provided for your personal convenience. Always consult a qualified healthcare provider for questions about your or your baby's health.

Data we process

Local-only mode

When you use Mara without cloud sync, all your data stays entirely on your device in local storage (IndexedDB). We never receive, access, or process this data. No account is required and no data is sent to any server.

Mara Cloud sync

When you enable Mara Cloud sync, the following data is transmitted to and stored on our servers:

• Baby tracking data: feeding sessions, pumping volumes, diaper changes, sleep sessions, weight records, supplement logs
• Your email address (for account authentication)
• Device identifiers (for sync pairing)
• Caregiver name (if provided)

Baby tracking data constitutes special category data (health data) under GDPR Article 9. We process this data based on your explicit consent, which you provide when enabling sync. You may withdraw consent at any time by disconnecting sync in Settings → Data & Sync or by deleting your account; withdrawing deletes the synced data from our servers.

Nextcloud / WebDAV sync

If you choose Nextcloud or WebDAV sync, your data is stored on your own server. We do not receive or have access to this data. You are responsible for the security of your own server.

Your rights

Under GDPR, you have the following rights regarding your personal data:

• Access — Export all your data as CSV from Settings at any time.
• Rectification — Edit or correct any record directly in the app.
• Erasure — Delete your account and all server-side data from Settings → Account, or by contacting us.
• Data portability — Export your data in CSV or JSON format.
• Restrict processing — Disable sync to stop server-side data processing while keeping your local data.
• Withdraw consent — Disconnect sync in Settings → Data & Sync, or delete your account, at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, use the in-app features or contact privacy@knowbs.eu.

Data retention

Data stored locally on your device remains there until you delete it or uninstall the app.

If you use Mara Cloud sync and cancel your subscription or delete your account, all server-side data will be deleted within 30 days of cancellation.

Data security

• All data transmitted to Mara Cloud is encrypted in transit using HTTPS.
• Our servers are located in the European Union (Scaleway, fr-par-1) with AES-256 encryption at rest.
• We do not share your data with any third parties.
• We do not use any advertising, analytics, or tracking services.
• We do not sell or monetize your data in any way.

Children's data

Mara is designed for parents and caregivers, not for use by children. We require a minimum age of 15 to create a Mara Cloud account, in accordance with French data protection law. Baby data entered in the app is provided by the parent or legal guardian acting on the child's behalf.

Payment data

All payments are processed by Google Play. We do not collect, store, or have access to your payment card details or billing information. Please refer to Google's Privacy Policy for information on how Google handles payment data.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In France, this is the CNIL (Commission Nationale de l'Informatique et des Libertés). You may also contact the data protection authority in your country of residence.

Contact

For any questions about this privacy policy or your personal data, contact us at privacy@knowbs.eu.