Privacy Policy

Effective date: April 6, 2026

 

This Privacy Policy describes how Spectrum Logbook (“we”, “us”, or “our”), operated by Sifat Shahariar, located at Taimistontie 3, 00380 Helsinki, Finland, collects, uses, and processes personal data when you use the Spectrum Logbook mobile application (the “App”).

1. Data Controller

For the purposes of applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the data controller is:

Sifat Shahariar
Taimistontie 3
00380 Helsinki
Finland
Email: [email protected]

2. Scope of This Policy

This Privacy Policy applies to all users of the App. The App is intended for use by parents and professionals supporting children. It is not directed to children under the age of 13, and we do not knowingly collect personal data directly from children.

3. Categories of Personal Data

We may collect and process the following categories of personal data:

3.1 Account Data

• Email address
• Authentication data (including Apple Sign-In and Google Sign-In credentials)

3.2 Child-Related Data (Provided by User)

You may voluntarily provide:

• Child nickname
• Month and year of birth
• Diagnosis or suspected condition
• Behavioral and observational data (e.g., sleep, mood, meltdowns)
• Intervention data (e.g., therapies, medications, supplements, routines)

This information may constitute health-related or sensitive data under applicable laws. You provide this data at your discretion.

3.3 User-Generated Content

• Notes and journal entries
• Photos
• Videos
• Audio recordings

3.4 Technical and Usage Data

• Device information (model, operating system)
• IP address
• App interaction data
• Crash logs and diagnostics

4. Legal Bases for Processing (GDPR)

We process personal data under the following legal bases:

• Performance of a contract (Art. 6(1)(b))
  To provide core app functionality
• Consent (Art. 6(1)(a))
  For processing sensitive data (including health-related data) and optional features
• Legitimate interests (Art. 6(1)(f))
  To improve the App, analyze usage, and maintain security

Where required, you may withdraw your consent at any time.

5. Purposes of Processing

We process personal data for the following purposes:

• Providing and maintaining the App
• Enabling tracking, logging, and record-keeping features
• Generating summaries, patterns, and insights
• Improving functionality and user experience
• Conducting analytics and diagnostics
• Providing customer support

We do not use personal data for advertising or behavioral tracking.

6. Analytics and Tracking Technologies

We use Firebase Analytics and related tools for:

• Aggregated usage analysis
• Crash reporting
• Performance monitoring

We do not:

• Track users across third-party apps or websites
• Use advertising identifiers for profiling or marketing purposes

7. Data Sharing and Processors

We may share personal data with the following categories of service providers (data processors):

• Google Cloud Platform (hosting and storage)
• Firebase (Google LLC) (analytics and crash reporting)
• RevenueCat (subscription management)
• Apple Inc. and Google LLC (payment processing)

All processors are contractually obligated to process data in accordance with applicable data protection laws.

We do not sell or rent personal data.

8. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States.

Where such transfers occur, we rely on appropriate safeguards, including:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions where applicable

9. Data Retention

We retain personal data:

• For as long as necessary to provide the App
• Until the user deletes their account
• As required to comply with legal obligations

Upon account deletion, personal data is deleted or anonymized within a reasonable timeframe, unless retention is required by law.

10. Data Security

We implement appropriate technical and organizational measures, including:

• Encryption in transit and at rest
• Access controls and authentication systems
• Secure cloud infrastructure

However, no system can guarantee absolute security.

11. Your Rights Under GDPR

You have the following rights:

• Right of access
• Right to rectification
• Right to erasure (“right to be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to object to processing

You may exercise these rights by contacting:
[email protected]

You also have the right to lodge a complaint with a supervisory authority.

12. Account Deletion

You may:

• Delete your account directly within the App, or
• Request deletion via email

Deletion will remove your associated personal data, subject to legal obligations.

13. Payments

All payments are processed through:

• Apple App Store
• Google Play Store

We do not collect or store payment card information.

14. Notifications

We may send push notifications related to:

• App usage
• Reminders

You can disable notifications via your device settings.

15. AI and Automated Processing

We may introduce features that analyze user-provided data to generate insights or summaries.

These features:

• Operate solely on data provided by the user
• Do not involve automated decision-making with legal or similarly significant effects
• Are designed to assist, not replace, human judgment

16. User-Controlled Sharing

You may choose to share your data with:

• Therapists
• Healthcare providers
• Schools

Such sharing is:

• Initiated by you
• Not automatic or system-driven

17. Changes to This Policy

We may update this Privacy Policy periodically.

Where required, we will notify users of material changes through the App or other appropriate means.

18. Contact

For questions, requests, or concerns:

Email: [email protected]
Address: Taimistontie 3, 00380 Helsinki, Finland