Legal
Privacy Policy
Last updated: July 9, 2025
This policy describes how Conoscimi collects, protects, and handles information about your family. We have written it to be read by a parent, not a lawyer.
Who we are
Conoscimi ("we", "us", "our") is a mobile application and web service that lets parents and legal guardians build a private digital profile describing how their child works — their needs, communication style, sensory preferences, and strengths — and share it with trusted adults via a secure link.
We are committed to protecting the privacy of children and families. This policy explains exactly what information we collect, how we protect it, and the choices you have as a parent or guardian.
Who can use Conoscimi
Conoscimi is designed exclusively for use by adults — specifically parents and legal guardians of children. You must confirm that you are a parent or legal guardian before creating an account.
We do not knowingly collect personal information directly from children under the age of 13. All profile content is entered by the parent or guardian on behalf of their child. If you believe we have inadvertently collected information from a child, please contact us at ConoscimiApp@gmail.com and we will delete it immediately.
This service complies with the Children's Online Privacy Protection Act (COPPA).
What information we collect
Information you provide
- Your email address, used to create and access your account.
- Your password, stored as a secure hash — we never store it in plaintext.
- Profile content you write for your child: their name, needs, communication preferences, sensory information, helpful strategies, allergies, and anything else you choose to include. This content is entirely optional and entirely under your control.
Information we do not collect
- We collect your child's date of birth if you choose to enter it. This is used only to display your child's age on their profile and is never used for any other purpose.
- We do not collect payment card information directly. Payments are processed securely through the App Store or Google Play and we never see your full payment details.
- We do not run advertising and do not collect data for advertising purposes.
- We do not use tracking cookies or cross-site trackers.
- We do not sell or share your data with third parties for commercial purposes.
Technical information
- When you use the app or open a shared profile link, our servers receive standard HTTP request metadata — IP address, browser type, and timestamp. This is used solely for security monitoring and service operation.
- We use Supabase (a cloud database provider) to store your account and profile data securely. Supabase processes data on our behalf under a data processing agreement.
How we protect your information
All profile content is encrypted using AES-256-GCM before it is written to our database. This means that even if our database were ever accessed without authorisation, your child's profile information could not be read.
Each profile has its own unique encryption key, stored only in the secure hardware-backed storage of your device (Apple Secure Enclave or Android StrongBox). We do not hold a copy of your encryption keys.
Share links include a wrapped version of the encryption key so that a recipient can view the profile without needing an account. Only people with the exact link can access a profile. You can revoke a link at any time.
All connections between your device and our servers use HTTPS (TLS 1.2 or higher).
Your rights and choices
Access and correction
- You can view and edit all profile content at any time within the app.
- You can update your email address and password in account settings.
Deletion
- You can delete your account and all associated data at any time from the account settings screen.
- Deletion permanently removes your account, all profiles, all profile sections, and all share links. This action cannot be undone.
- We do not retain your data after deletion. There are no backup copies held for commercial purposes.
Portability
- You can export your profile content at any time from within the app.
How long we keep your data
We keep your account and profile data for as long as your account is active. If you delete your account, all data is deleted immediately and permanently. We do not retain data after account deletion.
Server logs (IP addresses, timestamps) are retained for up to 30 days for security monitoring, then automatically deleted.
Third-party services
We use a small number of third-party services to operate Conoscimi:
| Provider | Purpose | Privacy policy |
|---|---|---|
| Supabase | Database and authentication | View |
| Vercel | Web hosting | View |
| Cloudflare | DNS and network security | View |
Each of these providers processes data only as necessary to provide their service and is bound by their own privacy commitments. We do not authorise them to use your data for their own purposes.
Changes to this policy
If we make material changes to this policy, we will notify you by email and display a notice in the app before the changes take effect. The date at the top of this page always shows when the policy was last updated.
Contact us
If you have any questions about this policy, want to exercise any of your rights, or have a concern about how we handle your family's data, please contact us:
Email: ConoscimiApp@gmail.com
We aim to respond to all privacy enquiries within 5 business days.