Privacy Policy

Effective date: 2026-05-02 Last updated: 2026-05-02

Kirome (“we”, “us”, “our”) is a registered business name of Jonathan Zhao (ABN 63 870 640 148), based in Sydney, Australia. This policy explains what personal information the Kirome iOS app collects, how it is stored, and the choices you have under the Australian Privacy Principles and equivalent rules in your country. By using Kirome, you agree to this policy.

We have built Kirome to keep your family’s data on your device and in your private iCloud account. We do not run our own servers, we do not see your data, and we do not sell anything about you to anyone.

1. Information We Process

Kirome processes the following categories of data, all of which you enter yourself:

Child profiles: name, sex (optional), date of birth, expected due date (optional), wake-window and bedtime preferences.
Tracking events: feeds, diapers, sleep sessions, baths, growth measurements (weight, height, head circumference), health notes, and free-form notes you write.
Memories: photos you choose to attach to events, captions, and the originating photo’s metadata (date, location embedded by your camera if present).
App preferences: theme mode, notification settings, onboarding state.

We do not collect:

Your name, email address, phone number, or contact list.
Your device location or precise GPS at app runtime.
Advertising identifiers, third-party analytics, or crash telemetry from third parties.
Health data from Apple Health or any other system framework.

2. How Data Is Stored

On your device: Kirome stores all data in a local Core Data database in the app’s sandboxed container. The database is protected by iOS file-system encryption and the device passcode.
In your iCloud (Apple CloudKit): When you are signed into iCloud and have iCloud enabled for Kirome, Core Data automatically syncs your data to your private CloudKit database. This sync is between your devices and your iCloud account only. Apple, not Kirome, manages this storage. We do not have access to your iCloud database.
No Kirome servers: Kirome does not operate any backend, database, or analytics service. There is no Kirome account.

Kirome supports inviting one partner (e.g., a co-parent) to share access to a child’s events using CloudKit Sharing. When you invite a partner:

A CloudKit share link is generated by Apple’s iCloud system.
You send the link to your partner using your phone’s share sheet (Messages, Mail, etc.). Kirome does not transmit the link.
Once your partner accepts, their iCloud account gains read/write access to the shared zone for as long as you keep them in the share.
You can revoke access at any time from the system iCloud share settings.

Apple’s iCloud terms govern this sharing. Kirome itself never sees the shared data.

4. Photos

If you attach a photo to a memory, Kirome:

Reads the photo from your Photo Library after you grant permission.
Stores a copy of the photo bytes inside the Core Data event record (so it syncs through CloudKit alongside the event).
Reads basic EXIF metadata (capture date) to suggest the event time.

Photos remain on your device and in your private iCloud. They are not uploaded anywhere else.

5. Notifications

Kirome can schedule local notifications (feed reminders, wake-window alerts, bedtime reminders). These are scheduled and delivered entirely on your device using Apple’s local-notification system. No notification content is sent to any server.

6. Children’s Data

Kirome is designed to be used by parents and caregivers to record information about their own children. Kirome is not directed to children under 15 and does not knowingly create accounts for them. In jurisdictions that apply the U.S. Children’s Online Privacy Protection Act (COPPA), this means we also do not knowingly collect personal information from children under 13. If you are a parent recording your child’s data, that data lives in your private iCloud and is never transmitted to us.

If a minor has used Kirome on their own account, please ask a parent or guardian to delete the app, which removes all locally stored data.

7. Your Rights and Choices

Because Kirome holds no data on its own servers, the controls you need are local and Apple-provided:

Export: Settings → Data → “Export to CSV” gives you the full event history as a spreadsheet.
Delete a single event: open the event from the timeline and tap delete.
Delete a child: Settings → Children → swipe to delete; this also removes that child’s events from your device and iCloud.
Delete everything: Settings → “Delete all data” wipes the local database, iCloud-synced records, and stored preferences.
Stop iCloud sync: turn off Kirome under Settings → [Your name] → iCloud → Apps Using iCloud.
Manage partner sharing: revoke any CloudKit share from iOS Settings.

Australian residents. Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) you have the right to access the personal information we hold about you, to ask us to correct it, and to make a privacy complaint. Because we do not hold your data on our own servers — it lives only on your device and in your iCloud — you can exercise the access and correction rights directly using the controls above. If you wish to make a complaint about how we handle personal information, email [email protected]. If you are not satisfied with our response within a reasonable time, you may complain to the Office of the Australian Information Commissioner (oaic.gov.au).

EEA, UK, and California residents. Under the GDPR, UK GDPR, and CCPA respectively, you have rights of access, deletion, correction, portability, and objection. Because the only place we hold information about you is the data you have chosen to put on your own device and your own iCloud, you can exercise all of these rights directly using the controls above. For written confirmation, email [email protected].

8. Reference Data

Kirome embeds the following non-personal reference data inside the app to power features:

CDC 2000 Growth Charts (United States Centers for Disease Control and Prevention) — used to overlay percentile bands on the growth chart. CDC charts are works of the U.S. federal government and are in the public domain. They are shipped statically with the app.

A note for Australian and New Zealand families: local paediatric guidance (RACGP, NHMRC) typically uses the WHO Child Growth Standards for children under 2, with CDC charts from age 2 onward. Bringing WHO data into the app is on our roadmap. Until then, treat under-2 percentile bands as a rough reference rather than the clinical standard your paediatrician will use.

This reference data is informational only and is not medical advice. See Section 11.

9. Security

We rely on iOS platform security:

Local data is protected by iOS file-system encryption.
CloudKit sync is encrypted in transit and at rest by Apple.
Sensitive flags are stored in the iOS Keychain.

No system is perfectly secure. If you believe you have found a security issue, please contact [email protected].

10. Changes to This Policy

If we change this policy, we will update the “Last updated” date above and, for material changes, surface a notice in the app on next launch. The current policy is always available in Settings → About → Privacy Policy.

11. No Medical Advice

Kirome is a journaling and tracking tool. Growth percentile overlays, sleep predictions, feeding timers, and any other derived insights are for informational purposes only. They are not medical advice and are not intended to diagnose, treat, or prevent any condition. Always consult your GP, paediatrician, or child-and-family health nurse for medical decisions. In an emergency, call 000 in Australia (or your local emergency number).

12. Contact

Kirome — a business name of Jonathan Zhao ABN 63 870 640 148 Level 1, 457–459 Elizabeth Street Surry Hills NSW 2010 Australia

Email: [email protected]