Harumoa
Privacy Policy
Harumoa has no sign-up. All data — including your baby's photos — is stored on your device by default. There are no ads or tracking tools, and no information is ever shared with third parties. Only if you turn on the optional cloud backup (Harumoa+) are your photos transmitted encrypted and stored on servers in the EU region.
1. Information we handle and where it lives
| Item | Stored in | Purpose |
|---|---|---|
| Baby's name and date of birth | On device | Day counter (D+n), reminder text |
| Daily photos | On device | Growth record and timelapse playback |
| App settings (reminder time, etc.) | On device | App functionality |
| Backup data (photos, clips, child profile) — only if backup is enabled | EU-region servers (Cloudflare R2) | Cloud backup & restore on a new phone |
Harumoa does not collect accounts, emails, or phone numbers. Subscription payments are processed by Apple; Harumoa never sees your payment details.
2. Device permissions
- Camera — used only for your daily photo.
- Photo library (read) — used only when importing past photos.
- Photo library (save) — used only if you enable "Also save to Photos".
- Notifications — used only for the daily reminder.
Each permission is requested only when you use the related feature. Declining a permission does not affect the rest of the app.
3. Cloud backup (optional · Harumoa+)
- Backup runs only if you turn it on. Otherwise nothing is ever sent to a server.
- What is backed up: photos, 3-second clips, and the child profile (name, date of birth). Where: EU-region storage (Cloudflare R2, EU jurisdiction).
- Access requires a recovery code generated on your device. The server works only with a hash of the code and never stores the code itself. All transfers are TLS-encrypted.
- Sign in with Apple (optional): used solely to attach your recovery code to your Apple account for one-tap restore. Only Apple's anonymous user identifier is processed — we never request your name or email.
- Deleting backups: deleting the app does not delete server backups. To delete them, contact harumoa.help@gmail.com and we will remove them promptly.
4. Retention and deletion
On-device data is deleted when you delete the app. (Copies saved via "Also save to Photos" remain in your photo library; server backups, if enabled, are handled per section 3.)
5. Children's privacy
Harumoa's users are parents and guardians (adults). Baby photos are taken and kept by the guardian, and never leave the guardian's device unless the guardian enables backup.
6. Third parties and advertising
Harumoa uses no ad networks and no analytics/tracking SDKs. Backup data is stored with our infrastructure provider Cloudflare (EU region); no other third party receives any data.
7. Face data
To automatically pick your baby's photos from the photo library, Harumoa performs face detection on your device.
- What is processed: the position and size of faces detected in a photo, and a temporary numeric representation of facial features used only to compare whether two photos show the same baby.
- Where it is processed: entirely on the user's device (on-device processing). Face data is never transmitted to any server.
- Retention: detection results and feature values exist only in memory while the feature is running and are discarded immediately afterwards. They are never stored on the device or on any server.
- Sharing: face data is never shared with, sold to, or disclosed to any third party.
- If you enable cloud backup (section 3), only the photos themselves are uploaded — no face detection results or feature values are included.
8. Contact
Privacy questions: harumoa.help@gmail.com