Privacy Policy

Privacy Policy

Last updated: October 22, 2026

This Privacy Policy explains how BIONIC PLUS LLC, tax identification number (TIN) 311 660 692 in the Republic of Uzbekistan, registered at Uzbekistan, Tashkent, Mirobod District, OQ UY MFY, Eskiotchopar Ko'chasi, Eski Otchopar Tor Ko'chasi, 3-UY ("we," "us," or "Operator") collects, uses, stores, and protects personal data when you use the Olisora services, including the Olisora website, mobile applications, and related services.

By using the website or submitting information to us through forms, support channels, or connected services, you acknowledge this Privacy Policy.

Local health records: vaccinations

The vaccination tracker keeps your entries and your children’s entries encrypted on the device. This includes completed vaccinations, plans, dates, optional vaccine and clinic details, and the local consent record. These entries are not uploaded to Olisora servers, included in AI reports or chat context, or sent as content to analytics or advertising services. The account and child profiles used to identify whose tracker you open continue to follow the existing account-processing rules.

Before first use, the app asks you to acknowledge this local storage and, for a child, confirm that you are their parent or legal guardian. Dates are chosen by you. Reference selections and vaccine explanations, including possible reactions, are bundled information displayed on the device, not an AI assessment or a prescription. They do not check medical eligibility or replace advice from a healthcare professional.

These records do not automatically synchronize between devices or with a second parent. The medical storage directory is excluded from the app’s system backup and device-transfer mechanisms. To move the records, include them in an Olisora export from the profile settings and protect the medical section with a password. Import restores that section locally; it is removed before the account-data portion is sent to the server. Other data in the export file is not encrypted by this medical-record password.

Keep the export and its password safe. Without a usable export, losing the device or its encryption key can mean losing the records; Olisora cannot recover the device key or a forgotten export password. A PDF is a readable copy, not a restore file, and is not protected by the export password. Saving or sharing a file can send it to a destination you choose, including cloud storage.

You can edit or delete entries and delete all local health records in the profile settings. Deleting all local health records removes the local consent and scheduled vaccination reminders. Before deleting your account, you can delete these records in the profile settings and check the result. Copies on other devices and files you previously exported or shared are not remotely erased. Our support team cannot access or delete records that remain only on your device.

1. Scope

This Privacy Policy applies to personal data processed through the Olisora website, related landing pages, mobile applications, and support communications.

It does not apply to third-party websites, app stores, payment providers, or external services that may be linked from our website or applications. Those services operate under their own rules and privacy notices.

2. Personal Data We May Collect

Depending on how you use the service, we may collect the following categories of personal data:

• identity and profile information, such as your name, email address, age range, pregnancy stage, or parenting stage, if you provide it;
• contact information, including email address and phone number where applicable;
• health and wellness information that you choose to record in the product, such as cycle information, pregnancy progress, symptoms, baby growth indicators, and wellness checkup responses;
• technical and device information, including IP address, browser type, device type and model, operating system, language, app version, carrier or network information, screen size, and access time;
• usage and analytics information, including app launches, sessions, general screens viewed, onboarding progress, feature interactions, subscription and purchase events, failures, and other product events;
• persistent technical identifiers, including an app-installation or device identifier and analytics identifiers; with your analytics consent, our self-hosted OpenPanel environment also uses the internal account identifier to associate your first-party analytics activity with your account;
• communications you send to us through support forms, email, or feedback tools;
• subscription and transaction metadata, such as plan type, renewal status, and payment platform, but not full payment card details when payments are handled by third parties.

3. How We Collect Data

We collect personal data directly from you when you fill out forms, create or manage an account, use tracking features, contact support, subscribe to paid services, or otherwise interact with the service.

We also collect certain technical and analytical information automatically through cookies, server logs, and similar technologies.

4. Purposes of Processing

We may process personal data in order to:

• provide access to the website, app features, and support services;
• maintain your account and deliver the content or tools you request;
• power trackers, reminders, checkups, product personalization, and stage-based guidance;
• respond to support requests, complaints, and account-related questions;
• process and manage subscriptions, renewals, cancellations, and service notices;
• improve product quality, performance, security, and user experience;
• measure app adoption, usage, retention, subscriptions, and performance; diagnose failures; and improve the product;
• send service-related communications, important updates, and transactional messages;
• send marketing communications where permitted by law or where you have consented to receive them;
• comply with legal obligations, protect our rights, and prevent abuse, fraud, or misuse of the service.

5. Legal Grounds

We process personal data on one or more of the following grounds, depending on the context:

• your consent;
• performance of a contract or steps requested by you before entering into a contract;
• our legitimate interests in operating, improving, securing, and supporting the service;
• compliance with legal or regulatory obligations.

6. Cookies and Analytics

6.1 Website cookies and Google Analytics

We use necessary cookies and browser storage to operate this website, maintain security and remember your privacy choice. When you choose, we store your selection, the notice version, the choice and expiry dates, the displayed language and the current domain in your browser for up to 12 months. The choice is specific to that browser and domain. Clearing browser data removes this local record. If storage is blocked, your explicit choice applies only to the current page.

With your consent, we use Google Analytics 4 (GA4), provided by Google, to collect and process website activity for usage statistics, improvement of the website and measurement of campaign performance. Google receives this analytics information as our service provider.

This information includes visited public page paths, visit times, language, browser and device information, approximate location, referrer origin, approved campaign labels, views of the download section and clicks on download and app-store links. Browser and session identifiers associate these interactions with visits. Google also receives your IP address as part of the network connection. Our integration does not send form contents, search terms, Olisora account identifiers or medical records stored in the mobile application.

Analytics identifiers may link visits and interactions across olisora.app, olisora.com and babytips.me as activity from the same browser. Campaign labels help us understand how visitors reach the website and follow store links. This does not itself link your website visits to an Olisora account or your medical records. We disable Google Signals and advertising personalization in our website analytics.

Optional Google Analytics is not loaded and sends no analytics requests before you allow analytics. “Necessary only” declines it. You can withdraw consent at any time through “Cookie settings” in the footer by choosing “Necessary only”. Withdrawal stops new analytics collection and removes the Google Analytics cookies used by this integration; it does not automatically delete information already received by Google. You can make a data-rights request as described in Section 10.

After consent, GA4 uses first-party cookies such as _ga and _ga_<container-id> to distinguish browsers and maintain session information. We configure these cookies for up to 12 months; their expiry may renew on subsequent visits, and browsers may impose shorter limits. Analytics-data retention and international processing are described in Sections 8 and 12.

When this notice version changes, when your choice expires or when no valid choice is stored, we ask you to choose again and keep optional analytics disabled until you allow it. We retain the versioned choice locally in your browser as described above; we do not maintain a separate server-side consent history for this website.

For information about Google’s processing, see How Google uses information from sites or apps that use its services. You can also control cookies through your browser settings. The website choice does not control analytics in the mobile application, which is described separately below.

6.2 Mobile application analytics

The native Olisora mobile applications use analytics software development kits. Mobile analytics is separate from website cookies, and the choice made in the website cookie notice does not control analytics SDKs in the mobile application.

We use the following analytics systems:

• Google Analytics for Firebase, linked to Google Analytics 4 (“Firebase/GA4”), provided by Google, for general app measurement, attribution, engagement, and conversion reporting;
• Mixpanel, provided by Mixpanel, Inc., for general product, session, retention, and subscription analytics; and
• OpenPanel, operated in infrastructure controlled by or for BIONIC PLUS, for limited health-neutral authentication measurement and, after analytics consent, account-linked first-party product analytics including product signals that are not sent to Firebase/GA4 or Mixpanel.

Firebase/GA4 and Mixpanel may receive only allowlisted, health-neutral information such as app launches and sessions, onboarding progress without the selected reproductive branch, general commercial events, subscription status, app version, language, operating system, device model, screen size, coarse location derived from IP address, and an app-installation or provider-specific analytics identifier. They do not receive the internal Olisora account identifier.

Application-level controls block Firebase/GA4 and Mixpanel from receiving your email address, nickname, raw date of birth, pregnancy or planning status, reproductive life stage, cycle or contraception data, symptoms, checkup answers, child data, health-related screen names, or the content of personal AI reports. We do not use Firebase/GA4 or Mixpanel to create advertising audiences based on reproductive or health information.

Before and without optional analytics consent, OpenPanel may receive a limited set of health-neutral authentication and registration-flow events without an Olisora account ID, email address, selected reproductive or parenting category, health data, or tracker content. After you consent and sign in, our first-party OpenPanel environment uses the internal Olisora account identifier as a pseudonymous profile identifier and may process lifecycle categories and product events relating to trackers, checkups, reminders, or AI-report features to help us operate and improve those features. This account link also lets us locate and delete the associated OpenPanel events, sessions, and profile. This information remains subject to our access controls, retention rules, and the restrictions in this Policy and is not disclosed to Firebase/GA4 or Mixpanel.

Firebase and Mixpanel SDKs may also collect certain events and technical properties automatically, including first open, app update, session information, device model, operating-system version, app version, carrier, screen size, and approximate country or region. Firebase/GA4 may generate an app-instance identifier, and Mixpanel may generate or store its own distinct identifier.

Health-neutral Firebase/GA4 and Mixpanel analytics is enabled in native application builds. Where permitted, we rely on our legitimate interests in understanding and improving the service. OpenPanel processing of account-linked product and health signals is disabled until you provide analytics consent in the application. Withdrawing that consent immediately blocks new OpenPanel events from the device, clears its identified session, and requests deletion of the corresponding OpenPanel events, sessions, and profile. You may object to other mobile analytics processing or request deletion or disassociation of provider-specific analytics identifiers by contacting us. The website cookie notice does not control mobile-app analytics.

7. Sharing of Personal Data

We do not sell your personal data.

We do not disclose health or reproductive information to advertising platforms for advertising audiences, personalization, or campaign optimization. Firebase/GA4 and Mixpanel are not intended to receive life stage, pregnancy status, planning status, or the contents of personal AI reports. More detailed first-party product signals may be processed in our controlled OpenPanel environment as described in Section 6.2.

We may share personal data only where reasonably necessary, including with:

• Google and Mixpanel, Inc., acting as analytics service providers for the purposes and data categories described in Sections 6.1 and 6.2;
• hosting, customer support, security, and technical service providers acting on our behalf;
• OpenAI OpCo, LLC, acting as our processor, when you separately consent and request a personal AI report;
• payment platforms and app marketplaces for subscription administration;
• professional advisers, auditors, insurers, or regulators where necessary;
• competent authorities where disclosure is required by law or necessary to protect rights, safety, or the integrity of the service;
• a buyer, investor, or successor entity in connection with a merger, restructuring, financing, asset sale, or similar transaction, subject to appropriate confidentiality safeguards.

Personal AI reports involve a separate optional disclosure of relevant health and reproductive information to OpenAI. The recipient, data categories, purposes, retention, international processing, and consent withdrawal are described in the AI Personal Reports Data Processing Notice. Accepting this Privacy Policy alone is not consent to that disclosure.

8. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, including to provide the service, maintain records, comply with law, resolve disputes, and enforce agreements.

Analytics retention depends on the system and its configured controls. As of August 16, 2026, our GA4 property is configured to retain event data for 2 months and user data for 14 months, with the user-data period reset on new activity; standard aggregated reports may remain available for longer. Mixpanel data is retained according to our project configuration and agreement with Mixpanel; Mixpanel states that its default is five years if no shorter period is selected. First-party OpenPanel data is retained only for as long as needed for product measurement, security, and the applicable documented analytics purpose.

When you withdraw optional analytics consent or request account deletion, we delete the account-linked OpenPanel events, sessions, and profile. We also take reasonable steps to delete or disassociate other corresponding analytics identifiers where supported by the relevant provider and technically available. Some aggregate reports that no longer identify or single you out may remain.

Where technically and legally appropriate, we may retain de-identified or aggregated information after account deletion for analytics, product improvement, and security purposes.

9. Data Security

We use reasonable organizational, technical, and administrative measures designed to protect personal data from unauthorized access, loss, misuse, alteration, or disclosure.

No method of transmission over the internet or method of storage is completely secure, so we cannot guarantee absolute security.

10. Your Rights

Subject to applicable law, you may have the right to request access to your personal data, correction of inaccurate information, deletion of your account or data, restriction of certain processing, withdrawal of consent where consent is the basis for processing, and information about how your personal data is used.

You may also object to mobile analytics or ask us to delete or disassociate analytics identifiers associated with your account. The website “Cookie settings” control applies only to the public website and does not by itself change analytics settings in the native mobile application.

To make a privacy-related request, contact us at support@babytips.me.

11. Children's Privacy

Olisora is not available to anyone under 16 years of age. Users aged 16 or 17 may use it only where they can lawfully agree to the service and the relevant data processing, including any parental or guardian authorization required by local law.

An eligible account holder may enter information about their child only when authorized to do so. For age assurance, child profiles, retention, and parent or guardian requests, see the Age Eligibility and Child Data Notice.

12. International Transfers

Your personal data may be processed in countries other than the one in which you reside, including the United States, the European Union, and other locations where Google, Mixpanel, our infrastructure, or their subprocessors operate. Where required, we use contractual and organizational safeguards intended to provide an appropriate level of protection.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version becomes effective when it is posted on the website unless a different effective date is stated.

If material changes are made, we may also provide notice through the website, app, or email where appropriate.

14. Contact

If you have questions about this Privacy Policy or how we process personal data, please contact support@babytips.me.