HannaH - Privacy Policy

Version 2.0 | Last updated: October 15, 2026 | Effective date: February 21, 2026

Deutsch: siehe Abschnitt Datenschutzerklärung – Webshop (Deutsch).

HannaH ("we," "us," "our," or the "App") is operated by MV Studio ("Company", "Data Controller"). This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you use the HannaH mobile application, available on iOS and Android.

By using HannaH, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree, please do not use the App.

1. Data Controller

MV Studio
Email: hannah@mv-studio.net
For data protection inquiries, contact us at the email address above.

2. Data We Collect

2.1 Data You Provide

2.2 Data Collected Automatically

2.3 Invitations & RSVP (website)

If you create a digital invitation on myhannah.app, you act as the organizer of your own event. Guests do not need an account: each household receives a private invitation link containing a secret token, and only the holder of that link can see and change that household's answer. No guest can see the rest of your guest list.

If you invite other people, you are responsible for the data you enter about them. Enter only what you need in order to invite them, and only for people you would normally invite yourself. We process this data on your behalf, we do not use it for advertising, we do not send marketing to your guests, and we never sell it. Invitation links are secret: treat them like a house key and share them only with the household they belong to. A guest can ask the organizer, or us, to delete their entry.

2.4 Data Stored On-Device Only

The following data is stored exclusively on your device in a local database (Hive). It is never transmitted to our servers unless you have cloud sync enabled:

• App preferences and settings
• Cached scan history
• Local copies of tracking data (for offline access)
• HealthKit integration data
• Meditation playback history

3. How We Use Your Data

4. Third-Party Services

HannaH integrates with the following third-party services, each with their own privacy policies:

Links to third-party privacy policies:

• Firebase Privacy Policy
• Google Privacy Policy
• RevenueCat Privacy Policy
• OpenAI Privacy Policy
• fal.ai Privacy Policy
• Kie.ai Privacy Policy
• Perplexity AI Privacy Policy
• Apple Privacy Policy
• Open Food Facts Privacy Policy

5. AI-Powered Features & Third-Party AI Data Sharing

HannaH uses third-party AI services to power certain features. Before using any AI-powered feature for the first time, the app will ask for your explicit consent and clearly explain what data is shared. Below is a complete disclosure of all AI data sharing:

5.1 Product Scanner — AI Product Identification

5.2 AI Song Generation — Personalized Lullabies

5.3 Ingredient Safety Scoring (Local — No AI Sharing)

• Ingredient safety scoring, allergen detection, and all food/cosmetic analysis is performed entirely on your device using a bundled SQLite database.
• No ingredient data is sent to any external server for scoring.

5.4 Third-Party AI Protection Confirmation

In compliance with Apple App Store Guidelines 5.1.1(i) and 5.1.2(i), we confirm that all third-party AI services used by HannaH provide the same or equal level of data protection as described in this Privacy Policy:

• OpenAI, Inc.: API data is not used for model training (per API Data Usage Policy). SOC 2 Type II certified. EU-US Data Privacy Framework certified. Privacy Policy
• fal.ai, Inc.: API data is processed in real-time and not retained. SOC 2 compliant. Privacy Policy

6. Health Data

6.1 Sensitive Health Information

HannaH collects and processes health-related data that may be considered sensitive under various privacy laws, including:

• Menstrual cycle and period data
• Fertility and trying-to-conceive data
• Pregnancy health data (kick counts, contractions, pregnancy notes)
• Baby health data (feeding, sleep, diapers, growth measurements)
• Allergen and health condition profiles
• Mood and wellness tracking

6.2 Apple HealthKit Integration (iOS)

• HannaH may request permission to read or write data from Apple HealthKit.
• HealthKit data access requires your explicit consent via iOS permission prompts.
• HealthKit data is used solely to enhance your tracking experience within the App.
• We do NOT transfer HealthKit data to our servers, third parties, or advertising platforms.
• HealthKit data is NOT used for advertising or marketing purposes.
• You can revoke HealthKit permissions at any time in iOS Settings > Health > HannaH.

6.3 Google Health Connect Integration (Android)

On Android devices, HannaH integrates with Google Health Connect to help expecting and new mothers track their personal wellness alongside their baby tracking. This integration falls within the "Fitness, Wellness & Coaching" approved use case under the Health Connect Permissions policy.

• Read-only access: HannaH only READS data from Health Connect. We never write data back to Health Connect.
• Explicit consent required: Each Health Connect permission must be granted by you through the system Health Connect permission screen. You can grant or deny any individual permission.
• Data types accessed (with purpose):
  • Sleep — display sleep duration and quality trends to help new parents monitor recovery from disrupted nighttime feeds.
  • Steps, Distance, Active Calories Burned, Total Calories Burned — show activity trends to encourage safe postpartum movement and gentle pregnancy activity, and to help breastfeeding mothers understand their increased caloric needs.
  • Weight — display weight progression for healthy pregnancy weight gain and postpartum recovery tracking.
  • Hydration — show daily hydration intake, which is especially important for breastfeeding mothers who require increased fluid intake.
• Local processing: Health Connect data is read on your device. The aggregated wellness summaries (e.g., "7,500 steps today", "7h 12min sleep last night") are stored only in your own private cloud account so you can see your trends across devices.
• No sharing or sale: We do NOT share, sell, transfer, or disclose your Health Connect data to any third party. We do NOT use Health Connect data for advertising, profiling, employment decisions, insurance eligibility, or any other prohibited purpose listed in the Health Connect Permissions policy.
• Revoke at any time: You can revoke any or all Health Connect permissions through Settings > Apps > Health Connect on your Android device, or from the in-app Health settings screen. Revoking immediately stops all data access.
• Data deletion: When you delete your HannaH account, all Health Connect–derived wellness summaries stored in your cloud account are permanently deleted. The original Health Connect data on your device is not affected.

6.4 Medical Disclaimer

7. Advertising

The free tier of HannaH displays advertisements provided by Google AdMob. AdMob may collect device identifiers and usage data to serve personalized ads.

• Opt-out of personalized ads: You can adjust your ad preferences in your device settings (iOS: Settings > Privacy > Apple Advertising; Android: Settings > Google > Ads).
• Remove all ads: Subscribe to HannaH Premium to remove all advertisements.
• We comply with the EU ePrivacy Directive and display a consent dialog (GDPR Consent Management Platform) before collecting data for personalized advertising in the EEA/UK.
• No ads near health data: We take care to ensure advertisements are not displayed in contexts that could be misleading alongside health or medical information.

8. Children's Privacy (COPPA Compliance)

• Child profiles are created and managed exclusively by parents/guardians, not by children themselves.
• We do not knowingly collect personal information from children under 13 (or under 16 in the EU).
• Child profile data entered by parents (name, date of birth, tracking data) is protected under the parent's authenticated account and is not accessible to any third parties.
• Photos of children uploaded by parents are stored securely in the parent's private cloud storage and are not used for AI training, advertising, or shared with third parties.
• If we learn that we have collected personal information from a child under 13 without parental consent, we will delete it promptly. Contact us at hannah@mv-studio.net.

9. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States, where our service providers (Google/Firebase, OpenAI, fal.ai/MiniMax, Kie.ai, RevenueCat, Perplexity AI) maintain servers.

• For transfers from the EU/EEA/UK: We rely on the EU-US Data Privacy Framework, Standard Contractual Clauses (SCCs), or other approved transfer mechanisms as applicable.
• Google LLC is certified under the EU-US Data Privacy Framework.
• We ensure that all data transfers comply with applicable data protection laws and that adequate safeguards are in place.

10. Data Retention

11. Your Rights

11.1 Rights Under GDPR (EU/EEA/UK Residents)

You have the following rights regarding your personal data:

• Right of Access (Art. 15): Request a copy of your personal data.
• Right to Rectification (Art. 16): Correct inaccurate data.
• Right to Erasure (Art. 17): Request deletion of your data ("right to be forgotten").
• Right to Restriction (Art. 18): Restrict processing of your data.
• Right to Data Portability (Art. 20): Receive your data in a machine-readable format.
• Right to Object (Art. 21): Object to processing based on legitimate interest, including profiling for advertising.
• Right to Withdraw Consent (Art. 7(3)): Withdraw consent at any time (e.g., for analytics, personalized ads, HealthKit access).
• Right to Lodge a Complaint: File a complaint with your local Data Protection Authority. For Croatia: AZOP (Agencija za zastitu osobnih podataka).

11.2 Rights Under CCPA/CPRA (California Residents)

• Right to Know: What personal information we collect, use, and disclose.
• Right to Delete: Request deletion of your personal information.
• Right to Correct: Correct inaccurate personal information.
• Right to Opt-Out: We do NOT sell or share your personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights.
• Sensitive Personal Information: Health data collected by HannaH is considered sensitive personal information under CPRA. We use it only for providing app functionality and do not use it for profiling or advertising.

In the preceding 12 months, we have collected the categories of personal information described in Section 2. We do not sell personal information. We share data with service providers listed in Section 4 solely for the purposes described.

11.3 Rights Under LGPD (Brazil)

Brazilian residents have rights under the Lei Geral de Protecao de Dados, including access, correction, deletion, anonymization, data portability, and information about sharing. Contact us to exercise these rights.

11.4 Rights Under PIPEDA (Canada)

Canadian residents have the right to access, correct, and challenge compliance. Contact us at the address in Section 1.

11.5 Exercising Your Rights

To exercise any of the above rights, contact us at hannah@mv-studio.net. We will respond within 30 days (GDPR) or 45 days (CCPA). We may need to verify your identity before processing your request.

12. Account Deletion

You can delete your account at any time:

• In-App: Settings > Delete Account
• By Email: Send a request to hannah@mv-studio.net

When you delete your account, the following cascade deletion is performed:

• Cloud Documents: All Firestore documents associated with your account are permanently deleted, including child profiles, tracking data, pregnancy data, period data, milestones, achievements, appointments, chat sessions, gratitude entries, hospital bag data, and all other user-specific documents.
• Cloud Storage: All files in Firebase Storage (photos, profile images, AI-generated songs) are permanently deleted.
• Local Databases: All local Hive databases are cleared and deleted from your device.
• Authentication Account: Your Firebase Authentication account is permanently deleted.
• Subscription entitlements are handled by Apple/Google; cancellation must be done through their platforms.
• Anonymized, aggregated analytics data may be retained as it cannot be linked back to you.

13. Data Security

• All data in transit is encrypted using TLS 1.2+.
• Local data is stored in on-device databases (Hive) with app-level encryption.
• Firebase Firestore data is encrypted at rest using Google's default encryption.
• Firebase Storage files are encrypted at rest.
• Authentication uses industry-standard OAuth 2.0 (Google, Apple).
• Firestore Security Rules ensure users can only access their own data.
• We apply the principle of least privilege: the App only requests permissions it needs (camera for scanning, HealthKit for health integration, notifications for reminders).
• We conduct regular security reviews of our codebase and dependencies.

No system is 100% secure. If you discover a security vulnerability, please report it to hannah@mv-studio.net.

14. Cookies and Tracking

The HannaH mobile app does not use browser cookies. However:

• Firebase Analytics uses device identifiers for usage analytics.
• Google AdMob may use advertising identifiers for ad personalization.
• You can opt out of personalized tracking via your device settings or by subscribing to HannaH Premium (which removes all ads).
• In the EU/EEA/UK, we display a GDPR-compliant consent dialog before any non-essential data collection begins.
• Website and shop (myhannah.app): no cookies are set without your choice. With your consent for "Advertising (Meta)" the Meta Pixel sets the _fbp and _fbc cookies — see Section 19.

15. Product Scanner Disclaimer

16. Do Not Track

Some browsers and devices offer a "Do Not Track" (DNT) signal. Due to the lack of a unified standard, the App does not currently respond to DNT signals. You can control tracking through your device privacy settings and our in-app consent mechanisms.

17. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes:

• We will update the "Last updated" date at the top of this page.
• We will notify you via an in-app notification or email (for material changes).
• Continued use of the App after changes constitutes acceptance of the updated policy.

18. Governing Law

This Privacy Policy is governed by the laws of the Republic of Croatia, without regard to conflict of law principles. For EU/EEA residents, this does not affect your rights under GDPR. For California residents, CCPA/CPRA rights are preserved regardless of governing law.

19. Web Shop (myhannah.app/shop)

If you buy something in our website shop (myhannah.app/shop) — a personalized song, a song poster, a photo print ("a photo that speaks", the night sky), or a personalized illustrated book (digital or hardcover) — we, MV Studio (seller and Data Controller; full details and terms of sale at myhannah.app/impressum), collect and process the following data, separately from the App. No account is needed and none is created.

What we collect, per product.

• All products: your e-mail address (order confirmation, invoice, delivery, questions about the order), the chosen product and price, the language you ordered in, and basic technical data (browser type, referring page) used for security and to prevent spam.
• Personalized song and song poster: who the song is for, the occasion, names, the story and details you type in, any lyrics you submit, your style preference; for the poster, the dedication text.
• Photo prints: the photo you upload (often a photo of your child), the crop and size you choose, the dedication text, and — if you add a QR code — the voice recording or sound clip you upload or record (max. 60 seconds) or the code of your HannaH song.
• Personalized book: the names, relationships, places and "moments" you write for the story, the dedication, your corrections to the text, and — after payment — photos of the people in the book (usually your child and family) or their written description (hair and eye colour), used only to illustrate them.
• Printed goods (photo prints, hardcover book): the recipient's name, delivery address and, where the carrier needs it, a phone number. The address is collected by Stripe on the payment page and passed to us and to the printer.

Children's photos and voices — parental responsibility. Our shop is for adults. By uploading a photo or a voice recording of a child you confirm that you are the child's parent or legal guardian (or that you have the consent of the people shown or recorded), and that you are entitled to have it printed or played. We use such material solely to make your product; we never use it to train AI models, never publish it, and never show it to other customers. The only exception is a photo or video that you yourself send us as a review and agree to have published (see "Reviews" below).

Which link brought you to the shop. If you arrived through a link that carries campaign tags (for example a Facebook or Instagram ad, utm_source / utm_campaign), we store those tags — and only those — with your order, so we can see which ads lead to purchases. They contain no personal identifiers and this part sets no cookies. The tags travel inside the payment link; keeping them in your browser tab (sessionStorage) happens only if you allowed "Analytics" in the cookie and storage settings.

Advertising measurement with Meta — only if you allow it. If, and only if, you switch on "Advertising (Meta)" in the cookie and storage settings (or click "Accept"), we use the Meta Pixel and the Meta Conversions API of Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland. Without that consent nothing is loaded and nothing is sent to Meta.

• In your browser (Meta Pixel): only on pages whose address carries no personal key — the home page, the shop, the product pages and the blog — we report that you viewed the page and, on a product page, which product. The Pixel sets two Meta cookies on myhannah.app, _fbp and (if you came from a Meta ad) _fbc, each kept for up to 90 days. Automatic click tracking and "advanced matching" (reading form fields) are switched off.
• From our server (Conversions API): when you start the payment and when the payment succeeds, we send Meta the event, the amount, the currency and the product type, together with your e-mail address and country in hashed form (SHA-256), the Meta cookie values above, your IP address and your browser identifier. These events go from our server — not from the payment or thank-you page — so that no order number or access key ever reaches Meta.
• Never sent to Meta: photos, voice recordings, texts you write, names, your delivery address, the order number.
• Why: to see which of our ads lead to purchases and to let Meta show our ads to people likely to be interested (including people who already visited the shop).
• Legal basis: your consent (GDPR Art. 6(1)(a) and, for the cookies, Art. 5(3) of the ePrivacy Directive). You can withdraw it at any time through the "Cookies" link in the page footer; the Pixel then stops and its cookies are deleted. Withdrawal does not affect what was sent before.
• Joint controllership: for the collection and transmission of this data we and Meta are joint controllers (GDPR Art. 26) under Meta's Controller Addendum; you may exercise your rights with us or with Meta. What Meta then does with the data is Meta's own responsibility under the Meta Privacy Policy. Meta may process data in the United States under the EU-US Data Privacy Framework.
• Retention on our side: the IP address, browser identifier and cookie values are kept with your order only until the purchase event has been sent, and are deleted from our event queue right after sending.

Purpose & legal basis. We use this data solely to create and deliver what you ordered, to invoice you, and to communicate with you about your order. The legal basis is the performance of your contract with us (GDPR Art. 6(1)(b)), our legal obligations for invoices and accounting (Art. 6(1)(c)), and — for the processing of photos and recordings — your consent (Art. 6(1)(a)), given via the checkbox on the order form. You may withdraw your consent at any time by e-mailing us; this does not affect processing already carried out, and withdrawing it before the product is made means we cannot make it.

Where your data goes (processors). We share only what each provider needs to do its part:

• Google Firebase (Google LLC / Google Ireland) — hosting of the website, our database (Firestore) for orders, and file storage for uploaded photos, recordings and print files.
• Stripe — payment (cards, Apple Pay, Google Pay) and collection of the delivery address for printed goods. We never receive or store your card number; Stripe's own privacy policy applies to payment data.
• Gelato — printing and shipping of photo prints and hardcover books through its partner print houses in the EU. Gelato receives the print file (which contains your photo, dedication and QR code) and the delivery details.
• Resend — sending our e-mails (order confirmation, invoice, download links, delivery notices) from mv-studio.net.
• Meta Platforms Ireland — only with your consent for advertising measurement; joint controller, not a processor (see "Advertising measurement with Meta" above).
• kie.ai — AI generation service we call for the music of personalized songs (Suno), for the illustrations of the personalized book (Google Gemini image model) and for its narration (ElevenLabs text-to-speech). It receives the song details and lyrics, the book text and the photos or descriptions needed to draw the characters.
• OpenAI — writing the lyrics of the song and the text of the book from the details and moments you provide. OpenAI receives the names and details you type in, but not your e-mail or payment data.
• fal.ai (MiniMax) — used for songs generated inside the HannaH App (see Section 5), not for shop orders.

Please do not include sensitive personal information (e.g. health details) in song or book texts that you would not want processed by an AI service. Providers located in the United States are covered by the EU-US Data Privacy Framework or Standard Contractual Clauses (see Section 9).

Retention.

• Photos, voice recordings and print files uploaded for photo prints and books are deleted automatically 90 days after the order. The audio clip behind a QR code on a printed product is kept for as long as the QR code is meant to play; e-mail us with your order number if you ever want it removed.
• Order records (e-mail, product, texts you entered, delivery details) are kept for 2 years after the order, so that we can honour the two-year statutory liability for defects, and are then deleted.
• Invoices and the accounting data they contain are kept for 10 years, as required by Croatian accounting and fiscal law.
• Digital products you bought (song, poster PDF, book PDF) remain available for download for the period stated in the delivery e-mail.

Reviews with photos or video, and the 10 % discount code. After an order we e-mail you a personal link for a review; reviews can be left only through such a link. If you use it, we store: your rating (1–5 stars), the review text, the display name and the (optional) town you enter, the photos and/or the video you upload, an optional link to your own Facebook or Instagram post, the order and product the review belongs to, the language, and your answers to the consents below together with the date and time and the version of the wording you agreed to. Photos are re-encoded in your browser before upload (max. 3000 px), which also strips their metadata such as the location where they were taken; we keep the video you upload privately, and if it is published, our server first makes a new copy (max. 720 p, max. 60 seconds) without any metadata such as the location, device or recording time — only that copy is ever shown publicly.

• Why: to check that the review comes from a real purchase, to send you the discount code (10 %, valid 6 months, single use — terms) and, only if you agreed, to publish the review. Every honest review gets the code, whatever the rating and whether or not you agree to publication or advertising.
• Publication on myhannah.app — only with your separate consent (an unticked box on the review form). We publish the stars, text, display name, town, photos or video, the product and the date, with the label "Verified purchase". Never your e-mail address or order details.
• Use in our ads (for example on Facebook and Instagram) — only with a second, separate consent; it is not a condition for the discount.
• Children and other people: if children or other people can be seen in the photos or video, you confirm that you are the children's parent or guardian and that the adults shown agree.
• Legal basis: your consent (GDPR Art. 6(1)(a)) for publication and for ads; for checking the review and sending the code, the performance of our review offer (Art. 6(1)(b)).
• Withdrawing consent: e-mail info@mv-studio.net at any time. We then take the review off the website without undue delay, make no new ads with your material and remove existing ads within 30 days. Withdrawal does not affect what was lawfully done before, and you keep your discount code.
• Retention: reviews that are not published (no consent or not approved) are deleted together with their photos and videos 90 days after you send them; published reviews stay online until you withdraw your consent or we remove them. The record of your consents is kept as long as we use the review and then for as long as we may need it as proof. Discount codes are kept with the order records (see above).

Your rights. You may request access to, correction of, or deletion of your shop data, or withdraw your consent, at any time by e-mailing info@mv-studio.net. Data we must keep by law (invoices) is excluded from deletion until the legal retention period ends. The GDPR rights described in Section 11 apply equally here. We do not sell your data. We share shop data for advertising only with Meta, only as described above and only with your consent; if you tick the optional "send me HannaH news" box you can unsubscribe at any time.

20. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data:

MV Studio
Email: hannah@mv-studio.net
Support: hannah@mv-studio.net

For EU data protection matters, you may also contact the Croatian Personal Data Protection Agency (AZOP) at azop.hr.

© 2026 MV Studio. All rights reserved.
HannaH — Where Hope Begins