Pupa privacy policy

Last updated: 13 October 2026

This is a translation. If there is any difference, the Spanish version applies.

Who is responsible

Pupa («Pupa: salud infantil») is an app for iPhone, iPad and Android developed by Esther Margarita Noa Rodríguez. For any privacy enquiry you can write to pupa.saludinfantil@gmail.com.

What information is stored

The app stores only what you enter:

• Details of each child: name, date of birth, sex, region (comunidad autónoma), blood group, allergies, chronic conditions and regular medication.
• Healthcare contact details you choose to add: paediatrician, health centre, insurance and their phone numbers.
• Health records: illness episodes, temperatures, medicine doses, symptoms, meals, nappies, sleep, weight, height, vaccines, teeth, developmental milestones, medical reports and appointments (type, date and time, place and notes).
• Photos you choose to attach to a symptom or a report.

Where it is stored

All of this information is stored only on your device. Pupa has no servers, does not create accounts and does not transmit your data over the internet. On Android the database is stored encrypted; on iPhone and iPad it is protected by the device's file protection system.

If you have your phone's backup turned on (for example, iCloud or Google backup), the app's data may be included in that backup. That backup is managed by Apple or Google according to your account settings, not by us.

What we do not do

• We do not collect personal or usage data.
• We do not use advertising, trackers or analytics tools.
• We do not share or sell information to third parties.
• We do not access your location, your contacts or your camera.

When data leaves your device

Only when you decide. The app lets you download a copy of your data (also in FHIR format), create a PDF report, export check-ups to your calendar and copy a summary or the emergency card. The backup file is not encrypted and contains health data: keep it somewhere safe. What you do afterwards with those files or texts (sending them to your paediatrician, saving them in another app) is up to you and to the app you choose to share them with.

Permissions

• Notifications: used to remind you of the next dose of a medicine and of the appointments you add. Reminders are scheduled on the device itself.
• Photos: the app only receives the images you select; it has no access to the rest of your photo library. If you ask it to read the text in the photo of a report, the reading is done on the device itself and the image is not sent anywhere.

External links

Pupa includes links to official pages, such as the vaccination schedules of each region (comunidad autónoma). When you open them you leave the app, and those sites' privacy policies apply.

Children's data

Pupa is designed to be used by mothers, fathers and adult carers. Children's data is entered and controlled by the adult, and stays on their device.

How to delete your data

You can delete records and episodes from within the app. Uninstalling Pupa removes all the information stored on the device. As we do not have a copy of your data, we cannot recover it or delete it for you: keep your downloaded backup if you want to keep it.

Your rights

As we do not collect or process your data on our systems, we hold no information about you to access, correct or delete. If you have any questions about this policy, write to us at pupa.saludinfantil@gmail.com.

Health disclaimer

Pupa is a tool for keeping and checking records. It is not a medical device, does not make diagnoses and does not replace your paediatrician's advice. In an emergency, call 112.

Changes to this policy

If the app changes in a way that affects your privacy, we will update this page and the date shown above.