BornCare — Privacy Policy

1. About this app

BornCare is a field data-collection tool used by program officers and health workers in the Born Healthy public-health initiative. The app transfers newborn weight records from Bluetooth-enabled weighing scales installed at participating health facilities into a centralized program database operated by Jhpiego.

BornCare is not a consumer app. It does not contain sign-up, login, or user accounts.

2. Intended users of the app

BornCare is intended for use only by trained nursing staff and program field officers at health facilities that have been enrolled in the Born Healthy initiative and have been issued a BornCare-compatible Bluetooth weighing scale.

The app is not intended for, advertised to, or useful to members of the general public. It has no consumer-facing functionality: it cannot be used without access to a paired program-issued Bluetooth scale and without authorization to record entries against the program's facility roster.

Even though the app is available on Google Play to satisfy distribution and update requirements, its functionality is operational only in the context of the Born Healthy field workflow.

3. What this policy covers

This policy explains what data BornCare processes, what it does not collect, where data is stored, how long it is retained, and how a record can be requested for deletion.

4. Data we do NOT collect

BornCare does not collect, store, share, or transmit any of the following from the app user (an authorized nursing staff member or program field officer):

• Name, email address, phone number, or postal address
• Age, gender, or any demographic information
• Photographs, videos, audio recordings
• Device GPS or precise location
• Contacts, calendar, SMS, or any other on-device data
• Browsing history or in-app analytics
• Advertising identifiers

The app has no sign-up, no login, and no user account. There is no profile to delete.

5. Data the app processes

The app reads newborn weight readings from a paired Bluetooth weighing scale at a health facility and transmits them to the program server. Each record contains only the following fields:

Records do not contain the mother's name, the child's name, the child's age, the child's gender, parent contact details, address, or any other personal demographic information. The RCH ID is the sole reference to a beneficiary; resolving the RCH ID back to a person requires access to separate Ministry of Health records that BornCare does not hold and does not access.

6. Where data is stored

Records are transmitted over HTTPS (TLS) to the program server at networksofcare.org and stored there as part of the Born Healthy dataset, which is owned and managed by Jhpiego. Access to the server is restricted to authorized program staff only.

On the device, records are held in the app's private SQLite database until the device is uninstalled or its app data is cleared.

7. How long data is retained

Records are retained indefinitely as part of the program record, in line with the public-health surveillance objectives of the Born Healthy initiative. Longitudinal records are required for program evaluation, research, and policy reporting; records may be aggregated or de-identified for those purposes consistent with the program's mandate.

We do not delete records on a fixed schedule. Records remain available unless a specific deletion request is received under section 8.

8. How to request deletion of a record

Because BornCare has no user accounts, there is no operator profile to delete. However, a beneficiary, parent, guardian, facility-in-charge, or program supervisor may request that a specific newborn record be deleted from the program database.

To request deletion:

• Send an email to borncarehelpdesk@gmail.com
• Subject: Data deletion request
• In the body, please include the RCH ID of the record to be deleted, the facility name and code, and the approximate date of the weighing. If you are not the beneficiary's guardian, please indicate your role (facility staff, program supervisor, etc.).

We will verify the request with the source facility and delete the corresponding record from the program server within 30 business days. We will reply to the requester confirming the action taken.

Uninstalling the app from a device removes any on-device cache of records held by that device. It does not delete records that have already been transmitted to the program server.

9. Sharing

We do not sell records. We do not share records with any third party. We do not use records for advertising or marketing.

Records are accessed only by authorized Jhpiego program staff for the purpose of program management, monitoring, and evaluation. This is processing on behalf of the program by its own staff, not third-party sharing.

10. Security

All transmission between the app and the program server occurs over HTTPS (TLS).

On the device, records are stored in the app's private storage, which is sandboxed by Android and accessible only to BornCare.

On the server, records can be accessed only by authorized Jhpiego program staff after authenticated login to https://networksofcare.org/ using their individual program-issued credentials. The server is not publicly browseable, and records are not exposed via any unauthenticated endpoint.

11. Children's data

The records concern newborns weighed at health facilities. The data subject (the newborn) is not a user of the app, and the app is not directed at children as users. Records are collected by trained program officers in the course of their official duties under facility and program supervision.

12. Changes to this policy

We may update this policy. The "Last updated" date at the top of this page reflects the most recent change. Material changes will be communicated through the program's official channels.

13. Contact