Skip to main content
Privacy & child safeguarding

Your data and your child's data belong to you.

AirAware is built around the rights of children to privacy under theUN Convention on the Rights of the Child, Article 16, and complies with GDPR (including GDPR-K provisions for minors) and the US COPPA framework where applicable.

Children under 13

We do not allow children under 13 to create their own accounts. Instead, a parent or legal guardian creates a single guardian account and adds child profiles under it. Each child profile stores only the minimum information needed to give safer health advice: a display name, optional date of birth, allergies, conditions, and freeform notes.

Guardians can edit or delete a child profile at any time from the Profile page. Deleting a child profile permanently removes the record and unlinks any readings or symptom logs from that child.

What we collect and what we don't

  • We collect: your email, optional profile details, sensor readings you log, symptoms you report, AI insight summaries, and approximate location (rounded to ~1km) only if you grant it.
  • We never sell, share or trade your personal data with advertisers, brokers, or third-party marketers.
  • No precise tracking. Location data is rounded server-side before caching, so even our cache cannot identify a household.
  • No third-party trackers are loaded on AirAware. No Google Analytics, no Meta pixel, no advertising SDKs.
  • AI processing: when you generate an insight, your symptoms and readings are sent to our model provider for that single request and then discarded. Providers do not retain prompts for training.

Where data is stored

Data is stored on managed cloud infrastructure with encryption at rest and in transit. Row-level security policies enforce that no user including AirAware staff via normal app channels can read another user's records.

Your right to erasure

You can permanently delete your account and all associated data at any time from your Profile page. This action:

  • Removes your profile, all child profiles, all readings, all symptom logs, all AI insights, and all uploaded attachments.
  • Deletes your authentication record so you can no longer sign in.
  • Is irreversible. We do not keep a backup copy beyond 7 days of routine encrypted backups, after which all traces are gone.

Contact & questions

For privacy questions, child-safeguarding concerns, or data-access requests, email privacy@airaware.space. We respond within 7 working days.