Privacy policy.

The short version

• Everything you record stays on your phone. HushNine has no internet permission. The app is technically unable to send your data anywhere: not to us, not to advertisers, not to anyone. You can check this yourself on the app's Google Play page under "Permissions" or "About this app".
• We collect nothing from the app. No account, no email, no name, no advertising ID, no analytics, no crash-reporting tools, no trackers, no ads.
• Your data is encrypted on your phone and can be locked behind your fingerprint, face or screen lock.
• Backups are yours. Only you create them, encrypted with a password only you know. We never see the file or the password, and we can't recover a lost password.
• We can't hand over what we don't have. We hold no health data about you, so we have nothing to sell, share, leak or disclose to anyone, including in response to subpoenas, warrants or data requests.
• The only information we ever receive is what Google Play shares with every developer about a purchase (your country, for tax), anonymous crash statistics from Google if you've allowed that on your phone, and anything you choose to send us by email.

The rest of this policy explains these points in detail.

1. Who we are

HushNine is made by WIDGETS AND CREATIVE SOLUTIONS. You can reach us at contact@widgetsandcreativesolutions.com.

For the data described in section 4 (purchase records, support emails), we are the "controller" (GDPR / UK GDPR) or "business" (US state privacy laws). For your pregnancy records we are none of these: they're created, stored and controlled only by you, on your device, and we never have access to them.

HushNine is a consumer app. We are not a healthcare provider, health plan or "covered entity" under HIPAA (US), and HushNine is not a medical device.

2. What HushNine stores, and where

Everything you enter in HushNine is stored only in the app's private storage on your phone:

• pregnancy details (due date, how it was calculated, optional baby nickname, how the pregnancy ended, if you record that)
• daily check-ins (mood, symptoms and their severity, notes)
• weight entries, and the pre-pregnancy weight and height you enter for the weight guide
• kick-counting sessions and contraction timings
• appointments, their notes and your list of questions
• your settings (theme, units, app lock, notification preferences, when you last saved a backup)

None of this ever leaves your phone through HushNine, except in an encrypted backup file that you create yourself (section 5).

How it is protected on your phone

• Encrypted database. Your records are stored in a database encrypted with 256-bit AES (SQLCipher). Its key is protected by Android Keystore, hardware-backed on most phones, and never leaves the device.
• App lock. Optionally, HushNine asks for your fingerprint, face or screen lock every time it opens, or after a timeout you choose.
• Privacy screen. On by default: HushNine's content is hidden in the recent-apps view and can't be screenshotted or screen-recorded.
• Discreet notifications. Reminders show no details on your lock screen unless you turn details on.
• No Google cloud backup. HushNine opts out of Android's automatic cloud backup and phone-to-phone transfer, so your records aren't copied to Google Drive or another device without you knowing.

3. What HushNine does not do

HushNine does not:

• connect to the internet (it has no permission to do so)
• create accounts or ask for your name, email or phone number
• use advertising IDs, ads or ad networks
• include analytics, telemetry, crash-reporting or "SDK" tracking tools
• access your location, contacts, camera, microphone, photos or files, except a file you pick for a backup or restore
• sell, rent, share or "monetize" any data, or use it to train AI
• infer anything about you, or build a profile

The app's full permission list is short: notifications (for reminders you set), run at startup (so your reminders survive a restart) and biometrics (for the optional app lock). Android grants these without any network access.

4. The only information we ever receive

a) Your purchase (via Google Play)

HushNine is a paid app sold through Google Play. Google processes your payment under the Google Privacy Policy. We don't receive your name, email address or payment details. Google gives developers limited order information for accounting and tax, such as an order number, the price, and your country (plus state/region and postal code only in places where we, not Google, are the merchant of record). We use this only for accounting, tax and refunds. We keep it as long as tax law requires (typically up to 7 years).

b) Crash and performance statistics (via Google)

If you have chosen to share "Usage & diagnostics" with Google in your phone's settings, Google (not HushNine) may collect crash and performance reports for all apps from Google Play, including HushNine. Google shows developers only anonymous, aggregated statistics (for example "the app crashed on Android 14 on model X"). These reports don't include your HushNine records. You can turn this off in your phone's Settings → Google → Usage & diagnostics. This is governed by Google's privacy policy.

c) Reviews and messages you send us

If you email us, we receive your email address and whatever you write. We use it only to reply and to help you, and we delete support emails within 24 months of the conversation ending, unless the law requires otherwise. Please don't send us health information you'd rather keep private. We never need your records to help you. If you post a review on Google Play, it's public and governed by Google's policies.

We use the information above only for the purposes described, under these legal bases (GDPR/UK GDPR): performing our contract with you (the purchase), legal obligations (tax records) and legitimate interests (answering your messages and fixing bugs).

5. Backups: in your hands

HushNine can save a backup when you ask it to, into a file and location you choose (your phone, a USB drive, or a cloud folder you use).

• The file is encrypted on your phone before it is saved, using a password you choose (Argon2id key derivation and AES-256-GCM authenticated encryption). It contains no readable health data.
• We never receive your backup file or your password. If you store the file with a cloud service, that service holds only the encrypted file, under its own privacy policy.
• Keep your password safe. It's stored nowhere. If you forget it, nobody, including us, can open that backup.
• Restoring a backup replaces the data in HushNine on that phone, after showing you a preview and asking you to confirm.

6. Links to other websites

Some screens offer links (for example to support organisations after a pregnancy loss). Tapping one opens your web browser. Those websites are run by others under their own privacy policies. HushNine doesn't add any tracking information to these links.

7. Deleting your data

You're in full control, and deletion is immediate:

• Delete all data (Settings) permanently erases everything HushNine stores on your phone: the database, settings, reminders and notifications.
• Uninstalling HushNine erases everything too, including the encryption key, so leftover data can't be decrypted.
• Ending a pregnancy (after a birth or a loss) lets you keep your records privately or erase them at once.
• Backup files you've saved are separate files you control. Delete them wherever you stored them.

Because we hold none of your records, there's nothing for us to delete on our side. To delete support emails or exercise any other right over information we hold (section 4), email contact@widgetsandcreativesolutions.com.

8. Your privacy rights

Depending on where you live, you have rights over personal data a company holds about you. They include the right to access, correct, delete or move it, to object to or restrict its use, to withdraw consent, and to not be discriminated against for using these rights. These come from laws such as the GDPR (EU), the UK GDPR, California's CCPA/CPRA, Washington's My Health My Data Act, and other US state privacy and consumer-health-data laws.

• Your HushNine records: you can already view, change, export (as an encrypted backup) and delete them yourself in the app. We have no copy.
• Information we do hold (section 4): email contact@widgetsandcreativesolutions.com. We'll respond within the time the law requires (usually 30–45 days), free of charge. If we decline a request, you may appeal by replying to our decision, and you can complain to your data protection authority or state attorney general.
• We don't sell or share personal data (including for cross-context behavioural advertising), and we don't use "sensitive personal information" or "consumer health data" for any purpose. There's nothing to opt out of.

Washington, Nevada, Connecticut and other residents: see our separate Consumer Health Data Privacy Policy.

9. Requests from governments and law enforcement

HushNine is built so that we have no health data to disclose: no records, no backups, no passwords, no usage history, no location. If we receive a legal demand, the only information we could provide is what's described in section 4. Where the law allows, we'll challenge overly broad requests and tell affected users before disclosing anything.

Data on your own phone is protected by HushNine's encryption, its app lock and your phone's own lock. Use a strong screen lock: anyone who can unlock your phone and HushNine can see what's in it.

10. Children

HushNine is meant for adults and isn't directed at children under 13 (or under 16 where local law sets a higher age). The app collects no personal data from anyone, whatever their age.

11. Things outside HushNine's control

To be completely transparent, a few things on your phone are outside our control:

• Your keyboard. Some keyboard apps learn or upload what you type. For notes, consider your keyboard's incognito mode or a keyboard that works offline.
• Your phone. A phone that is rooted, has malware, or is unlocked in someone else's hands can expose any app's data. Keep Android updated and use a screen lock.
• Notifications with details. If you turn on notification details, reminder text can appear on your lock screen and in connected devices such as watches.
• Turning off the privacy screen allows screenshots, and lets content appear in the recent-apps view.
• Where you store backups. The file is encrypted, but its name and size are visible to whatever service stores it.

12. Medical disclaimer

HushNine is not a medical device and does not diagnose, treat, cure, or prevent any medical condition. Its information is general and educational, and isn't a substitute for advice from your doctor, midwife or other qualified health professional. Always contact your care team about any concern. In an emergency, call your local emergency number immediately. Your use of HushNine is also governed by our Terms of Use.

13. If anything changes

If we ever change how HushNine handles data, we'll update this policy before the change takes effect, change the effective date above, and describe the change in the app's release notes.

Our commitment: any feature that would send data off your phone (for example optional, end-to-end encrypted family sharing in the future) will be strictly opt-in. It will be clearly explained before you turn it on, and never switched on for existing users automatically. Adding internet access would also be visible in the app's permission list on Google Play. We'll never start selling or sharing data collected under an earlier version of this policy.