CrIA is an AI-powered baby cry analysis app, a product of Bethel Lodge Corp., a Florida corporation based in Orlando, Florida, United States.

Company	Bethel Lodge Corp.
Product	CrIA — getcria.app
Address	Orlando, Florida, United States
Contact	hello@getcria.app
Data Controller	Bethel Lodge Corp. (GDPR / LGPD)

Data	What	Legal Basis	Retention
Account	Name, email address	Contract performance	Until account deletion
Profile	Baby name, age, city, state, children count	Consent	Until account deletion
Photo	Profile photo (optional)	Consent	Until removed or deleted
Cry logs	Date, time, AI diagnosis, real cause, rating	Contract performance	Until deleted by user
Usage	Features used, app interactions	Legitimate interest	12 months
Technical	Device type, browser, IP address	Legitimate interest	90 days

All baby-related data is provided by the adult and is associated with the adult's account. We comply with the U.S. Children's Online Privacy Protection Act (COPPA).

• Baby data is never sold or shared for marketing
• Baby data is used solely to provide and improve the service
• Parents can delete all data at any time from the app
• If we discover data from a child under 13, we will delete it immediately

CrIA is operated from the United States. If you use CrIA from the EEA, Brazil, or other regions, your data may be transferred to and processed in the United States.

We ensure appropriate safeguards through Standard Contractual Clauses (SCCs) and Data Processing Agreements with Supabase, Anthropic, and Netlify, plus full encryption in transit and at rest.

Service	Purpose	Data Shared
Supabase	Database, auth, storage	Account, logs, photos
Google OAuth	Sign in with Google	Name, email from Google
Anthropic Claude	AI cry analysis	Contextual questions only — no personal data
Netlify	App hosting	IP, technical data
Cloudflare	Security, CDN	IP, technical data

We do not sell your personal data to any third party. Ever.

California Residents (CCPA)

• Right to know what personal information is collected and how it is used
• Right to delete personal information
• Right to opt-out of the sale of personal information — we do not sell personal information
• Right to non-discrimination for exercising CCPA rights
• Right to correct inaccurate personal information

EU / EEA Residents (GDPR)

• All rights above, plus the right to withdraw consent at any time
• Right to lodge a complaint with your local data protection authority (ICO — UK, CNIL — France, AEPD — Spain)
• Right not to be subject to solely automated decision-making

Brazilian Residents (LGPD)

• All rights above, plus the right to revoke consent and receive information about data sharing
• Right to lodge a complaint with ANPD (gov.br/anpd)

To exercise any right: hello@getcria.app — we respond within 30 days (15 business days for LGPD).

We use browser local storage and session cookies. We do not use advertising cookies, tracking pixels, or behavioral analytics.

Type	Purpose	Duration
Auth session	Keep you logged in	7 days
Language	Remember language preference	1 year
Cry log cache	Faster access to history	Session
Profile cache	Faster profile loading	Session

• All data encrypted in transit (HTTPS / TLS 1.3) and at rest (AES-256)
• Authentication via JWT tokens — passwords are never stored
• Profile photos in access-controlled storage buckets
• Row-Level Security (RLS) ensures users only access their own data
• Regular security reviews and dependency updates

For significant changes, we will notify you by email at least 30 days before they take effect. Continued use of CrIA after the effective date constitutes acceptance. You may delete your account before the effective date if you disagree.