Privacy Policy

This Privacy Policy explains how Deepsink Partners Technologies (Pty) Ltd collects, uses, stores, and protects personal information connected to the Luka Journey mobile app. Luka Journey is designed for South African parents, legal guardians, caregivers, and other authorised care participants who use the app to manage child-related care records, reminders, and shared access.

Scope of this policy. This policy applies to the Luka Journey mobile app and related support operations. The public Luka Journey website is informational only and does not provide customer login or account functionality.

Information we collect. We collect information needed to operate Luka Journey, including account information such as your name, email address, phone number, password hash, login and onboarding details, and social sign-in details where used. We also collect child profile details, care and health-related information you add such as immunisations, growth records, milestones, clinic or emergency visit details, healthcare provider information, uploaded documents, invitation and sharing details, notification preferences, device and app information, and security or audit information such as IP address, session activity, and access logs.

How we collect it. We collect information directly from you when you create an account, complete onboarding, add a child profile, upload documents, enter records, send invitations, adjust settings, or contact support. We may also collect limited information from sign-in providers such as Google or Apple, from your device for security and notification delivery, and from service providers that help us operate Luka Journey.

How we use it. We use personal information to provide and maintain Luka Journey, create and secure accounts, manage child and family records, enable document storage and sharing, send reminders and notifications, respond to support requests, protect the app against misuse, maintain audit trails, comply with legal obligations, and improve reliability, safety, and performance. We do not sell personal information. We do not use child or health-related information for advertising, marketing profiling, or third-party ad targeting.

Children's information. Luka Journey is intended to be used by adults acting for children, not by children creating accounts for themselves. Child information must only be added, managed, or shared by a parent, legal guardian, or another person who is legally authorised to do so. Because Luka Journey may include child and health-related information, we treat that information as highly sensitive and apply additional care to how it is handled.

Health and care information. Luka Journey may store information about vaccinations, measurements, milestones, provider details, clinic visits, emergency visits, notes, and uploaded health records. Uploaded documents may include booklet pages, referral letters, clinic documents, images, or PDFs that you choose to add. Luka Journey is a care-record and coordination tool only. It does not provide medical advice, diagnosis, treatment, emergency services, or medical-device functionality, and you should always seek guidance from a qualified healthcare professional where needed.

Who we share it with. We may share information with service providers who help us run Luka Journey, including cloud hosting and private storage providers, Firebase and Google services for app infrastructure and push messaging, Apple services for sign-in and platform notifications, Huawei Mobile Services for AppGallery push messaging where used, email delivery providers, PayFast for billing where you choose a paid plan, and support or security tooling used to operate the service. We may also share information with caregivers, family members, clinicians, or other people that you choose to invite through Luka Journey, based on the permissions and access settings you select. We may also disclose information where required by law, to protect rights or safety, or in connection with a merger, acquisition, or similar business transaction.

Device tokens and notifications. If you enable reminders or push notifications, we may store app installation identifiers and push tokens from Firebase Cloud Messaging, Apple Push Notification service, or Huawei Push Kit. We use these tokens only to deliver Luka Journey notifications, maintain notification preferences, and troubleshoot delivery.

Shared child access. When you invite another caregiver or clinician, they may be able to view child profile details, health records, documents, reminders, and related notes according to the access level you choose. You should only invite people who are authorised to receive the child's information, and you can change or revoke access in the app where the feature is available.

Cross-border processing. Some of the service providers we use may store or process personal information outside your home country. Where this happens, we take reasonable steps to ensure appropriate safeguards are in place as required by applicable law.

Protecting your data. We use reasonable technical and organisational safeguards to protect personal information, including access controls, authentication measures, role-based permissions, audit logging, and protected data transfer where appropriate. No method of storage or transmission is completely secure, but we work to reduce risk and protect Luka Journey data responsibly.

How long we keep information. We keep personal information for as long as reasonably necessary to provide Luka Journey, maintain child and family records, support sharing features, comply with legal obligations, resolve disputes, prevent fraud, and keep the service secure. Account deletion removes or anonymises personal data that is no longer needed, but limited records may be kept for legal compliance, billing, security, fraud prevention, dispute handling, or where shared family data must first be reassigned or resolved.

Your choices and rights. Depending on the law that applies to you, you may ask for access to your information, request correction of inaccurate information, ask for deletion of your information, object to certain processing, change sharing settings, or contact us with privacy questions. We may need to verify your identity or authority before acting on a request.

Deleting your data. You can request deletion of your Luka Journey account through the app. In some cases, deletion may be delayed where shared family or child data still needs to be reassigned, removed, or resolved first. For step-by-step help with account deletion, please read Delete Your Data.

Third-party services. Luka Journey may rely on third-party providers such as Apple, Google, notification providers, email providers, and cloud storage providers to operate certain features. Your use of third-party sign-in or device ecosystems may also be subject to those providers' own terms and privacy notices.

Contact. Privacy questions or requests can be sent to [email protected]. Our legal contact address is Johannesburg, South Africa.

Updates. We may update this Privacy Policy from time to time. If we make an important change, we will update the effective date below and may also notify you in the app, on the website, or by email where appropriate.

Effective date: March 24, 2026