Skip to main content
DekNurse
TH
Illustration: A mother holds her sleeping newborn beside sheer curtains, with a phone lying face-down on a small side table

Privacy

Privacy Policy

What we collect, where it is kept, who can read it, and how you can ask for a correction or a deletion. It is written to match what the system actually does today.

This is an English translation provided for convenience. The Thai version of this page is the legally binding one; if the two differ, the Thai version prevails. Read the Thai version

Last updated 10 November 2026

Read the terms of useRead the cookie policy

1. Data controller and scope of this notice

  • InnoWell Intelligence Co., Ltd. (บจก. อินโนเวลล์ อินเทลลิเจนซ์; company and tax registration number 0205566050431), which operates the DekNurse website and app, is the controller of personal data collected through deknurse.com and the DekNurse app so that LINE accounts, My Baby and the service forms can work.
  • For anything about personal data, write to hello@deknurse.com or contact the LINE Official Account @deknurse. The team verifies who is asking before acting on data in an account.
  • This notice covers the DekNurse website and app only. When you follow a link to LINE or to an outside shop, what happens after that is also governed by that provider's own policy.

2. What we collect

Collected only when you sign in with LINE or send us something yourself. We do not buy or receive your data from anywhere else.

  • LINE account details, limited to what LINE passes on at sign-in: your user ID, display name and profile picture. We do not see your LINE password, your contacts or any of your other chats.
  • Your sign-in session, so the system knows you are still logged in, your membership level (Silver / Gold) with the expiry date of Gold benefits if you have them, and your My Baby app access record (where the access came from and the date it ends).
  • My Baby (nickname, date of birth, profile photo, daily logs, development notes, vaccines, memories and the caregivers you add) is stored with your LINE account once you sign in, so that any device shows the same book.
  • All information about a child is entered by a parent and sits under the parent's account, not a child's account.
  • Vaccine certificate files you choose to upload in the app (a photo or a PDF) are kept in a private file store belonging to that book and are not publicly accessible. The system does not open, read or convert what is inside the file, and does not send the file to the nursing team or to any outside provider for review. Only you and the caregivers you invited to that book can open it, through a temporary link that expires within 10 minutes.
  • If you book through a link the team sends you in the LINE chat, the system keeps the dates and time you choose, the amount due and the transfer slip you attach (a photo or a PDF) in a private file store that is not publicly accessible. The DekNurse team opens the slip through a link that expires after 5 minutes, only to check the payment for that booking.
  • Care entries you record in the app (body temperature with how it was measured, behaviour observations and notes, each with the time it happened) are stored with your book under the same LINE account.
  • If you pair a home sensor hub with your account, the system keeps the pairing code (single use, expires in 10 minutes), the key the hub uses to send readings to your account, and the readings the hub sends with your LINE account, so the latest values can be shown in the devices tab. Each reading holds the device ID, what was measured (temperature, humidity, PM2.5 dust, weight and minutes of sleep), the value, the unit and the time.
  • The baby monitor camera in the app (DekNurse Baby Vision) processes images on your device only. Images and video are not uploaded, not recorded, and not sent to DekNurse or anyone else. If you turn on pose detection, the app downloads public model files from outside providers (see section 6).
  • What you enter in service forms: your name, how to contact you, your area, times that suit you, the details of your request and any message to the nursing team.
  • If you register through our LINE chat as a nurse who takes shifts, we keep your LINE user ID, your LINE display name, the name the team records for you, your full name and phone number, your professional nursing licence number and its expiry date (entered by you on the nurse details page, or recorded by the team), when you sent your details, when the team checked your licence against the Thailand Nursing and Midwifery Council database and the name of the team member who checked it, the date and time you accepted the nurse shift terms and the version you accepted, and your replies to each shift offer (accept or not available, with the time), only to check your eligibility and to offer and coordinate shifts.
  • Once the team approves your nurse registration, we keep the payout details you send: bank name, account number and account name, national ID number, address, the copy of your ID card you attach (kept in private file storage, viewable only by the team through the signed-in admin page), and when you gave consent. These are used to pay your fees, file the tax withheld from them with the Revenue Department, issue the withholding-tax certificate (form 50 Tawi) and serve as accounting evidence. Each time you send or change these details, the system keeps a history entry (the date and time, which fields changed, the bank code, the last 4 digits of the account and of the national ID number, and whether the ID card copy was replaced; full numbers are never kept in the history) and notifies the team without any numbers in the message. Please cross out the religion and blood-type fields on the copy before sending.
  • If you register as a nurse who takes shifts, the team may record your interview (the date, the team member who interviewed you and a note) and your criminal record check (the date, the team member who carried it out and a note) on the signed-in admin page, to assess your suitability to take shifts, relying on the legitimate interests of DekNurse and on the shift agreement between us.
  • If you register as a nurse who takes shifts, the system keeps the times you tap “arrived” and “finished” in LINE (on the shift confirmation card, or by typing in the chat), used to record working time and to support shift payments. No location is collected.
  • Aggregate visit statistics (pages opened, country, device type and where the link came from) through our hosting provider's visitor counter, which uses no cookies, does not store your IP address, and is not linked to your LINE account.

3. Purposes and legal bases

  • To make the account, the features and the services you ask for work (LINE Login, My Baby, appointments and contacting you back), relying on the necessity of carrying out your request or providing the service to you.
  • To keep the service secure, check permissions and prevent spam, relying on the legitimate interests of DekNurse and of its users, used only as far as necessary and never overriding the rights of the data subject.
  • Health, development, vaccine and other sensitive information you choose to put in My Baby is only enabled and synced after a parent or caregiver has given explicit consent on that device.
  • Information about nurses who register for shifts is used only to check eligibility (the professional licence), to offer and coordinate the shifts you ask to take, and to pay your fees, relying on the necessity of carrying out your request.
  • To comply with legal obligations, resolve disputes, or establish and defend legal claims where necessary.

4. Cookies and what is stored on your device

  • The website uses five essential cookies: the session, the security of LINE Login, the page to return to after signing in, the sign-in round trip for the DekNurse app, and which book a caregiver is currently viewing. Google Ads advertising cookies are used only if you accept them in the cookie banner (see the Google Ads cookies section below).
  • localStorage holds display settings, saved items, a record of consent given on that device, and the local-first book data before it syncs to your account. sessionStorage stops automatic sign-in from looping within a single tab and remembers that a promotional pop-up has already been shown in that tab.
  • The name, purpose and lifetime of each cookie are in the cookie policy linked above and at the end of the menu.

5. Forms and previously published content

  • Service request forms, Baby Mall requests, class registrations and questions to a nurse are recorded for the team to read, so they can reply and act on the request.
  • Questions and answers from DekNurse AI are recorded so the team can check afterwards what the system said, for user safety. What is kept is: the question you typed, the answer the system generated, the outcome of that exchange, the reason if an answer was withheld, the danger signs the system detected in the question, which AI system answered (the main one or the fallback), and the LINE account of the person asking. We do not keep IP addresses, device details or previous conversation history.
  • Please do not put more sensitive information than necessary (such as a national ID number, a full address, or detailed medical history) in free-text boxes.
  • The Community page has been removed from the website. Messages posted before that (if any) may remain in the system for safety purposes or to carry out deletion requests, but they are no longer reachable through the website.
  • If you choose to send a question on to LINE, the message is opened in the chat box and you send it yourself. The conversation after that is also governed by LINE's policy.

6. Service providers and data transfers

  • LINE provides identity verification and the chat channel, so it receives what the LINE Login process needs and the messages you choose to send through LINE.
  • Our website hosting and request-processing provider, and our database provider, are where DekNurse stores accounts, My Baby, any messages that remain, and service requests.
  • The DekNurse AI feature (for members signed in with LINE) sends the question you typed to a provider outside Thailand to generate the answer. Normally it goes to the primary AI model provider; only if that provider is down, out of quota or otherwise unavailable does the system send the same question to a fallback provider instead, so a question can still be answered. One question goes to one provider only, never to both at once. A question may contain health information about your baby, so this counts as sending data outside DekNurse's systems to a provider abroad. DekNurse sends only the text of that one question, not your name, your LINE account, your phone number or anything from My Baby, and it does not send previous conversation history. If you would rather nothing left our systems, use the LINE chat with the nursing team instead.
  • The servers that handle requests for this website and the main database are located in Singapore. Questions sent to the automated answering system are processed by the overseas providers described above, which may be in a different country.
  • A provider's infrastructure may process data outside Thailand as that provider determines. DekNurse sends only what that service needs to do its job.
  • Every payment on this site (gifts, as well as nursing service deposits and Gold membership fees paid before the site stopped taking them) is handled by Stripe, a payment provider. You enter your payment details on Stripe's own page; card details never pass through, and are never stored by, DekNurse's systems. DekNurse receives back only whether the payment succeeded, the transaction reference and the method used, so that we can issue your voucher, open your membership benefits, record your deposit and answer questions about your order. Stripe may process payment data outside Thailand as part of its own infrastructure, and using it is also subject to Stripe's own policies.
  • If the team sends you a Stripe payment link in the LINE chat, you enter your name, email address and card details on Stripe's own page. The team can see the name and email address you entered, the amount and whether the payment succeeded in Stripe, so that it can confirm your booking. Card details never pass through, and are never stored by, DekNurse's systems.
  • When you add, message or tap a button in the DekNurse LINE Official Account, the system keeps your LINE user ID, your LINE display name and when you last got in touch (not the content of your messages), so that the team can send you service cards or links in the chat. If you block or unfriend the account, the system deletes this straight away; it is also deleted when you delete your account (if you keep contacting the account afterwards, the system starts keeping it again).
  • When you turn on pose detection in the baby monitor camera, the app downloads public model files from Google (storage.googleapis.com) and jsDelivr (cdn.jsdelivr.net). Those two providers therefore see your device's IP address at the time of download, as with any file fetched from the internet, but they receive no images or any other data from the camera.
  • Add-ons marked as provided through a partner (such as postpartum massage, postpartum meals and newborn photography) are delivered by outside providers. Once you choose one and confirm with the team, DekNurse sends that provider your name, phone number, address and appointment time, only as far as needed to book and deliver the service. We do not send your baby's health records from My Baby.
  • If you accept advertising cookies, the website sends visit information and ad measurement events to Google LLC, as explained in the Google Ads cookies section. Apart from that, we do not sell data, do not use your baby's health records for advertising, and do not exchange data for marketing.

7. How long we keep things

  • Temporary LINE Login cookies are kept for no more than 10 minutes, and the session cookie and the currently open book cookie for no more than 7 days. The detail is in the cookie policy.
  • Account data and My Baby are kept until you delete your account in the app or ask the team to delete it, so that you can open the same book from another device. When your My Baby app access ends, the app is locked but the data is kept in full, so you can continue if you are given access again.
  • Service requests and any messages that remain are kept as long as needed to reply, carry out the service, maintain safety, and establish or defend legal claims.
  • DekNurse AI question-and-answer records are kept as long as needed to check the safety of the answers, and can be deleted on request.
  • Uploaded vaccine certificate files are kept until you delete them, which you can do at any time from the vaccine tab in the app. The book owner can delete them; caregivers who were invited can upload but cannot delete.
  • You can delete your account yourself from the delete account menu in the DekNurse app. Once you confirm, the system immediately and permanently removes the data linked to your LINE account from our servers: your app profile, your My Baby app access record, the baby book you own and everything in it (including care entries), that book's vaccine certificate files, your hub, pairing codes and home sensor readings, the caregivers and invitations in your book, your caregiver access to other people's books, consultation requests and records of consultation menu taps in the LINE chat, DekNurse AI question history, questions to a nurse, reviews, messages you posted, the nursing team's follow-up notes, TeleCare follow-up bookings you chose, your nurse shift roster entry, replies to shift offers, the times you tapped “arrived” and “finished”, payout details and ID card copy file (if you registered as a nurse; if the team has ever paid you, your full name, national ID number, address, payment and withholding-tax records, confirmed shifts and the history of changes to your payout details are kept for 10 years from the end of the year of your last payment, as accounting and tax law requires, while the ID card copy file, bank account details, phone number and LINE details are deleted immediately; if you have never been paid, everything is deleted), the LINE ID and name the system remembered from your contact with the LINE Official Account, and your sign-in sessions on every device.
  • What is still kept after you delete your account: your Gold membership payment records, bookings paid by bank transfer with their slips, vouchers you redeemed, your membership entitlement, and records of home visits used in a membership cycle, as accounting records, and so that benefits you have paid for still work if you sign in again with the same LINE account. Books belonging to other owners where you were a caregiver stay intact; vaccine certificate files you uploaded to such a book stay with that book but are no longer linked to your account. Gift orders, service deposits and forms that were not submitted under your LINE account cannot be deleted automatically. Contact the team to request deletion, and the team will check any legal constraints before acting. There is still no automatic time-based deletion.

8. Your rights and asking for deletion

Subject to the conditions in law, you may exercise the following rights over your data.

  • Ask for access and a copy, ask for your data to be transferred where the conditions are met, ask for corrections, ask for erasure or anonymisation, and ask for use of your data to be restricted.
  • Object to processing based on legitimate interests, withdraw consent without affecting processing before the withdrawal, and complain to the Personal Data Protection Committee Office.
  • While you have My Baby app access, entries can be edited or deleted item by item from the book, and you can download a summary or a CSV from the daily log page. After access ends, you can ask the team for a copy (see the next point).
  • You can delete your whole account yourself from the delete account menu in the app (see section 7). For a copy of your whole account, deletion of data not linked to your LINE account, or any other right, write to hello@deknurse.com or contact the LINE Official Account. The team verifies who is asking before acting.

9. Security and data breaches

  • Authentication cookies are set HttpOnly, Secure in production, and SameSite=Lax. The My Baby database is reached through an API that checks the session and the permissions on the server.
  • DekNurse limits what it sends each provider to what that provider's job requires, and applies technical and procedural measures appropriate to the risk.
  • If a data breach happens, the team assesses the impact, records it, fixes it, and notifies the authority or the data subjects where the law requires it.

10. What we do not do

  • We do not sell data and do not use your baby's health records for advertising. We do not exchange data with anyone for marketing, except ad measurement with Google if you accept advertising cookies, which never includes your name, phone number, anything you type into a form or your baby's health records.
  • No advertising pixel or tracking script runs before you choose. The Google Ads tag loads only if you accept advertising cookies (see the Google Ads cookies section). There are no analytics tools that identify individuals; there is only our hosting provider's aggregate, cookie-free visitor counter (see section 2).
  • We do not use your data for automated decisions that have a legal effect on you, and automated answers on the website are not a medical diagnosis.

Contact us about personal data

Message the LINE Official Account @deknurse (the same channel you use for our services) and the team will take care of it.