Privacy Policy

1. Data controller and scope of this notice

• บจก. อินโนเวลล์ อินเทลลิเจนซ์ (company and tax registration number 0205566050431), which operates the DekNurse website, is the controller of personal data collected through deknurse.com so that LINE accounts, Baby Passport and the service forms can work.
• For anything about personal data, write to hello@deknurse.com or contact the LINE Official Account @deknurse. The team verifies who is asking before acting on data in an account.
• This notice covers the DekNurse website only. When you follow a link to LINE or to an outside shop, what happens after that is also governed by that provider's own policy.

2. What we collect

Collected only when you sign in with LINE or send us something yourself. We do not buy or receive your data from anywhere else.

• LINE account details, limited to what LINE passes on at sign-in: your user ID, display name and profile picture. We do not see your LINE password, your contacts or any of your other chats.
• Your sign-in session, so the system knows you are still logged in, and your membership level (Silver / Gold) with the expiry date of Gold benefits if you have them.
• Baby Passport (nickname, date of birth, profile photo, daily logs, development notes, vaccines, memories and the caregivers you add) is stored with your LINE account once you sign in, so that any device shows the same book.
• All information about a child is entered by a parent and sits under the parent's account, not a child's account.
• Vaccine certificate files you choose to upload in the app (a photo or a PDF) are kept in a private file store belonging to that book and are not publicly accessible. The system does not open, read or convert what is inside the file, and does not send the file to the nursing team or to any outside provider for review. Only you and the caregivers you invited to that book can open it, through a temporary link that expires within 10 minutes.
• What you enter in service forms: your name, how to contact you, your area, times that suit you, the details of your request and any message to the nursing team.
• Aggregate visit statistics (pages opened, country, device type and where the link came from) through our hosting provider's visitor counter, which uses no cookies, does not store your IP address, and is not linked to your LINE account.

3. Purposes and legal bases

• To make the account, the features and the services you ask for work — LINE Login, Baby Passport, appointments and contacting you back — relying on the necessity of carrying out your request or providing the service to you.
• To keep the service secure, check permissions and prevent spam, relying on the legitimate interests of DekNurse and of its users, used only as far as necessary and never overriding the rights of the data subject.
• Health, development, vaccine and other sensitive information you choose to put in Baby Passport is only enabled and synced after a parent or caregiver has given explicit consent on that device.
• To comply with legal obligations, resolve disputes, or establish and defend legal claims where necessary.

4. Cookies and what is stored on your device

• The website uses five essential cookies: the session, the security of LINE Login, the page to return to after signing in, the sign-in round trip for the DekNurse app, and which book a caregiver is currently viewing. There are no advertising cookies and no cross-site tracking cookies.
• localStorage holds display settings, saved items, a record of consent given on that device, and the local-first book data before it syncs to your account. sessionStorage stops automatic sign-in from looping within a single tab.
• The name, purpose and lifetime of each cookie are in the cookie policy linked above and at the end of the menu.

5. Forms and previously published content

• Service request forms, Baby Mall requests, class registrations and questions to a nurse are recorded for the team to read, so they can reply and act on the request.
• Questions and answers from DekNurse AI are recorded so the team can check afterwards what the system said, for user safety. What is kept is: the question you typed, the answer the system generated, the outcome of that exchange, the reason if an answer was withheld, the danger signs the system detected in the question, which AI system answered (the main one or the fallback), and the LINE account of the person asking. We do not keep IP addresses, device details or previous conversation history. Please do not put more sensitive information than necessary in the question box.
• Please do not put more sensitive information than necessary — such as a national ID number, a full address, or detailed medical history — in free-text boxes.
• The Community page has been removed from the website. Messages posted before that (if any) may remain in the system for safety purposes or to carry out deletion requests, but they are no longer reachable through the website.
• If you choose to send a question on to LINE, the message is opened in the chat box and you send it yourself. The conversation after that is also governed by LINE's policy.

6. Service providers and data transfers

• LINE provides identity verification and the chat channel, so it receives what the LINE Login process needs and the messages you choose to send through LINE.
• Our website hosting and request-processing provider, and our database provider, are where DekNurse stores accounts, Baby Passport, any messages that remain, and service requests.
• The DekNurse AI feature (for members signed in with LINE) sends the question you typed to a provider outside Thailand to generate the answer. Normally it goes to the primary AI model provider; only if that provider is down, out of quota or otherwise unavailable does the system send the same question to a fallback provider instead, so a question can still be answered. One question goes to one provider only — never to both at once. A question may contain health information about your baby, so this counts as sending data outside DekNurse's systems to a provider abroad. DekNurse sends only the text of that one question — not your name, your LINE account, your phone number or anything from Baby Passport — and it does not send previous conversation history. If you would rather nothing left our systems, use the LINE chat with the nursing team instead.
• The servers that handle requests for this website and the main database are located in Singapore. Questions sent to the automated answering system are processed by the overseas providers described above, which may be in a different country.
• A provider's infrastructure may process data outside Thailand as that provider determines. DekNurse sends only what that service needs to do its job.
• Every payment on this site — gifts, nursing service deposits and membership — is handled by Stripe, a payment provider. You enter your payment details on Stripe's own page; card details never pass through, and are never stored by, DekNurse's systems. DekNurse receives back only whether the payment succeeded, the transaction reference and the method used, so that we can issue your Voucher, open your membership benefits, record your deposit and answer questions about your order. Stripe may process payment data outside Thailand as part of its own infrastructure, and using it is also subject to Stripe's own policies.
• We do not sell data, do not exchange data for marketing, and do not use your baby's health records for advertising.

7. How long we keep things

• Temporary LINE Login cookies are kept for no more than 10 minutes, and the session cookie and the currently open book cookie for no more than 7 days. The detail is in the cookie policy.
• Account data and Baby Passport are kept for as long as the account is in use, or until you ask us to delete them, so that you can open the same book from another device.
• Service requests and any messages that remain are kept as long as needed to reply, carry out the service, maintain safety, and establish or defend legal claims.
• DekNurse AI question-and-answer records are kept as long as needed to check the safety of the answers, and can be deleted on request.
• Uploaded vaccine certificate files are kept until you delete them, which you can do at any time from the vaccine tab in the app. The book owner can delete them; caregivers who were invited can upload but cannot delete.
• There is not yet a delete-account button or automatic time-based deletion. You can contact the team to request deletion, and the team will check any legal constraints before acting.

8. Your rights and asking for deletion

Subject to the conditions in law, you may exercise the following rights over your data.

• Ask for access and a copy, ask for your data to be transferred where the conditions are met, ask for corrections, ask for erasure or anonymisation, and ask for use of your data to be restricted.
• Object to processing based on legitimate interests, withdraw consent without affecting processing before the withdrawal, and complain to the Personal Data Protection Committee Office.
• Baby Passport entries can be edited or deleted item by item from the book, and you can download a summary or a CSV from the daily log page.
• For a copy of your whole account, deletion of your whole account, or any other right, write to hello@deknurse.com or contact the LINE Official Account. The team verifies who is asking before acting.

9. Security and data breaches

• Authentication cookies are set HttpOnly, Secure in production, and SameSite=Lax. The Baby Passport database is reached through an API that checks the session and the permissions on the server.
• DekNurse limits what it sends each provider to what that provider's job requires, and applies technical and procedural measures appropriate to the risk.
• If a data breach happens, the team assesses the impact, records it, fixes it, and notifies the authority or the data subjects where the law requires it.

10. What we do not do

• We do not sell data, do not exchange data with anyone for marketing, and do not use your baby's health records for advertising.
• There are no advertising pixels, no cross-site tracking scripts and no analytics tools that identify individuals. There is only our hosting provider's aggregate, cookie-free visitor counter (see section 2).
• We do not use your data for automated decisions that have a legal effect on you, and automated answers on the website are not a medical diagnosis.

To exercise any of these rights, contact the LINE Official Account @deknurse.