Privacy Policy

DK Digital Studios (“we”, “our”, or “us”) is committed to protecting the privacy of parents and caregivers who use BabyTrack+, including our iOS and Android app, our Apple Watch companion app, our Home Screen and Lock Screen widgets, our Siri Shortcuts integration, and our website at babytrack.plus (collectively, the “Service”). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices and rights you have.

The data controller responsible for your personal data is:

DK Digital Studios (Dimitrios Kyriakakis)
Von-Graffen-Str. 7
20537 Hamburg, Germany

We are not required to, and have not, appointed a Data Protection Officer. For any privacy question or request, contact us through our support form.

BabyTrack+ is designed to work offline and to keep your data on your device by default.

• Free tier: if you track a single baby on your own, your tracking entries are stored locally on your device and are never uploaded to our servers. We have no access to this data.
• Plus tier: if you upgrade to Plus to back up your entries, share a board with a co-parent or other caregiver, or track multiple babies, your entries are synced to our cloud database (hosted with Supabase) so everyone you invite sees the same up-to-date record. This is the only case in which your tracking entries leave your device.

Regardless of tier, limited anonymised crash diagnostics (see Section 4.2) may be sent automatically to help us keep the app reliable.

4.1 Information you provide

• Account details (email address, display name), Plus only
• Baby profiles (name, date of birth, sex)
• Tracking entries (feeding, pumping, solids and reactions, sleep, diaper, and growth records such as weight, length, and head circumference, plus any notes you add)
• Invite tokens used to share a board with a co-parent or caregiver
• Messages you send us through our support form

4.2 Information collected automatically

• Device type, operating system version, and app version
• Crash and error diagnostics
• Anonymous feature-usage data
• IP address (used solely for security and abuse prevention)

4.3 Logging from Apple Watch, Siri, and widgets

Logging an entry from the Apple Watch app, a Siri Shortcut, or a Home Screen widget creates the same type of tracking entry described above. It does not create any additional category of data. Voice input to Siri is processed by Apple under Apple's own privacy terms before BabyTrack+ receives the resulting logged entry; we do not receive or store your voice recordings.

4.4 Subscription information

If you upgrade to Plus, our subscription-management provider (RevenueCat) shares with us your purchase and subscription status (e.g., active, trial, expired) and a purchase identifier. We do not receive or store your payment card details. Purchases are processed entirely by Apple or Google.

We use your information for the following purposes, on the following legal bases under Article 6 of the GDPR:

• Providing the Service (storing your entries, syncing Plus data, enabling co-parent sharing): performance of our contract with you.
• Operating Plus subscriptions and billing: performance of our contract with you.
• Sending transactional notifications (e.g., an invite was accepted, a push notification for a shared board): performance of our contract with you.
• Maintaining and improving the Service, including crash reporting and diagnostics: our legitimate interest in keeping the Service reliable and secure.
• Understanding how the app is used (anonymous usage analytics, see Section 12): our legitimate interest in learning which features help parents, so we can improve the Service.
• Detecting and preventing fraud or abuse: our legitimate interest, balanced against your rights.
• Complying with legal obligations (e.g., billing records for Plus purchases): necessary for legal compliance.

Where we process growth, feeding, sleep, or diaper data about your baby (see Section 10), we rely on your explicit consent, given by entering that data as the baby's parent or legal guardian.

We do not sell your personal data, and we do not use your or your baby's data for advertising. Growth-chart comparisons and insights shown in the app are plain, deterministic calculations against WHO reference data. We do not use automated decision-making that produces legal or similarly significant effects on you or your baby.

We share data only in the following circumstances:

• Family sharing: data you enter on a Plus board is visible to any co-parent or caregiver you explicitly invite to that board.
• Service providers (processors): we use the following providers to operate the Service, each under a data-processing agreement:
  • Supabase: Plus account authentication and cloud data storage/sync
  • Expo: delivery of push notifications
  • Sentry: crash and error reporting
  • PostHog: website analytics on babytrack.plus, only with your consent, and anonymous usage analytics in the app (see Section 12)
  • RevenueCat: subscription and purchase management
  • Apple / Google: processing of in-app purchases and payment
• Legal requirements: we may disclose information where required by law, or to protect the rights, safety, or property of DK Digital Studios, our users, or others.

Some of our service providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, or providers offering an EU/EEA hosting region. You can request further details about these safeguards through our support form.

We retain your data for as long as your account is active. You may delete your account at any time from within the app, which will permanently erase your Plus cloud data within 30 days. Free-tier data stored only on your device is removed immediately when you delete the app.

We may retain limited records for longer where required by law, for example billing records connected to Plus purchases, kept for the period required by German tax law (currently up to 10 years). Backup copies of deleted data may also persist briefly in our providers' backup systems before being purged.

We use industry-standard encryption (TLS in transit, AES-256 at rest) and access controls to protect your data. No system is perfectly secure; please use a strong, unique password and enable two-factor authentication where available.

The Service is intended for use by adults: parents, legal guardians, and caregivers acting with a parent's or guardian's permission. We do not knowingly allow children to create an account; the minimum age to use the Service is 16, or the minimum age of digital consent in your country of residence if lower.

Separately, the Service necessarily processes personal data about your baby, including their name, date of birth, sex, and feeding, sleep, diaper, and growth records. Growth measurements in particular can be considered health-related data under Article 9 of the GDPR. Your baby does not create an account or interact with the Service directly; you, as the parent or legal guardian, enter this data and are responsible for having the authority to do so and for giving explicit consent to its processing on your baby's behalf. You may withdraw this consent at any time by deleting the relevant records or your account.

If you are located in the EEA, UK, or a jurisdiction with similar protections, you have the right to:

• Access the personal data we hold about you and your baby
• Correct inaccurate or incomplete data
• Export your data in a portable format
• Delete your data (“right to be forgotten”)
• Restrict or object to certain processing
• Withdraw consent at any time, without affecting processing carried out before withdrawal
• Lodge a complaint with a data protection supervisory authority. In Germany this is the Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (HmbBfDI), or the supervisory authority in your own EU member state

To exercise any of these rights, contact us through our support form. Deletion and correction can also be done directly in the app. Plus subscribers can export their data as a CSV file from the app's settings; anyone else can request an export through the support form.

The babytrack.plus website does not use advertising cookies and does not track visitors across other websites. Without your consent we only use strictly necessary data required for the site to function, such as your cookie choice, which is saved in your browser's local storage.

If you choose Accept in the cookie notice, we use PostHog to measure how the website is used: the pages you view, the site you came from, your language, and clicks on the App Store and Google Play buttons. For this, PostHog stores a cookie and a local-storage entry in your browser to recognise repeat visits, and processes your IP address and basic browser and device details. The data is stored on PostHog's EU servers in Frankfurt, Germany. We do not record sessions or form input, and website analytics are never linked to the data you enter in the app.

The legal basis is your consent (Article 6(1)(a) of the GDPR). You can withdraw it at any time under Cookie settings in the website footer, which also deletes the analytics cookie from your browser. If you choose Essential only, PostHog is not loaded at all.

In the app. The BabyTrack+ app sends anonymous usage data to PostHog: which screens are opened, which kind of entry is logged (for example a bottle or a solids meal, and whether it came from the phone or the Apple Watch), when the Plus screen is shown and whether a purchase completes, plus the app version, device model, operating system, and language. It never includes your baby's name, date of birth, amounts, notes, foods, or any account or entry identifier.

The app stores nothing on your device for this. Each time it starts, it uses a new random identifier held only in memory, so app sessions cannot be linked to each other, to you, or to your visits to the website. PostHog processes your IP address to derive an approximate location. The data is stored on PostHog's EU servers in Frankfurt, Germany.

The legal basis is our legitimate interest in understanding which features are used so we can improve the app (Article 6(1)(f) of the GDPR). You can turn it off at any time under Settings → Share anonymous usage data; from then on, nothing is sent from that device.

The BabyTrack+ app does not use advertising identifiers or third-party advertising SDKs.

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or by email. Your continued use of the Service after changes take effect constitutes your acceptance of the updated policy.

If you have any questions, send us a message through our support form.