Privacy Policy

BabyApps (“we”, “our”, or “us”) is committed to protecting the privacy of parents and caregivers who use BabyTrack+, including our iOS and Android app, our Apple Watch companion app, our Home Screen and Lock Screen widgets, our Siri Shortcuts integration, and our website at babytrack.plus (collectively, the “Service”). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices and rights you have.

The data controller responsible for your personal data is:

BabyApps, operated by Dimitrios Kyriakakis
Von-Graffen-Str. 7
20537 Hamburg, Germany

We are not required to, and have not, appointed a Data Protection Officer. For any privacy question or request, contact us through our support form.

BabyTrack+ is designed to work offline and to keep your data on your device by default.

• Free tier: if you track a single baby on your own, your tracking entries are stored locally on your device and are never uploaded to our servers. We have no access to this data.
• Plus tier: if you upgrade to Plus to share a board with a co-parent or other caregiver, or to track multiple babies, your entries are synced to our cloud database (hosted with Supabase) so everyone you invite sees the same up-to-date record. This is the only case in which your tracking entries leave your device.

Regardless of tier, limited anonymised crash diagnostics (see Section 4.2) may be sent automatically to help us keep the app reliable.

4.1 Information you provide

• Account details (email address, display name) — Plus only
• Baby profiles (name, date of birth, sex)
• Tracking entries (feeding, sleep, diaper, and growth records — weight, length, and head circumference)
• Invite tokens used to share a board with a co-parent or caregiver
• Messages you send us through our support form

4.2 Information collected automatically

• Device type, operating system version, and app version
• Crash and error diagnostics
• Anonymous feature-usage data
• IP address (used solely for security and abuse prevention)

4.3 Logging from Apple Watch, Siri, and widgets

Logging an entry from the Apple Watch app, a Siri Shortcut, or a Home Screen widget creates the same type of tracking entry described above — it does not create any additional category of data. Voice input to Siri is processed by Apple under Apple's own privacy terms before BabyTrack+ receives the resulting logged entry; we do not receive or store your voice recordings.

4.4 Subscription information

If you upgrade to Plus, our subscription-management provider (RevenueCat) shares with us your purchase and subscription status (e.g., active, trial, expired) and a purchase identifier. We do not receive or store your payment card details — purchases are processed entirely by Apple or Google.

We use your information for the following purposes, on the following legal bases under Article 6 of the GDPR:

• Providing the Service (storing your entries, syncing Plus data, enabling co-parent sharing) — performance of our contract with you.
• Operating Plus subscriptions and billing — performance of our contract with you.
• Sending transactional notifications (e.g., an invite was accepted, a push notification for a shared board) — performance of our contract with you.
• Maintaining and improving the Service, including crash reporting and diagnostics — our legitimate interest in keeping the Service reliable and secure.
• Detecting and preventing fraud or abuse — our legitimate interest, balanced against your rights.
• Complying with legal obligations (e.g., billing records for Plus purchases) — necessary for legal compliance.

Where we process growth, feeding, sleep, or diaper data about your baby (see Section 10), we rely on your explicit consent, given by entering that data as the baby's parent or legal guardian.

We do not sell your personal data, and we do not use your or your baby's data for advertising. Growth-chart comparisons and insights shown in the app are plain, deterministic calculations against WHO reference data — we do not use automated decision-making that produces legal or similarly significant effects on you or your baby.

We share data only in the following circumstances:

• Family sharing: data you enter on a Plus board is visible to any co-parent or caregiver you explicitly invite to that board.
• Service providers (processors): we use the following providers to operate the Service, each under a data-processing agreement:
  • Supabase — Plus account authentication and cloud data storage/sync
  • Expo — delivery of push notifications
  • Sentry — crash and error reporting
  • RevenueCat — subscription and purchase management
  • Apple / Google — processing of in-app purchases and payment
• Legal requirements: we may disclose information where required by law, or to protect the rights, safety, or property of BabyApps, our users, or others.

Some of our service providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, or providers offering an EU/EEA hosting region. You can request further details about these safeguards through our support form.

We retain your data for as long as your account is active. You may delete your account at any time from within the app, which will permanently erase your Plus cloud data within 30 days. Free-tier data stored only on your device is removed immediately when you delete the app.

We may retain limited records for longer where required by law — for example, billing records connected to Plus purchases, kept for the period required by German tax law (currently up to 10 years). Backup copies of deleted data may also persist briefly in our providers' backup systems before being purged.

We use industry-standard encryption (TLS in transit, AES-256 at rest) and access controls to protect your data. No system is perfectly secure; please use a strong, unique password and enable two-factor authentication where available.

The Service is intended for use by adults — parents, legal guardians, and caregivers acting with a parent's or guardian's permission. We do not knowingly allow children to create an account; the minimum age to use the Service is 16, or the minimum age of digital consent in your country of residence if lower.

Separately, the Service necessarily processes personal data about your baby — including their name, date of birth, sex, and feeding, sleep, diaper, and growth records. Growth measurements in particular can be considered health-related data under Article 9 of the GDPR. Your baby does not create an account or interact with the Service directly; you, as the parent or legal guardian, enter this data and are responsible for having the authority to do so and for giving explicit consent to its processing on your baby's behalf. You may withdraw this consent at any time by deleting the relevant records or your account.

If you are located in the EEA, UK, or a jurisdiction with similar protections, you have the right to:

• Access the personal data we hold about you and your baby
• Correct inaccurate or incomplete data
• Export your data in a portable format
• Delete your data (“right to be forgotten”)
• Restrict or object to certain processing
• Withdraw consent at any time, without affecting processing carried out before withdrawal
• Lodge a complaint with a data protection supervisory authority — in Germany, the Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (HmbBfDI), or the supervisory authority in your own EU member state

To exercise any of these rights, contact us through our support form. Export, deletion, and correction can also be done directly within the app.

The babytrack.plus website does not use advertising or analytics cookies and does not track visitors across other websites. We only use strictly necessary session data, if any, required for the site to function, such as remembering your selected language. The BabyTrack+ app does not use advertising identifiers or third-party advertising SDKs.

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or by email. Your continued use of the Service after changes take effect constitutes your acceptance of the updated policy.

If you have any questions, send us a message through our support form.