Privacy Policy

Who we are

This Privacy Policy explains how Baby PRO ("we", "us") collects, uses, and protects personal data when you use our iOS app and related services (the "Service").

We are the data controller for the personal data described in this policy. You can contact us at hello@babyapp.pro.

Data we collect

We only collect data that is necessary to run the Service. Concretely, that is:

Account data

• A Sign in with Apple identifier, if you choose to sign in. Apple provides us a stable, relay-style email address by default.
• A pseudonymous device identifier for anonymous accounts that do not sign in.
• Authentication tokens (stored in iOS Keychain on your device; only short-lived refresh tokens reach our servers).

Baby and event data (provided by you)

• A name or nickname, date of birth, and sex (optional) for each baby profile you create.
• Events you log: sleeps, feedings, diapers, activities, medications, symptoms, weight and height measurements, and similar entries.
• Notes or comments you choose to attach to events.

Household data

• The email or identifier of co-parents or caregivers you invite to your household, so we can deliver the invitation and sync data.

Device and diagnostic data

• App version, iOS / Android version, device model (coarse), and anonymised crash diagnostics (on Android, sent only if you opt in from the app's Privacy settings).
• Request metadata (hashed IP address, timestamp) for rate-limiting and abuse detection, and — for visits to our website rather than the app — to count page views using a code derived from a daily-rotating key, as described under “Cookies and the website”.
• If you register a device for notifications: the device's display language, its time zone, and whether the operating system currently permits us to show you alerts. This is what lets a notification arrive in your language, at a reasonable local hour, and not be sent to a device that would discard it silently. A time zone identifies a broad region (for example “Europe/Berlin”), never a precise location.

We do not collect precise location, contacts, microphone audio, photos, or any health data from Apple Health.

How we use your data and our legal basis

Under the GDPR, we need a legal basis to process your personal data. We rely on the following bases:

• Performance of a contract (Art. 6(1)(b) GDPR) — to provide the core Service: storing your logs, running sleep predictions, syncing with caregivers, and managing your subscription.
• Legitimate interest (Art. 6(1)(f) GDPR) — to keep the Service secure, prevent abuse, debug crashes, and communicate service-critical messages. We balance these interests against your rights.
• Legal obligation (Art. 6(1)(c) GDPR) — to respond to lawful requests and to keep required records (for example, tax records related to subscription payments).
• Consent (Art. 6(1)(a) GDPR) — for anything that requires your explicit opt-in (for example, push notifications at the OS level).

We do not make automated decisions about you that have a legal or similarly significant effect. We never use your account or in-app data to profile you or to show you personalised ads. To see whether our own ads work, we only learn anonymous signals — for example, whether someone who saw an ad went on to subscribe — never who they are. The only advertising use of personal data — building a retargeting audience from website and ad-link visits — never touches your account; it is described in full under “Third parties and subprocessors” below.

Sharing a summary with a specialist

You can create a read-only web link (a "share link") that lets a person you choose — for example a paediatrician, lactation consultant, or sleep specialist — view a summary of your baby's logged data in their browser, without an account or the app.

This is a disclosure you initiate. A baby's sleep, feeding, diaper, growth and similar entries are special-category health data, and — when you choose to include your baby's name (see below) — that name, paired with this health data, directly identifies your child. We only disclose any of it through a share link because you explicitly ask us to, and our legal basis is your explicit consent under Art. 9(2)(a) GDPR (with Art. 6(1)(a) for the underlying processing). You give that consent in the app by generating the link, on a screen that shows you exactly what the page will include before you create it; we record the version of the consent text you accepted (currently share-consent-2026-06-r2).

What the link exposes is what you choose. You pick the date range and the categories; the page shows your baby's derived age and only the profile fields you opt into. Those optional fields can include your baby's name: when you leave it selected, the name appears as the heading of the shared page so the specialist can tell whose summary they are looking at; when you turn it off, no name is shown — older links created before this option, and any link where you deselect the name, never display it. Notes are included only if you turn them on. The specialist sees this exact, minimized scope and nothing else; the link is per-baby, so other children are never exposed.

Protections. Each link is guarded by a high-entropy token in the URL and, optionally, a 6-digit code you share separately. Links expire (you choose 1, 7, or 30 days, 7 by default) and you can revoke any link instantly from the app. We do not index these pages (noindex, no caching) and serve no third-party scripts.

Minimized view telemetry. So you can tell whether a link was opened, we record only a coarse "last viewed" timestamp and an "opened" flag per link. We do not log a per-request access trail, raw IP address, user-agent, device fingerprint, or location for views, and automated link-preview crawlers (e.g. when the URL is pasted into a chat) are excluded from this signal so they never show as a real view.

You can withdraw your consent at any time by revoking the link; revocation takes effect immediately, and deleting the baby or your account revokes all of its links automatically.

Third parties and subprocessors

We use a small number of service providers that process personal data on our behalf, under a data-processing agreement:

• Apple Inc. — Sign in with Apple, App Store / StoreKit billing, APNs push delivery. Apple's Privacy Policy applies to data Apple processes.
• DigitalOcean, LLC. — cloud hosting for our backend servers and database, in the European Union region.
• Google LLC — on the Android app: Sign in with Google, Google Play billing for purchases and subscriptions, and Firebase Cloud Messaging push delivery. Google's Privacy Policy applies to data Google processes.
• Functional Software, Inc. (Sentry) — anonymised crash diagnostics for the Android app, collected only if you opt in from the app's Privacy settings. Sentry's Privacy Policy applies.

Advertising: Meta. Separately from the processors above, we send Meta Platforms, Inc. a small set of visit data — the page or app-store link you visited, your IP address, your browser's User-Agent and, if you followed one of our ads, Meta's own click identifier — so we can build a retargeting audience of past visitors and ad-clickers for future campaigns. This is a server-to-server transfer, not a tracking pixel in your browser, and it never carries your name, email, or anything from inside the app. Our legal basis is our legitimate interest in measuring and improving our advertising (Art. 6(1)(f) GDPR). Visiting from an ad also sets a first-party cookie holding that click identifier for up to 60 days, used only for this purpose — a separate, unrelated cookie remembers an offer code you've been assigned, so the redemption flow keeps working if you leave and come back. Sending a Global Privacy Control or Do Not Track signal stops both the cookie and the transfer to Meta. Meta's own Privacy Policy applies to how it further processes this data.

Advertising measurement in the app: Apple. When you install the app from an ad, Apple's SKAdNetwork tells the ad network, anonymously and without any identifier of yours, how far the install got: the app opened, a baby added, a trial started or a purchase made. Nothing passes through our servers, and the network never learns who you are.

Outside of this, we do not share personal data with advertisers, data brokers, or other social networks.

How long we keep your data

• Account and baby/event data — kept while your account is active. After account deletion, we erase it within 72 hours.
• Backups — encrypted backups are purged on a 30-day rolling schedule, after which deleted data is gone from them too.
• Diagnostic and sync logs — auto-purged after 30 days.
• Billing records — we keep the minimum records required by tax law (typically 10 years in the EU).

Delete your account

You can delete your account and all data associated with it directly from the app — no email or support request needed:

• Open Settings in the app (iOS or Android).
• Tap Delete account and confirm.

What happens next: your account and all of your baby and event data are erased from our servers within 72 hours. Encrypted backups are purged on a 30-day rolling schedule, after which the deleted data is gone from them too — see How long we keep your data for the full retention detail (the only exception is the minimum billing records tax law requires us to keep). Data you shared with other members of your household stays with them: deleting your account removes you and your data, not their copies of what was shared into the household.

If you no longer have access to the app (lost device, uninstalled), you can request deletion by emailing privacy@babyapp.pro. No sign-in is required to make the request; we will verify that you control the account and complete the deletion on the same timeline.

Your rights

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights under the GDPR:

• Access — request a copy of your personal data (Art. 15).
• Rectification — correct inaccurate data (Art. 16).
• Erasure — delete your data (Art. 17). You can trigger this directly from the app.
• Portability — receive your data in a structured, machine-readable format (Art. 20). The app exports your full history as JSON.
• Restriction and objection — limit or object to certain processing (Art. 18, 21).
• Withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting prior processing.
• Lodge a complaint — with your local data-protection authority. In Romania, this is ANSPDCP.

To exercise any of these rights, email hello@babyapp.pro. We will respond within 30 days (and usually much sooner).

International data transfers

Our servers and database are hosted in the European Union. Some of our subprocessors (for example, Apple) may transfer data to the United States. Where that happens, transfers rely on appropriate safeguards, typically the European Commission's Standard Contractual Clauses and, for Apple, the EU–US Data Privacy Framework.

Security

We protect your data using industry-standard measures: HTTPS in transit, encrypted backups at rest, short-lived JWTs, strict role-based access for our team, and minimum necessary data retention. Events created in the app live on your device first; sync is scoped to the caregivers in your household.

No system is perfectly secure. If we ever become aware of a personal-data breach that is likely to affect your rights, we will notify you and the relevant supervisory authority within the timeframes required by law.

Children and babies

The Service is designed for adults (parents and caregivers) to log information about an infant in their care. The account holder is the data subject we primarily deal with. Information about a baby (name, date of birth, events) is provided by the parent or caregiver and we treat it as personal data handled under the account holder's control.

You must be at least 18 years old to use the Service. If you believe a child under 18 has created an account, contact us at hello@babyapp.pro and we will delete it.

Cookies and the website

This website (babyapp.pro) sets no tracking or advertising cookies, runs no third-party analytics, and loads no JavaScript that reports on you. We do count page views, and here is exactly how.

When a page is served, our own server records which page it was, which language version, and the website you arrived from (the site's domain only — never the address or search terms within it). To tell one visitor from two, we combine your IP address and browser User-Agent with a secret key that changes every day, keep only the resulting short code, and discard the IP address and User-Agent immediately. We never store them. Yesterday's keys are deleted, so after two days that code cannot be traced back to an IP address by anyone, including us. The raw records are deleted after 14 days; what remains is day-by-day totals with no identifier of any kind in them.

There is no cookie involved, nothing is stored in your browser, and this is never linked to a Baby PRO account — we cannot tell whether a visitor is a customer. We do it to see which pages are worth expanding, on the basis of our legitimate interest in understanding how our own site is used (Art. 6(1)(f) GDPR).

If you would rather not be counted, send a Global Privacy Control or Do Not Track signal — most browsers and privacy extensions can, usually under a “do not sell or share my data” setting. We check for it on every page and record nothing at all when it is present. You can also object by writing to us (see Your rights).

The only strictly-necessary cookie we ever set is on a code-protected share link: after you enter the correct access code, we store a short-lived, HttpOnly + Secure token (not the code itself) so the page stays unlocked while you read it. It carries no identifier, is scoped to that one link, and expires shortly. No consent banner is required for a strictly-necessary cookie.

Two more first-party cookies exist only on our ad-campaign landing pages (/c/<slug>): one remembers an offer code allocated to you, so it keeps working if you leave and come back; the other supports the Meta advertising measurement described under “Third parties and subprocessors”. Neither is set anywhere else on the site or in the app.

Changes to this policy

We may update this Privacy Policy from time to time. If we make a material change, we will notify you in the app and, where applicable, by email at least 14 days before the change takes effect. Non-material changes (for example, clarifications) may take effect immediately.

Contact

Questions, requests, or concerns about this policy or your data? Email hello@babyapp.pro.