My Little BabyPrivacy Policy: My Little Baby
Plain-English summary
My Little Baby keeps everything on your device by default. You do not need an account to use the app. There is no analytics, no advertising, and no third-party SDK reading your data.
If you choose to, you can create an optional account (just an email address, no password) to back up your baby's data to the cloud and share it with a second parent. This is entirely opt-in. If you never sign in, nothing about your baby ever leaves your device, exactly as before. If you delete the app without signing in, your data is gone for good; use the export feature in Settings to back up before changing devices if you haven't signed in.
What we collect
| Category | Collected? | Notes |
|---|---|---|
| Email address | Only if you choose to sign in | Used solely to send you a magic sign-in link and to identify which baby/babies you're allowed to see. Never shared, never used for marketing. |
| Baby's name and birth date | On-device always; also in the cloud if you're signed in | Used to calculate weeks-old -> stage. Only transmitted if you sign in. The cloud's family record itself is labelled "My baby"; the name travels only inside your baby's own protected data. |
| Activity logs (sleep, feed, nappy/diaper, bath, tummy time, mood, milestones) | On-device always; also in the cloud if you're signed in | Only transmitted if you sign in. |
| Photos | None | The app does not access your camera or photo library. |
| Location | None | The app does not request location permission. |
| Device identifiers / advertising IDs | None | We don't read or use any. |
| Cookies | None | The app uses localStorage (on-device) and, only if you sign in, a Supabase session token to keep you signed in. |
If you sign in: what goes to the cloud and why
My Little Baby uses Supabase (a database hosting provider) to store your backed-up data. When you sign in with your email:
- Your baby's profile (name, birth date) and every logged sleep, feed, nappy, bath, tummy time, mood and milestone entry is copied to a database row that only you (and anyone you've specifically invited as a second parent for that baby) can read or write. This is enforced by the database itself (row level security), not just by the app's own code.
- If you invite a second parent by email, that person's email address is stored so the database knows to let them in once they sign in with it. Only the parent who set up the family can invite. An invite works only for that exact email address, only after that person confirms it by tapping the link we email them, and only for 14 days. You can see everyone who has access, cancel an invite or remove a parent at any time under Settings -> Cloud Backup -> Who can see this baby.
- Your data is stored in Australia (Sydney).
- What is backed up: the baby's profile and theme, every log (including the garden's play ideas), milestone answers, badges and the dates they were earned, points, and the garden. Your own settings (Morning High Fives, sounds and quiet hours, light or dark, language) are backed up under your own account so a new phone gets them back; the other parent never sees them.
- Before anything is backed up or shared for the first time, the app shows a consent screen that names what is sent, why, where it is kept and how to stop or delete. Nothing leaves your phone until you agree, and the app records the date you agreed. Settings -> Stop backing up withdraws your agreement at any time: nothing more is sent and you are signed out.
- When you edit or delete a log, the change is shared with the other parent's phone too, so a deleted entry does not come back. For older entries we keep only a short fingerprint of a deleted entry (not its contents) so both phones know it was deleted.
- Nothing is ever shared with, sold to, or read by anyone outside the two (or more) parents you've explicitly invited to a baby's data. We do not look at your data either.
- If your device is offline, the app keeps working exactly as it does without an account; the data syncs to the cloud automatically the next time you're online and signed in.
How to delete your cloud data
Open Settings -> Delete my account and data while signed in. This:
- For each baby you set up: if another parent has joined it (accepted your invite), the baby and all of its records pass to that parent, who becomes its owner. Nothing of the baby's record is lost for the family.
- A baby you set up that nobody else has joined (only an invite still waiting, or nobody at all) is permanently deleted from the cloud with all of its logs. The app tells you all of this before you confirm.
- Removes you from any baby another parent invited you to (without deleting that other parent's data; only your own access to it is removed).
- Deletes your account itself from our authentication system.
This action cannot be undone and the app will ask you to confirm before doing it. Deleting your cloud account does not delete anything stored locally on your own device; use the normal "Reset" option in Settings for that separately, if you want both.
If you'd rather not use the in-app option, email us (see Contact below) and we will delete your account and all associated baby data within 30 days.
Sharing with someone outside the app
The Share buttons (for example on the calendar) hand a plain-text summary to your phone's own share menu, so you choose who receives it (WhatsApp, Messages, email and so on). The app itself sends nothing; what you share is then handled by the app you chose to send it with.
Permissions we request
- None beyond what the OS requires to run a standalone app, and (only if you choose to sign in) network access to reach Supabase.
- We do not request: camera, microphone, contacts, location, photos, calendar, notifications, device advertising IDs.
Data retention & deletion
- Data you never sync lives only in your device's app storage. The app's "Reset" button (Settings -> Reset) erases everything on-device irreversibly after a typed confirmation.
- Uninstalling the app deletes all locally stored data. If you were signed in, your cloud backup is not affected by uninstalling; use "Delete my account and data" first if you also want the cloud copy gone.
Children's privacy
This app is for parents and caregivers tracking their own baby's development. The logs (feeds, sleep, nappies, growth, milestones) are information about your child's health and development, and we treat them as sensitive: they are never used for anything except showing them to you and the parents you invite. We collect no personal information from children, and a baby's own name/date of birth is only ever provided and controlled by the parent using the app. No data about a child is ever used for advertising or sold to any third party.
Third parties
- Supabase (supabase.com) is used only if you choose to sign in, purely to store your backed-up data and manage sign-in. See https://supabase.com/privacy for their own policy.
- The app uses no advertising SDKs, no analytics SDKs, and no tracking of any kind.
Changes to this policy
If what we collect or how we store it ever changes, this policy will be updated before the change ships, and signed-in users will see an in-app notice.
Contact
Questions about this policy: [YOUR_EMAIL@example.com]
Replace the contact email above before this app reaches real users. Host this file at a public URL (app stores require a publicly reachable privacy policy URL on the store listing).