Privacy policy

What we collect

Account: a random account ID, the name you choose, and — only if you sign in to protect your journal — your email address or an anonymous Sign in with Apple identifier. Session tokens and sign-in codes are stored only as hashes.

Your journal: the baby details you enter (name or nickname, birth or due date, whether born early, feeding choices) and the entries you and your family log (feeds, nappies, sleep, solids, growth, health notes, moments, appointments, questions, to-dos and supplies), with who logged each one and when.

Family sharing: the families you belong to, each member's name and role, and invitation codes (which expire after 7 days).

Purchases: your subscription status, provided by Apple or Google through RevenueCat. We never see your card details.

Technical: server logs (IP address, time, request and error details) kept for security and troubleshooting for up to 30 days.

We do not collect location, contacts, photos, advertising identifiers or analytics. The app contains no advertising or tracking SDKs.

Health information

Entries about feeding, sleep, nappies, growth and health relate to your baby's health. We process them only to provide the journal to you and the people you invite, on the basis of your explicit consent (GDPR Art. 9(2)(a)), which you give when you create a journal and can withdraw by deleting it.

Ask (AI answers)

Ask uses OpenAI's API to write answers from our approved, sourced guidance. Your question is always sent. Only if you turn on “Ask with my records” do we also send your baby's age, feeding choices, recent log summaries and upcoming plan items. We never send your name, email or account identifiers. OpenAI processes this data as our processor, does not use it to train models, and we request zero retention (store: false). You can turn this off at any time in Settings.

Why we use your data

To provide the service you asked for (contract, GDPR Art. 6(1)(b)): syncing your journal between devices and family members, answering questions, managing invitations and subscriptions.

To keep the service secure and working (legitimate interest, Art. 6(1)(f)).

We never sell your data or use it for advertising.

Who processes it

Hetzner Online GmbH (Germany): hosting and database — your journal is stored in the EU.

OpenAI (USA): Ask answers, only when you use Ask; covered by EU Standard Contractual Clauses.

RevenueCat (USA): subscription status; covered by Standard Contractual Clauses.

Apple and Google: app distribution and payments, as independent controllers.

Our email provider: sending sign-in codes.

Retention

Your journal is kept while your account or family exists. When you delete your account, your account and every family you own (with all entries) are deleted from our active systems within 30 days; encrypted backups expire within 35 days. Ask conversations are not stored on our servers.

Your rights

You can access, correct, export (Settings → Export journal), and delete (Settings → Delete account, or babylifelog.com/delete-account) your data, object to processing, and withdraw consent. Email support@babylifelog.com for anything else; we reply within one month. You can complain to the Spanish data protection authority (AEPD, aepd.es) or the authority where you live.

Children

BabyLifeLog is for adults (18+). Information about a baby is entered by their parents or caregivers. We do not knowingly collect data from children.

Security

Data is encrypted in transit (TLS), the database is not reachable from the internet, and access is limited to what each family member's role allows. No system is perfectly secure; tell us at once if you suspect a problem.

Changes

We'll update this page and, for significant changes, tell you in the app.