Privacy Policy

Last updated: February 17, 2026

1. Data We Collect

We collect only what is needed to provide the service:

Account data — email address, display name
Child profiles — name, date of birth, gender (stored encrypted at rest)
Tracking data — feeding, sleep, diaper, and health logs you create
Memory content — text entries, photos, milestones
Payment data — processed securely by Stripe; we never store card numbers
Device info — platform (iOS/Android/web), app version, for crash reporting

2. How We Use Your Data

To provide the core tracking and memory features
To generate AI-powered stories and guidance (text only, sent to OpenAI)
To produce printed memory books when you order them
To process subscription payments via Stripe
To send essential account notifications (e.g., password reset)

3. AI Processing

When you use AI features (chat, story generation), relevant context from your entries is sent to our AI provider (OpenAI) for processing. This data is not used to train AI models and is subject to OpenAI's data processing terms.

4. Data Storage & Security

Your data is stored in Supabase (hosted on AWS) with encryption at rest and in transit. Photos are stored in secure cloud storage with access-controlled URLs. Row-level security ensures you can only access your own data.

5. Third-Party Services

Supabase — database and authentication
Stripe — payment processing
OpenAI — AI content generation
Lulu — book printing and fulfillment

6. Data Sharing

We do not sell your data. We share data only with the third-party services listed above, and only as needed to provide the service. We may disclose data if required by law.

7. Your Rights

You have the right to:

Access your personal data
Export your data (available in Settings)
Request deletion of your account and all associated data
Withdraw consent for AI processing at any time

8. Children's Privacy

The App stores data about children as provided by their parent or legal guardian. We do not knowingly collect data directly from children. All child data is fully controlled by the parent account holder.

9. Data Retention

We retain your data for as long as your account is active. When you delete your account, all associated data (profiles, logs, photos, memories) is permanently deleted within 30 days.

10. Cookies

We use essential cookies/local storage only for authentication and session management. We do not use advertising or tracking cookies.

11. Contact

For privacy questions or data requests, contact us at privacy@babybabyapp.com