Privacy Policy

Last updated: May 25, 2026

Baby Track is built for parents, by parents. We understand that the data you track about your baby is deeply personal. This policy explains how we handle your information and why you can trust us with it.

How Baby Track works

Baby Track is a local-first application. All data you enter — feedings (breast, bottle, solids), sleep sessions, diaper changes, growth measurements, milestones, teeth, custom events, and reminders — is stored locally on your device in a SQLite database. No account is required and no data leaves your device unless you choose to enable cloud sync.

Cloud sync (optional)

If you choose to create a cloud account, your data is synced to our servers so it can be shared between parents, caretakers, or across your own devices. This is entirely optional.

When you enable cloud sync:

• Your baby's tracking data is uploaded to our secure servers
• You can create a household and invite other people (partner, grandparents, nanny) to view and contribute data
• Data stays in sync across all connected devices in real time
• Changes made by any household member are automatically pushed to all other members

Account and authentication

You can create an account using an email address and password, or sign in with Google. Your password is hashed before storage — we never store or have access to your plain-text password. If you sign in with Google, we receive your name, email, and Google account identifier. We do not access any other Google account data.

What data we collect

Without an account (offline use): We collect nothing. All data stays on your device.

With a cloud account, we store:

• Account information (email address, display name)
• Baby profiles (name, date of birth, gender)
• Tracking data: feedings (breast, bottle, solids with food reactions), sleep sessions, diaper changes, growth measurements (weight, height, head circumference, foot length), milestones, teeth emergence dates, custom events, and reminders
• Household membership (which accounts share data)
• Device push notification token (if notifications are enabled)

We do not collect analytics, usage patterns, advertising identifiers, location data, or any data beyond what is needed to provide the service.

Push notifications

Baby Track uses Firebase Cloud Messaging (FCM) to deliver data-only push messages that trigger background sync when another household member makes changes. We also use local notifications for reminders you configure within the app. We store your device's FCM token on our servers solely for delivering these sync messages. We do not use push notifications for marketing.

Third-party services

We use a minimal set of third-party services:

• Firebase Cloud Messaging: For delivering sync notifications between household members. Firebase Analytics and Ads are explicitly disabled in our configuration.
• RevenueCat: For managing in-app subscriptions and purchase verification. RevenueCat receives your anonymous app user ID and purchase receipts. RevenueCat's privacy policy.

We do not use any analytics SDKs, crash reporting services, advertising networks, or data brokers.

In-app purchases

Baby Track offers an optional Premium subscription (monthly, yearly, or lifetime) managed through the Apple App Store or Google Play Store. Payment processing is handled entirely by Apple or Google — we never see or store your payment details. RevenueCat is used to verify your subscription status across devices.

How we protect your data

We take security seriously and follow industry best practices:

• Encryption in transit: All connections between your device and our servers use TLS encryption
• Encryption at rest: Your data is encrypted in our database
• Secure authentication: Passwords are cryptographically hashed. Authentication uses JWT tokens with automatic refresh
• Secure infrastructure: Our servers and database are hosted on trusted cloud providers with regular security updates and monitoring
• Minimal access: Only essential systems can access stored data. We do not have employees browsing through your baby's information

We never sell your data

Let us be crystal clear: we do not sell, rent, trade, or share your personal data with any third parties for advertising, marketing, or any other commercial purpose. Your baby's feeding schedule is nobody's business but yours.

Data retention and deletion

Your data belongs to you. You can delete your cloud account directly from the app's settings, which permanently removes all associated data from our servers.

You can also request deletion of your account and all associated data by emailing info@babytrack.io from the email address linked to your account.

• What to include: "Delete account and all data" or "Delete specific data" and your account email
• What we delete: Account profile, household membership, and all cloud-synced baby tracking data linked to the account
• What may be retained: Limited records we are legally required to keep (if any), only for the required period

We process verified deletion requests within 30 days and confirm by email once completed.

If you only use Baby Track offline (without a cloud account), we have no data to retain because nothing ever leaves your device.

Children's privacy

Baby Track is designed for parents and caregivers to use on behalf of their children. We do not knowingly collect data directly from children. All data is entered by the parent or caregiver.

Changes to this policy

If we make changes to this policy, we will update the "Last updated" date at the top and notify users through the app. We will never change our stance on selling data.

Contact

If you have questions about this policy or your data, reach out to us at info@babytrack.io.