BabyTracker

Privacy policy

Last updated: October 7, 2026

1. Introduction

BabyTracker ("we", "our", or "us") is operated by Fabian Bosler. We are committed to protecting the privacy of our users and their families. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the BabyTracker iOS application and related services.

2. Data we collect

Account information

  • Email address (used for authentication and account recovery)
  • Display name (optional)

Family & baby data

  • Family name
  • Baby name and date of birth
  • Activity logs: feedings (type, amount, duration), sleep (start/end times, location, quality), diaper changes (type, color, consistency), mood ratings, growth measurements (weight, height, head circumference)
  • Sick log (health data): body temperatures, symptoms, medicines given with dose and timing, and notes about an illness
  • Tags, milestones, and notes

Usage data

  • Device type and operating system version
  • Crash reports (anonymized)
  • Usage counts: which screens and features of the app you open, counted per month (for example "opened the sick log 4 times"), with the time each was last used. They are stored with your account in our own database, are not shared with anyone, and are deleted with your account. You can switch them off in Settings → Features & privacy.
  • Nap prediction accuracy: per child and month, how far the app's nap time predictions were off (numbers only, no sleep times), so we can make them better.

3. How we use your data

We use your data exclusively to:

  • Provide and maintain the BabyTracker service
  • Display activity logs, statistics, and insights
  • Enable family sharing so invited caregivers can view and log activities
  • Power AI-assisted insights based on your baby's data
  • Send account-related communications (password resets, security alerts)
  • See which features are used and which are not, so we can improve the app

4. Data storage & security

Your data is stored securely using Google Firebase (Cloud Firestore and Firebase Authentication). Our infrastructure is hosted in the EU (Belgium and the Netherlands) to comply with European data protection requirements. Data is encrypted in transit (TLS) and at rest.

We implement industry-standard security measures including:

  • Firestore security rules restricting data access to authenticated family members only
  • Secure authentication via Firebase Auth
  • No storage of passwords in plain text

5. Data sharing

We do not sell, trade, or rent your personal data to third parties.

We may share data only with:

  • Family members you invite — caregivers you add to your family group can view and contribute to your baby's activity data
  • Service providers — Google (Firebase for hosting and authentication) and Apple (App Store services). These process data solely to operate the app.
  • OpenAI (AI assistant) — when you use the in-app Baby Assistant, your chat messages and your baby's details (name, age, the activities you have logged, including sick-log entries such as temperatures, symptoms and medicines, daycare days from the care plan, and the notes you write for the assistant) are sent to OpenAI, a third party based in the United States, which processes them to generate the assistant's responses. This happens only after you explicitly agree in the app, and only while you use the assistant. OpenAI does not use data sent through its API to train its models, and keeps it for up to 30 days to monitor for abuse. We do not use this data to train AI models either, and we never sell it.
  • Google Gemini (daycare import) — when you import screenshots from your daycare's app, the screenshots are sent to Google's Gemini AI service, a third party, which reads the logged events from them. Nothing is saved until you have reviewed the events in the app.

These service providers process data solely on our behalf and are bound by their own privacy policies and data protection agreements.

6. Your rights (GDPR)

As our infrastructure is hosted in the EU and we serve EU users, you have the following rights under the General Data Protection Regulation (GDPR):

  • Right of access — request a copy of all personal data we hold about you
  • Right to rectification — correct inaccurate data
  • Right to erasure — request deletion of your account and all associated data
  • Right to data portability — receive your data in a structured, machine-readable format
  • Right to restrict processing — limit how we use your data
  • Right to object — object to processing of your data

To exercise any of these rights, contact us at support@baby-tracking.ai. We will respond within 30 days.

7. Data retention & deletion

We retain your data for as long as your account is active. If you request account deletion:

  • Your user account and authentication data will be permanently deleted
  • All activity logs, baby data, and personal information will be permanently deleted
  • Deletion is completed within 30 days of the request
  • Anonymized, aggregated data may be retained for service improvement

8. Children's privacy

BabyTracker is designed for parents and caregivers, not for use by children. We do not knowingly collect data directly from children. All baby-related data is entered by parents or authorized caregivers. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via email or in-app notification. Continued use of BabyTracker after changes constitutes acceptance of the updated policy.

10. Contact us

If you have any questions about this Privacy Policy or your data, contact us at: