Privacy Policy
Baby Tracker keeps your baby's records on your devices and in your own iCloud account. On Android, an optional shared log uses Google Firebase, described below. We do not operate an account system, sell personal information, show ads, or use advertising trackers.
What you log
Feeds, diapers, sleep, and any notes you add are stored on your device. Unless you turn on logging together on Android (below), they are not sent to any server we operate, and they are never sent to RevenueCat or advertisers.
Logging together
If you invite another caregiver, the shared baby's records are stored in Apple's iCloud under the Apple Account of the person who started the log and are visible to everyone who joins. An invite is a private link, shown as a QR code or sent as a message: anyone holding that link can join and edit the log, so share it only with people you trust. You can remove someone or stop sharing at any time. Apple handles that storage under its own privacy policy.
Camera
If you choose to scan an invite code, the camera is used only to read that code on your device. No image is recorded, saved, or sent anywhere.
Purchases
Apple processes purchases. RevenueCat receives an anonymous app user identifier, product identifiers, entitlement status, and purchase events so the app can provide access to paid features. RevenueCat does not receive anything you log.
Notifications
If enabled, reminders are scheduled locally on your device.
On Android
The Android app keeps the log in the app's private storage on your phone. Android's own backup may copy it to your Google account if you have device backup turned on; we never receive it. Google Play processes purchases, and RevenueCat receives the same purchase information described above. Reminders are scheduled locally on the phone.
Logging together on Android
Logging together on Android is off until you choose to start or join a shared log. When you do, you sign in with Google, and Google Firebase (Firebase Authentication and Cloud Firestore, operated by Google for us) stores your name, email address and a user id from your Google account, plus a copy of every baby and entry on your phone: names, birth dates, feeds, sides, bottle amounts, diapers, stool colours, sleep, weights and notes. Everyone in the shared log can see and edit them, and only they can: our security rules refuse everyone else. Other members see your first name. An invite is a short code or link that lets anyone holding it join for seven days, so share it only with people you trust. Data is encrypted in transit. We do not use it for anything else, and Firebase does not show ads or run analytics in this app. An iPhone cannot join an Android shared log yet.
Leaving a shared log deletes your Google sign-in from the sharing service and your membership; the log stays on your phone. When the last person leaves, every baby and entry in the shared log is deleted from Firebase. See how to delete your sharing data, including by email.
Data deletion
You can delete any entry in the app, stop sharing to remove a partner's access, leave an Android shared log to delete your sharing sign-in, and delete the app to remove local data. Purchase records remain subject to Apple's policies.
Contact
Questions can be sent to jackwallner@gmail.com.