Last updated: August 23, 2026
Baby Docs is an iPhone app for keeping track of the paperwork that follows a birth: the Social Security card, the birth certificate, health plan enrollment, parental leave and so on. It tells you what applies to your household, when each window closes, and which official office issues each thing.
Baby Docs has no account and no household-data backend. There is nothing to sign in to, and we hold no copy of your child, your household answers, your plan, your notes or your documents. Almost everything below is a description of what stays on your own iPhone.
There is one exception, and it is worth stating at the top rather than burying it: the app checks purchase status with Apple and RevenueCat. RevenueCat can receive an anonymous app identifier and purchase-status information even before a purchase, because the app needs to know whether Plus is already active. That is the only thing about you that ever reaches a server of ours, it contains nothing about your family, and it is described in full under Purchases and Baby Docs Plus.
Baby Docs never asks for, stores or transmits a Social Security number, for your child or for you. The app tracks whether the number has been requested and whether the card has arrived. It has no field for the number itself, and neither the one-page summary nor the employer packet ever prints one. Free-text fields reject common Social Security-number patterns, so a number entered in a note, receipt or household field is not saved.
One clarification, because it matters. If you photograph a Social Security card into the document vault, that photograph obviously contains the number. It is stored as an image file on your iPhone only, held to iOS's strictest file protection, excluded from every backup, and no share sheet, export or summary in the app can reach it. We never receive it, because there is nowhere for it to go.
The local database is encrypted at rest by iOS until the first unlock after the phone boots. Vault photographs are held to a stricter setting again: unreadable whenever the phone is locked, and marked so they are never included in an iCloud or computer backup. That is a real trade-off and it is worth stating plainly — a new iPhone will not restore them, so keep the original documents where you always kept them.
Only what you deliberately send, and only to whoever you send it to, plus purchase-status requests to Apple and RevenueCat, and one Apple system-service request if you tap the location helper. There is no household-data upload, no account and no Baby Docs server copy.
Everything the plan itself is made of is free: every task, every deadline, every document list, every official link, the two hard-deadline warnings, and sending the plan to the other parent. Optional suggested-date reminders, the Sunday digest and reminders you set yourself are Plus features. The purchase-status check described here can happen whether or not you buy Plus.
If you buy Plus, the purchase is made with Apple, and Apple's own privacy policy covers it. To know whether Plus is active, the app uses RevenueCat, which acts as our processor. The app may make that check before a purchase so it can restore an existing entitlement. What RevenueCat receives is:
In Apple's App Privacy vocabulary that is Purchases → Purchase History, collected, not linked to your identity, not used for tracking, and used for two purposes: app functionality, which is unlocking what you paid for, and analytics, which is a dashboard of how many purchases, trials and refunds there were. It is never sold, never shared with advertisers, and never joined to data from other apps or websites. The app does not collect an advertising identifier and does not ask RevenueCat to collect a device one.
What RevenueCat never receives: your child's name or birth date, your state or county, your household answers, your plan, your notes, your confirmation numbers, and every photograph in the document vault. Those are not sent anywhere, by anything, ever.
Keeping it and deleting it. The purchase record is kept for as long as the purchase can still matter. A lifetime purchase has to be restorable on a new phone years later, which is the whole point of "restore purchases", and the record is also part of the transaction history Apple and we are required to keep. Deleting the app does not delete it, and cannot: a record that vanished with the app is a record that could not restore your purchase. If you want the RevenueCat record for your copy of the app deleted, email the address at the bottom of this page and we will delete it; be aware that doing so may mean a purchase can no longer be restored automatically, and that Apple keeps its own record either way.
Deadline reminders are scheduled by your own iPhone from dates it already holds. There is no push notification service involved and no device token, which is why reminders keep working with no signal at all.
If you tap “Use my location” on the household questions, iOS gives the app a single position. The app asks Apple’s geocoding service to resolve that position into a state and county, then discards the position. Baby Docs does not store it or send it to its own server. This helper is never used in the background.
Your child, your household answers, your plan, your notes and your documents: you, anyone holding your iPhone, and anyone you deliberately send a plan or exported summary to. We have no database of any of it, so there is nothing for us to look at, nothing to hand over and nothing to breach.
If you use the location helper, Apple may process the one position needed to return the state and county. Baby Docs does not receive a persistent location history and does not keep the position.
Your purchase record: Apple, RevenueCat and us, as described above. It says that a copy of the app bought a subscription. It does not say whose, and nothing in it is about a child.
This is why the plan opens with no network: the moment you most need to know which three documents the clerk is about to ask for is while you are standing at the counter.
Baby Docs is for parents, and is not directed at children. The information it holds about a child is the small set listed above, entered by that child's own parent.
You can see and correct everything the app holds, export the one-page summary as plain text, and permanently remove vault photographs from the app. Archiving a child or dismissing a task hides it without destroying the work attached to it. Deleting the app removes the remaining household data from that iPhone without asking us.
If this policy changes in a way that affects what is collected or who can see it, the app will say so before the change takes effect.
Privacy questions:
jackwallner+babydocs@gmail.com