Privacy Policy

1. What this policy covers

BabyBloomy is a mobile app for logging a baby's daily life — feeding, sleep, nappies, mood, growth, milestones, first words, photos and voice notes — and turning it into a memory book. This policy explains what we store, why we store it, who else touches it, and how you get it back or get rid of it.

You are the account holder. Most of what you record is information about your child, which you provide on their behalf as their parent or guardian.

It also covers babybloomy.me itself — the pages you are reading now, and the waitlist form on them.

2. What we collect

Account

When you sign in with Apple or Google we receive your email address and display name. We never receive your password. If you use Apple's Hide My Email, we only ever see the relay address.

What you record

Your child's name and date of birth; the entries you create (feeding, sleep, nappies, mood, growth measurements, milestones, words); reminders you set; photos and videos you add; and voice notes you record.

Voice notes

Audio you record is uploaded so it can be transcribed into text and turned into a log entry. Both the audio and the resulting text are stored against your account.

Subscription

If you subscribe, we receive from Apple or Google a record that a subscription is active, which plan, and when it renews. We never see your card details — those stay with Apple and Google.

Usage analytics and session replay (the app)

The app records which screens you open and which actions you take — a log was saved, a memory film was made — so we can see where the app is confusing or broken. These events carry the shape of what you did, never the content: not your child's name, not their date of birth, not a mood value, not a word they said, not anything you typed. That is enforced in code, not just promised.

The app also includes session replay, which reconstructs how you moved through the screens. Recordings are masked: every text field and every piece of on-screen text is obscured before the recording leaves your device, so what we see is the layout and the timing of your taps — not your child's name, your entries or your photographs. Replay currently samples every session while the app is in testing; we will reduce that as the audience grows, and recordings are kept only for as long as Amplitude's standard replay retention allows. If you would rather not be recorded at all, tell us at privacy@babybloomy.me and we will exclude your account.

Our analytics provider is Amplitude. We do not run advertising SDKs, we do not sell your data, and we do not share it with data brokers.

Diagnostics

When something goes wrong the app records an error report so we can fix it. These reports carry a user identifier and technical detail about the failure. They do not carry your child's name, date of birth or mood values.

Waitlist and newsletter (this website)

If you join the waitlist we store the email address you typed, the page you submitted it from, your browser's language, and the country your request came from. We do not store your IP address. The address goes to us and nowhere else — never to a broker, a partner, or an advertising network.

Joining the waitlist means one thing: we will email you when the app opens. The newsletter is a separate, optional tick box, unticked by default, and we record the moment you tick it so we can show the consent was given. Untick it later, or use the unsubscribe link in any email, and we stop. Ask us at privacy@babybloomy.me and we delete the address entirely.

3. What we use it for

• Running the app — storing your entries, showing them back to you, syncing across your devices.
• Turning speech and free text into entries — transcribing a voice note and working out that "fed her at half four" is a feed at 16:30.
• Building your memory film — assembling the photos and moments from a month into a video.
• Answering you — when you ask the in-app assistant a question about your own records.
• Reminders — sending the notifications you asked for.
• Keeping it working and safe — diagnosing crashes, preventing abuse, honouring your subscription.

We do not use your child's records to train anyone's general-purpose AI models. Our AI processors are engaged to perform a task and return a result.

4. Who else handles it

We use a small number of processors. Each one only receives what it needs to do its job.

5. Our lawful bases

Under the GDPR we rely on:

• Performance of a contract — storing and showing the entries you create, and providing the subscription you paid for.
• Consent — voice notes, AI interpretation, photo access and push notifications. You can withdraw consent at any time by turning the feature off or revoking the permission, without losing access to the rest of the app.
• Legitimate interests — keeping the service secure, diagnosing failures, and preventing abuse. We balance this against your privacy and keep the data minimal.
• Consent — the waitlist address and, separately, the newsletter. Each is its own tick, and withdrawing either is one email or one click.

Because this data concerns a child, you are giving consent as the holder of parental responsibility.

6. How long we keep it

We keep your data for as long as your account exists. When you delete your account we delete your profile, your child's records, your entries, photos, videos and voice notes.

• Deletion request to permanent removal: within 30 days.
• Encrypted backups: deleted content can persist in backups for up to 30 days before being overwritten.
• Billing records: kept as long as tax and accounting law requires, separately from your child's records.
• Waitlist address: kept until the app has launched and we have written to tell you, or until you ask us to remove it — whichever comes first. A newsletter address is kept until you unsubscribe.

See Delete your account for how to start this.

7. Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or hand it to another provider. You can withdraw any consent you gave. Exercising these rights costs nothing and will not get your account penalised.

Email privacy@babybloomy.me and we will respond within 30 days. We may need to confirm you are the account holder before acting.

If you think we have handled your data badly, you can complain to your local data protection authority. We have no establishment in the EU or the UK. Because we offer the app to people there, we are appointing a representative under Article 27 UK/EU GDPR; their name and address will be published here as soon as that is in place. Until then, write to privacy@babybloomy.me and we will handle the request ourselves — your rights and our 30-day deadline are unaffected. TODO — replace with the named representative once appointed.

8. Security

• Data is encrypted in transit (TLS) and at rest.
• Access is restricted per account at the database level, so one account cannot read another's records.
• Photos, videos and voice recordings are held in private storage that is not publicly readable.
• Access to production systems is limited to the people who need it.

No system is perfect. If a breach ever affects your data, we will tell you and the relevant authority as the law requires.

9. Children

BabyBloomy is used by adults to record information about their own children. It is not directed at children, it is not designed for children to use, and children do not hold accounts. You must be 18, or the age of majority where you live, to create an account.

10. Changes & contact

If this policy changes we will update the date at the top of this page, and tell you inside the app when the change is material.

Questions, requests, or anything that reads wrong here — hello@babybloomy.me. Postal address: TODO — postal address (not the home address on the registry).