This policy explains how Baby CareLendar handles the information you enter in the app, account information, and the data needed to sync care records, protect accounts, and send notifications. If the way we collect, use, or share data changes, we will update this policy so you can review it before continuing to use the service.
Data we collect
- Account: email, display name, hashed password, email verification status, hashed OTP codes, login sessions, and OTP rate-limit history.
- Third-party sign-in: when you sign in with Apple or Google, the app receives an identity token for verification, then stores the provider, provider subject, and verified email.
- Family data: family profiles, members, invitations, roles, display names, and avatar keys.
- Profile photos: if you choose an avatar in the app, we process and store the image you select, the image content type, and the storage key used to show that image to you and appropriate family members.
- Baby and care data: Baby profiles, allergies, medicine notes, feeding notes, sleep summaries, growth measurements, caregiver cautions, tasks, checklist items, reminders, calendar events, and handover notes you enter for your family.
- Notification data: Device notification tokens and notification preferences used to deliver reminders and family updates when you enable notifications.
- Subscription data: Subscription status, entitlement status, RevenueCat app user identifiers, and App Store transaction identifiers used to provide Family Pro access.
- Tracking: BabyCareFamily does not sell personal data, display third-party ads, or track users across apps and websites owned by other companies.
- Local device data: login session tokens and the most recent signed-in account are stored in Keychain; some preferences and welcome snapshots may be stored on device to improve the return sign-in experience.
How we use data
- Create, verify, and protect accounts.
- Sync baby-care data between invited family members.
- Show checklists, schedules, care shifts, statistics, and handover content in the app.
- Show the profile photos you choose in personal profiles and appropriate member lists.
- Verify, sync, restore, and manage Pro access through the App Store and RevenueCat.
- Send OTPs, password reset emails, and reminder or handover notifications when users enable notifications.
- Prevent basic abuse, such as limiting OTP sends and authenticating login sessions.
Data sharing and providers
Baby CareLendar does not sell personal data, does not show ads, and does not use data to track users across other companies’ apps or websites.
- Cloudflare: operates the website and API infrastructure and stores service data.
- Apple: provides Sign in with Apple, the App Store, APNs, and iOS notification permission systems.
- Google: verifies Google sign-in if users choose that method.
- RevenueCat: processes and syncs App Store subscription information, including app user id, product id, transaction status, entitlement, renewal period, expiration time, and related billing status.
- Email service: sends OTP and password reset emails from the configured system address.
Advertising, analytics, and tracking
Baby CareLendar currently does not show ads, does not use data to track you across other companies’ apps or websites, and does not access the device advertising identifier. If we add analytics, advertising, or third-party SDKs in the future, this policy and the App Privacy information on the App Store will be updated before that change is released.
Cookies
The iOS app does not use browser cookies. The marketing website currently does not actively set cookies. Details are available in the Cookie Policy.
Retention, security, and data deletion
- Passwords, OTPs, and login session tokens are stored in hashed form on server systems.
- Login sessions on device are stored with Keychain.
- Account data and family data are retained until you delete content, leave a family, request data deletion, or we no longer need the data to operate the service.
- Device tokens may be disabled when a user turns off notifications or when APNs reports that a token is no longer valid.
You can start an account deletion request directly in the app. When an account is deleted, we delete personal account data, uploaded profile photos, and service records directly tied only to that account, except for transaction data or records that Apple, RevenueCat, or legal requirements require us to retain. Records shared with an active family, such as tasks, care shifts, invitations, and handover notes, may be retained for the remaining family members and may have the deleted account’s attribution removed or reassigned. If the account manages a Pro subscription through the App Store, the app will explain that deleting the account in the app does not cancel the App Store subscription; you must manage or cancel the subscription through Apple’s subscription settings.
Your rights
You can turn off notifications in the app or in iOS Settings. You can delete individual content such as tasks, checklists, calendar items, inventory, and handover notes where the relevant feature supports deletion. For requests to access, correct, or delete account data, use the account deletion feature in the app or the official Baby CareLendar support channel once the app is released.
Children and baby data
Baby CareLendar is a tool for parents and caregivers. Adults are responsible for entering and sharing baby data with appropriate family members. Do not enter medical data beyond everyday care notes, and do not use the app as a substitute for professional medical advice.