Privacy policy

1. What we collect

Almost everything the app holds is information you (or a family member you invited) typed in. Here is the full list.

Your account

• Email address or username, and a password. You can sign up with a real email or just a username. A username is stored as an internal, non-deliverable address in the form username@ebt.local so that our sign-in provider can treat it like an account. It is not a real mailbox, we never send mail to it, and it cannot be used for password recovery.
• A random account ID assigned by Firebase Authentication. We use it to link you to your family, your Premium purchase and the activity you log. Your password is handled by Firebase Authentication and is never visible to us.

Your family

• A family record: who created it and when, the list of member account IDs, and for each member the display name you chose, your role (parent or caregiver), when you joined, and your partner-alert preferences (sound, silent or off for feed, nap and pump alerts).
• Invite codes. When you invite someone, the app creates a six-digit code that expires after 30 minutes and can be used once. We store which account created it, which account used it, and when.
• Reminder learning. To time reminders sensibly, the app keeps a small learned profile per activity (average interval between feeds/naps/pumps, how many sessions it was based on, an adjustment from your “too early” taps, and when the last one happened) plus the last nail-trim and tummy-time reminder times. This is shared with your family so both parents get the same reminders.

Your baby

• Profile: name, date and time of birth, and optionally birth weight, birth length and gender (used only so the app uses the right pronouns).
• Activity logs: feeds (breast side or bottle amount), naps, diaper changes (wet, dirty or both), and pumping sessions (side, amount, duration), each with start and end times, duration, any tags or notes you add, and which family member logged or edited it. Running timers (a feed, nap or pump in progress, and who started it) are also shared so a partner can see and stop them.
• First-foods journal: which foods you have introduced and how it went.
• Mood: the latest “how does the baby seem right now” observation you log, used to calibrate the Forecast.

This is personal information about your child's feeding, sleep and care, and some of it may be health-related data. Only enter information you are authorised to provide as a parent, guardian or caregiver. We use it to provide the service to your family, not for advertising. The Forecast calculates patterns from these records on your device.

Notifications and purchases

• A push notification token for your device, if you allow notifications. Family members' phones use it to send partner alerts. The token is associated with your app account so alerts can reach the correct caregiver.
• Purchase status. One-time Premium purchases go through Apple's App Store or Google Play and are managed for us by RevenueCat. RevenueCat receives your purchase receipt from the store and links it to your account ID so your Premium access follows you across devices. We never see your card number or billing address.

2. What stays on your device

The app stores the following information locally rather than uploading it to our family database. Copies you export, share or include in operating-system backups are outside the app's deletion controls:

• Photos: your baby's profile photo and any monthly milestone photos you add. These are never uploaded, and are not shared with family members.
• Teeth records and checklists from the Tools tab.
• Preferences: theme, units, notification settings, and where you parked the Forecast orb.
• Home-screen widget data: a copy of today's summary that the widget reads from the phone's own storage.
• Exports: the Tools → Export feature writes a file of your logs that you choose where to send (email, files, and so on). Once you share it, the copy you sent is outside the app and this policy.

3. What we do not collect

• No location. The app has no location capability at all.
• No advertising tracking. We do not use an advertising identifier or an advertising SDK. Infrastructure and purchase providers may process device, network and diagnostic information needed to deliver their services.
• No contacts, calendar or browsing history.
• No AI processing of your data off-device. The Forecast, its tips and the “ask the Forecast” answers are computed by rules that run entirely on your phone. Nothing is sent to an AI provider.
• We never sell your information and never share it for advertising.

4. Device permissions

The app asks for these permissions only when you use the feature that needs them. You can decline or revoke any of them in your phone's settings; the rest of the app keeps working.

5. How we use information

• To run the app: show your logs, timers, insights and the Forecast, and keep every family member's phone in sync.
• To send notifications you asked for, including alerts when a family member starts or ends a timer.
• To unlock premium features for purchasers and restore purchases on a new phone.
• To keep the service secure, for example by applying database rules so that only members of a family can read that family's data.
• To answer your support requests, if you contact us.
• To comply with the law, if we must.

We do not use your information for advertising profiles or to train external machine-learning models.

6. Our legal bases

If you are in the UK, the European Economic Area or another place with a similar law, we rely on these bases:

• Providing the service you request: account administration, family sync and purchase access, to perform our agreement with you.
• Your permission for optional camera, microphone, photo-library and notification access. You can revoke permissions in your device settings. Entering baby-care information or granting a device permission is not, by itself, explicit consent to every use of health-related data.
• Our legitimate interests in keeping the service secure and reliable, where those interests are not outweighed by your rights.
• Legal obligations, where they apply.

7. Where it is stored and who helps us

We do not run our own servers. We rely on a small number of well-known providers, each of which only receives what it needs:

These providers process information under their service agreements and privacy policies. Apple and Google also handle your store account and purchases under their own policies.

This website: Vercel hosts these pages and processes request information such as IP address, requested URL and browser information to deliver and secure the site. We have not added analytics scripts or advertising to the EBT policy pages. Emailing support sends your message and contact details through email providers.

8. Who we share it with

• Your family members. This is the point of the app. Anyone who joins your family with an invite code can see and edit the baby profiles, activity logs, timers, food journal and mood for every child in the family, and can see each member's display name. They cannot see your email address, username, password, photos or purchase status. Only invite people you trust.
• Service providers listed above, to the extent needed to run the app.
• Legal reasons. If required by law or a valid legal request, or to protect the safety of a person or the integrity of the service.
• A change of ownership. If Easy Baby Tracker is ever sold or merged, your information would pass to the new owner under this policy, and we would tell you first.

We do not share your information with advertisers, data brokers or anyone else.

9. Retention and deletion

We keep your information for as long as you have an account, so that your family's history is there when you need it. You are in charge of when that ends.

Delete your account from inside the app

Go to Settings → Account → Delete all my data. Despite that control's name, it is not a guarantee that every associated record is erased. On successful completion, the app will:

1. Remove you from your family. If you are the last member, the family record and access to all of its baby data are deleted with it. If other caregivers remain, the shared baby data stays with them, because it is theirs too.
2. Permanently delete your sign-in account.
3. Clear the app's local key-value settings and cached state, and return to onboarding. This does not guarantee removal of every photo file, operating-system backup, widget copy or export.

This cannot be undone. For security, the app asks you to confirm your password before removing family access or deleting your account.

Other controls

• Delete a single entry by swiping it in the Recent list. Deleted entries are marked as deleted so that every family member's phone removes them too.
• Leave a family (Settings → Family → Leave family) without deleting your account.
• Sign out to remove your session from a device while keeping your data.
• Export your logs from Tools → Export as a JSON file.

What lingers, and for how long

• Deleting the last member's family record removes access through the app, but does not recursively erase the child profiles, logs, timers or other nested database records. These can remain until separately removed. No automatic cleanup schedule is currently guaranteed.
• The app attempts to remove your device push-token record before deleting your account. A failed cleanup can leave that record behind.
• Used or expired invite records and soft-deleted log entries may remain in the database. They are included in a request for review of associated account data.
• RevenueCat keeps purchase records for as long as needed to honour your purchase and for the store's own accounting requirements.
• Support emails are kept for as long as needed to resolve your request.

To request deletion without using the app, email Hussain.Ruhollah@gmail.com. Include your account email or username and specify whether the request covers your account, your child's information, or both. Never send your password, a login code or baby-care logs. See the deletion-request page for the current limitations. Sending an email initiates a request; it does not automatically erase data. We will confirm identity, scope, any legally required retention and completion separately. Applicable statutory response deadlines are not waived by these technical limitations.

10. Children's privacy

Easy Baby Tracker is a tool for adults. It is designed to be used by parents and caregivers, about their babies. It is not directed at children, and you must be at least 18 (or the age of majority where you live) to create an account. We do not knowingly collect information directly from anyone under 18.

The information you enter about your baby (name, birth date, feeding, sleep and so on) is provided by you, the parent or guardian, and is treated with the care described throughout this policy. If you believe a child has created an account, or you want a child's information removed, contact us at Hussain.Ruhollah@gmail.com to request its deletion.

11. Security

• All traffic between the app and our providers is encrypted in transit (TLS).
• Passwords are stored by Firebase Authentication in hashed form. We never see or store them ourselves.
• Database security rules enforce that only signed-in members of a family can read or write that family's data, that invite codes are single-use and time-limited, and that who created an entry can never be rewritten.
• Photos never leave your device.

No system is perfectly secure, so please choose a strong, unique password. If you signed up with a username rather than an email, there is no way to reset a forgotten password; keep it somewhere safe. If you ever suspect a problem with your account, email us straight away.

12. International transfers

Our providers store and process data in the United States and possibly other countries, which may have different data-protection laws from yours. Where required, transfers rely on recognised safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision (for example the EU–US Data Privacy Framework, where a provider is certified). You can ask us for more detail about the safeguards in place.

13. Your rights and choices

Depending on where you live, you may have the right to:

• Access the information we hold about you (the app shows almost all of it, and Export gives you a copy of your logs).
• Correct it (edit any profile or entry in the app).
• Delete it (in-app, or by email, as described above).
• Take it with you in a portable format (Tools → Export).
• Object to or restrict certain processing, and withdraw consent at any time.
• Complain to your local data-protection authority. We would appreciate the chance to help first.

We will never discriminate against you for exercising these rights. If you are a California resident: we do not sell or share personal information as those terms are defined in the CCPA/CPRA, and we do not use or disclose sensitive personal information for anything other than providing the service you asked for.

Notifications: turn any category off in the app's Settings, choose sound/silent/off for each partner alert, or disable notifications for the app in your phone's settings.

14. Changes to this policy

If we change how we handle your information, we will update this page and the date at the top. Material changes require appropriate notice and, where required, consent; continued use alone does not replace that consent.

15. Contact

Questions, requests or worries: Hussain.Ruhollah@gmail.com.

Hussain Ruhullah
The Code Alchemist
Kleine Wienburgstr. 1
48147 Münster OT Mitte
Germany