Privacy Policy

1. Information We Collect

MyBabyLogger gathers data that users submit directly, including:

• Account credentials (email, password)
• Baby profile details (name, birth date, weight, height)
• Activity records (feeding, sleep, diaper changes, medications)
• Uploaded photos and memories
• Milestone descriptions and notes
• Usage analytics

We do NOT collect:

• Location data
• Device contacts
• Browsing history
• Third-party app data

2. How We Use Your Information

We use collected data to:

• Operate and support the baby tracking service
• Communicate important updates and alerts
• Customize your experience
• Analyze patterns in your baby's routines
• Generate insights and statistics
• Deliver customer assistance

We do NOT sell, trade, or rent your personal information to third parties.

3. Data Security

We employ industry-standard protective measures:

• End-to-end encryption for all data transmission (TLS 1.3)
• AES-256 encryption for data at rest
• Secure cloud infrastructure with regular backups
• Secure authentication via Supabase Auth
• Row-Level Security (RLS) ensuring you can only access your own data
• Biometric authentication support (Face ID / Touch ID)
• Session inactivity timeout and automatic app lock
• Periodic security evaluations and maintenance

Your password is hashed and is never stored in plain text. Sensitive data on your device is stored using platform-native secure storage (iOS Keychain / Android Keystore).

4. Data Sharing

We do not sell, trade, or rent your personal information to third parties. Information sharing occurs only when:

• You provide explicit consent
• Legal requirements demand it
• Protection of company rights requires it
• Service partners assist operations under confidentiality agreements

5. Your Rights

You have the right to:

• Access and retrieve your data (use the Export feature in Settings)
• Modify or correct your information
• Remove your account and all related records (Delete Account in Settings)
• Unsubscribe from marketing messages
• Request data portability
• Withdraw consent at any time by deleting your account

We will respond to data requests within 30 days.

6. Data Retention

We retain your data for as long as your account is active. When you delete your account:

• All personal data is permanently deleted within 30 days
• Backup copies are purged within 90 days
• Anonymized, aggregated statistics may be retained
• Audit logs are retained for 1 year for security purposes

7. Children's Privacy

MyBabyLogger is designed for parents to track information about their children. We do not knowingly collect personal information directly from children under 13. Parent or guardian accounts manage all children's data.

Parents maintain full control over their children's data and can delete it at any time.

8. Contact Us

If you have questions about this Privacy Policy or your data:

• Email: hello@mybabylogger.com

For data requests (access, export, or other inquiries), please contact us at the email above.