Who we are
Our Baby Day (“the app”) is developed and operated by Daniel Chew (“we”, “us”). We are the data controller for the information described here. You can reach us at hello@ourbabyday.com.
Two ways to use the app
Family sharing determines whether your records sync through our servers. Ask, import assistance and optional analytics have separate data flows described below.
On your own
Without family sharing, everything you log stays on your iPhone and in your own private iCloud, where Apple keeps it under your Apple Account. Logging alone does not send those records to our servers. Ask and import assistance send the information described below when you use them; optional telemetry depends on your separate choices.
With family sharing
When you sign in and invite a partner, grandparent or nanny, the records you share are stored on our servers so every caregiver’s phone can see the same day. Those servers are hosted for us by Supabase in the United States. Data is encrypted in transit and at rest, and every request is checked by the database against your family’s membership before a row is read or written. It is not end-to-end encrypted: like any shared service, we could technically read it. We do not, except where needed to fix a problem you ask us to look at.
What we collect
With family sharing on, the following is stored on our servers:
- Account details. Your email address: the one you sign in with, or, if you use Sign in with Apple, the address Apple shares with us, which can be a private relay address. With Sign in with Apple we also keep the identifier Apple gives us. Beyond that, a user ID we generate, and the display name and color you choose to show your family. We use these only to sign you in and to tell your family who is who.
- Your baby’s profile. Name, nickname, date of birth and profile photo.
- Care records. Feeds, sleep, diapers, pumping, solids, tummy time, growth measurements, milestones, health entries such as temperatures and medicine doses, and daily photos.
- Family membership. Who belongs to the family, their role, and invite codes with their attempts, so invites cannot be guessed.
- Subscription status. Whether your family’s subscription is active, mirrored from your App Store purchase so that every caregiver in the family is covered by it. We do not see your payment details; Apple handles those.
- Push tokens. An anonymous token for each signed-in device so that when one phone logs something, the others can wake up and refresh.
- Ask and import usage. A count of the Ask questions and import requests your family has made, with who made each one and when, and one line of technical metadata for each request our server sends to the AI provider: which model and provider answered, how long it took, how many tokens it used and, for Ask, which of the app’s tools ran; for an import, which app you chose as its source and how many characters were sent. We do not store the questions, the answers or the contents of an import file.
Photos are stored in a private bucket that is never reachable at a public link. Only signed-in members of your family can download them.
Ask, the in-app assistant
Ask answers questions about your baby’s day using an AI model. Ask sends nothing until you agree: the first time you open it, the app names what goes out and who it goes to and waits for your tap. Decline, and Ask closes with nothing sent.
When you ask something, the question is sent through our server to a third-party AI provider. Every question carries a small fixed context: your baby’s first name, pronouns and recorded sex, her age, your time zone, today’s running totals and drops (the names of the supplements on her list, and of any given today), and a one-line summary of her last feed, diaper and sleep — including any note you typed on them. Beyond that, the model asks the app only for the records your question needs. If your question is about her health, those records can include temperatures, medicine doses and when the next one is due, the symptoms you recorded during an illness, and any note you typed on a health entry. When Ask logs an entry for you, the confirmation it reads back to the model includes the name of whoever logged it; the fixed context otherwise carries no caregiver names.
Zero data retention
We only use AI providers with zero data retention. Every Ask and import request is sent with a setting that rules out any provider that retains prompts or trains on them, and our account is set the same way: nothing is kept once the answer comes back, and nothing is used to train a model. The conversation itself lives only on your phone. Our servers keep, for each request, a line of technical metadata — which model and provider answered, how long it took, how many tokens it used and, for Ask, which of the app’s tools ran — and never the question, the answer or the records.
The same provider — under the same zero data retention policy — reads an import file when your own phone cannot make sense of it. That happens only for a file the built-in profiles and heuristics fail on, and the app asks you first, before it sends anything.
Voice input is transcribed on your device using Apple’s speech recognition. Audio never leaves your phone.
Ask is not a medical service. Its answers come from the records you have kept, they can be wrong, and they are not medical advice, diagnosis or treatment.
Withdrawing permission
Ask and import each wait for your permission before they send anything. You can withdraw either permission at any time in Settings › Privacy & data › AI assistance (if you don’t see it there, update the app). Ask then sends nothing until you agree again, and an import asks again before sending.
Who else handles your data
We use a small number of service providers, each for one job: the ones listed here, and the optional analytics and diagnostics services described after them. Each is bound by a written agreement to use your data only to provide its service to us, to keep it confidential and secure, and to protect it at least as well as this policy does. We share your data with no one else, and we never sell it.
- Apple: iCloud storage in local-only mode, Sign in with Apple, App Store purchases and push notification delivery.
- Supabase: our database, authentication, photo storage and server functions, hosted in the United States.
- Resend: sends the one-time code when you sign in by email.
- A third-party AI provider: answers Ask questions and reads import files your phone could not read, under the zero data retention policy described above. It receives only what is described under “Ask, the in-app assistant” and may not retain it or train on it.
The app has no advertising and does not track you across other companies’ apps or websites for advertising. Usage analytics and crash diagnostics are optional and are described below.
Optional app analytics and diagnostics
Both are off until you say otherwise. We ask during onboarding, before the sign-in step, and nothing is sent — or even initialized — before you answer. You can share both, customize your choices with two switches that start off, or decline; declining is a saved answer, not an invitation to ask again. Every app feature works without them, and no events from before your consent are buffered or backfilled. Existing users are asked too; updating does not turn collection on automatically.
- Mixpanel (Mixpanel, Inc.) receives feature and screen names, visible screen duration, coarse action outcomes, app and operating system information, and a random installation identifier. This helps us understand which features are useful and where tasks are difficult. It is a United States project, on Mixpanel’s US ingestion endpoint. The identifier is pseudonymous, not a claim of complete anonymity, and we do not link it to your sign-in or family account.
- Sentry (Functional Software, Inc.) receives crash stack traces, release/build information, a separate random diagnostic reference, and sanitized technical failure categories, in a United States project. We disable screen recordings, screenshots, interface hierarchies and automatic interaction and network breadcrumbs.
Neither service receives baby records, names, email addresses, photos, notes, import contents, or Ask questions and answers from our telemetry integration. Service providers necessarily process network connections when receiving reports. We do not use these reports for advertising or sell them.
Settings › Privacy & data has separate switches. Turning a switch off stops future collection, discards reports waiting on this phone, and rotates its identifier. A request already in transit cannot be recalled. Turning it on again starts a new collection period.
Turning collection off or deleting family logs does not itself erase reports already received by these separate services. To request their deletion, use “Share deletion references” in Privacy & data and send those references to hello@ourbabyday.com. Keep them before uninstalling: we do not have an account mapping with which to recover them. We retain product analytics for no more than 2 years and crash diagnostics for no more than 30 days; a deletion request can remove them sooner.
Apple also provides App Store acquisition, sales, subscription and aggregate usage reporting. Apple’s usage reporting depends on your device’s analytics-sharing choice, independently of these switches.
This website
The services above are for the app. This website — the pages you are reading now — is separate, and it counts visits so we know which pages are worth writing. It carries no advertising and sells nothing to anyone.
Vercel Web Analytics records page views without cookies and without an identifier that follows you between visits or between sites. Our host, Vercel, also keeps ordinary server logs.
Google Analytics records how pages are used, and it does set cookies. It only runs if you agreed to it: nothing Google-owned is fetched, and no cookie of theirs is set, unless you pressed Allow on the banner. Decline and it is never loaded at all. You can change your mind whenever you like — “Cookie choices” at the bottom of any page asks again — and you can opt out across every site with Google’s browser add-on. It is limited to this website either way: nothing from inside the app is sent to it, and your baby’s records never leave the app this way.
Where your data is processed
If you use family sharing, your data is stored in the United States. If you live elsewhere, it is transferred there in order to provide the service. Our providers commit contractually to protect it.
How long we keep it
Shared records are kept for as long as your family exists so that every caregiver keeps the same history. They are deleted when the last member deletes their account. Ask and import usage — the count and the one technical line per request described above, never their content — is kept while your family exists and deleted with it; an import’s lines are also deleted when the person who ran it deletes their account. Sign-in codes expire within minutes. Push tokens are dropped when a device signs out.
If your subscription ends
Our Baby Day is a subscription app, and letting it lapse does not cost you your records. Everything already logged stays readable at full range, and export keeps working — a spreadsheet, a PDF, or a full backup with her photos. We do not delete, hide or hold back what you have written because a payment stopped, and we will not make you re-subscribe to get a copy of it. What stops is adding new entries and importing. Ask keeps answering questions about what you have already logged; it just cannot log anything new for you.
A caregiver who joined your family with an invite code is covered by the family’s subscription throughout, and is never asked to buy anything.
Deleting your account
You can delete your account from Settings in the app at any time. It permanently removes your profile and sign-in from our servers: your email address, your display name and color, and your devices’ push tokens. What happens to your family’s records depends on who else is in it:
- A family only you belong to is deleted from our servers with everything in it: babies, records, photos, invites, subscription status, and its Ask and import usage.
- In a family you share with other caregivers, your membership is removed, and the entries and photos you added stay with the family, so the others keep its whole history. If you were the owner, the longest-standing remaining member becomes the owner.
Deleting your account also clears the app’s records on the phone you delete it from, and the app starts over there, as it warns you before you confirm. It does not reach into other caregivers’ phones.
Removing a caregiver from your family stops sharing with them from that moment. It does not reach into their phone to remove what it already held.
Your rights
You can see and edit everything the app holds about your family from inside the app. Depending on where you live, you may also have the right to ask for a copy of your data, to correct it, to delete it, to restrict how it is used, or to complain to a supervisory authority. To exercise any of these, email hello@ourbabyday.com from the address on your account. We answer within 30 days.
Children
Our Baby Day is made for parents and caregivers. It is not directed at children, and we do not knowingly collect information from anyone under 13 (or the age of digital consent where you live). The records in the app are about your baby, entered by you, and are treated as your data. If you believe a child has created an account, contact us and we will delete it.
Security
No private service credentials ship inside the app; every model call goes through our server. Database access is enforced row by row against family membership. Photos are downscaled before upload and stored in a private bucket. We review the app and its backend for security issues and fix what we find. No system is perfectly secure, and we cannot promise that yours will never be breached; if it is, we will tell you.
Changes to this policy
If we start sending data somewhere new, or change what we collect, we will update this page and change the date at the top. Material changes will also be flagged in the app.
Contact
Questions, requests or concerns: email hello@ourbabyday.com. See also our Terms of Use.