Privacy statement

Last updated: 2 September 2026

Baby Care Tracker helps parents and caregivers keep track of their baby’s care. Privacy is a core principle of the app: there is no account or login, we use no advertising, tracking or analytics, and content data is encrypted on the device before it reaches our server.

This privacy statement applies to the Baby Care Tracker app and babycaretracker.app.

1. Who is responsible?

Baby Care Tracker is provided by:

Peter de Leeuw
The Netherlands
info@babycaretracker.app

For questions about privacy or personal data, you can get in touch by email.

2. What data do we process?

Baby Care Tracker only processes data that is needed to make the app work.

About the child:

• name;
• date of birth;
• date, time and amount of bottle feeds;
• date, time and duration of breastfeeds;
• date, time and description of solid feeds;
• date and time of diaper changes;
• date and time of falling asleep and waking up.

About parents and caregivers:

• the name under which a parent or caregiver appears in the app, for example “Grandma” or “Dad”.

The app does not process photos, videos, sex, weight, height, medication, temperature, vaccinations, location data or general notes.

Feeding, sleep and diaper data is meant for keeping track of day-to-day care. Baby Care Tracker does not use this data for medical assessment, diagnosis, health profiling or medical advice.

Depending on what is entered and the context, data can in some cases reveal information about a child’s health. That is why we protect all content data in the app with the same high level of security.

Technical data

To make the app work, we additionally process a random anonymous user ID, a cryptographic public key, access roles and technical timestamps.

When you invite someone to help care, you enter a name under which that person appears in the app, for example “Grandma” or “Dad”. The invitee can confirm or replace that name. This name is stored encrypted, just like the data about the child, and is only readable by people who already have access to that child.

We do not collect an email address, phone number, Apple ID, Google account, advertising ID, contacts or location data of the parent or caregiver.

3. No account or login

Baby Care Tracker has no user accounts.

On first launch, an anonymous identity and a cryptographic key pair are created automatically. No registration, email address, password, Apple login or Google login is needed.

As a result, we do not know who the person behind an anonymous user is.

4. Why do we process this data?

We process data solely to provide the features of Baby Care Tracker. To the extent the GDPR applies, we base this processing on the performance of the service requested by the user.

We do not use data for advertising, marketing, tracking, profiling, product analytics or automated decision-making.

We do not sell personal data and do not share it for advertising purposes.

5. How do we protect the data?

Content data is end-to-end encrypted before it leaves the device.

The keys that can decrypt this data exist only on the devices of users who have access. As the provider of Baby Care Tracker, I therefore cannot read the content, not even as the administrator of the database.

The server can see limited technical metadata, such as:

• that data exists, and how much;
• when data was created or changed;
• which anonymous users share access to the same child;
• which access role they have;
• which of them logged an event or changed it last.

The server cannot see the child’s name, when the child was born, or what has been logged about feeding, sleep or diaper changes.

We additionally use secured network connections, secure key storage on the device, database-level access control and key rotation when access is revoked.

6. Restoring access

On iPhone, cryptographic keys are stored securely. Recovery information can be synchronized through the end-to-end-encrypted iCloud Keychain. Baby Care Tracker has no access to it.

Users can also create a recovery code locally. It is never sent to our server and cannot be retrieved by us.

If all devices and the recovery code are lost and no other caregiver has access, the encrypted data can become permanently inaccessible.

7. Sharing with other caregivers

An owner can invite, for example, a partner, family member, sitter or other caregiver through a link or QR code.

An invitation can be used once and is valid for at most 12 hours. Depending on the assigned role, someone can manage data or only view it.

The owner can revoke access again. After that, the person can no longer retrieve new data. Information they already viewed or stored themselves before that cannot be removed from their device afterwards.

When an invitation is shared through, for example, WhatsApp, Signal, Messages or email, that external service is governed by its own privacy policy.

8. Camera

Camera access is only used when the user deliberately chooses to scan an invitation QR code.

QR codes are processed locally. Camera images are not stored or sent to our server. The microphone is not used for this, and Baby Care Tracker has no access to the photo library.

9. Storage and service providers

For its technical infrastructure, Baby Care Tracker uses Supabase. The primary database is hosted via Amazon Web Services in Frankfurt, Germany. Supabase additionally uses, among others, AWS and Cloudflare.

These service providers may process necessary technical data, such as IP addresses. The content data about the child is encrypted and not readable to them.

Because Supabase is a US company and uses international service providers, processing outside the European Economic Area can occur in certain situations. Where required, appropriate legal and contractual safeguards are used for this.

Technical network logs at Supabase are currently kept for one day as a rule, and for at most seven days on the Pro plan.

10. No tracking, analytics or advertising

Baby Care Tracker uses no advertising, tracking or analytics services.

For example, we do not measure which features you use, which screens you view or how long you use the app.

No profiling takes place.

Apple may make technical crash and performance diagnostics available when you have chosen in iOS itself to share analytics data with app developers. This can include information about the device, the iOS version and crashes, but no baby-related content.

11. Exporting, changing and deleting

Users can view their data directly in the app and, depending on their access role, change or delete it.

A JSON export can also be created. It is generated entirely locally on the device and only leaves the device when the user chooses to save the file or share it through the system share sheet.

Users can also choose Delete all data. This removes the anonymous identity, cryptographic keys and the data the user owns.

When an owner deletes a child, the data also disappears for the other caregivers. When a caregiver or viewer deletes their own data, only their access disappears.

Deletion is irreversible.

Deleted data can remain present in secured database backups for up to seven days when such backups are active. The encryption keys needed to read it have already been deleted by then, so the content can no longer be decrypted by us.

12. How long do we keep data?

Data is kept for as long as the user chooses to keep it in Baby Care Tracker. Care data is not deleted automatically.

Users can delete individual events, a child or all data themselves.

An invitation expires within 12 hours and no longer works after that. The invitation itself remains as encrypted data until the child is deleted, or earlier when the owner revokes someone’s access: outstanding invitations are erased immediately then. Technical logs and any backups are removed within the retention periods mentioned above.

13. Website

babycaretracker.app is hosted by STRATO in Germany.

The website uses no cookies, analytics, advertising, tracking pixels or external fonts, and contains no forms or user accounts.

STRATO may temporarily process technical server data, including IP addresses, for security and technical maintenance.

14. Your privacy rights

Depending on the applicable privacy legislation, you may have, among others, the right to access, correct and delete your data, to restrict its processing, and to data portability.

The most important rights can be exercised directly in the app by viewing, changing, exporting or deleting data.

Because Baby Care Tracker does not collect account details such as a name or email address, and we cannot decrypt the content data, we are normally unable to link an email address to an anonymous user in our database.

For questions about privacy, you can always get in touch via info@babycaretracker.app.

You can also file a complaint with the competent privacy supervisory authority. In the Netherlands, that is the Autoriteit Persoonsgegevens (the Dutch Data Protection Authority).

15. International users

Baby Care Tracker is available worldwide.

For users in the European Union, the GDPR applies, among others. Depending on where you live, local privacy laws and rights may also apply, including the UK GDPR and, where applicable, privacy legislation in California, Canada, Brazil and Australia.

Baby Care Tracker does not sell personal data, does not share it for targeted advertising and does not track users across other apps or websites.

16. Children

Baby Care Tracker is intended for parents and caregivers, not for use by children.

A child is the subject of the data a parent or caregiver enters. The app contains no games, social features or other functionality aimed at children.

When you add a child’s data or share access to it, you are responsible for ensuring you are entitled to process and share that data.

17. Changes

We may update this privacy statement when Baby Care Tracker changes or when laws and regulations require it.

The current version is always available at babycaretracker.app. For important changes, we may also inform users through the app.

18. Contact

For questions about privacy or this privacy statement:

Peter de Leeuw
The Netherlands
info@babycaretracker.app

Version: 2 September 2026