What stays on your device
By default, all data you enter lives only on your phone. This includes feeds, diapers, weights, sleep logs, medicine schedules, baby profiles, avatar photos, app settings, and notification preferences.
Accounts and sign-in
No account is required to use Newborn Tracker. You can download it and start tracking right away.
If you want to use Family Sync to share tracking with a partner or caregiver, you can sign in with Apple. When you do, we receive your Apple user ID and, if you choose to share them, your name and email. Your credentials are stored securely in the iOS Keychain on your device. We use your Apple ID only to verify your identity when syncing.
Family Sync
Family Sync is an optional feature that lets multiple caregivers share tracking data for the same child. When enabled, your tracking data is sent over HTTPS to our sync server (hosted on Cloudflare Workers). Only family members you approve can access this data.
Data synced includes: child profiles, feeds, diapers, weights, sleep logs, medicines, activities, appointments, and journey entries. Avatar photos and notification settings are not synced.
🔒 Family Sync is opt-in. If you never sign in or create a family sync, none of your data leaves your device.
iCloud Backup
Newborn Tracker can back up your data to your personal iCloud account. Backup data is encrypted with AES-256-GCM before it leaves your device, using a key derived from your user ID. Only you can decrypt your backups.
Backup metadata (device name, timestamp, record count) is stored unencrypted so you can identify backups when restoring. The actual tracking data is always encrypted.
Subscriptions and payments
Newborn Tracker offers an optional paid subscription (Newborn Tracker Pro) managed through Apple's in-app purchase system. We use RevenueCat to verify subscription status. RevenueCat receives your anonymous user ID and purchase receipts. No payment details (credit card numbers, billing address) are ever sent to us or visible to us. Apple handles all payment processing.
Device permissions
The app may request the following permissions, all of which are optional:
Photos: Used only to set a baby avatar. Photos are cropped, resized, stripped of EXIF data, and stored locally. They are never uploaded.
Calendar: Used only to add appointments you create in the app to your device calendar. We do not read or access existing calendar events.
Notifications: Used to send local reminders for feeds, diapers, medicines, and appointments. All notifications are scheduled on your device. No push notification server is involved.
Third-party services
Sentry (crash reporting): If the app crashes, a technical report is sent to Sentry containing the error, device type, and OS version. Personal information (names, child names, medicine names) is scrubbed before sending. Reports are not linked to your identity.
RevenueCat (subscription management): Receives an anonymous user ID and Apple purchase receipts to verify your subscription status. No personal data is shared.
Expo Updates (app updates): Used to deliver bug fixes and improvements over the air. No personal data is transmitted.
Google Firebase Analytics (usage analytics): We collect anonymous event data to understand how the app is used, such as which features are popular and where people drop off during onboarding. Events include things like "feed logged" or "paywall viewed" with no personally identifiable information attached. No names, child data, or health information is ever sent. Firebase may collect device identifiers and IP addresses as part of its standard operation. You can learn more in Firebase's privacy documentation.
No advertising SDKs. No social media trackers. No data brokers.
Data deletion
You can delete your account and data from within the app's settings. If you use Family Sync, you can choose to delete local data only, cloud data only, or both. Deleting cloud data removes all synced records from our server and disconnects family members from sync.
If you have never used Family Sync, all your data lives on your device. Deleting the app removes everything.
Children's privacy
Newborn Tracker is designed for parents and caregivers. The app does not collect information directly from children. Baby profiles (name, birth date, gender) are entered by the parent and stored on-device by default. If Family Sync is enabled, this data is shared only with approved family members.
Changes to this policy
If we update this privacy policy, the new version will be posted at this URL with an updated effective date. We will never introduce new categories of data collection without clearly communicating it.