Privacy Policy — Babyflow

Short version

• Without an account, everything you log stays on your phone. We never see it.
• With Babyflow Premium Care you can create an account to back up your data, sync it between devices and track together with your partner. Your baby’s data is then stored on our servers so it can sync.
• Your baby’s photo never leaves your phone.
• Your reminders are yours: the people you track together with never see them.
• We use an analytics service to see how parents use Babyflow, such as which screens they open and whether they buy Premium Care. It never receives your name, your baby’s name or photo, or the feeds, naps and diapers you log.
• We don’t sell your data and we don’t show ads.

What stays on your phone

Babyflow saves what you enter on your phone:

• Your baby’s profile (such as name, date of birth and gender)
• Activities and notes you log (such as feeds, sleep, diapers, medication and other care)
• Growth measurements
• Reminders you set (what they’re for, such as a medicine’s name, and when they go off)
• A profile photo, if you choose one
• App preferences (such as units, language and which notifications you want)

Without an account, none of this is sent to us, apart from the usage information described under Analytics. If you set a profile photo, Babyflow asks for access to your photo library and keeps a copy of the picture you choose on your phone only. Even with an account, the photo itself is never uploaded or shared.

A nap, feed or pumping session that’s running can show on your Lock Screen, in the Dynamic Island or as a notification, with your baby’s name and its timer. Your phone shows these itself.

Your account, backup and sync

Accounts, backup and sync are part of Babyflow Premium Care. We use an account service to create your account and sign you in. It stores your email address, your first name, and either your password (stored securely, never readable by us) or the name and email address Apple or Google share when you sign in with them. To keep your account safe, it also records details of your sign-ins, such as the device and IP address.

When sync is on, your baby’s profile (without the photo), activities, notes, measurements, home screen cards and reminders are stored in our database, hosted in Europe, and kept in sync across your devices by a sync service. Only you, and the people you choose to share with, can read your baby’s data. Your reminders can only be read by you.

Tracking together

You can invite someone to track your baby with you in two ways:

• By email: our account service sends an invitation to the email address you enter. Only that email address can use it to join.
• With an invite link or QR code: anyone who has the link can join while it works, so only share it with people you trust. The link contains your baby’s name, and is shared through the apps you choose. It stops working after 7 days, or as soon as you reset it.

When you invite someone or join, Babyflow asks for your first name. Once they join, you both see and edit the same baby’s data, and Babyflow shows who added or changed an entry, by first name. Anything the person who joins had already tracked on their own moves into the shared baby. Reminders stay personal: everyone keeps their own, and nobody else sees them.

If the person who invited you removes you, you lose access to the shared baby and your reminders and home screen cards for that baby are deleted.

Reminders

You can set reminders for anything you log, such as a feed, a diaper or a medicine. Your phone schedules and shows them itself, so your reminders are not sent through our servers. A reminder can skip itself when the activity is already logged, also when someone you track together with logged it, even while Babyflow is closed (see Notifications and timers). When sync is on, your reminders are stored with your account (see above) so they work on all your devices.

Notifications and timers

If you track together and allow notifications, Babyflow lets the others know when someone logs something, and keeps the timers of naps, feeds and pumping sessions on everyone’s phone up to date. To do that we store:

• A push token for your phone, the type of phone (iPhone or Android), your app language, and whether you want partner updates on that phone
• A short record of each change (who made it, what kind of entry, and when), which we delete after 2 days
• While a timer runs on your iPhone’s Lock Screen or in the Dynamic Island: its push token and what it shows (your baby’s name, the kind of activity, when it started and, for breastfeeding, the side). We delete this when the timer ends, and after 12 hours at the latest.

Notifications are delivered through a push notification service and Apple or Google; timers on an iPhone’s Lock Screen are updated through Apple. A notification shows your baby’s name, the kind of entry and the first name of the person who added it, for example “Breastfeeding added by Sam”. On Android, Babyflow also gets a silent update when a timer on your baby starts, changes or stops, so it can show the timer on your phone.

When you track together, each phone on your baby also gets a silent update whenever someone logs, changes or deletes an entry, so reminders on that phone can skip or move even while Babyflow is closed. It carries the kind of entry, when it started and ended, and for medication the names of the medicines. It doesn’t show anything, and goes out even when partner updates are off.

You can turn reminders and partner updates off in Babyflow under Settings › Notifications, or turn notifications off altogether in your phone’s settings.

Buying Premium Care

Payments are handled by Apple through the App Store, or by Google through Google Play. We never see your payment details. We use a purchase-management service to show prices in your currency, check what you’ve bought, and restore your purchase on a new phone. It receives a random ID for your installation (or your account ID once you sign in), your purchase history, and basic information about your device. It also receives your analytics ID (see below), so purchases, renewals and refunds appear in our analytics.

Analytics

We use an analytics service, with data stored in the European Union, to understand how Babyflow is used so we can make it better. For example, where parents stop during setup, which Premium Care plan they choose, and which kinds of reminders they find useful. It receives:

• Which setup screens you view, and when you open or close the Premium Care screen or the welcome gift, pick a plan, buy, or restore a purchase
• A few setup answers: how you feed your baby, which questions you picked as the ones you keep wondering about, your baby’s age in days, and whether you added a photo
• When you create, turn off, delete or open a reminder, or respond to a suggestion to set one: the kind of activity (such as Diaper or Medication, never a medicine’s name) and the kind of schedule
• Whether you see or dismiss tips on the home screen, such as the backup suggestion or “Are you enjoying Babyflow?”, with counts of how many days and entries you have logged
• A random ID for your installation, and the type of phone and its operating system version

The analytics service never receives your name or email address, your baby’s name, photo or date of birth, or the contents of what you log. We’ve turned off its option to work out your location from your IP address. We don’t use it for advertising.

Feedback, ratings and Refer a Friend

If you use Send Feedback, your email app opens a message to babyflow@jve.studio. Whatever you include is sent through your email provider to us, and we use it only to reply.

If you choose to rate Babyflow, the rating window is shown by Apple or Google. Your rating and review go to them, under their privacy policies.

If you use Refer a Friend or share an invite link, your phone’s share sheet lets you share a link or message. That sharing is handled by your phone and the apps you choose, not by Babyflow.

Why we use your data

• To run your account, backup, sync, tracking together, reminders, timers and notifications, and to sell and restore Premium Care: to provide the service you asked for (Article 6(1)(b) GDPR).
• To keep purchase records: to meet our legal obligations, such as tax and accounting rules (Article 6(1)(c) GDPR).
• For analytics, to fix errors and to keep accounts secure: our legitimate interest in improving Babyflow and keeping it reliable and safe (Article 6(1)(f) GDPR). You can object at any time by emailing us.
• To send notifications: your permission, which you give and can take back in Babyflow’s settings or your phone’s settings.
• To answer your emails: because you asked us something.

Babyflow stores health-related information about your baby, such as feeds, sleep, medication and growth. We process it only because you enter it and ask us to keep it, so that you and the people you share with can see it, and never for any other purpose.

Who helps us run Babyflow

These service providers process data for us, only to provide their service and on our instructions:

• An account service: accounts, sign-in and invitation emails
• A database provider: the database behind backup and sync
• A sync service: keeping your devices in sync
• A purchase-management service: Premium Care purchases
• An analytics service: analytics
• A push notification service: delivering notifications
• Apple: App Store payments, Sign in with Apple, delivering notifications and updating timers on the Lock Screen
• Google: Google Play payments, Sign in with Google, and delivering notifications on Android
• Our hosting provider, which runs babyflow.app and the service behind tracking together, invite links and timers

Some of these providers are based in, or process data in, the United States or the United Kingdom. When data leaves the European Economic Area, we rely on an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework, or the one for the United Kingdom) or on the Commission’s standard contractual clauses. Email us at babyflow@jve.studio if you’d like to know which companies we work with.

How long we keep it

• Your account and synced data, including reminders: until you delete your account. Deleted data can stay in our database provider’s backups for a short time before it is overwritten.
• Records of changes for notifications: 2 days.
• Lock Screen timers: until the timer ends, and 12 hours at the latest.
• Invite links: they stop working after 7 days, or as soon as you reset them.
• Push tokens: until you sign out, delete your account, or the token stops working.
• Purchase records: as long as needed to restore your purchase and to meet tax and accounting rules.
• Analytics: only as long as we need it to understand how Babyflow is used.
• Data on your phone: until you delete it or remove the app.

Deleting your data

You can delete your account in Babyflow under Settings › Account › Delete account. This deletes your account and your data in the cloud, including your reminders. What’s on your phone stays there. If you’ve invited others, remove them first. Removing the app deletes the data on that phone.

To delete anything else, such as analytics or purchase records, email us at babyflow@jve.studio.

Your rights

You can ask us for a copy of your personal data, and ask us to correct it, delete it, limit how we use it, or send it to you in a format you can take elsewhere. You can object to our use of your data for analytics, and take back any permission you gave. Email us at babyflow@jve.studio and we’ll reply within a month.

If you’re not happy with how we handle your data, you can complain to the data protection authority in your country. Our supervisory authority is the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit).

Security

Data travels between the app and our services over encrypted connections. Our database is set up so that, through Babyflow, only your account and the people you share with can read your baby’s data, and only you can read your reminders.

Children’s information

Babyflow is meant for parents and caregivers, not for children. It stores information about your child that you enter: on your phone, and in our database if you use backup and sync, so that you and the people you share with can see it. We don’t knowingly collect information from children themselves.

What we don’t do

• Sell your personal data
• Show ads or use your data for advertising
• Track you across other apps or websites
• Upload your baby’s photo

Changes

If we update this policy, we’ll post the new version on this page and update the effective date. If we change how Babyflow uses your data in a meaningful way, we’ll update this policy before the change applies.

Contact

Questions about privacy: babyflow@jve.studio