Privacy Policy

BabyLeveling is built parent-first: the free tier works fully on your device and never leaves it. Premium adds optional cloud sync so invited family members can see the same baby profile — you turn that on, we don't turn it on for you.

We never sell your data, and we don't use your baby's care logs — including health-related entries like feeding, sleep, growth, or medication — to build advertising profiles. The app has no third-party advertising or analytics SDKs.

Because our servers and storage are located in the United States, this policy also covers information specific to Japan (APPI), the United States (CCPA/CPRA), Canada (PIPEDA), and Vietnam (Decree 13/2023/NĐ-CP) further below.

We will never use your baby's care logs, photos, or videos — health-related or otherwise — to train artificial intelligence or machine-learning models, ours or anyone else's. Your baby's data is used only to run the features you asked for: your own tracker, your own family's sync, and your own backups.

BabyLeveling has no ads, no advertising SDKs, and no advertising profiles built from baby data. We do not sell, rent, or share your baby's information with data brokers or advertisers. This is a hard rule we hold ourselves to, not a setting you have to turn on.

BabyLeveling is for parents, legal guardians, and caregivers acting on a family's behalf — not for children to use directly. When creating an account, you confirm the statement "I am a parent or legal guardian, and I am at least 18 years old."

This confirmation is a self-attestation, not an identity check, similar to how most family and parenting apps work. We record the time it was made so we have a record if it is ever questioned, but we do not independently verify age or guardianship.

The free tier does not require an account. If you unlock Premium or join a shared family, you create an account with Sign in with Apple — the only sign-in method we offer. We receive Apple's unique identifier for your account and, if you allow it, your name and email — including a private relay address if you use Apple's "Hide My Email."

We also store sign-in sessions as securely hashed, rotating tokens so you can stay signed in, and, if you enable notifications, a push token for your device so we can deliver them.

You may enter baby care information such as feeding, sleep, diaper changes, medication, vaccine and temperature records, growth measurements, milestones, and notes, plus photos or videos you attach to an entry. On the free tier, all of this stays in local storage on your device.

If you turn on Premium cloud sync, this same information — including baby profile details and any photos or videos — is uploaded to our database and to Cloudflare's object storage so it can be shared across your own devices and with family members you invite. Health-related entries such as feeding, sleep, growth, medication, vaccines, and temperature are sensitive information; syncing them only happens because you actively chose to enable Premium and entered that data yourself.

To share a baby profile, you invite caregivers by email and assign a role — owner, editor, or viewer — and may label their relationship to the baby (for example mother, father, grandparent, caregiver, doctor, or a custom label). Invited members can see or add information for that baby profile according to the role you grant, and the owner can change or revoke access at any time. Family sharing only ever happens between the people you specifically invite to that baby profile — we do not combine or compare data across different families' babies for any purpose, including advertising or AI training.

If you use Premium, we also create periodic point-in-time backup snapshots of your baby's activity logs and a reference list of your photos and videos — separate from the everyday sync described above — so you can restore your data if something goes wrong. A snapshot is created automatically the first time you subscribe, roughly daily whenever your baby profile has changes, and any time you trigger one manually.

A backup snapshot is stored on Cloudflare in the United States as a data export plus a manifest referencing your existing media; it does not create extra copies of your photos or videos. Older snapshots are deleted automatically as new ones are made, and we always keep at least your most recent backup while your subscription is active.

Premium subscriptions and one-time redeem codes are processed by Apple through the App Store and StoreKit. We receive a transaction identifier, product, and subscription status from Apple — we do not receive or store your card number or other payment details.

If we add other payment providers in the future, this policy will be updated before that provider processes any payment on our behalf.

To protect the service, we use Apple's App Attest to verify that requests come from a genuine, unmodified copy of the app. This can include an anonymous crash or error report from your device, verified the same way, even before you sign in; these reports are not linked to your name or baby data.

If you are signed in, diagnostic or support information you send us — for example through the in-app feedback form or a bug report — is linked to your account so we can follow up with you.

If you contact us through the contact form, we collect the email address, subject, and message you submit so we can respond. The website may also collect first-party, privacy-focused analytics such as page views, section views, CTA clicks, and device category to understand whether the website works.

We use the information above to operate the app (showing your baby tracker, RPG progress, level-up moments, and activity history), to sync and share data you choose to sync or share, to authenticate you and keep your account secure, to process subscriptions, to respond to support and contact requests, to send account-related emails such as family invitations and deletion confirmations, and to maintain and improve the app and website.

We do not use baby care data — sensitive or otherwise — to train AI or machine-learning models, to build advertising profiles, or to serve ads, and we do not sell or rent it to data brokers or advertisers.

Entering baby care data, including health-related entries, and choosing to enable Premium cloud sync are actions you take deliberately, and we treat them as your consent to process that information for the purposes described in this policy. Where local law expects a more specific form of consent for sensitive data, such as health information about a child, we rely on your guardian confirmation together with your active choice to enter and sync that data.

You can withdraw consent to cloud sync at any time by turning it off in Settings or by deleting your account, which stops future syncing and starts the deletion process described below. Withdrawing consent does not affect the lawfulness of processing that already happened.

Our database and Cloudflare R2 object storage, used for photos, videos, and backups, are located in the United States. SendGrid (Twilio), our email delivery provider, and Apple's Sign in with Apple, StoreKit, App Attest, and push notification services also process data on our behalf, primarily from the United States.

If you use BabyLeveling from Japan, Canada, Vietnam, or any other country outside the United States, using Premium features means your account and baby care data are transferred to and stored in the United States. We rely on contractual and technical safeguards with our providers, including encryption in transit and access controls, to protect that data during and after transfer. The free, local-only tier does not involve any cross-border transfer, because nothing leaves your device.

United States — California (CCPA/CPRA). Health-related baby care data is "sensitive personal information" under California law. We do not sell or share personal information for cross-context behavioral advertising. You may ask to know, access, correct, or delete your personal information, or limit our use of sensitive personal information, by emailing the address below. We will not discriminate against you for exercising these rights.

Japan (APPI, 個人情報保護法). We collect and use each category of information described above only for the purposes stated in this policy. Because our servers are in the United States, using Premium features involves a cross-border transfer (外国にある第三者への提供) of your personal information to the United States; we take reasonable measures with our providers to protect it there. You can contact us about our purpose of use, or to request disclosure, correction, or deletion of your information, or to stop its use, and we will respond in line with the APPI and guidance from the Personal Information Protection Commission (PPC).

Canada (PIPEDA and Quebec's Law 25). We collect, use, and retain only the information needed for the features described here, explained in plain language, and we will notify affected users and the Office of the Privacy Commissioner of Canada if a breach creates a real risk of significant harm. You may withdraw consent, request access to or correction of your information, or file a complaint with the OPC or, if you are in Quebec, with the Commission d'accès à l'information.

Vietnam (Nghị định 13/2023/NĐ-CP). Personal data about children and health-related data are treated as sensitive personal data under Vietnamese law. We rely on your affirmative action — entering baby care data and choosing to enable Premium sync, together with the guardian confirmation described above — as your consent, and you can withdraw it at any time. Because our servers are located outside Vietnam, using Premium features involves transferring your personal data abroad. You may contact us to access, correct, delete, or restrict processing of your data, to withdraw consent, or to ask how to raise a concern with the competent authority.

Local app data stays on your device until you delete it in the app, delete the app, erase the device, or remove the related device backup through your platform settings.

If you use Premium, cloud-synced baby profiles, activity logs, and media stay on our servers while your account is active. If you delete your account from Settings in the app, we immediately mark your account and email address for deletion and revoke your sessions, then permanently delete your account, database records, and files stored on Cloudflare — including photos, videos, and backups — within 30 days, and send a confirmation email once that is complete.

If a family member is removed from a shared baby profile, they lose further access to it through the app, but information already synced to their own device before removal may remain there until they delete it locally.

To remove contact data collected through the website, email [email protected] from the address you used. We will remove it from active records within 30 days unless we need to keep a limited record for security, fraud prevention, or legal reasons.

BabyLeveling is for parents, guardians, and caregivers. It is not intended for children to create accounts, submit contact information, or otherwise interact with us directly.

Adults enter information about a child for family care tracking after confirming they are the child's parent or legal guardian. We do not knowingly collect personal information directly from children, and we do not knowingly let a child create an account.

We may update this policy as BabyLeveling adds features such as new platforms, sharing options, or payment providers. We will update the date at the top of this page whenever we make a material change, and, where required, we will provide additional notice before that change takes effect.

For privacy questions, data deletion requests, or platform permission concerns, email [email protected] or use the contact form.

Email [email protected] or open the contact page.