Privacy policy

About this policy

Baby Tracker: Feeding Log is provided by Vasser Studios, based in Australia, for adult parents and caregivers. This policy explains how the app and babytrackerlog.com handle your information. You can use the tracker without an account; cloud backup and family sharing are optional.

Information we handle

You choose which baby details to add: name, date of birth, sex and profile picture, along with feeds, nappies, sleep, weight, height, head circumference and notes. Records can include feeding amounts, breastfeeding sides, times and durations. Only add information you are authorised to use and share.

If you use cloud features, we handle your account identifier, email address where provided, family membership, the records you add and any optional caregiver label. Google Firebase manages sign-in and passwords. Guest caregivers have an account identifier even without an email, so guest records are not anonymous.

Our service providers may process IP addresses, device or browser information and connection details to deliver and protect their services. If you contact us through the form, we receive your name, email address, selected app, subject and message so we can respond.

How we use information

We use information to record and display care, calculate summaries and growth comparisons, provide the cloud backup and sharing you choose, manage accounts, protect the service and respond to support or privacy requests. Family records may also contain information added by another authorised caregiver.

We do not sell your personal information or use baby records for advertising. This version of the app has no advertising, analytics or automated crash-reporting tools. Growth comparisons are calculated on your phone; your baby’s measurements are not sent to the World Health Organization.

Your phone, cloud backup and family sharing

Local-only baby records stay on your phone unless you choose to upload or export them. Without a synced cloud copy or exported backup, losing your phone or removing the app may mean losing your logs.

An email account lets you recover synced records on another phone. Invited caregivers can join as guests without an email address. Guests should link an email account if they want to recover that identity after losing their phone or session. We cannot guarantee recovery of unsynced or lost records.

Sharing gives every caregiver access to every baby in that family, including profile pictures, notes and care records. All caregivers can add, edit and delete individual care entries. Only the primary account holder adds or deletes baby profiles and manages invitations and caregiver access. Caregivers can see entry authors and caregiver labels; the primary can also see caregiver email addresses. Only invite people you trust.

Service providers and overseas processing

Family cloud logs are hosted in Australia by Amazon Web Services (AWS). Google Firebase Authentication handles sign-in information in the United States. Cloudflare delivers and protects our website and cloud connections, verifies the contact form’s security check and sends contact messages to our support inbox. Microsoft handles that inbox and our support emails.

These providers process information for their services and may process connection or support information outside Australia. Keeping family logs in Australia does not mean that all account, connection and email information stays here. Their privacy information is available at https://aws.amazon.com/privacy/, https://firebase.google.com/support/privacy, https://www.cloudflare.com/privacypolicy/ and https://privacy.microsoft.com/privacystatement.

If you accept website analytics, Google Analytics processes information about visits and clicks, including browser and device details, cookie identifiers and the public pages and links used. Google may process this information outside Australia. Its privacy policy is at https://policies.google.com/privacy. Website analytics does not receive your baby’s app records.

Protecting your information

We use reasonable safeguards to protect information. Saved logs are encrypted on your phone and during transfer to and storage in our cloud service. Cloud protection is managed by us, rather than end-to-end encryption: authorised people operating the service may access cloud records when necessary. No system can guarantee complete security. Protect your phone and account credentials.

Exported ZIP/JSON backups and PDF summaries are not password protected. Anyone with a copy can read them. When you save or share an export, the receiving app, drive or person controls that copy. We cannot remotely erase exported files or copies on phones that stay offline.

Keeping and deleting records

Local records remain until you remove them or the app. We keep cloud records to provide the service, subject to the deletion choices below. Automatic deletion for inactivity is not currently enabled. Our normal retention period for encrypted service backups is 30 days; deleted records may remain in restricted backups until those copies expire. Backups are not used to put deleted accounts or contributions back into the service.

You can edit or delete individual records in the app. The primary account holder can delete a baby and its family cloud log without deleting other babies or accounts. Removing a caregiver’s access or signing out does not delete their cloud account or contributions.

Deleting a secondary caregiver’s cloud account removes the entries they originally added, even if another caregiver edited them, along with their own notes, caregiver labels and account information. This also applies to their contributions in families they previously left. Their edits to entries added by someone else remain. Other caregivers’ notes remain unless the entry containing them is deleted. Baby profiles and pictures remain with the family.

Deleting the primary account removes every baby and all cloud records in that family. Other caregivers lose access to the family, but their own accounts are not deleted.

Deleting your cloud account inside the app first saves your accessible shared logs as independent records on that phone. It does not erase that local copy or files you exported. Deleting phone logs affects that phone only. Shared deletions reach other devices when they reconnect. A deletion request made through the website cannot download records to a phone for you.

You can delete your cloud account in the app or request deletion at https://babytrackerlog.com/delete-account/. We may need to verify ownership. Google says its authentication-data deletion process can take up to 180 days, including backups. Other providers may retain limited account or security information under their policies. These periods are separate from our own backup retention.

Your privacy choices and questions

You can ask to access or correct personal information we hold, or raise a privacy complaint, through the form at https://babytrackerlog.com/contact/. Enter your contact details and message, then complete the security check and send the form. We may need to confirm your identity and authority. Please do not send passwords, invitation codes or baby logs.

We review privacy enquiries and complaints and handle requests under applicable law. Your rights depend on where you live. You may also contact your local privacy regulator; in Australia, information about privacy complaints is available from the Office of the Australian Information Commissioner at https://www.oaic.gov.au/privacy/privacy-complaints. We do not offer a separate support service to delete selected app records while keeping an account; you can manage individual records in the app. This does not limit rights you have under applicable law.

Optional features and this website

Photos and reminders are optional. We use the picture you select and remove its original location metadata from the saved copy. Camera access is used to scan caregiver invitation codes. Reminders are scheduled on your phone. The app does not request access to your contacts, microphone or location.

Website calculators do not send the information you enter to us. The checklist is saved in your browser only if you choose. Cloudflare Pages hosts the website, and Cloudflare Turnstile processes connection and challenge information to protect the contact form from spam. When you submit the form, Cloudflare delivers your message to our support inbox. We do not save contact submissions in a website database; copies remain in our email correspondence.

Google Analytics is optional and loads only after you accept it. It helps us understand website visits and app-store clicks. We do not send contact-form messages or calculator entries to Analytics, and we do not enable advertising personalisation or Google Signals. Analytics cookies are set for up to 90 days; your choice is remembered in your browser for up to six months. Use Cookie preferences in the footer to reject analytics or change your choice. Rejecting does not affect the website or app. Changing your choice stops future analytics collection in that browser; it does not automatically remove information Google has already received.

We update this policy when our practices change. The effective date appears above. Important changes to how information is used may also require notice or consent. Help with account management and deletion is available at https://babytrackerlog.com/help/ and https://babytrackerlog.com/delete-account/.