Privacy Policy

Last updated 6 September 2026

Our Baby Day records the most personal details of your family’s days. This policy explains, plainly, what the app collects, where it goes and what you can do about it. The short version: your data is yours. It is never sold and never used for advertising.

Who we are

Our Baby Day (“the app”) is developed and operated by Daniel Chew (“we”, “us”). We are the data controller for the information described here. You can reach us at cctdaniel@outlook.com.

Two ways to use the app

How much of your data leaves your phone depends on one choice: whether you share your baby’s records with other caregivers.

On your own

Without family sharing, everything you log stays on your iPhone and in your own private iCloud, where Apple keeps it under your Apple Account. The app makes no calls to our servers in this mode. We never receive your baby’s records.

With family sharing

When you sign in and invite a partner, grandparent or nanny, the records you share are stored on our servers so every caregiver’s phone can see the same day. Those servers are hosted for us by Supabase in the United States. Data is encrypted in transit and at rest, and every request is checked by the database against your family’s membership before a row is read or written. It is not end-to-end encrypted: like any shared service, we could technically read it. We do not, except where needed to fix a problem you ask us to look at.

What we collect

With family sharing on, the following is stored on our servers:

  • Account details. Your email address if you sign in by email, or the identifier Apple gives us if you use Sign in with Apple, plus a user ID we generate. We use these only to sign you in and to tell your family who is who.
  • Your baby’s profile. Name, nickname, date of birth and profile photo.
  • Care records. Feeds, sleep, diapers, pumping, solids, tummy time, growth measurements, milestones, health entries such as temperatures and medicine doses, and daily photos.
  • Family membership. Who belongs to the family, their role, and invite codes with their attempts, so invites cannot be guessed.
  • Subscription status. Whether your family has Premium, mirrored from your App Store purchase so it unlocks for every caregiver. We do not see your payment details; Apple handles those.
  • Push tokens. An anonymous token for each signed-in device so that when one phone logs something, the others can wake up and refresh.
  • Ask usage. How many Ask questions your family has used this month and when. We do not store the questions or answers themselves.

Photos are stored in a private bucket that is never reachable at a public link. Only signed-in members of your family can download them.

Ask, the in-app assistant

Ask answers questions about your baby’s day using an AI model. When you ask something, the question, the relevant records the app looks up to answer it, and a small summary of recent activity are sent through our server to OpenRouter, which routes the request to a model provider. We send it with a setting that forbids providers that retain prompts or train on them, and we have turned off data training at the account level. Caregiver names are stripped from what is sent. The conversation itself lives only on your phone; our servers keep a count of uses, not the content.

Voice input is transcribed on your device using Apple’s speech recognition. Audio never leaves your phone.

Who else handles your data

We use a small number of service providers, each for one job. We do not share your data with anyone else, and we never sell it.

  • Apple: iCloud storage in local-only mode, Sign in with Apple, App Store purchases and push notification delivery.
  • Supabase: our database, authentication, photo storage and server functions, hosted in the United States.
  • Resend: sends the one-time code when you sign in by email.
  • OpenRouter and the model providers it routes to: answer Ask questions, under the no-retention setting described above.

The app contains no analytics, advertising or tracking software. We do not track you across other apps or websites.

Where your data is processed

If you use family sharing, your data is stored in the United States. If you live elsewhere, it is transferred there in order to provide the service. Our providers commit contractually to protect it.

How long we keep it

Shared records are kept for as long as your family exists so that every caregiver keeps the same history. They are deleted when the last member deletes their account. Sign-in codes expire within minutes. Push tokens are dropped when a device signs out.

Deleting your account

You can delete your account from Settings in the app at any time. What happens depends on your family:

  • If you are the only member, the family and everything in it is deleted from our servers: babies, records, photos, invites and subscription status.
  • If other caregivers remain, your membership is removed and the family’s records stay with them. If you were the owner, the longest-standing remaining member becomes the owner.

Deleting your account does not erase the data on your own phone or in your iCloud; you can remove that by deleting the app or using the erase option in Settings.

Removing a caregiver from your family stops sharing with them from that moment. It does not reach into their phone to remove what it already held.

Your rights

You can see and edit everything the app holds about your family from inside the app. Depending on where you live, you may also have the right to ask for a copy of your data, to correct it, to delete it, to restrict how it is used, or to complain to a supervisory authority. To exercise any of these, email cctdaniel@outlook.com from the address on your account. We answer within 30 days.

Children

Our Baby Day is made for parents and caregivers. It is not directed at children, and we do not knowingly collect information from anyone under 13 (or the age of digital consent where you live). The records in the app are about your baby, entered by you, and are treated as your data. If you believe a child has created an account, contact us and we will delete it.

Security

No secrets or API keys ship inside the app; every model call goes through our server. Database access is enforced row by row against family membership. Photos are downscaled before upload and stored in a private bucket. We review the app and its backend for security issues and fix what we find. No system is perfectly secure, and we cannot promise that yours will never be breached; if it is, we will tell you.

Changes to this policy

If we start sending data somewhere new, or change what we collect, we will update this page and change the date at the top. Material changes will also be flagged in the app.

Contact

Questions, requests or concerns: email cctdaniel@outlook.com. See also our Terms of Service.