Privacy Policy

Effective date: March 1, 2026

1. Information We Collect

We collect the following information when you use BabySync:

  • Account information: Email address (via Google OAuth or Apple Sign-In).
  • Baby profile data: Baby name, date of birth, and gender — entered by you.
  • Activity records: Feeding, sleep, diaper, growth, and other caregiving records you log.
  • Usage data: App interactions for service improvement (no personally identifiable information).

2. How We Use Your Information

  • To provide and maintain the BabySync service.
  • To enable family sharing features between caregivers.
  • To generate aggregated data summaries for AI assistant integrations (e.g., ChatGPT MCP).
  • To process purchases via Paddle.
  • To send important service updates (no marketing without consent).

3. Data Storage & Security

Your data is stored on Supabase (PostgreSQL) with row-level security enforced at the database level — only you and authorized family members can access your data. All data is transmitted over HTTPS. We do not store payment information; payments are handled entirely by Paddle.

4. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data with:

  • Supabase: Database and authentication infrastructure.
  • Paddle: Payment processing (subject to Paddle's Privacy Policy).
  • Vercel: Hosting infrastructure.

5. AI Integrations

BabySync may provide aggregated, anonymized summaries of your activity records to AI assistants you have authorized (e.g., via ChatGPT custom GPTs). Raw records are never transmitted — only computed summaries (e.g., average feeding interval, total sleep duration). You control which AI assistants have access.

6. Children's Privacy

BabySync is designed for use by adult caregivers. We do not knowingly collect personal information directly from children under 13. Baby profile data (name, birth date) is entered by the adult caregiver and is protected by family-level access controls.

7. Your Rights

You have the right to:

  • Access and export your data at any time.
  • Correct inaccurate data.
  • Delete your account and associated data by contacting us.
  • Withdraw consent for optional data processing.

8. Cookies

We use session cookies solely for authentication purposes (managed by Supabase). We do not use tracking or advertising cookies.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or in-app notice.

10. Contact

For privacy-related requests or questions, contact us at tkvlfhtm@gmail.com.