Privacy policy

About Baby Tracker

Baby Tracker: Feeding Log is made by Vasser Studios for parents and caregivers. You can use the tracker without an account. Cloud backup and family sharing are optional. We do not sell your information or use baby records for advertising.

What you save

You choose what to add: your baby's name, date of birth, sex and profile picture; feeds, nappies, sleep, weight, height and head circumference; and notes. Timers save pauses and breastfeeding sides. You can add an optional caregiver label, such as Mum, Dad or Grandma. Labels and the original author of an entry or note are visible to your family caregivers. Editing an entry does not change its author. We do not keep editor identities or a revision history.

Your phone keeps an encrypted copy of your logs so they work offline. Protect your phone with a passcode: anyone using your unlocked phone may be able to open the app. Without a cloud account or exported backup, losing your phone or uninstalling the app may mean losing your logs.

Optional cloud backup and sharing

Create a free account to back up your logs and sync them across Android and iOS devices. Firebase, a Google service, handles your email address, password and sign-in. We do not keep a separate copy of your password. Sign in to the same account on another phone to restore records that have synced. Password reset uses your email address. Records that have not synced remain only on the original phone. We ask Firebase to send account emails in your chosen language.

Your family can have up to eight accounts, including the primary account holder. The first account is the primary. Only the primary can invite or remove caregivers, delete a child's profile, and see caregiver account email addresses to manage access. Everyone in the family can view and edit every child's structured care records and add children. Each caregiver can write and edit their own notes; the primary can remove another caregiver's note. Only invite people you trust. Email verification is required to invite or join a family. Invitation codes are private, single use and expire after ten minutes.

Your cloud data is encrypted while travelling between your phone and Google's servers, and while stored on those servers. Google manages the encryption keys. This means authorised administrators may access records when needed to run and support the service. This differs from end-to-end encryption, where only your own devices hold the keys. The database is in Sydney, Australia. Google may process account and service information in other countries, including IP addresses, device and connection information. See https://firebase.google.com/support/privacy and https://policies.google.com/privacy.

Sync needs an internet connection and is subject to service availability and usage limits. Keep your phone clock accurate. Cloud backup cannot guarantee recovery from every kind of data loss. Pull down inside the baby selector to refresh shared profiles. Manual refresh and sync have a short cooldown; new records continue syncing automatically.

Your choices and deletion

You can edit or delete entries and replace or remove the profile picture. Changes reach other family devices after syncing. A small deletion record may remain to prevent an old entry reappearing. An earlier encrypted phone copy can remain until it is replaced by a later save.

Use only this phone stops cloud sync and keeps your phone copy. Delete phone logs removes all baby records saved on that phone; it does not delete cloud records, other devices or files you exported. Appearance and reminder preferences may remain.

Sign out first tries to sync your outstanding changes. If that fails, your phone copy stays available so you can retry. Successful sign-out removes that account's downloaded logs from this phone. Separate local-only baby profiles stay on the phone. Sign in again to restore synced records.

Delete my account requires your password and an internet connection. Deleting a secondary caregiver's account deletes the entries they originally added, including feeds, nappies, sleep and growth measurements, even if someone else later edited them. It also deletes their own notes, caregiver labels, invitations and account information, including contributions in families they previously left. Entries added by other caregivers remain, including changes the deleted caregiver made to those entries. We do not keep editor identities or undo those changes. Other caregivers' notes remain unless their parent entry is deleted. The child's profile and picture remain with the family.

Deleting the primary account permanently deletes every baby's profile and all family cloud records. Other caregivers lose access to that family, but their own accounts are not deleted. Ownership is not transferred. Separate local-only baby logs remain on this phone; saved account logs are removed. Unsynced account records may be lost. If deletion is interrupted, retry Delete my account to finish.

Content-free deletion markers may remain to stop old copies returning. They do not identify the deleted caregiver. Connected devices receive deletions after syncing; permanently offline devices and exported copies cannot be erased remotely. Google may retain security logs and service copies under its retention policies.

A secondary caregiver can leave the shared family without deleting their account. Leaving removes access and that family's saved logs from their phone; their shared records and notes remain. The primary can also remove a caregiver's access. Removing access does not remotely erase copies previously saved or exported. The caregiver can still delete their originally added entries, own notes and account information later by deleting their account.

The primary can delete an individual child and all associated cloud records for every caregiver. Other children and accounts remain. Connected app copies are removed when the deletion reaches them; permanently offline copies and exported files cannot be erased remotely.

How long we keep your data

Local-only logs stay on your phone until you delete them or remove the app. Exported files stay wherever you save them until you delete them there.

Cloud family logs may be removed after 36 months without online use by any current caregiver. Opening the app while online with cloud sync enabled keeps the whole family's cloud logs active. Using only local mode does not count as cloud activity.

Before inactivity cleanup, we will email the current caregivers at their account email addresses and allow at least 30 days to return or export a backup. Returning online with cloud sync enabled before deletion cancels the cleanup. Keep your email address up to date and check spam or junk folders.

Inactivity cleanup is not active yet. When introduced, it will remove cloud family profiles, photos, logs and sharing access, while keeping records already downloaded on your phone available in local mode. It will not delete sign-in accounts or exported files. Records not saved on a phone or in an exported backup cannot be restored after cloud deletion. You can delete your account separately as explained above.

Backups and PDF summaries

Export data creates a ZIP backup of the selected baby's profile, picture and logs. Import data accepts that ZIP or an existing JSON backup, shows a preview and asks before adding missing records. Existing records are kept. Account passwords, sign-in details and device encryption keys are not included. Imported records also sync if that baby is shared with your family.

Save as PDF creates a readable weekly or monthly care and growth summary. A PDF cannot restore the app. Backups and PDFs are not password protected: anyone who has the file can read it.

You choose where to save or send exported files using your phone's share sheet. The chosen app or drive handles the file under its own privacy policy. Import uses the file picker to choose an existing backup. The app temporarily keeps export files in its private cache and tries to remove copies older than 24 hours on a later launch or export. Copies you save or send stay with the receiving app, drive or person until you delete them there.

Photos, reminders and growth charts

You choose a profile picture using the photo picker. The app makes a smaller copy and removes original location metadata before saving or syncing it. Your original picture is unchanged. Camera access is optional and used only to scan an invitation QR code on your phone; scanning images are not saved or uploaded. You can paste a code instead.

Reminders are off until you enable them and allow notifications. They are scheduled on your phone, contain no baby details and do not use a push-notification server. Delivery depends on phone settings. Reminder choices, appearance and basic app preferences stay on this device. You can turn reminders off in the app or phone settings.

Growth charts use WHO reference tables stored on your phone. No baby data is sent to WHO, and charts do not compare your baby with other app users. They are a record-keeping aid, not a diagnosis or medical schedule. Speak with your health professional about growth or feeding concerns.

Tracking and permissions

This version has no ads, analytics or automated crash-reporting service. It does not ask for location, contacts, microphone access or health records. The app does not read your other photos. Copying an invitation or support details places that text on your clipboard, which your operating system or other apps may access.

Google Play, the Apple App Store and your operating system handle their own installation and diagnostic information under their privacy policies. This app is intended for adults recording information about a baby. Only enter information you are comfortable storing and sharing.

Using this website

This website has no account login and does not access your app's cloud log. Its calculators run in your browser; entered values are not sent to us or WHO. If you choose to remember the newborn checklist, it is stored in that browser until you clear it or clear browser storage. Contact and deletion links open your email app; nothing is sent until you send the email.

Contact and policy updates

For help or a request to access, correct or delete information, email [email protected]. We may need to confirm your identity. We receive your email address, message and any attachments and use them to respond. Microsoft handles delivery and storage of support email. Please avoid sending baby logs, passwords or invitation codes unless necessary for your request.

The website and online policy are hosted on Cloudflare Pages. Cloudflare processes website requests and connection information under https://www.cloudflare.com/privacypolicy/. We add no advertising or analytics scripts. You can read the app's policy inside the app without visiting the website. We update it when our practices change; the effective date appears above.