Privacy Policy
Last updated:
Who this covers
Bundle of Joy is a baby tracker made by BundleOfJoy LLC (“we”, “us”). This policy covers the app at app.bundleofjoy.love, the Android and Wear OS apps on Google Play, and the website at bundleofjoy.love.
Your family’s data belongs to you. We do not sell your data, and apart from the ad measurement below, we do not share it with anyone for their own purposes.
What we collect
Your account
- Your email address, which you need for an account, and your password if you set one, stored hashed
- A display name, which you can change
- If you sign in with Google or Facebook: the email address, name, profile-picture link and account ID they send
Your baby’s data
- Baby profiles: name, date of birth and sex, which you need to add a baby, and an optional photo
- What you log: feeds, diapers, sleep, bath, tummy time, weight, height, head circumference, temperature and medicine, with any notes or photos
- When each entry happened and who logged it
Technical data
- Server and sign-in logs (IP address, browser type and, for a sign-in, your email), for security and debugging
- A push token, if you turn on reminders or connect a watch
- If you report a translation problem: what you wrote, the app’s language and version and your phone’s language, emailed to our support inbox with your address so we can reply
App analytics
We use PostHog to see what gets used and what breaks. It records:
- The screens you open, the actions you take and any errors
- How you reached the app: the site that sent you, any campaign tag on the link and, in the Android app, the install campaign (such as the page of our website you came from) and whether an ad brought you
- Your country (worked out from your IP address, which is not kept), time zone, device, app version and the number of people in your family
- Once a day, an outline of your account from our database: when your family was made, how many people and babies are in it, each baby’s birth month, how many entries were logged each day and of which kind, and the state of your subscription
- Changes to your subscription, such as a trial or a refund, with the plan, price, store, country of purchase and the store’s transaction ID
- What you do on RevenueCat’s subscription screens
Never your baby’s name, notes, amounts, photos or measurements. Session recording and automatic click capture are off. Once you sign in, it is filed under your account ID, a random code, never your name or email.
Analytics on your device follow your browser’s Do Not Track setting. Events sent from a server, such as subscription changes, are counted either way.
Ad measurement in the Android app
In the Android app only, Google Analytics for Firebase shows us which ads bring people in. Google gets:
- The first open, sign-up, finishing setup and first entry
- The basic events Firebase records itself, such as sessions and purchases
- An approximate location, from your IP address
- If an ad brought you, a reference to that ad
None of it says anything about your baby, and none of it is used for personalised ads or remarketing.
Outside the EU, EEA, UK and Switzerland, the app also shares your advertising ID and a Firebase app instance ID with Google, to match installs to ads. It uses neither inside them, going by your phone’s time zone and language. We use the advertising ID only as Google Play’s advertising ID policy allows. You can delete your advertising ID in Android’s settings, under Privacy, then Ads. How Google uses this data.
Website analytics
bundleofjoy.love uses PostHog with no cookies and nothing stored on your device, and follows Do Not Track. It counts page views, page exits and clicks on its main buttons, each with the site that sent you and any campaign tag on the link, under a code that changes every day.
How we use it
To run the app for you: sign-in, your family’s log, sharing it with the people you invite, subscriptions and account emails. To send the reminders you turn on, keep the service secure, and learn what to fix and which links and ads bring people in. Never to target ads at you, to profile you, or to train AI.
Our legal basis is our contract with you (the Terms) for running the app, your consent for reminders, and our legitimate interest for security, analytics and ad measurement.
Where it lives and who can see it
Your family’s data, photos included, is stored with Supabase in Ireland, encrypted in transit and at rest. Each family is walled off inside the database itself, so only the people in your family can see it. PostHog keeps its analytics on EU servers.
We are a US company and some of the services below are in the US. Data they receive from the EU, EEA, UK or Switzerland is covered by the Data Privacy Framework or standard contractual clauses.
Services we rely on
| Service | What for |
|---|---|
| Supabase | Database, sign-in and photo storage |
| Google Sign-In, Facebook Login | Optional sign-in. Nothing is posted |
| PostHog | App and website analytics, and error reports |
| RevenueCat | Subscriptions: your account ID, purchase receipts, device and app version, the Firebase app instance ID where the app shares it, and your email address if you buy in a browser |
| Google Analytics for Firebase | Ad measurement in the Android app |
| Google Play, Stripe | Payments. Full card numbers never reach us |
| Firebase Cloud Messaging | Reminders you turn on: your push token and the reminder, which names your baby. A connected watch: its push token and a signal to refresh, which carries only an ID |
| Resend | Account emails, such as sign-in codes and password resets, and translation reports to our support inbox |
| Upstash | Rate limiting: your IP address or email address, held for up to an hour |
| Vercel | Hosting and server logs |
No company uses Bundle of Joy to collect data about what you do on other sites and apps, except Google in the Android app and the sign-in or payment service you pick.
Keeping and deleting your data
- We keep your account and your family’s data while your account is active, server and sign-in logs for as long as they help keep the service secure, and analytics until you delete your account or ask us to delete them
- Delete your account in the app under Settings > Data & Privacy > Delete My Account, or email privacy@bundleofjoy.love. It leaves our database at once and our backups within 30 days
- If others are still in your family, the entries you logged and the baby profiles stay with it, credited to its admin. If you were the last member, the family, its babies, entries and photos go too
- We keep a record of the deletion, including your email address, for as long as we may need to show it was done. Purchase records stay with RevenueCat and the store you paid through
Your rights
Wherever you live, you can ask to see, correct, delete or export your data, or restrict or object to how we use it. You can edit entries in the app and export them under Settings > Data & Privacy. For anything else, including withdrawing consent, email privacy@bundleofjoy.love. In the EU or EEA you can also complain to your data protection authority, in Switzerland to the FDPIC, or in the UK to the ICO.
Children
Bundle of Joy is for adults (18+). Parents and guardians enter data about their children. We do not knowingly collect personal information from children under 13, or the age that applies where you live, and we delete any we find.
Changes to this policy
Changes appear on this page with a new date.
Contact
The data controller is BundleOfJoy LLC, a Wyoming limited liability company.
Email: privacy@bundleofjoy.love
Post: BundleOfJoy LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, United States
Read the short version on the private baby tracker page, or ask us anything at hello@bundleofjoy.love.