Bundle of Joy
Privacy Policy
Last updated: March 7, 2026
Introduction
Bundle of Joy (“we”, “our”, “us”) is a baby tracking application designed for parents and caregivers. This Privacy Policy explains how we collect, use, and protect your information when you use our app at app.bundleofjoy.love.
We believe your family’s data belongs to you. We do not sell, share, or monetize your data in any way.
Information We Collect
Account Information
- Email address (used for authentication)
- Password (hashed, never stored in plain text)
Baby and Event Data
- Baby profiles (name, date of birth)
- Event logs you create: feeds, diapers, weight measurements, medicine doses
- Timestamps of events
- Which caregiver logged each event
Technical Information
- Basic server logs (IP address, browser type) for security and debugging
- No analytics, tracking pixels, or fingerprinting
How We Use Your Information
Your information is used exclusively to:
- Authenticate your account
- Store and display your baby tracking data
- Share data with caregivers you explicitly invite to your family
- Maintain and improve the service
We do not use your data for:
- Advertising or marketing
- Analytics or behavioral profiling
- AI training or machine learning
- Sale to third parties
Data Storage and Security
Infrastructure
- All data is stored in Supabase (PostgreSQL database hosted on AWS)
- Data is encrypted in transit (TLS) and at rest
- Database access is protected by Row Level Security (RLS) — each family can only access their own data
Access Control
- Only members of your family can see your data
- Family membership is controlled through secure invite links
- Caregivers can only edit or delete their own events
- Family owners can manage all events within their family
Third-Party Services
We use the following third-party services:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Database, authentication | Account and event data |
| RevenueCat | Subscription management | Anonymous app user ID, purchase receipts |
| Vercel | App hosting | Standard web server logs |
We do not use any advertising, analytics, or social media services.
Data Retention
- Your data is retained as long as your account is active
- You may request deletion of your account and all associated data at any time
- Upon account deletion, all personal data is permanently removed within 30 days
Your Rights (GDPR)
If you are in the European Economic Area, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Delete your data (“right to be forgotten”)
- Export your data (CSV export is available in the app)
- Object to processing of your data
- Restrict processing of your data
To exercise any of these rights, contact us at the email below.
Children’s Privacy
Bundle of Joy stores data about babies and children, entered by their parents or caregivers. We do not collect data directly from children. The app is intended for use by adults (parents and caregivers) only.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the app after changes constitutes acceptance of the revised policy.
Contact
If you have questions about this Privacy Policy or want to exercise your data rights, contact us at:
Email: privacy@bundleofjoy.love