Bundle of Joy
Privacy Policy
Last updated: March 7, 2026
Introduction
Bundle of Joy (“we”, “our”, “us”) is a baby tracking application designed for parents and caregivers. This Privacy Policy explains how we collect, use, and protect your information when you use our app at app.bundleofjoy.love and via the Google Play Store.
This policy applies regardless of how you access the app, whether through a web browser, as an installed PWA, or through an app store.
We believe your family’s data belongs to you. We do not sell, share, or monetize your data in any way.
Information We Collect
Account Information
- Email address (used for authentication)
- Password (hashed, never stored in plain text)
Baby and Event Data
- Baby profiles (name, date of birth)
- Event logs you create: feeds, diapers, weight measurements, medicine doses
- Timestamps of events
- Which caregiver logged each event
Technical Information
- Basic server logs (IP address, browser type) for security and debugging
- No analytics, tracking pixels, or fingerprinting
How We Use Your Information
Your information is used exclusively to:
- Authenticate your account
- Store and display your baby tracking data
- Share data with caregivers you explicitly invite to your family
- Maintain and improve the service
We do not use your data for:
- Advertising or marketing
- Analytics or behavioral profiling
- AI training or machine learning
- Sale to third parties
Data Storage and Security
Infrastructure
- All data is stored in Supabase (PostgreSQL database hosted on AWS)
- Data is encrypted in transit (TLS) and at rest
- Database access is protected by Row Level Security (RLS), so each family can only access their own data
Access Control
- Only members of your family can see your data
- Family membership is controlled through secure invite links
- Caregivers can only edit or delete their own events
- Family owners can manage all events within their family
Third-Party Services
We use the following third-party services:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Database, authentication | Account and event data |
| RevenueCat | Subscription management | Anonymous app user ID, purchase receipts, device platform, app version |
| Google Play | App distribution and billing | Purchase history, transaction IDs (for subscriptions purchased via Google Play) |
| Vercel | App hosting | Standard web server logs |
RevenueCat’s SDK may collect device-level identifiers (such as vendor ID) solely for subscription management. No advertising identifiers are collected.
We do not use any advertising, analytics, or social media services.
For a summary of our data practices, you can also review the Data Safety section on our Google Play Store listing.
Data Retention and Account Deletion
- Your data is retained as long as your account is active
- You can delete your account from within the app via Settings > Account > Delete Account
- You can also request account deletion by emailing us at the address below
- Upon account deletion, all personal data (account info, baby profiles, event logs) is permanently removed within 30 days
- Anonymized, aggregated data that cannot be linked back to you may be retained for service improvement
Your Rights (GDPR)
If you are in the European Economic Area, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Delete your data (“right to be forgotten”)
- Export your data (CSV export is available in the app)
- Object to processing of your data
- Restrict processing of your data
To exercise any of these rights, contact us at the email below.
Children’s Privacy
Bundle of Joy stores data about babies and children, as entered by their parents or legal guardians. The app is intended for use by adults (18+) only.
- We do not knowingly collect personal information directly from children under 13 (or the applicable age in your jurisdiction)
- All data about children is entered and managed by their parent or legal guardian
- If we become aware that we have inadvertently collected personal information from a child under 13, we will promptly delete it
If you believe a child has provided us with personal information, please contact us at the email below.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the app after changes constitutes acceptance of the revised policy.
Contact
If you have questions about this Privacy Policy or want to exercise your data rights, contact us at:
Email: privacy@bundleofjoy.love