BabyKoa Privacy Policy

Last updated: June 10, 2026

BabyKoa ("we", "the app") is a baby-tracking app for parents and caregivers. This policy explains what we collect, why, and what we never do with it.

The short version

• Your baby's data belongs to you. We never sell it, never share it with advertisers, and never use it for marketing.
• Everything is stored encrypted in transit and at rest.
• You can permanently delete your account and all data from inside the app at any time (Settings → Delete account).

What we collect

• Account: your email address and a display name (via email sign-up, Sign in with Apple, or Google).
• Baby profile: the name, date of birth, sex, region, and optional photo you enter for each child.
• Care logs: feeds, diapers, sleep, pumping, temperature, medication, milestones, growth measurements, vaccinations, allergies, and routines you record.
• Voice input: when you use the voice logging agent, your speech is transcribed on-device by Apple's speech framework; only the resulting text of your command is processed to create the log entry.
• Purchases: subscription status via RevenueCat and Apple. We never see your payment details.

How AI features use your data

The "Ask" assistant answers using your baby's logged data as context. Conversations are processed by our AI provider solely to generate the response; they are not used to train models. AI answers are general parenting guidance, not medical advice.

Where your data lives

Data is stored with Supabase (managed PostgreSQL) protected by row-level security: only members of your family household can read your baby's data. Photos are stored in private buckets with signed, expiring URLs.

Third parties we rely on

• Supabase — database, authentication, storage
• RevenueCat — subscription management
• Apple / Google — optional sign-in providers

None of them are permitted to use your data for their own purposes. We use no advertising or cross-app tracking SDKs (our privacy manifest declares no tracking).

Children's privacy

BabyKoa is used by adults (parents and caregivers). Information about children is entered and controlled entirely by their parent or guardian and is used only to provide the tracking features.

Data retention & deletion

Your data is kept while your account is active. Deleting your account (Settings → Delete account) permanently erases your account, the families you own, and all their logs. Family members you invited lose access at the same moment. Deletion is immediate and irreversible.

Your rights

You can export your data (Settings → Data export), correct it in-app, or delete it entirely. For GDPR/KVKK requests or anything else: [email protected].

Changes

If this policy changes materially we will notify you in the app before the change takes effect.