Privacy Policy

BabyTalk holds some of the most personal information a family has: your child's allergies, medications, routines and emergency contacts. This policy explains what we collect, what we do with it, and who can see it.

Who this policy covers

It covers the BabyTalk website at baby-talk.tech, the BabyTalk web app and the BabyTalk mobile apps. "You" means a parent or guardian with an account, or a person who opens a link a guardian shared with them.

What we collect

Your account

• Your email address, and your name if you choose to give one.
• A password, if you sign up with email. It's stored in hashed form by our authentication provider, and we can't read it.
• If you sign in with Google, the basic profile details Google sends us, such as your name and email address. We never see your Google password.

Your children's profiles

Only what you choose to enter. Depending on what you fill in, a profile can include:

• Name, birthday, your relationship to the child, and a photo.
• Day-to-day care: naps, feeding, diaper size, routines, and notes on food and settling.
• Health information: allergies and their severity, whether the child carries an EpiPen and where it's kept, medical conditions, medications, and the pediatrician's name and phone number.
• Emergency contacts: the names and phone numbers of the people you list.

Only a first name is required. Everything else is optional.

Share links

When you create a link we store who it's for (the name you type and whether they're a school, sitter or family), which children and sections it includes, when it expires, and whether you've turned it off. If the link has a 4-digit code, we store a scrambled (hashed) version of it and never the code itself. We also count wrong code attempts in a row so the link can be locked.

Technical information

• A sign-in session is kept on your device so you stay signed in. We don't use advertising cookies.
• Like almost every online service, the companies that host BabyTalk keep standard server logs, which can include your IP address and browser type, to keep the service running and secure.

What we don't collect

We don't collect your location, your phone's contact list, or your browsing activity on other sites. The app only reads a photo when you pick one for a child's profile.

How we use it

• To show your children's profiles to you, and to the people you share them with.
• To sign you in and keep your account secure.
• To send account emails, such as confirming your address or resetting your password.
• To fix problems and protect the service from abuse.

We don't use your information, or your children's, for advertising or marketing profiles.

We never sell your data

We don't sell, rent or trade your personal information or your children's, and we don't share it with companies for their advertising or marketing. If BabyTalk ever introduces paid features, that won't change: the product is the service, not your family's information.

Who can see a child's profile

• You. Each profile is tied to your account, and our database is set up so that other accounts can't read it.
• People you send a link to. A link is read-only. It shows only the children and sections you picked, except that allergy alerts are always included, for the child's safety. Profile photos are not shown on shared links.

A link works until the end date you set or, if you chose to leave it open, until you turn it off. You can turn off any link at any time from the app. If you add a 4-digit code, the link locks for an hour after ten wrong guesses in a row.

Anyone who has both the link and its code can view what it shares, so send them only to people you trust, and send the code separately. Recipients don't need an account, and we don't ask them for any personal information.

Companies that help us run BabyTalk

We use a small number of service providers. They process data on our behalf to provide their service, not for their own purposes.

• Supabase stores the database, handles sign-in, and holds profile photos in private storage.
• Cloudflare hosts and delivers the website and web app.
• Google provides Google sign-in, if you choose to use it, and the fonts our pages load, which means your browser contacts Google's font servers.

We may also disclose information if the law requires it, or to protect someone's safety. If BabyTalk were ever acquired or merged, your information would stay covered by the promises in this policy unless you agreed otherwise.

How we protect it

• Data is encrypted in transit between your device and our servers.
• Access rules in the database limit each profile to the account that created it.
• Photos are kept in private storage and shown through temporary links that expire.
• Link codes are stored hashed, and repeated wrong guesses lock the link.

No online service can promise perfect security. If we learn of a breach that affects your information, we'll tell you.

Keeping and deleting your data

We keep your information for as long as you have an account. You can edit a child's profile and turn off share links in the app at any time. To delete a child's profile or your whole account, email [email protected] from the address you signed up with. Deleting your account removes your children's profiles, photos and share links with it. Copies in routine backups are removed as those backups expire.

Your choices and rights

You can ask us for a copy of your information, ask us to correct it, or ask us to delete it. Depending on where you live, you may have further rights under local privacy law, such as objecting to certain uses or complaining to a regulator. Email[email protected] and we'll help.

Children's privacy

BabyTalk is for parents and guardians, who must be adults. Children don't have accounts and aren't meant to use the service. Information about a child is entered by their parent or guardian, who controls who it's shared with and can ask us to delete it at any time.

Changes to this policy

If we change this policy we'll update the date at the top of this page. If a change meaningfully affects how we handle your information, we'll let you know by email or in the app before it takes effect.

Contact

Questions or requests about privacy: [email protected].