BabyCroc

Privacy

Last updated October 26, 2026

The short version
  • We never sell or share your data. There are no ads and no ad trackers.
  • You can export everything at any time, as a CSV you can open anywhere.
  • Deleting your account removes it from our servers. A family you share with other caregivers stays with them. How to delete your account.

What we collect

How we use it

Only to run BabyCroc for you: syncing your timeline across your family’s devices, showing trends and recaps, sending the reminders you turn on, and answering support emails. We don’t build advertising profiles, and we don’t use your family’s data to train AI models. Adding an appointment to your phone’s calendar stays on the device. We don’t read your calendar or upload those events.

Who can see your family’s data

Only the caregivers you invite to your family. You can remove, block, or unblock a caregiver, or rotate the invite code, at any time from Account → Family & caregivers. A guest who joins with a code and no Apple, Google, or email account is tied to that phone until they sign in. Blocking pauses their access immediately. Logs they already wrote stay in the family, with their name.

Export and leaving

Account → Export data downloads every entry as a CSV. You can remove a single child with “Stop tracking” on their profile. Account → Email & sign-in → Delete account removes your sign-in, your caregiver profile, and your notification tokens. If you created a family and no other caregiver belongs to it, that family is deleted too, including the babies, logs, photos, and recaps. Photos for that family are removed from storage. If a photo cannot be removed, the account is still deleted. Logs and photos in a family shared with other caregivers stay with that family. Purchase records stay with Apple, Google Play, and RevenueCat. Deleting your account does not cancel a subscription. Cancel it in the store first. If you can’t open the app, the steps are on the delete account page.

Children

BabyCroc is used by parents and caregivers. It isn’t directed to children, and we don’t knowingly collect information from children under 13 as users.

Alexa

If you enable the BabyCroc Alexa skill and link your account, Amazon sends us the request you spoke, such as a feed, nap, diaper, or pump, and a token for your BabyCroc account. We save that log the same way the app does, and we keep a revocable link so Alexa can sign in again. Disabling the skill revokes the link. Alexa requests are not sent to xAI.

Contact

Questions or requests: support@babycroc.app.

Service providers

A few service providers process data on our behalf, under contracts that limit them to providing their service:

  • Supabase stores your account, logs, and photos, encrypted in transit and at rest.
  • RevenueCat handles subscription status. Apple and Google Play take payment, depending on where you subscribed. We never see your card.
  • Apple Push Notification service delivers the reminders you turn on on iPhone. On Android, Expo (push delivery) delivers them through Google Firebase Cloud Messaging (Android notifications), using the device token we store.
  • Google provides Google sign-in (name, email, and Google account identifier, when you choose it) and, on Android, the Google speech recognition service for classic voice.
  • Amazon receives what you say to the BabyCroc Alexa skill, if you enable it, and sends that request to us so we can save the log.
  • xAI processes Premium voice and Ask Chompy, and writes and narrates AI recaps and summaries. Those requests can include baby activity stats. Only what is needed for that request is sent.

That’s the whole list: Supabase, RevenueCat, Apple, Google Play, Apple Push Notification service, Expo (push delivery), Google Firebase Cloud Messaging (Android notifications), Google, Amazon, and xAI.

We don’t sell, rent, or trade your data, and we don’t share it with advertisers or data brokers.