Privacy
Last updated October 26, 2026
- We never sell or share your data. There are no ads and no ad trackers.
- You can export everything at any time, as a CSV you can open anywhere.
- Deleting your account removes it from our servers. A family you share with other caregivers stays with them. How to delete your account.
What we collect
- Account: an email and password, an email sign-in code, a Sign in with Apple identifier on iPhone, or the name, email, and Google account identifier from Google sign-in, plus your caregiver name. You can also continue as a guest on this phone, without an email.
- Your family’s logs: the entries you add, like feeds, sleep, diapers, pumping, growth, temperature, medications, vaccines, appointments, milestones, notes, and photos you attach, plus your baby’s name, birth date, and profile photo if you add one. If you save them, we also store a pediatrician’s name, practice, and phone for visit reports.
- Subscription status: whether your plan is active. Payment details stay with Apple or Google Play, depending on where you subscribed. We never see your card. The store and RevenueCat keep purchase records for billing.
- Push notifications: a push token for this device, so we can deliver the reminders you turn on. On iPhone that token is for Apple Push Notification service. On Android, Expo (push delivery) sends reminders through Google Firebase Cloud Messaging (Android notifications). We don’t use the token for marketing.
- Voice, Ask Chompy, and AI recaps: on Android, classic voice uses your phone’s Google speech recognition service. Google handles that audio under Google’s privacy policy, and it is not sent to our servers. Premium voice and Ask Chompy send the words you speak or type to xAI, with recent log context when an answer needs it. AI recaps, narration, and summaries also send baby activity stats to xAI so it can write and read them (Premium). We don’t use your family’s data to train AI models.
- Apple Watch and Wear OS: Apple Watch syncs the day’s logs with the iPhone. The Wear OS app receives a snapshot from the Android phone over the watch Data Layer and can read and write the family’s logs on our servers, the same way the phone does.
How we use it
Only to run BabyCroc for you: syncing your timeline across your family’s devices, showing trends and recaps, sending the reminders you turn on, and answering support emails. We don’t build advertising profiles, and we don’t use your family’s data to train AI models. Adding an appointment to your phone’s calendar stays on the device. We don’t read your calendar or upload those events.
Who can see your family’s data
Only the caregivers you invite to your family. You can remove, block, or unblock a caregiver, or rotate the invite code, at any time from Account → Family & caregivers. A guest who joins with a code and no Apple, Google, or email account is tied to that phone until they sign in. Blocking pauses their access immediately. Logs they already wrote stay in the family, with their name.
Export and leaving
Account → Export data downloads every entry as a CSV. You can remove a single child with “Stop tracking” on their profile. Account → Email & sign-in → Delete account removes your sign-in, your caregiver profile, and your notification tokens. If you created a family and no other caregiver belongs to it, that family is deleted too, including the babies, logs, photos, and recaps. Photos for that family are removed from storage. If a photo cannot be removed, the account is still deleted. Logs and photos in a family shared with other caregivers stay with that family. Purchase records stay with Apple, Google Play, and RevenueCat. Deleting your account does not cancel a subscription. Cancel it in the store first. If you can’t open the app, the steps are on the delete account page.
Children
BabyCroc is used by parents and caregivers. It isn’t directed to children, and we don’t knowingly collect information from children under 13 as users.
Alexa
If you enable the BabyCroc Alexa skill and link your account, Amazon sends us the request you spoke, such as a feed, nap, diaper, or pump, and a token for your BabyCroc account. We save that log the same way the app does, and we keep a revocable link so Alexa can sign in again. Disabling the skill revokes the link. Alexa requests are not sent to xAI.
Contact
Questions or requests: support@babycroc.app.
Service providers
A few service providers process data on our behalf, under contracts that limit them to providing their service:
- Supabase stores your account, logs, and photos, encrypted in transit and at rest.
- RevenueCat handles subscription status. Apple and Google Play take payment, depending on where you subscribed. We never see your card.
- Apple Push Notification service delivers the reminders you turn on on iPhone. On Android, Expo (push delivery) delivers them through Google Firebase Cloud Messaging (Android notifications), using the device token we store.
- Google provides Google sign-in (name, email, and Google account identifier, when you choose it) and, on Android, the Google speech recognition service for classic voice.
- Amazon receives what you say to the BabyCroc Alexa skill, if you enable it, and sends that request to us so we can save the log.
- xAI processes Premium voice and Ask Chompy, and writes and narrates AI recaps and summaries. Those requests can include baby activity stats. Only what is needed for that request is sent.
That’s the whole list: Supabase, RevenueCat, Apple, Google Play, Apple Push Notification service, Expo (push delivery), Google Firebase Cloud Messaging (Android notifications), Google, Amazon, and xAI.
We don’t sell, rent, or trade your data, and we don’t share it with advertisers or data brokers.