The privacy of your data — and it is your data, not ours — is a big deal to us. In this policy, we lay out what data we collect and why, how your data is handled, and your rights with respect to your data. We promise we never sell your data.
This policy applies to BabyLog, a product built and maintained by Second Wave LLC ("Company", "we", "us", or "our").
What We Collect and Why
Our guiding principle is to collect only what we need. Here's what that means in practice:
Identity & Access
When you sign up for BabyLog, we ask for identifying information such as your email address and name. We use this information to identify you, send you important updates, and provide customer support when needed.
We also store information from third-party login providers (Apple Sign-In, Google Sign-In) including your unique user ID and email address. We do not receive or store your password from these providers.
Baby & Parenting Data
BabyLog is designed to help you record and track your baby's daily life. You choose what to record, which may include:
- Basic information: Baby's name, birth date, gender, birth weight/length
- Growth records: Height and weight measurements over time
- Daily care: Feeding (breastfeeding, bottle, solid food), diaper changes, sleep patterns
- Health records: Medications, vaccinations, doctor visits, symptoms
- Developmental milestones: First steps, first words, and other achievements
- Photos and notes: Images and observations you choose to attach
Important: Some of this data, particularly health records, medications, and medical visits, may be considered sensitive health information. We process this data based on your explicit consent, which you provide each time you create or update records. You can withdraw consent by deleting records or your account.
AI-Generated Insights
BabyLog uses artificial intelligence to provide parenting insights based on your recorded data. Here's how it works:
- Your baby's data is sent to our AI providers (OpenAI and Google Gemini) to generate personalized insights
- Data is processed in real-time and is not stored by AI providers for training purposes
- We have data processing agreements with these providers that prohibit using your data for model training
- AI insights are suggestions only — they are not medical advice
Billing Information
When you subscribe to BabyLog Pro, payment is processed entirely through Apple App Store or Google Play Store. We do not collect, process, or store your credit card information, billing address, or other payment details. Your subscription is managed through your app store account.
Geolocation Data
We log the IP address you use to sign up and access our service. We use this information for security purposes (detecting suspicious activity) and to determine your timezone for accurate date/time display in the app.
Website Interactions
We collect information about your activity within the app for analytics purposes. This helps us understand how features are used and where we can improve. This data is aggregated and does not identify individual users.
Device Permissions
When using BabyLog, we may request access to the following features on your device:
- Camera: To capture photos for records and memories
- Photo Library: To select existing photos to attach to records
- Notifications: To send reminders for feeding, sleep, medications, and other scheduled activities
You can change these permissions at any time in your device's settings. Please note that disabling certain permissions may limit some features of the app.
When We Access or Share Your Data
Our default practice is to not access your data. We only access your data in the following circumstances:
To provide support
If you contact us for help, we may need to access your account to assist you. We will always ask for your consent before accessing your data for support purposes.
To investigate security issues
If we detect unusual activity on your account, we may access logs and account data to investigate potential security breaches.
Family Sharing
BabyLog allows you to share baby data with family members:
- You can invite family members to join your family group
- All family members can view and create records for babies in the family
- The family owner controls membership and can remove members
- When you leave or are removed from a family, you immediately lose access to that family's data
- Family ownership can be transferred to another member
Third-Party Services
We use the following categories of service providers to operate BabyLog:
- Cloud hosting providers for application and database hosting
- Cloud storage providers for photos and file storage
- Authentication providers (Apple Sign-In, Google Sign-In)
- AI service providers (OpenAI, Google Gemini) for generating content
- Email service providers for transactional emails
- App stores (Apple App Store, Google Play) for subscription billing
We have data processing agreements with all providers that require them to protect your data and use it only for providing services to us.
Law Enforcement
We may disclose your information to law enforcement if we are compelled to by a legally binding order. If permitted, we will notify you of such requests. We have never received a national security order or been subject to a gag order.
Aggregated and De-identified Data
We may share aggregated, de-identified data that cannot reasonably identify you. For example, we may publish statistics about general usage patterns.
Your Rights
You have the right to:
- Know what personal information we collect, use, and share
- Access your data — you can export all your data from the app
- Correct inaccurate information in your account
- Delete your data — you can delete individual records or your entire account
- Port your data to another service in a standard format
- Withdraw consent for data processing at any time
- Object to certain processing activities
- Lodge a complaint with a data protection authority if you believe your rights have been violated
To exercise any of these rights, contact us at support@babylog.ai or use the in-app features.
Data Location
Your data is processed and stored on servers located in the United States, operated by Fly.io. Files and photos are stored on Cloudflare R2, which may replicate data across multiple global locations for performance.
For users in the European Union, European Economic Area, United Kingdom, or Switzerland: By using BabyLog, you consent to the transfer of your personal information to the United States. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission to provide appropriate safeguards for such transfers. You can request a copy of the SCCs by contacting us.
Data Retention
- Active accounts: We retain your data for as long as your account is active
- Deleted records: When you delete a record, it is permanently removed within 30 days
- Deleted accounts: When you delete your account, all your personal data is permanently removed within 60 days
- Backups: Deleted data may persist in encrypted backups for up to 90 days before being purged
Security
We take security seriously:
- All data is encrypted in transit using TLS 1.2 or higher
- Data is encrypted at rest in our databases
- We use secure authentication through Apple and Google Sign-In
- Access to production systems is strictly limited and logged
- We conduct regular security reviews
Despite our efforts, no method of transmission or storage is 100% secure. If you discover a security vulnerability, please report it to support@babylog.ai.
Children's Privacy
BabyLog is designed for parents and guardians to record information about their children. The app itself is intended for use by adults only.
- We do not knowingly collect personal information directly from children under 13
- All accounts must be created by adults (18 years or older)
- Data about babies is provided by and controlled by their parent or guardian
- If we learn that we have collected personal information from a child under 13 without parental consent, we will delete that information
If you believe a child under 13 has provided us with personal information, please contact us at support@babylog.ai.
Links to Other Websites
Our Service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.
We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will:
- Update the "Last updated" date at the top
- Notify you via email or in-app notification at least 30 days before changes take effect
- For material changes affecting your rights, we will ask for your renewed consent
Definitions
For the purposes of this Privacy Policy:
- "Application" or "App" refers to BabyLog, the software program provided by the Company.
- "Company" (referred to as "we", "us", or "our") refers to Second Wave LLC.
- "Device" means any device that can access the Service, such as a smartphone or tablet.
- "Personal Data" means any information that can be used to identify you or your child.
- "Service" refers to the Application and all related features, including the website at babylog.ai.
- "Third-Party Service Providers" refers to companies or individuals engaged by the Company to facilitate the Service, such as cloud hosting, authentication, or analytics providers.
- "You" means the individual accessing or using the Service.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Second Wave LLC
Email: support@babylog.ai