Privacy Policy

Last updated: 26 October 2026

This policy explains what personal data the BabyJoy app collects, why, who we share it with, and the choices you have. We have tried to write it in plain English. If anything is unclear, email us at support@babyjoy.app.

The short version:

• BabyJoy stores the information you choose to enter (your account, your babies’ profiles and logs) so the app can work and sync across your devices.
• If you share a baby with family members, they can see and add to that baby’s profile and logs. Your own profile, due date and chats stay private.
• Some of that information is about your baby’s health, such as allergen exposures and reactions. We use it only to provide the app to you.
• We do not sell your personal data, and we do not use it to track you across other companies’ apps or websites.
• Ads in BabyJoy are non-personalised.
• The AI assistant only sends your messages to Anthropic (through our server on Cloudflare, which can also answer with a backup model) after you agree in the app.
• You can delete your account and all of its data inside the app at any time.

1. Who we are

BabyJoy is made by The Everest Lab, based in Singapore (“we”, “us”). We are responsible (the “controller”) for the personal data described in this policy.

Contact: support@babyjoy.app

This policy covers the BabyJoy app and its website, babyjoy.app. The website does not use cookies, analytics or ads; it only remembers your light or dark theme choice in your browser. Our hosting provider, Cloudflare, processes standard technical data such as your IP address to deliver the site and keep it secure.

2. The data we collect

Account information

• Sign in with Apple or Google: your name, email address and profile photo, if the provider shares them with us. If you use Apple’s “Hide My Email”, we receive a relay address instead of your real email.
• Guest account: if you use BabyJoy without signing in, we create an anonymous account with a random identifier. If you later sign in, your guest data can be linked to that account.
• An optional profile photo you upload.

Information you enter about your family

• Baby profiles: name, date of birth, gender and an optional photo.
• Tracker logs: feeds, sleep, diaper changes, pumping, medicines given, temperature readings, activities, growth measurements (such as weight, length and head circumference) and any notes you add.
• Starting Solids logs: foods offered, how your baby accepted them, allergen exposures and any reactions you record. This is health-related information about your baby.
• Milestones and memories: the milestones you tick (with the date and any note), milestones you add yourself, and photos you add for a milestone or a month. Before a photo is uploaded, the app resizes it and removes its hidden details (such as location and camera information).
• Meal plans and favourites: your weekly meal plan, shopping-list ticks, favourite recipes and recipe notes.
• Pregnancy: your due date, if you add one.
• Onboarding goals: the topics you tell us matter to you (for example, starting solids or sleep).

Please only enter what you are comfortable storing. Notes are free text, so avoid putting information in them that you do not want kept.

Insights, reports and exports

Insights, the pediatrician visit report (PDF) and the export of all logs (CSV files in a zip) are created on your device from the logs above. BabyJoy does not upload them or keep a copy: the file stays on your phone until you share it (for example by email, AirDrop or a messaging app), and from then on the service you choose handles it. The app deletes its temporary copy when you close the report or export screen. A report contains health information about your baby, so only share it with people you trust, such as your pediatrician.

AI assistant conversations

If you choose to use the AI assistant, we store your conversations in our database so you can see your chat history. To create a reply, the text of your question and the recent messages of that chat are sent through our assistant server, which runs on Cloudflare, to Anthropic, whose Claude model writes the answer. If Claude is unavailable, a backup AI model run by Cloudflare (Workers AI) may write the answer instead. Every answer is also checked for safety by an AI model on Cloudflare, together with your question, and an unsafe answer is removed. This only happens after you agree to it on the in-app consent screen, and you can turn the assistant off at any time in the app. BabyJoy does not add your baby’s name or health records to what it sends; only what you type is sent. Please do not type names, addresses or other identifying details into the assistant. Our assistant server does not keep your conversations (only answers you report, see below): it checks that the request comes from the BabyJoy app, counts how many answers your account used today (free accounts get 15 answers a day, Premium up to 100) and passes the text on.

If you tap Report this answer, we keep that question, the answer and your reason for up to 365 days so we can review it. They are deleted when you delete your account and, in any case, kept no longer than 365 days.

Messages that look like an emergency (for example choking or trouble breathing) are answered with emergency guidance inside the app and are not sent to the AI.

Usage, diagnostics and device data

• App analytics (Firebase Analytics): how the app is used, such as which screens are opened and which features are used, together with device information (model, operating system version, app version), an app-instance identifier and approximate location (country or region, derived from your IP address). Analytics never includes medicine names or doses, temperature readings, allergen statuses, reaction types, names or notes. For Starting Solids it may record that a meal included an allergen or noted a reaction, or which allergen you updated, but never which reaction or the allergen’s status.
• Crash and diagnostic data (Firebase Crashlytics): crash reports and related technical information such as device state and the point in the app where a crash happened, so we can fix bugs.
• App configuration (Firebase Remote Config): your device fetches settings from our server, which involves an app-instance identifier.

Purchases

If you buy BabyJoy Premium, the payment is handled by Apple (iPhone) or Google Play (Android). We never receive your card details. Our subscription provider, RevenueCat, receives your purchase and subscription status and an app user identifier so we can unlock Premium on your devices.

Advertising

The free version of BabyJoy may show ads through Google AdMob. We request non-personalised ads only, which means ads are not selected based on your personal profile or activity in other apps. AdMob still receives limited device and technical information (such as IP address and device type) to deliver the ad, limit how often it is shown and prevent fraud.

If you are in the EEA or the UK, we ask for your consent through Google’s consent tool (the User Messaging Platform) before any ad is requested, and you can change your choice later in the app under “Ad privacy choices”.

BabyJoy does not use App Tracking Transparency tracking: we do not ask for your device’s advertising identifier and we do not track you across other companies’ apps and websites.

Videos

Videos in Learn › Watch are played inside the app with YouTube’s embedded player (on iPhone and Android). When you open or play a video, YouTube (Google) receives the video you watch, playback events, your IP address and device information, and may use its own cookies, under the YouTube Terms of Service and the Google Privacy Policy. BabyJoy does not send YouTube your account, your baby’s information or your notes. Your bookmarks, watched videos and video notes are kept only on your phone and are deleted with Delete my data.

3. How we use your data, and our legal bases

We do not sell your personal data, we do not share it for cross-context behavioural advertising, and we do not use it to build advertising profiles.

4. Who we share data with

We use trusted service providers (“processors”) who handle data on our behalf, only to run BabyJoy:

• Google Firebase (Google Cloud): Authentication, Cloud Firestore (our database), Cloud Storage (photos), Analytics, Crashlytics and Remote Config.
• Anthropic: creates AI assistant replies (Claude) from the messages you send, only if you have agreed.
• Cloudflare: runs our assistant server, which checks each request, counts your daily answers, passes your messages to Anthropic and keeps reported answers; runs the backup AI model used when Claude is unavailable and the safety check of answers (Workers AI); it also hosts our website.
• RevenueCat: manages subscription status.
• Google AdMob: serves non-personalised ads in the free version.
• YouTube (Google): plays the learning videos through its embedded player and receives viewing and device information when you play one (see Videos). YouTube acts under its own terms and privacy policy.
• Apple and Google: sign-in providers, and Apple processes App Store payments.

Family sharing

You can invite family members or other caregivers to a baby you added, and you can join a baby someone shares with you. Sharing is always your choice.

• What family members can see: the shared baby’s profile, all of its logs (including who logged each entry, shown by their display name), its Starting Solids data (foods, allergen exposures, reactions, meal plans and favourites), the medicines saved for that baby, and its milestones, notes and photos. Everyone in the family can add and edit these.
• What they can’t see: your own profile details (other than your display name), your email address, your due date, your onboarding goals and your assistant chats.
• Invite codes: an invite code works once and expires after 3 days. Until then, anyone signed in with Apple or Google who has the code (or its link) can see the baby’s name and your display name. Only share it with the person you’re inviting.
• Removing and leaving: the person who added the baby can remove a family member at any time, and a family member can leave. They lose access straight away. Entries they logged stay in the baby’s history.
• Deleting a shared baby or account: only the person who added the baby can delete it. Deleting the baby, or that person’s account, deletes the baby and its data for everyone in the family. We keep a minimal deletion record (the baby’s internal identifier, the owner’s account identifier and the time) so that identifier can never be reused.
• Former family members: if a family member leaves, is removed or deletes their account, the entries they logged remain in the family’s history, linked to an internal account identifier rather than their name.
• Problems: if someone misuses a shared family, the person who added the baby can remove them at once, and anyone can leave. Tell us with “Report a problem” in Family sharing or at support@babyjoy.app; we review every report.

We may also disclose information if required by law, to protect the safety of our users or others, or as part of a business transfer (for example, if BabyJoy were sold), in which case this policy would continue to apply to your data.

5. International transfers

We are based in Singapore, and our providers may store and process data in other countries, including the United States. When data is transferred abroad, we rely on our providers’ contractual safeguards (such as standard contractual clauses) so that your data keeps a comparable level of protection.

6. How we protect your data

• Your data is linked to your account, and our database access rules only allow the signed-in account that owns the data to read or change it, plus, for a baby you share, the family members you invited.
• Data is encrypted in transit between the app and our servers (HTTPS/TLS), and our cloud provider encrypts stored data.
• We limit access to production data to what is needed to run and support the app.

No system is perfectly secure, but we work to protect your information and will act promptly if a problem occurs.

7. How long we keep data

We keep your data for as long as your account exists, so it is there when you come back. You can delete it at any time:

• Signed-in users: Me → Account → Edit profile → Delete Account.
• Guest users: Me → Account → Delete my data.

Deleting removes your account and the data stored with it: your profile, babies, tracker and Starting Solids logs, meal plans and favourites, assistant chats, reported assistant answers and uploaded photos (including milestone and monthly photos). Reported assistant answers are deleted when you delete your account and, in any case, kept no longer than 365 days. Babies you added are deleted for everyone you shared them with; for babies shared with you, you leave the family and the entries you logged stay in its history (see Family sharing). If you signed in with Apple, we also revoke BabyJoy’s access to your Apple ID. Copies in our providers’ routine backups are removed as those backups expire. Analytics, crash and advertising data held by our providers is kept for their standard retention periods, and is not linked to your baby’s information. Removing a milestone or a photo in the app deletes it for everyone in the family.

Deleting the app from your phone does not delete your account. Please use the in-app option, or email us. Step-by-step: delete your BabyJoy account.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy (export) of your personal data, to object to or restrict some processing, and to withdraw consent at any time (this does not affect processing before you withdrew it). You can correct most information and delete everything yourself in the app. You can also export a copy of all your baby’s logs yourself in the app (Tracker → Insights → Export all logs; a Premium feature where it applies). Asking us for a copy is always free: for that, or for anything else, email support@babyjoy.app. We may need to confirm your identity first, and we will reply within the time required by law.

• EEA and UK (GDPR / UK GDPR): you also have the right to complain to your local data protection authority.
• Singapore (PDPA): you may request access to and correction of your personal data, and withdraw consent, by contacting us.
• California (CCPA/CPRA): you have the right to know, delete and correct personal information, and to limit the use of sensitive personal information. We do not sell or “share” personal information as those terms are defined, and we only use sensitive information (such as your baby’s health information) to provide the app. We will not discriminate against you for using your rights.

9. Children

BabyJoy is designed for parents, parents-to-be and caregivers. It is not directed at children, and we do not knowingly allow children under 13 (or under 16 where local law requires) to create accounts. Information about a baby is entered and controlled by the parent or caregiver. If you believe a child has created an account, contact us and we will delete it.

10. Health information disclaimer

BabyJoy provides general information only and is not medical advice. It does not diagnose or treat any condition. Always talk to your pediatrician or healthcare provider about your baby’s health and diet. In an emergency, call your local emergency number (995 Singapore · 911 US · 999 UK · 112 EU).

11. Changes to this policy

We may update this policy as BabyJoy changes. We will update the “Last updated” date above and, for significant changes, let you know in the app or by another appropriate means before they take effect.

12. Contact us

• The Everest Lab, Singapore
• Email: support@babyjoy.app
• Web: babyjoy.app