Privacy Policy

1. Who We Are

CuddleDiary ("we," "us," or "our") is a mobile application for iOS that helps parents and caregivers track their baby's feeding, sleep, diapers, and growth. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the CuddleDiary app. Our website (cuddlediary.com) is a static landing page that does not collect any personal data, use cookies, or require an account.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Name (first and last name)
• Email address (used for sign-in and account recovery)
• Relationship to baby such as Mom, Dad, Grandma, or Nanny (optional)

2.2 Baby Profile

When you add a baby, we collect:

• Baby's name
• Date of birth
• Gender
• Feeding preference (breast, bottle, or mixed)
• Photo (optional, stored securely in Firebase Storage)

2.3 Activity Logs

The core of CuddleDiary is tracking your baby's daily activities. We store the following logs you create:

Log Type	Data Collected
Feeding	Type (breast, bottle, pump, solid), start/end time, amount, duration per side, food name, category, texture, portion size, allergens, reactions, notes
Sleep	Start/end time, environment (crib, car, arms, stroller), notes
Diaper	Time, type (wet, dirty, both, dry), color, consistency, notes
Growth	Date, weight, height, head circumference, notes

Each log entry also records who created it (your user ID and display name) and the creation timestamp.

2.4 Device Information

We collect limited device information necessary to operate the app:

• Push notification token so we can deliver reminders
• Locale and time zone for date/time formatting
• Device preferences like unit system, time format, color theme, and day start hour

2.5 What We Do NOT Collect

• Location or GPS data
• Health data from Apple HealthKit
• Contacts, calendar, or call logs
• Browsing history
• Advertising identifiers for ad targeting
• Microphone or continuous camera access

3. How We Use Your Information

We use your information solely to provide and improve the CuddleDiary service:

• Storing and displaying your baby's activity logs, summaries, and timeline
• Analyzing your baby's sleep patterns to predict optimal nap times (Premium, on-device only)
• Generating visual charts of feeding, sleep, and growth trends
• Sending feed, diaper, and nap reminders at your chosen intervals
• Showing running timers on your Lock Screen and Dynamic Island
• Generating CSV files of your logs so you can share them with your pediatrician
• Syncing baby data in real time with family members you invite
• Managing your account, password resets, and subscription
• Detecting and fixing crashes to keep the app stable

4. Data Sharing & Third-Party Services

We use the following third-party services to operate CuddleDiary. These services act as data processors on our behalf:

Service	Provider	Purpose	Data Shared
Firebase Authentication	Google	User sign-in and account management	Email, password (hashed), display name
Cloud Firestore	Google	Database for all app data	All account, baby, and log data
Firebase Storage	Google	Baby photo storage	Uploaded photos only
Firebase Cloud Messaging	Google	Push notifications	Device token, notification content
Firebase Analytics	Google	Aggregated usage statistics	App opens, screen views (anonymous)
Firebase Crashlytics	Google	Crash reporting	Crash logs, device model, OS version
Apple StoreKit	Apple	Subscription payments	Transaction ID, product ID, purchase dates

We do not integrate any advertising SDKs, social media trackers, or data brokers. We do not share your baby's health or activity data with any external parties beyond the services listed above.

For Firebase's data practices, please refer to Firebase Privacy and Security and Google's Privacy Policy.

5. Caregiver Sharing

CuddleDiary allows you to invite family members and caregivers to help track your baby. Here's how it works:

• Caregivers can only join through a 6-character invite code that you create. Codes expire after 48 hours.
• You choose what each caregiver can do:
  • Editor can log activities and edit their own entries
  • Viewer has read-only access
• Caregivers with access can see all activity logs, the baby's profile, and any running sessions (like an active sleep timer).
• You can remove a caregiver's access at any time and it takes effect right away.
• Every log entry shows who created it, so everyone knows who logged what.

Caregivers you invite will have their own CuddleDiary account. Their personal account data like email is not shared with other caregivers. Only their display name and relationship are visible on log entries.

6. Data Storage & Security

Your data is stored on Google Firebase servers, which provide enterprise-grade security including:

• All data is encrypted during transfer using HTTPS/TLS
• Firebase encrypts all stored data at rest by default
• Firestore security rules make sure users can only see their own data and babies they have been invited to
• Passwords are hashed by Firebase Auth and never stored as plain text. Auth tokens are kept in the iOS Keychain.

Local Storage

The app stores minimal data on your device:

• Preferences (unit system, theme, notification settings) via iOS UserDefaults
• Widget data shared via App Group, limited to baby name, last activity times, and active session status
• No baby logs or personal data are stored on your device. All log data lives on Firebase.

7. Your Rights & Controls

You have full control over your data:

Right	How to Exercise
Access your data	View all your logs in the app's Timeline. Export all data as CSV from Settings > Export Data (Premium).
Correct your data	Edit any log entry by tapping it in the Timeline. Edit your profile in Settings > Profile.
Delete your data	Delete individual log entries from the Timeline. Delete your entire account from Settings > Profile > Delete Account.
Export your data	Settings > Export Data generates a CSV file with all feeds, sleeps, diapers, and growth logs.
Manage notifications	Enable or disable each reminder type (feed, nap, diaper) individually in Settings.
Manage caregiver access	Add or remove caregivers, change roles, or revoke access at any time.
Manage subscription	Manage or cancel your subscription through Apple's App Store settings.

If you are located in the European Union, United Kingdom, or California, you may have additional rights under GDPR, UK GDPR, or CCPA respectively. See Section 14 for details.

8. Data Retention & Deletion

Active Accounts

We retain your data for as long as your account is active. Your baby's logs are stored indefinitely so you can look back at early milestones even years later.

Account Deletion

When you delete your account (Settings > Profile > Delete Account):

• Your user profile is permanently deleted
• All babies you own and their complete log history (feeds, sleeps, diapers, growth) are permanently deleted
• All caregiver invitations and access records are removed
• Your user-baby index entries are deleted

This action is irreversible. We cannot recover deleted data. We recommend exporting your data before deleting your account.

Caregiver Removal

When a caregiver is removed from a baby, their access is revoked immediately. Their personal account and any other baby associations remain intact. Log entries they created remain attributed to them.

Expired Invites

Caregiver invite codes expire automatically after 48 hours and are no longer usable.

9. Children's Privacy

CuddleDiary is designed for parents and caregivers (adults) to track information about their children. The app is not intended for use by children under 13 (or the applicable age of digital consent in your jurisdiction).

We collect information about babies and children as entered by their parent or legal guardian. This information (name, date of birth, feeding/sleep/diaper/growth data, and optional photo) is provided voluntarily by the parent and is stored under the parent's account.

If you believe a child has created an account without parental consent, please contact us immediately at support@cuddlediary.com and we will delete the account.

10. Notifications

CuddleDiary sends two types of notifications:

Local Notifications (on-device)

• Nap reminders based on your baby's predicted wake window
• Feed reminders after a set interval (default 3 hours)
• Diaper reminders after a set interval (default 2 hours)

These are generated entirely on your device. No data is sent to our servers to trigger them.

Push Notifications (server-sent)

Delivered via Firebase Cloud Messaging through Apple Push Notification service (APNs). Used for real-time caregiver activity updates. You can disable push notifications in your iOS Settings at any time.

Notifications only include the activity type (feed, sleep, or diaper) and baby identifier. No detailed log data is sent in notifications.

11. Analytics & Crash Reporting

Firebase Analytics

We use Firebase Analytics to understand aggregated, anonymous usage patterns such as:

• How often the app is opened
• Which screens are most visited
• Session duration

Firebase Analytics does not collect or report any baby data, log content, or personally identifiable information. We only use Firebase's default automatic collection and have not added any custom event tracking.

Firebase Crashlytics

We use Crashlytics to detect and fix crashes. Crash reports include:

• Stack traces and error messages
• Device model and iOS version
• App version

Crash reports do not contain any baby data or personal log content.

12. Payments & Subscriptions

CuddleDiary offers a free tier and a Premium subscription. All payments are processed exclusively through Apple's App Store via StoreKit.

• We never see or store your credit card number, billing address, or Apple ID password
• We only store your subscription status (free or premium), product ID, purchase and expiration dates, and transaction ID, all of which come from Apple's StoreKit
• A 14-day free trial is available. Trial status is tracked in our database to prevent re-use
• Subscriptions renew automatically unless canceled through Apple's App Store settings

For Apple's payment privacy practices, see Apple's Privacy Policy.

13. Cookies & Tracking

The CuddleDiary iOS app does not use cookies, web beacons, or tracking pixels.

Our website (cuddlediary.com) is a static landing page that does not collect any data, use cookies, set analytics trackers, or run third-party scripts.

14. International Users

Data Transfer

Your data is stored on Firebase (Google Cloud) servers, which may be located in the United States or other countries. By using CuddleDiary, you consent to the transfer of your data to these locations. Google maintains appropriate safeguards for international data transfers as described in their compliance documentation.

GDPR (European Union & UK)

If you are in the EU or UK, you have the following rights under the General Data Protection Regulation:

• Right of access to request a copy of your data (use the in-app export)
• Right to rectification to correct inaccurate data (edit entries in the app)
• Right to erasure to delete your data (use in-app account deletion)
• Right to data portability to receive your data in a machine-readable format (CSV export)
• Right to restrict processing by contacting us
• Right to object to specific data processing by contacting us

Our legal basis for processing your data is contract performance (providing the service you signed up for) and legitimate interest (improving app stability via crash reporting).

CCPA (California)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale of personal information (note: we do not sell your data)
• Non-discrimination for exercising your privacy rights

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes:

• We will update the "Last Updated" date at the top of this page
• For material changes, we will notify you via in-app notification or email
• Continued use of CuddleDiary after changes constitutes acceptance of the updated policy

16. Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or have concerns about your privacy, please contact us:

• Email: support@cuddlediary.com
• Website: cuddlediary.com

We aim to respond to all privacy-related inquiries within 30 days.