Who is responsible
[Operator legal name], [Postal address], runs Holababy and is the data controller. Write to help@holababy.app for anything about your data.
What we store
Only what the app needs to work. Nothing here is collected for advertising, and nothing is sold.
- Your account. Your name, email address, and a hash of your password (we never see the password itself). If you turn on two-factor sign-in, the authenticator secret. The language and appearance you choose.
- Your babies. Each baby's name, birth date, and sex, and every entry you log: feeds, diapers, sleep, pumping, medicines, notes, and health entries such as weight, length, head size, temperature, oxygen, heart rate, symptoms, vaccines, and check-ups. You decide what to enter. Health entries are a diary, not a medical record, and the app gives no medical advice.
- Who you share with. The email addresses you invite to a baby, which invitations were accepted, and the role each person has.
- Reminders. Your reminder rules and, if you turn notifications on, the push subscription for each phone or browser you enable.
- Payments. If you choose a paid plan, your Stripe customer and subscription identifiers, the plan, its status, and invoices. Card numbers go straight to Stripe and never touch our servers.
- Security records. For every sign-in, failed attempt, password change, and sign-out: the time, your IP address, and your browser description. These are kept for 90 days.
- Support records. What our team does to your account, with the reason, so there is a trail. A team member may leave an internal note about an account; those notes are not shown to you but you may ask for them.
- The launch list. If you leave your email on our landing page before Holababy opens, we keep that address, the language you chose, and the tag on the link you arrived from (so we know which advert worked). We use it to send you one email when Holababy opens and nothing else; reply to that email, or to the confirmation, and we remove the address. The list is deleted within 30 days after the launch email goes out.
Why we use it
- To provide the service you signed up for. Storing your log, showing it to the people you share with, sending reminders you turn on, and running your plan.
- To keep accounts safe. Rate limits, the bot check on sign-up, the sign-in log, and blocking abuse. This is our legitimate interest in running a service that is not misused.
- To take payment and keep the books. Tax and accounting law requires us to keep billing records.
- To tell you about your account. Email verification, password resets, invitations, and notices about your plan. We do not send marketing email.
Information about children
Holababy is for the adults who care for a baby. The account holder must be an adult; we do not knowingly open accounts for anyone under 18. Everything stored about a child is entered by a parent or carer on that child's behalf, is visible only to the people that account holder shares the baby with, and is never used for anything beyond showing it back to those people.
How long we keep it
- While your account is open, for as long as you keep it.
- When you delete your account, your sign-in is removed at once, your email address is replaced in our records, and babies that only you managed are archived. Babies you share with others stay with them. Copies in backups are overwritten within 30 days.
- Sign-in records for 90 days.
- Billing records for as long as tax law requires.
Your rights
Most of these you can exercise yourself from the Account page, without asking us.
- See and take your data. “Download my data” gives you a file with your profile and every baby you can open, with their logs.
- Correct it. Edit any entry or baby in the app.
- Delete it. “Delete my account” does what the retention section says.
- Object, restrict, or complain. Write to help@holababy.app. If you are in the European Economic Area or the United Kingdom you may also complain to your data-protection authority.
How we protect it
Connections are encrypted. Passwords are hashed with argon2id. Every team member must use two-factor sign-in, sees only what their role allows, and every action they take on an account is logged with a reason. The database enforces that an account can only read the babies it belongs to, even if a bug in the app tried otherwise.
Changes
When this policy changes, the date at the top changes with it. If a change affects what we do with your data, we will email you before it takes effect.
The Terms of Service say what you and we agree to.