What leaves the phone?
- Daily content: the due date or birth date, sex, language, country, notification address and a content ID go to our server once at setup with your consent, and afterwards only when they change. Our server sends the notifications itself; when you open a notification, that is sent to our server too.
- Assistant questions: the question text, age or week of pregnancy and language go to our relay and OpenAI, only if you have consented and send a question.
- Subscription: an anonymous ID and purchase information go to Apple or Google, RevenueCat and our own server.
- Files you share: the doctor summary and backups go only to the app you choose.
No other record ever leaves the phone.
Permissions we ask for
- Notifications: for reminders and daily content from our server.
- Face ID / fingerprint: only if you turn on the app lock.
- Photos: only when you pick your child's photo. The photo you choose is copied into the app; your library is not scanned.
- Internet: only for daily content, the assistant and subscription. Everything to do with your records works offline.
Permissions we don't use
Location, camera, microphone, contacts, calendar, Apple Health / Health Connect and advertising identifiers are not used. Your country is read from the phone's region setting.
You're in control
- Withdraw daily content consent (daily content stops): Profile › Notifications or About and legal › Your consents
- Withdraw assistant consent: About and legal › Your consents
- Turn off notifications: Profile › Notifications or phone settings
- Remove a photo: Profile
- Back up and restore: Profile › Privacy and security
- Delete all data: Profile › Privacy and security › Delete all my data
This document is also in the app under Profile › About and legal.