Privacy Policy

Information we collect

We collect information you provide when you create an account, use the service, invite another caregiver, or contact support. We collect only what is needed to provide and protect Bebecito.

• Account information, such as your name and email address, together with authentication information and identifiers from Apple, Google, or email sign-in.
• Baby and family information you enter, such as a baby’s name and birth date, caregiver invitations and invitation email addresses, and household membership.
• Care records, including feeding type, amount, duration and notes; sleep periods; diaper changes; weight and height; vomiting notes; and the dates and times associated with those records.
• Service and security information, including session information, device or browser information, IP address, user-agent information, and request status and timing.
• If you voluntarily report a problem from the iOS app, the report text, current screen, app and operating-system version, device model, locale, network state, and a limited set of sanitized recent app actions.
• On the marketing website, we use local storage only for your language preference. We do not use analytics or advertising cookies on the marketing site.

Information we do not collect for advertising

Bebecito does not sell personal information, use advertising SDKs, or build advertising profiles. The current app does not request location, contacts, photos, camera access, HealthKit data, or payment information.

The app keeps some preferences, pending entries, breastfeeding timer state, and privacy-safe interaction breadcrumbs locally on your device. Those breadcrumbs are not sent to Bebecito unless you choose to submit a problem report, and the submitted breadcrumbs are sanitized to remove sensitive values.

How we use information

We use information to create and secure accounts, authenticate users, store and display baby-care records, share records with authorized caregivers, send transactional emails, respond to support requests, maintain backups, prevent abuse, and operate and improve the reliability of the service.

For people in the European Economic Area and other jurisdictions with similar rules, our legal bases may include performance of a contract with you, our legitimate interests in operating and securing Bebecito, compliance with legal obligations, and your consent where consent is required. You may withdraw consent where processing is based on consent.

When we share information

We share information only as described here and only as needed for the service. People you authorize as caregivers can see the baby records shared in their Bebecito family space.

We use service providers that process information on Bebecito’s behalf. They may access only the information needed for their service and must provide protections consistent with this policy and applicable requirements.

• Cloudflare provides hosting, traffic delivery, transactional email delivery, and storage for encrypted database backups. Backups are retained for up to 30 days.
• Apple and Google provide optional sign-in services. When you use one of these options, we receive the account information and provider identifiers needed to authenticate you.
• Discord receives a problem report only when you choose to submit one from the app. The report may include the details and technical context listed above.
• Infrastructure monitoring and log providers receive limited operational request information, such as paths, methods, status codes, and timing, to help us secure and operate the service.
• We may disclose information when required by law, to protect users or the service, or as part of a business transfer. We do not sell or share information for cross-context behavioral advertising.

Retention and deletion

We keep account and baby-care information while your account is active or for as long as reasonably necessary to provide the service, resolve disputes, meet legal obligations, and protect the service.

You can delete your account from the iOS app. Account deletion signs you out, removes authentication credentials, sessions, and caregiver membership, and replaces your personal account name and email with an anonymized record. Baby records shared with other caregivers may remain available to those caregivers. Contact us if you need help with a shared baby space or a further deletion request.

Voluntary support reports and operational security logs are kept only as long as reasonably necessary for support, security, and reliability purposes. Database backups expire after up to 30 days. Information stored only on your device may remain until you remove it, sign out, or uninstall the app, depending on the type of local data.

Security and international processing

We use HTTPS for data in transit, access controls for service systems, and Keychain storage for iOS session tokens. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Bebecito and its service providers may process information in countries other than the country where you live. Where required, we use appropriate contractual or other safeguards for international transfers.

Your privacy rights

Depending on where you live, you may have the right to request access to, correction of, deletion of, or a copy of your information, as well as restriction of or objection to certain processing. You may also have the right to withdraw consent and to complain to your local data-protection authority.

To make a request, email us from the address associated with your account. We may ask for information needed to verify the request and will respond within the period required by applicable law.

Changes to this policy

We may update this policy when Bebecito’s features, providers, or legal obligations change. We will post the updated version on this page and change the “Last updated” date. If a change is material, we will provide additional notice where required.

Children and adult caregivers

Bebecito is intended for parents, guardians, and adult caregivers. It is not directed to children for independent use. Adults may enter information about a baby or child in their care, and they are responsible for having the authority to do so. If you believe a child provided personal information directly to Bebecito, contact us so we can review and delete it where appropriate.