KiddyDot: Baby Feeding & Sleep Privacy Policy

This Privacy Policy explains how KiddyDot ("we", "us", "our") handles information in the KiddyDot: Baby Feeding & Sleep iPhone application (the "App"). By using the App you agree to this Policy.

1. Who this App is for (children's data)

The App is a baby care tracker designed for and used by parents and guardians aged 18 or older. It is not directed at children, and children are not intended users. Information about a child (such as name or nickname, date of birth, and care records) is entered by the parent or guardian. We do not knowingly collect personal information directly from children. If we learn that a child has provided personal information to us directly, we will delete it.

2. No accounts, no sign-up

The App does not ask you to create an account, and we do not ask for your name, email address, or phone number to use it. If you email us, we receive your email address and what you write, and we use them only to reply to you. Partner sharing (Section 4) works with pseudonymous, app-generated identifiers (Firebase anonymous user IDs), so we do not ask for or store your name, email address, or phone number. Technical identifiers like these, and your IP address, can still count as personal data under privacy laws, and we treat them as such.

3. Information stored on your device

By default, everything you record in the App is stored only on your device: feeding, pee/poo/diaper, sleep, nursing, pumping, growth and other care records, diary entries, settings, and preferences.

Photos never leave your device. Baby photos and daily photo tracker images you add are stored on your phone only. They are never uploaded to us, to our servers, or to any third party, and they are not included in partner sharing.

Face and hair cutouts happen on your device. The personalised baby face used in the App's scenes is cut out from your photo by software running entirely on your phone. The original photo and the cutout are processed and stored on your device only.

Exports you choose to make. The App can create PDF or CSV exports of your records (for example, to show a doctor). These files are generated on your device and go only where you yourself choose to share them.

Uninstalling the App deletes locally stored data from your device (subject to your device's own backups, which we do not control).

4. Partner sharing (two parents, via Firebase)

The App offers optional partner sharing so two parents or caregivers can view and edit the same baby's records on their own devices. Partner sharing is free for everyone. This feature uses Google Firebase (anonymous Authentication and Cloud Firestore) operated by Google LLC, with the database in Google's Hong Kong region (asia-east2).

• What syncs: care log entries (feeding, sleep, nappy, growth and similar records), running timers, diary entries, settings, and the baby profile details (the baby's name and date of birth). Photos are never uploaded: the App has no photo upload and no photo storage, including with partner sharing.
• What never syncs: photos and face cutouts. They stay on each partner's own device.
• No email, no account: each partner is identified by a pseudonymous, app-generated ID (a Firebase anonymous user ID). We do not receive or store your email address or name for sharing.
• Invite codes: the code used to link a partner is stored only as a hash (a scrambled fingerprint), not in readable form.
• Who receives it: only the partner you explicitly link. We do not share your records with anyone else.
• When sharing stops: when you stop sharing, the shared cloud records are deleted from Firebase. Copies already on the other partner's device stay on their device until they delete them.
• Security: data is encrypted in transit between the App and Firebase. Firebase's own data handling is described in Google's privacy policy and Firebase's privacy and security documentation.
• Your responsibility: you choose who to invite as your partner. Either partner can edit or delete shared records. Only link someone you trust with your child's information.

5. Advertising (free version only)

The free version of the App shows ads. The paid Premium version shows no ads at all.

• Ad provider: ads are served by Google AdMob. It is the only ad provider in the App at launch.
• Personalised ads: the free version shows personalised ads. On iPhone, before the first ad the App asks for your permission through Apple's "Allow tracking?" prompt. If you choose "Ask App Not to Track", or turn off tracking for the App in iPhone settings, ads are non-personalised and the App does not use the advertising identifier to track you across other companies' apps and websites.
• Where the App is offered: the App is not offered in the countries of the European Union. It can be downloaded in the United Kingdom, Switzerland, Norway and Iceland. Users in the United Kingdom, Switzerland, Norway and Iceland see Google's consent form (Google's User Messaging Platform) before any personalised ads are shown, in line with Google's EU User Consent Policy. You can change your choice at any time in the App's Privacy options.
• How ads work: Google AdMob uses its software kit in the App, device identifiers (such as the Apple advertising identifier, where you allow tracking) and storage on your device to show, limit and measure ads and to prevent fraud.
• What the ad system may receive: device identifiers (such as the Apple advertising identifier), IP address, coarse location derived from IP, and information about ad impressions and interactions.
• What the ad system never receives: your care records, diary entries, baby profile details, photos, or face cutouts. No data about your child is sent to AdMob or any ad partner.
• Family-safe ad content: AdMob is set to the strictest content rating (general audiences), which blocks adult and mature ad content.
• Your device controls: you can change your tracking choice for the App at any time in iPhone Settings, Privacy & Security, Tracking, and reset or limit ad personalisation in iPhone settings.

6. Premium (paid version)

Premium is an optional paid upgrade that removes ads and unlocks extra features. It is bought inside the App through Apple's in-app purchase and is offered monthly or yearly. Apple processes the payment; we do not receive or store your card number or payment details. We receive only a purchase status (for example, whether Premium is active) so the App can unlock paid features. Apple's own terms and privacy policy apply to the transaction.

7. Growth reference data (WHO)

The App displays growth charts based on World Health Organization (WHO) child growth standards, used under a written WHO permission (reference 202611465). These charts are reference data and are not personal information about your child. The App shows WHO's required citations with the charts, does not alter the WHO data, and does not use the WHO name or logo or imply WHO endorsement. Ads are not shown in connection with the WHO growth charts.

8. Not medical advice

The App is a record-keeping tool. The charts, statistics, reminders, wake-window tips, and the WHO growth charts it shows are informational only. They are not medical advice, diagnosis, or treatment, and they are not a substitute for a health professional. Every child grows differently. Always consult a qualified health professional about your child's health, feeding, sleep, or growth.

9. Analytics and crash reporting

The App does not use analytics or crash-reporting services and does not collect analytics or crash-reporting data. This is separate from the limited advertising data that Google AdMob may receive, as described in Section 5.

10. Data retention and deletion

Local data stays on your device until you delete it or uninstall the App. Shared cloud records (partner sharing) stay in Firebase until either partner deletes them or sharing stops; when sharing stops, the shared cloud records are deleted. You may also request deletion of shared data at any time by emailing KiddyDotApp@gmail.com; we will delete it within 30 days, except where the law requires us to keep it. Because most data lives only on your device, uninstalling the App removes it (subject to your device's own backups, which we do not control).

11. International transfers

Partner sharing records are stored in Google's Hong Kong (asia-east2) Firebase region. Google may still process some service data (for example, authentication and infrastructure logs) on servers outside your country, including in the United States. Where required, transfers rely on appropriate safeguards (such as standard contractual clauses) provided by Google.

12. Your rights

Hong Kong (PDPO): under Hong Kong's Personal Data (Privacy) Ordinance (Cap. 486), you have the right to request access to and correction of personal data we hold about you. Because nearly all of your data is stored on your own device, you can usually see, change, or delete it directly in the App. For anything else, contact KiddyDotApp@gmail.com.

Consent: partner sharing, which syncs care records that can include health-related information about your child to Firebase, starts only when you turn it on. You can withdraw that consent at any time by stopping sharing in the App's settings; the shared cloud records are then deleted. You can change your tracking choice for ads at any time in iPhone settings.

UK, Switzerland, Norway and Iceland: the App is not offered in the countries of the European Union, so this section covers only users in the United Kingdom, Switzerland, Norway and Iceland, where UK GDPR, the Swiss data protection law (FADP) or the EEA GDPR apply. You have the right to access, correct, export and delete your personal information, to object to or restrict certain processing, and to withdraw consent (for example for personalised ads or partner sharing) at any time without affecting earlier processing. Our legal bases are: providing the service you asked for (core App features and on-device records); your consent (partner sharing, which syncs care records that can include health-related information about your child, and personalised ads); and our legitimate interests (running, securing and improving the App). To use these rights, email KiddyDotApp@gmail.com. Because records are tied to an anonymous ID, we may ask you to show which shared records are yours. You may also complain to your local data protection authority (in the UK, the Information Commissioner's Office; in Switzerland, the FDPIC).

13. Security

We use reasonable technical and organizational measures, including device-local storage by default, no user accounts, hashed invite codes, and encryption in transit for shared data. No system is perfectly secure; keep your device locked and your partner invitation private.

14. Changes to this Policy

We may update this Policy from time to time. Material changes will be announced in the App or on our listing page, with the updated Policy posted at https://kiddydot.pages.dev/privacy.html. We will change the effective date at the top when we update it. If you do not agree with an update, stop using the App.

15. Contact

KiddyDot team, Hong Kong. Email: KiddyDotApp@gmail.com.

KiddyDot is a trade name of an individual developer based in Hong Kong.