BabyRelay Privacy Policy
BabyRelay is a baby-care app for parents and caregivers. We take privacy seriously because the data you log is about your child. This document explains what we collect, how we use it, and what control you have over it. If anything here is unclear, email us at hello@babyrelay.app.
1. Who we are
BabyRelay is published by Rizenn Tech (“we”, “us”, “our”). The app is available on iOS and Android. This policy covers the BabyRelay mobile app and the marketing site at babyrelay.app.
2. What we collect
We only collect what the app needs to function. We do not collect data for advertising or tracking, and we do not sell or rent data to anyone.
From you, when you set up an account
- Email address. Used to identify your family record so we can reach you for support or receipts. You provide it during onboarding.
- Your name (or whatever you'd like to be called). Shown to your co-parent or caregiver on the relay screen.
- A color choice. A purely cosmetic preference for your avatar.
From you, when you add a baby
- Baby's first name.
- Baby's birth date.
- Baby's weight at birth (we store this in grams).
From you, while you use the app
- Feed logs. Timestamp, feed type (nursing, pumped, formula), amount in ounces, and any notes you choose to add.
- Diaper logs. Timestamp and type (wet / dirty / both).
- Alarm and handoff events. When an alarm was scheduled, when it was delivered, whether and how you responded (“on my way”, “got it”, “snooze”), and the parent or caregiver involved.
- Shift schedules you configure for the alarm rotation.
- App preferences (sound, vibration, time format, etc.).
Automatically
- A device-stable identifier. When you first open the app, we generate a random UUID and store it on your device. This UUID is sent with every request to our backend so we can identify your account. It is not tied to any advertising identifier and we do not share it with third parties.
- Push notification tokens. When you grant notification permission, we receive a token from Apple Push Notification service (APNs) or Firebase Cloud Messaging (FCM) and store it so we can send you alarms.
- In-app purchase receipts. When you purchase the $7.99 “two-parent mode” unlock, RevenueCat (our purchase infrastructure provider) receives the receipt from Apple or Google and tells us whether you're entitled to the unlock. We don't see your payment method, billing address, or any other account information held by Apple or Google.
What we do NOT collect
- No third-party analytics SDKs in the mobile app (no Mixpanel, Amplitude, Google Analytics, Facebook SDK, etc.).
- No crash-reporting SDKs that collect personally identifiable information.
- No access to your contacts, photos, location, microphone audio (voice logging is currently disabled), or any health data from your device's HealthKit / Health Connect.
- No data about anyone other than you, your co-parent or caregiver (if you invite one), and the babies you add.
3. How we use what we collect
- To run the app. Saving your feed and diaper logs, displaying them in your shared family timeline, scheduling and routing alarms to the right caregiver, syncing in real time across devices.
- To process your purchase. Verifying with RevenueCat that you own the unlock so the paid features become available.
- To respond to support emails. If you write to hello@babyrelay.app, we'll use your email and the details you share to help you.
- For nothing else. No marketing emails (unless you explicitly opt in to a future newsletter). No model training on your baby's data. No data sale, broker, or transfer.
4. Who we share data with
Some data flows through service providers we use to operate BabyRelay. Each provider receives only what they need:
| Provider | What they receive | Why |
|---|---|---|
| Convex (our backend, hosted in the US) | Everything you log, your email, family records, push tokens | Stores your family's data, runs queries, dispatches alarms |
| Apple Push Notification service (APNs) | Your device token, alarm payload | Delivers iOS push notifications |
| Firebase Cloud Messaging (FCM) | Your device token, alarm payload | Delivers Android push notifications |
| RevenueCat | Purchase receipts, an anonymized user ID | Verifies and restores in-app purchases |
We do not share data with advertising networks, data brokers, or any third party outside the table above.
5. Where data is stored
Data is stored in the United States on Convex's infrastructure. Data is encrypted in transit (TLS) and at rest. We do not currently transfer your data outside the United States.
6. How long we keep it
- While you have an account: as long as you keep the app installed and your family record active.
- When you delete your account (Settings → Delete account in the app):
- If you are the last person in your family, all family data — your user record, your baby's record, every feed and diaper log, every alarm event, your push tokens, your shifts — is permanently deleted.
- If you have a co-parent or caregiver remaining, your personal record (user row, push tokens, shifts, your alarm events) is permanently deleted. The shared family history (feeds and diapers attributed to you while you were active) remains attached to your baby so the remaining family member doesn't lose it. We treat that shared history as the remaining family's data, not yours alone.
- Purchase receipts are retained as long as required by Apple and RevenueCat for tax and accounting purposes (typically 7 years).
- Support emails are kept for up to 2 years.
7. Your rights
You can:
- Access your data. Email hello@babyrelay.app and we'll send you a copy of everything we hold about you.
- Correct your data. Edit your profile, your baby's record, or any feed / diaper log directly in the app.
- Delete your data. Use Settings → Delete account inside the app. This action is irreversible.
- Withdraw consent for push notifications by disabling them in iOS / Android system settings.
If you live in the European Union, United Kingdom, or California, you additionally have the right to lodge a complaint with your local data protection authority. We will respond to verified requests within 30 days.
8. Children's privacy (COPPA, GDPR-K)
BabyRelay is intended for use by parents and caregivers who are 18 or older. The data we collect about babies is provided by their parent or authorized caregiver. The baby is not the user of the app. We do not knowingly collect personal information directly from anyone under 13.
If you believe we have inadvertently collected information from a child under 13, please email hello@babyrelay.app and we'll delete it.
9. Security
- TLS 1.2+ in transit between the app and Convex.
- At-rest encryption on Convex's infrastructure.
- Your device-stable identifier is generated on-device using a cryptographically secure random source.
- We do not store payment methods (Apple, Google, and RevenueCat handle that).
No system is perfectly secure. If we ever discover a breach that affects your data, we will notify you by email within 72 hours of becoming aware of it, as required by applicable law.
10. Changes to this policy
If we materially change how we collect or use data, we'll update the “Last updated” date above and, where required, notify you in the app before the changes take effect. Continued use of BabyRelay after a change means you accept the updated policy.
11. Contact
Questions, requests, or complaints:
- Email: hello@babyrelay.app
Plain-English summary, no legal weight: we collect what we need to run the app and nothing else. We don't sell, share, advertise against, or train models on your data. You can delete everything from inside the app at any time. If something here doesn't make sense, email us.