Privacy Policy

Overview

Bibsy is a baby tracking app built and operated by Bibsy ("we", "us"). This Privacy Policy explains what data we collect when you use Bibsy, how we use it, who we share it with, and the rights you have over it.

By creating an account or using Bibsy, you agree to this Privacy Policy. If you don't agree, please don't use the service.

What information we collect

Account information

• Email address: for sign-in, account recovery, and transactional emails (signup confirmation, password reset, partner invites).
• Password: stored as a salted hash on our behalf by Supabase. We never see or store your plaintext password.
• Display name and avatar colour: what other household members see when reviewing shared baby logs.

Baby and tracking data

You log information about your baby to track care patterns over time. This may include:

• Baby's name, date of birth, sex, weight, height, head circumference
• Feeding logs (bottle, breast, solids), pumping output
• Diaper changes (wet, dirty)
• Sleep sessions and nap timing
• Mood, milestones, vaccines, medications, growth measurements, teething, hygiene events
• Photos uploaded via the memory logger or profile-photo features
• Notes and free-text annotations you add to events

This data belongs to you. We process it solely to provide the Bibsy service.

Device and technical data

• Device type (iOS / Android / web), operating-system version, and app version, all used for compatibility and crash diagnostics
• Crash diagnostics and stack traces (via Sentry), sent automatically when the app encounters an error
• Usage analytics (via PostHog), linked to your account: which features get used and which screens are visited. We do notsend your baby's logged data to analytics: no amounts, no durations, no names, no photos and no notes. You can turn this off at any time in Settings, under Privacy and data
• IP addresses may be processed transiently by Bibsy's hosting and security providers for operational logs, rate limiting, fraud prevention and service security. Bibsy does not request device location, and does not derive or store precise or city-level location
• Feedback you choose to send us: a star rating and anything you write in the box. We ask you there not to include personal details, and we do not need them

Device permissions you may grant

On iOS and Android, Bibsy asks for permissions only when needed for a specific feature:

• Camera: for taking baby photos in the memory logger or profile spots
• Photo library: for choosing existing photos instead of taking new ones
• Notifications: for feed and sleep reminders if you enable them

These permissions are local to your device. Bibsy only uses them when you actively use the corresponding feature. You can revoke any of them at any time in your device settings.

How we use your information

• To provide the core Bibsy service: logging, viewing, syncing across household members, generating insights from your data
• To send transactional emails: signup confirmation, password reset, partner invites, email-address change confirmations
• To diagnose crashes and improve reliability, via Sentry crash reports
• To understand which features are useful and which are ignored, via PostHog analytics linked to your account, so we can prioritise what to build next
• To prevent abuse: rate limiting per-IP on API routes, suspicious-activity detection

What we do NOT do

• We do not sell your personal data to anyone, ever
• We do notuse your baby's logged data for advertising
• We do not use your data to train AI models
• We do not share your data with insurance companies, employers, advertisers, or data brokers

Third-party processors we use

We use the following third parties to operate Bibsy. Each handles specific data on our behalf and is bound by their own privacy commitments:

• Supabase: database and authentication. Stores your account, household membership, baby data, and event logs. Hosted in the United States.
• Vercel: web hosting and global edge network. Serves the Bibsy web app and API routes.
• Sentry: crash diagnostics. Receives error reports and stack traces when the app crashes. Configured to not receive your baby data, passwords, or auth tokens.
• PostHog: product analytics. When analytics is enabled it is linked to your account ID. Analytics stays OFF until your saved preference loads and says otherwise — if we cannot load it, nothing is sent. Deleting your Bibsy account does NOT automatically delete analytics already recorded; email privacy@bibsy.app and we will remove it by hand. Receives events about which features you use, not what you log. Hosted in the United States (US Cloud).
• Resend: transactional email delivery. Delivers signup confirmation, password reset, and partner invite emails to you. Receives your email address and the email content.
• On-device notifications: reminders are scheduled and shown locally on your device. No third-party push service (Apple or Google) receives your data to deliver them.

You can review each processor's privacy policy on their respective websites. We choose processors that take privacy seriously and offer appropriate data-processing agreements.

Data retention

• Your baby and tracking data: retained as long as your account is active. You can delete specific entries any time in the app.
• Your account: retained until you delete it. Account deletion (Settings → Account → Delete Account) removes your data from our live systems immediately. Encrypted backups roll over on a schedule and are fully purged within 30 days.
• Feedback you send: kept while your account exists, and deleted with it. We are told a rating arrived so we know to look; what you wrote stays in the database and is not emailed anywhere.
• Crash diagnostics: retained per Sentry's defaults (typically 90 days).
• Usage analytics: retained per PostHog's defaults (typically up to 7 years for long-term product insights, with personal identifiers removed).
• Transactional email logs: retained by Resend per their defaults (typically 30 days for delivery diagnostics).

Your rights

You have the right to:

• Accessyour data: everything you've logged is visible in the app. Contact us for a full export.
• Correct your data: edit any entry at any time in the app.
• Deleteyour account: Settings → Account → Delete Account. You'll be asked to type DELETE MY ACCOUNT to confirm. All your data is permanently removed within 30 days.
• Object to specific processing: contact us.
• Data portability: contact us for a machine-readable export.
• Lodge a complaint with a privacy regulator. If you are in Canada, that is the Office of the Privacy Commissioner of Canada, at priv.gc.ca. If you are in the EU or UK, it is your national data-protection authority. You are welcome to raise it with us first, but you do not have to.

Which privacy law applies

Bibsy is built and operated from Ontario, Canada. Canadian federal privacy law, the Personal Information Protection and Electronic Documents Act (PIPEDA), applies to how we handle your information, wherever you happen to live.

In practice this policy is written to meet more than PIPEDA asks. The rights listed above, the retention limits, and the account deletion that clears your data immediately are offered to everyone, not only to people in a region whose law requires them.

One point PIPEDA asks us to be explicit about, and which is worth reading rather than skimming: your data is stored on servers in the United States, as set out under International data transfers. While it is there it is subject to United States law, which can include lawful access requests by United States authorities. That is true of most services hosted outside Canada, and we say it plainly rather than leaving you to infer it.

Children's data

Bibsy is intended for use by parents and caregivers to log information about their babies. Babies are the subject of much of the data but do not interact with the app themselves. The account holder must be at least 13 years old (or the digital age of consent in their jurisdiction).

If you log data about your baby, you do so as the parent or legal guardian. You can delete that data at any time. The data you log about your baby is treated with the same protections as your own personal data described in this policy.

We do not knowingly collect personal information from children under 13 directly. If you believe a child under 13 has created a Bibsy account, please contact us and we'll remove the account.

International data transfers

Bibsy's primary infrastructure is hosted in the United States (Supabase US region, Vercel global edge with US origin, PostHog US Cloud, Resend US region). By using Bibsy, you consent to your data being transferred to and processed in the United States.

If you're located in the EU, UK, or Switzerland, we rely on Standard Contractual Clauses and similar safeguards for international transfers as required by GDPR.

Security

• Passwords are hashed and salted by Supabase; we never see or store plaintext passwords
• All data in transit is encrypted via HTTPS (TLS 1.2+)
• Data at rest is encrypted on Supabase's infrastructure
• Row-level security ensures household members only see their own household's data and never another family's
• Sentry crash reports are configured to exclude passwords, auth tokens, and baby data
• Authentication tokens are stored in HTTP-only cookies (web) or the app's local storage (native app)
• Crash reports (Sentry) are sanitised before they are sent: URLs are stripped of query strings and fragments, authorisation and cookie headers are filtered, and token-shaped parameters are redacted. This reduces what can reach Sentry — we do not claim it is impossible for any personal detail to appear in a stack trace.
• If you delete your account and you signed in with Apple, we try to revoke the Apple authorisation immediately. If that call fails, your Bibsy account and data are still deleted and we tell you so — you can remove Bibsy under Settings → Apple ID → Sign-In and Security. There is no background retry.
• When you delete your account and another caregiver remains in your household, your entries stay in that baby's shared history under an anonymous “Former caregiver” label, with your name, photo and account link removed. This is deliberate: deleting them would erase part of the other parent's record of their own baby. If you were the last member, the whole household and its data are deleted.
• API routes are rate-limited per IP to prevent brute-force and abuse

No system is perfectly secure. If you discover a vulnerability, please email security@bibsy.app so we can fix it before it's exploited.

Changes to this Privacy Policy

We may update this Privacy Policy as Bibsy evolves. Material changes will be announced via email and an in-app notice. The "Last updated" date at the top of this page reflects the current version.

Continued use of Bibsy after a change indicates acceptance of the updated policy.

Contact us

Questions about this Privacy Policy or how we handle your data? Email us at privacy@bibsy.app.

For account deletion, the in-app flow (Settings → Account → Delete Account) is the fastest path. Email is for everything else.