Privacy Policy

Information we collect

Account information

When you create an account, we collect your first and last name, email address, and password. Passwords are stored as secure hashes, not in readable form. We also create authentication and password-reset tokens as needed to keep your account secure.

Household and care information

You may provide a household name; caregiver email addresses; children’s names and birth dates; and baby-care records. Care records can include feeding type and time, breast side and duration, bottle amount and unit, diaper-change time and type, rash status, stool color and consistency, and optional diaper notes.

Technical information

When the app communicates with our service, our server and hosting infrastructure may process routine technical information such as request times, request identifiers, network address, and error or security events. We use this information to operate, troubleshoot, and protect Lydi Baby. We do not use it to build advertising profiles.

Website analytics

Our public home, privacy, and support pages use Cloudflare Web Analytics to measure page views and website performance. This website analytics script is not included in the mobile app or password-reset page.

How we use information

• Provide accounts, authentication, household sharing, and caregiver invitations.
• Save and synchronize child profiles, feeding records, and diaper records across a household’s devices.
• Keep feeding timers and active feeding status available on supported devices.
• Send password-reset messages you request.
• Maintain the reliability, safety, and security of the service.

We do not use your information for advertising, cross-app tracking, or marketing profiles.

Sharing and service providers

Care information is visible to the account owner and caregivers who have joined the same household. A caregiver invitation exposes the invited email address to the household that created it.

We disclose information only to service providers that help us run Lydi Baby, such as infrastructure and database hosting providers and Resend, which delivers requested password-reset emails. These providers process information for us under their own security and privacy obligations. We may also disclose information when required by law, to protect people or the service, or as part of a business transfer with appropriate safeguards.

We do not sell or rent personal information.

On-device storage and synchronization

The app stores your signed-in session in the device’s secure storage. After you sign in, it also keeps an account-specific offline copy of household, child, feeding, and diaper information on your device so the app can work without a connection. Changes made offline remain on the device and synchronize with our server when a connection is available and the app is open.

Signing out removes the saved session from the device. The app prevents sign-out while changes are waiting to synchronize so those changes are not accidentally lost. Information already synchronized remains on our server and on other authorized household devices.

Retention and deletion

We keep account and household information while it is needed to provide the service. You can edit or delete individual feeding and diaper entries in the app. A household owner can delete a child profile, which also permanently deletes that child’s feeding and diaper history from our server. You can permanently delete your account from the Household screen in the app. If you own a household, account deletion also deletes that household, its child profiles, and its care history. If you are a caregiver, account deletion removes your access without deleting the household.

Security, operational, or backup records may remain for a limited period where reasonably necessary for security, legal compliance, fraud prevention, or reliable restoration. To request access to, correction of, or deletion of other personal information, contact us using the address below. We may need to verify your identity before completing a request.

Security

We use safeguards appropriate to the information we process, including encrypted HTTPS connections in production, hashed passwords and authentication tokens, expiring single-use password-reset links, access controls that limit household information to its members, and secure device storage for account sessions. No system can guarantee absolute security.

Children’s privacy

Lydi Baby is intended for parents, guardians, and caregivers, not for use by children. Adults provide and manage information about the children in their care. We do not knowingly collect account information directly from children.

International processing

Depending on where you live and where our service providers operate, information may be processed outside your province, state, or country. Privacy laws in those locations may differ from those where you live.

Your choices and rights

You can review and change care records in the app and control who joins your household through caregiver invitations. Depending on where you live, you may also have rights to access, correct, delete, or obtain a copy of personal information, or to object to or restrict certain processing.

For a privacy question or request, email lydi.baby.app@gmail.com. Please do not include passwords or detailed health or care information in your email.

Changes to this policy

We may update this policy as Lydi Baby changes. We will post the revised policy here and update the effective date. If a change materially affects how we use personal information, we will provide additional notice where appropriate.