This Privacy Policy explains what information the Sleeparoo iOS app and getsleeparoo.com (together, the “Service”) collect, why, and what you can do about it. In this policy, “Sleeparoo”, “we”, and “us” mean the operator of the Service.
The short version. We collect the account email you sign up with and the baby information you choose to log. We do not sell your data, we do not use it for advertising, we do not track you across other apps or websites, and there is no analytics or ad SDK in the app. You can delete your account and its data at any time.
Information we collect
Information you give us
- Account information. Your email address and an authentication credential, used to create your account and sign you in. Passwords are handled by Firebase Authentication and are never stored by us in readable form.
- Baby profile. The name (or nickname) and date of birth you enter for each baby you create.
- Care activity. Bottle feedings (time and amount), diaper changes (time and type), and the feeding schedule you set, along with a record of which caregiver logged each entry.
- Caregiver invitations. The email address of anyone you invite to share a baby with, so that we can grant them access when they sign in.
- Support correspondence. Anything you send us by email.
Information collected automatically
Our service provider, Google Firebase, processes technical information such as IP address, device and operating system version, and timestamps as a necessary part of authenticating requests, syncing data, and protecting the Service against abuse. Product analytics are disabled in the app.
What we do not collect
- No advertising or marketing identifiers, and no ad networks.
- No tracking of your activity across other companies’ apps or websites. We do not request App Tracking Transparency permission because we do not track.
- No contacts, photos, precise location, or health-app data.
How we use information
- To create and secure your account and sign you in.
- To store your baby’s log and schedule and sync them across your devices and the caregivers you have invited.
- To schedule feeding reminders. Reminders are local notifications calculated and delivered on your device; the reminder itself is not sent through our servers.
- To respond to support requests.
- To detect, prevent, and address abuse, security incidents, and technical problems.
- To comply with legal obligations.
We do not use your information to build advertising profiles, and we do not sell or rent personal information. If your jurisdiction defines “sale” or “sharing” of personal information broadly (for example, under the California Consumer Privacy Act), we still do not engage in it.
Who can see your data
Data about a baby is visible to the account that created that baby and to every caregiver invited to it. Owners can see and remove caregivers at any time from the Caregivers screen. Access is enforced on the server, not only in the app.
We share information outside of that only with:
- Google Firebase (Firebase Authentication and Cloud Firestore), which hosts the Service’s accounts and data on our behalf. See the Firebase Privacy and Security policy.
- Legal requests, where we believe in good faith that disclosure is required by applicable law or necessary to protect the rights or safety of any person.
- A successor entity, if the Service is involved in a merger, acquisition, or sale of assets. This policy, or one at least as protective, will continue to apply, and we will give notice in the app before your data becomes subject to a different policy.
Children’s privacy
Sleeparoo is designed for parents and caregivers. It is not directed to children, and accounts may only be created by adults aged 18 or over. We do not knowingly create accounts for children under 13.
Sleeparoo does let an adult record information about an infant — that is what the app is for. That information is entered by the adult who controls the account, is visible only to the caregivers that adult invites, and can be deleted by them at any time. It is never used for advertising or profiling. If you believe a child has created an account, contact us at support@getsleeparoo.com and we will delete it.
Data retention
We keep your information for as long as your account is active. When you delete a baby, its entries and schedule are deleted with it. When you delete your account, we delete your account record and the babies you own, including their entries, schedules, and caregiver lists. Backups and logs held by our service provider are purged on their own rolling schedule, generally within 90 days.
Your choices and rights
- Access and correction. Everything we hold about your babies is visible and editable in the app.
- Deletion. You can delete individual entries, feeding times, a whole baby, or your entire account from within the app — the Caregivers tab has a Delete Account button. See Deleting your account.
- Notifications. Feeding reminders can be turned off per slot in the app, or entirely in iOS Settings › Notifications.
- Export or a copy. Email us and we will send you a machine-readable copy of your data.
Depending on where you live, you may have additional rights — for example under the GDPR (access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with a supervisory authority) or the CCPA (know, delete, correct, and non-discrimination for exercising those rights). To exercise any of them, email support@getsleeparoo.com. We will respond within the period required by applicable law and will not treat you differently for asking.
Where the GDPR applies, our legal bases are: performance of a contract (to provide the Service you signed up for), legitimate interests (to keep the Service secure and working), consent (for notifications), and legal obligation.
Security
Data is transmitted over encrypted connections and stored by Google Cloud in encrypted form. Access rules on the server restrict each record to the caregivers entitled to it. No system is perfectly secure, so we cannot guarantee absolute security, but we will notify affected users and regulators of a breach where the law requires it.
International transfers
The Service is operated from, and data is stored on Google Cloud infrastructure in, the United States. If you use Sleeparoo from outside the United States, you understand that your information will be transferred to and processed there, under safeguards permitted by applicable law.
Changes to this policy
We may update this policy. When we do, we will change the “Last updated” date above, and for material changes we will give notice in the app before they take effect. Continuing to use the Service after a change takes effect means you accept the updated policy.
Contact us
Questions about privacy, or a request about your data: support@getsleeparoo.com.