Privacy Policy

Last updated: March 12, 2026

1. Introduction

BabyNoel ("we", "us", "our") helps parents and caregivers track daily baby care. This policy explains which personal data we process, why we process it, and your GDPR rights.

2. What data we collect

Account data

  • Email address (login, verification, account recovery)
  • Name (optional, app display)

Baby data

  • Baby name and date of birth
  • Log data: feeding, diapers, sleep, temperature, growth, medication, baths, vitamins
  • Optional daycare photos, only when a parent/caregiver explicitly enables this per child

Technical data

  • Device type and operating system (compatibility and security)
  • Local in-app event logging for product improvement (no external tracking SDK)

3. Legal bases (GDPR)

  • Performance of a contract: account, sync, and core app functionality.
  • Legitimate interests: security, fraud prevention, reliability, and improvement.
  • Consent: optional notifications/features that require consent.
  • Legal obligation: where required by law.

4. How we use your data

  • Providing and improving BabyNoel
  • Storing and syncing log data
  • Sharing data with caregivers you invite
  • Sending service, verification, and invitation emails

5. Data sharing and processors

We never sell data. We only share data with essential processors:

  • Supabase (database)
  • Vercel (hosting/infrastructure)
  • Resend (email delivery)

We maintain processor agreements where required. If processing happens outside the EEA, we rely on appropriate safeguards (such as Standard Contractual Clauses).

6. Data security

  • Encrypted transport (HTTPS/TLS)
  • Passwords stored hashed
  • Role-based access for invited caregivers
  • Daycare photos are stored privately and shown only through temporary, secured access
  • Native app supports Face ID / Touch ID

7. Daycare photos

Daycare photos are optional. Parents/caregivers can enable consent per child so that a linked daycare or childminder may share solo photos of that child. Without consent, daycare cannot upload daycare photos.

Only parents/caregivers with access to the child and linked daycare staff or childminders with access to that child can view the photo. Daycare photos are kept for up to 90 days and are deleted when consent is withdrawn.

8. Your rights

Under GDPR, you have rights of access, rectification, deletion, restriction, portability, and objection.

Contact us at privacy@babynoel.nl for requests. You may also lodge a complaint with your local data protection authority.

9. Data retention

We keep data while your account is active. After account deletion, data is removed within approximately 30 days, unless legal retention obligations apply.

10. Children

BabyNoel is intended for parents and caregivers (18+). We do not knowingly collect data directly from children under 16.

11. Cookies and tracking

We use functional/session cookies needed to run the app. We currently do not use external advertising or analytics tracking SDKs.

12. Changes

For material updates, we will notify you in-app or by email.

13. Contact

Privacy questions? Contact privacy@babynoel.nl.