Baby Journal — Privacy Policy

Baby Journal is a private family journal for parents and caregivers. Last updated: 2026-10-19.

What we collect

Your email address and password (stored hashed) to sign you in.
Names you enter: your display name in the family and your baby's name and birth date.
What you add to the journal: notes, photos, short videos, comments, hearts, milestones and tracker logs (feeding, sleep, diapers, growth).

We do not collect your location (location data is removed from photos and videos before they are uploaded), contacts or advertising IDs. A random ID created for each installation is used only for the usage statistics below.

Who can see it

Only the people you invite into your family. This is enforced by our database, not just the app. Photos are only reachable through short-lived private links.

What we never do

No advertising. We never sell your data or use it to profile your family.

AI suggestions

If AI suggestions are enabled, the text of a single note, its date and your baby's age are sent to our AI provider (OpenAI, with requests marked not to be stored) to suggest a journal line or detect a milestone. Photos and other memories are not sent. If you ask for a Daily Story, that day's notes are sent the same way, and if you ask your journal a question, the question and a few matching notes are sent to answer it (questions are not stored). To make search work, the text of each note is also turned into a search index on our own servers; this does not involve a third party. Suggestions are only suggestions; your original words are always kept. The family owner can turn AI suggestions off in the Family tab, and then nothing is sent.

Subscriptions

If a family owner subscribes, Google Play handles the payment; we never see card details. We receive and store which plan was bought, its status and renewal date, and Google's purchase token so we can confirm renewals with Google. Ending a subscription never deletes memories.

Crash reports and usage statistics

Release versions of the app send two kinds of technical data so we can fix problems and know how the app is used:

Crash reports (Sentry): when the app hits an error, the error message, where in the code it happened, your device model, OS version and app version. No screenshots, no record of what you were doing, and never your journal.
Usage statistics (PostHog): app events such as opening the app or adding a memory, with a random ID created for this installation. Events carry only numbers, yes/no values or fixed choices (for example whether a memory has a photo), never journal text, names, photos or health logs, and are not linked to your account or email.