Privacy Policy

Effective: 3 May 2026 · Last updated: 3 May 2026

Echo Baby is a mobile app that helps parents and caregivers track their baby's feeds, sleep, diapers, and other daily activities. This policy explains what information we collect, how we use it, who we share it with, and the choices you have. We have written it in plain language. If anything is unclear, please reach out using the contact details at the bottom.

1. Who we are

"Echo Baby", "we", "our", and "us" refer to the team that operates the Echo Baby mobile app and the website at echobaby.app. The app is available on the Apple App Store and Google Play Store.

We are the data controller for the personal information we collect about you through the app and this website. You can reach us about anything in this policy at privacy@echobaby.app.

2. Information we collect

We collect the smallest amount of information needed to run the service. Most of what we collect is data you choose to enter to track your baby's day.

2.1 Account information

• Display name and email address when you sign in with Google or Apple, or when you create an account.
• OAuth identifier from Google or Apple (a stable account ID those providers give us so we can recognize you on return visits).
• Anonymous account flag if you choose to use the app without signing in. In that case, we do not collect a name or email and your data lives only on the device until you sign in.
• Device push token (a per-device identifier from Apple Push Notifications or Firebase Cloud Messaging) so we can deliver reminders and household notifications. You can revoke this by disabling notifications in your device settings.

2.2 Household information

• Household name, your role in the household (owner, admin, or member), and your time zone.
• Names and email addresses of other members you invite to your household.
• Subscription status (free, trial, paid, or lifetime) and the date your current subscription ends.

2.3 Baby profile information

• Baby's name, date of birth, and gender (gender is optional).
• An optional baby photo if you choose to add one.

2.4 Activity data

• Logs you enter for feeds, sleep, diapers, custom activities, and reminders.
• Timestamps, durations, amounts (for example, ounces or millilitres), notes you write, and any related metadata such as which side you fed from.
• Edits to past entries are tracked so household members can see what changed.

2.5 Subscription and payment information

We do not collect or store your credit card or bank details. Payments are handled entirely by the Apple App Store or Google Play Store. We use a service called RevenueCat to receive a confirmation that your subscription is active. RevenueCat receives a household identifier from us so it can match your purchase to your household. See Third-party services below for more.

2.6 Device and diagnostic information

• Device platform (iOS, Android, or web) and your device's time zone, so we can show times correctly.
• App version and a small amount of technical information about your device, used for troubleshooting.
• Crash reports and error traces when something goes wrong. These include the technical context of the error and may include your account ID and email so we can follow up if needed. We use Sentry for this.

We do not collect your precise location, your contacts, your camera roll, your microphone audio, or your browsing history.

3. How we use your information

We use your information to:

• Provide the core service: showing your logs, syncing them across your devices, and sharing them with the people you invite to your household.
• Send notifications you have asked for, such as feeding reminders and household updates.
• Process and verify your subscription so paid features are available on every device you use.
• Detect and fix bugs, monitor app stability, and improve performance.
• Reply when you contact us for support.
• Comply with our legal obligations and enforce our Terms of Service.

Under European law, our legal bases for processing are: performance of our contract with you (running the service you signed up for), our legitimate interest in keeping the app working safely, your consent (for example, push notifications), and compliance with legal obligations.

4. Third-party services

We use a small number of trusted services to run Echo Baby. We share with each of them only what they need. We do not sell your information to anyone.

Our backend is hosted on standard cloud infrastructure in the European Union. The hosting provider stores the database that holds your account, household, and activity data, and processes it on our instructions only.

5. Children's information

Echo Baby is designed for parents, caregivers, and other adults who track a baby's daily activities. The app is not directed at children, and we do not knowingly allow people under the age of 13 (or under 16 in the European Economic Area and the United Kingdom) to create an account.

Information about a baby (name, date of birth, photo, and activity logs) is entered by a parent or caregiver. Under United States COPPA rules, this kind of parent-entered record about a child is not the same as information collected from a child directly. We do not allow children to interact with the app, and we do not show advertising to anyone.

If you believe a child has created an account or that we have somehow collected information directly from a child, please contact us and we will delete the relevant information.

6. How information is shared

We share your information only in the following situations:

• With other people in your household. When you invite someone to your household, the entries you log become visible to them, and theirs to you. You can remove members at any time from the Manage Household screen.
• With the service providers listed above, only as needed to run the app.
• For safety and legal reasons, if we believe in good faith that disclosure is required by law, court order, or to protect the safety of someone.
• If we go through a business change such as a merger, acquisition, or sale of assets, your information may transfer to the new operator. We will notify you in the app before that happens and your rights under this policy will continue to apply.

We do not sell your personal information, and we do not share it with advertisers or data brokers.

7. Data retention and deletion

We keep your information for as long as your account is active. You can delete your account at any time from Settings → Delete Account inside the app. For step-by-step instructions and an email option if you cannot open the app, see Delete your account. When you delete your account:

• Your user record, baby profiles, and activity logs are removed from our active database within a few minutes.
• Encrypted backups are rotated and any deleted data is purged from those backups within 30 days.
• Subscription receipts that we are required to keep for tax or accounting reasons may be retained for the period required by law, in a form that is not linked to your active profile.
• If you are the only owner of a household with other members, deleting your account will also delete the household and its data, because there is no one to take ownership. The app will warn you before this happens.

If you only want to leave a shared household but keep your own account, use the "Leave Household" option from Manage Household.

8. Your rights

You have rights over the personal information we hold about you. These vary by region, and include:

• Access — request a copy of the information we hold about you.
• Correction — ask us to fix anything that is wrong. You can edit most of your information directly in the app.
• Deletion — ask us to delete your account and associated data, or use the in-app Delete Account flow.
• Portability — request a machine-readable export of your data.
• Objection and restriction — ask us to stop or limit how we process your information, in certain circumstances.
• Withdraw consent — for anything we do based on your consent, you can withdraw it at any time without affecting the lawfulness of past processing.
• Lodge a complaint — with your local data protection authority if you believe we have not handled your information properly.

To exercise any of these rights, email privacy@echobaby.app from the address linked to your account, or use the in-app Settings options where available. We will respond within 30 days, and may need to verify your identity before making changes.

9. Security

We protect your information using the standard practices you would expect from a modern app:

• All traffic between the app and our servers uses HTTPS with TLS encryption.
• Authentication tokens are stored on your device using the platform's secure storage (the iOS Keychain or the Android Keystore).
• Our database is hosted on infrastructure with restricted access. Only a small number of operators can reach production data, and only when strictly necessary.
• Backups are encrypted at rest.

No service can promise perfect security. If we ever discover a breach that affects your information, we will notify you and the relevant authorities as required by law.

10. International data transfers

Our backend is operated from the European Union. If you use the app from another country, your information will be sent to the European Union for processing. Some of the third-party services listed above process information in the United States. Where the law requires, we use Standard Contractual Clauses or other approved transfer mechanisms to protect your information when it crosses borders.

11. Cookies and local storage

This website (echobaby.app) does not set any analytics or advertising cookies. It only uses what is strictly necessary to render the page.

The mobile app uses the device's local storage to remember your preferences (such as theme and language) and to keep you signed in. It does not use third-party advertising trackers.

12. Changes to this policy

We may update this policy as the app evolves. The "Effective" and "Last updated" dates at the top will reflect any change. For material changes, we will give prominent notice in the app before the new policy takes effect, and where required, ask for your consent.

13. Contact us