BabbleChart

Privacy Policy

Last updated: September 26, 2026

1. Introduction

Welcome to BabbleChart ("we," "our," or "us"), an infant care tracking service. We are committed to protecting your privacy and the safety of your family's data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the BabbleChart mobile application, our website (https://www.babblechart.com), and our backend services.

2. Information We Collect

To provide our hands-free logging, AI-driven insights, and co-caregiver synchronization features, we collect the following types of information:

  • Account Information: When you sign up using email and password, phone number (OTP verification), or SSO options (Google Sign-In or Sign in with Apple), we receive your authentication details, unique user ID, and profile name.
  • Child Profiles: You provide information about your infant, including name, date of birth, due date, and sex/gender, to personalize developmental tracking and WHO percentiles.
  • Newborn Care Logs: Logging entries you make, including diaper changes, feeding logs (bottle volume, nursing duration), sleep cycles, growth metrics, and care notes.
  • Voice and Image Data (Third-Party AI Features): If you choose to enable our AI features, we collect:
    • Voice Audio Recordings: Spoken dictation recordings when you use hands-free Voice Logging.
    • Care Record Photos: Images of handwritten charts, whiteboards, or clinic care cards when you use Vision AI note scanning.
    • Developmental Statistics: De-identified infant age (in weeks) and aggregate feeding/sleep frequency metrics when generating pediatric insights.
  • Purchase History: We verify in-app purchases (such as Premium subscriptions, on-demand AI usage credit packs, and co-caregiver permanent slot unlocks) through Apple StoreKit and Google Play Billing. We do not store credit card details.

3. How We Use Your Information

We use the collected information for the following specific purposes:

  • Operate, maintain, and synchronize care logs across authorized and invited co-caregivers in real time.
  • Transcribe spoken dictation into structured care entries (feeds, diaper changes, sleep, pumping) via Google Gemini AI.
  • Extract handwritten notes and structured feeding/diaper tables from photos via Google Gemini AI multimodal vision processing.
  • Analyze developmental milestones against standard pediatric guidelines (WHO Child Growth Standards) to generate educational weekly care insights.
  • Prevent fraudulent activities, enforce API rate limits, and maintain account authentication security.

BabbleChart does not sell personal data and never shares your baby's profile, care logs, photos, or voice recordings with advertisers. Free-tier accounts see ads from Google AdMob (Section 5).

4. Third-Party AI Data Sharing & Equal Protection Confirmation

BabbleChart shares personal data with third parties strictly to provide essential application features, subject to rigorous data protection standards:

  • Third-Party Artificial Intelligence Provider (Google Gemini AI / Google LLC): BabbleChart integrates with Google Gemini AI, provided by Google LLC through enterprise Google Cloud Platform APIs, to provide voice dictation parsing, handwritten chart scanning, and pediatric developmental insights.

    Data Categories Shared: Voice audio recordings, photos of handwritten logs/cards, and de-identified developmental metrics (infant age in weeks and care frequency).

    Equal Protection Confirmation: We confirm that Google Cloud / Google Gemini AI provides the same or equal protection of user personal data as BabbleChart and as required by Apple App Store Review Guidelines 5.1.1(i) and 5.1.2(i).

    Strict Non-Training Commitment: Under Google Cloud's Enterprise Data Processing Addendum (DPA), Google does not retain, log, or use your family's personal data, voice audio recordings, or photos to train or improve Google's foundational AI models.

    Ephemeral Processing: Audio files and images transmitted to Google Gemini AI are processed ephemerally in real-time memory solely to fulfill the requested transcription or analysis, and are deleted immediately upon completion.

    Cryptographic Security: All API communication between BabbleChart and Google Cloud / Gemini AI is encrypted in transit using TLS 1.3.

  • User Consent and Revocation Mechanism: In accordance with Apple App Store Guidelines 5.1.1(i) and 5.1.2(i), BabbleChart requests your explicit, affirmative permission via an in-app disclosure modal before any voice audio, photos, or care metrics are shared with Google Gemini AI. You may review your consent status or revoke AI consent at any time inside the app under Settings → Legal & Privacy → Third-Party AI Services. If consent is revoked or declined, all core manual charting and synchronization features remain 100% operational without any third-party AI data transmission.
  • Invited Caregivers: If you explicitly invite a co-caregiver (e.g., spouse, nanny) to your baby profile, they will have access to all care logs for that profile. You may revoke caregiver access at any time in Settings.
  • Cloud Infrastructure Provider: We use Google Cloud Platform (Firebase Authentication, Cloud Functions, Google Cloud Firestore, and Google Cloud Storage) to securely store and synchronize your family's data with AES-256 encryption at rest.
  • Email Authentication & Privacy: Email addresses collected for registration, login, and One-Time Passcode (OTP) verification will never be shared with or sold to third parties, affiliate companies, or marketing agencies.

5. Advertising on the Free Tier (Google AdMob)

Free-tier accounts see banner ads served by Google AdMob (Google LLC). Premium, VIP, and credit-pack accounts do not see ads.

  • Data Google may collect: your device's advertising identifier (Apple IDFA or Android Advertising ID), IP address (used to estimate general location), ad interactions, and app diagnostic and performance data. BabbleChart never sends your baby's data, care logs, photos, or voice recordings to AdMob.
  • Your choices: On iOS, ads use your IDFA only if you tap "Allow" in Apple's tracking prompt. In the EEA, UK, and Switzerland we ask for your consent with Google's consent form before showing ads; change it any time in Settings → Legal & Privacy → Ad privacy choices. You can reset or limit your advertising ID in your device settings.
  • Report an ad: Settings → Legal & Privacy → Report an ad, or email [email protected].
  • How Google uses information from apps that use its services: policies.google.com/technologies/partner-sites.

6. COPPA & Children's Privacy

BabbleChart is designed for use by parents and adult legal guardians. It is not intended for direct use by children under the age of 13. We do not knowingly collect personal information directly from children under 13. All baby profile logs must be entered by a verified parent or legal guardian.

7. Your Data Rights & Deletion Requests

You have full ownership and control over your family's data. You have the right to access, edit, export, or permanently delete your account and all associated pediatric care logs at any time.

In-App Permanent Deletion: You can instantly and permanently delete your account directly inside the BabbleChart app by opening Settings → Caregiver Account → Danger Zone → Permanently Delete Account. This immediately wipes your caregiver credentials, newborn profiles, diaper/feeding/sleep logs, and revokes all co-caregiver sync permissions.

Web / Email Deletion: If you no longer have the app installed, you may submit a deletion request by emailing [email protected] or visiting our Account & Data Deletion Portal.

8. Data Security & Email Verification (OTP)

We implement industry-standard cryptographic and access-control practices. All network traffic between the mobile client and our Google Cloud API gateway is encrypted in transit using TLS 1.3, and database logs are stored with disk-level AES-256 encryption.

To protect user accounts against automated attacks and unauthorized takeover, all One-Time Passcodes (OTP) issued via email feature a strict 10-minute validity window, after which expired codes are permanently invalidated. In addition, an automated 2-minute rate-limiting cooldown is enforced between successive verification code requests to prevent abuse.

9. Changes to this Policy

We may update our Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date above.

10. Contact Us

If you have any questions or feedback regarding this Privacy Policy, please email us at [email protected] or visit our support page.