1. Introduction

BabyNoel ("we", "us", "our") helps parents and caregivers track daily baby care. This policy explains which personal data we process, why we process it, and your GDPR rights.

2. What data we collect

Account data

Email address (login, verification, account recovery)
Name (optional, app display)

Baby data

Baby name and date of birth
Log data: feeding, diapers, sleep, temperature, growth, medication, baths, vitamins
Optional daycare photos, only when a parent/caregiver explicitly enables this per child

Technical data

Device type and operating system (compatibility and security)
Product and usage events through our own backend, such as feature use and technical errors

Android waitlist

Email address and, optionally, your first name
Whether you may be interested in beta testing the Android app

We use this data only to measure interest in and contact you about a possible native Android app. Registration is not consent to a general newsletter.

3. Legal bases (GDPR)

Performance of a contract: account, sync, and core app functionality.
Legitimate interests: security, fraud prevention, reliability, and improvement.
Consent: optional notifications/features that require consent.
Legal obligation: where required by law.

4. How we use your data

Providing and improving BabyNoel
Storing and syncing log data
Sharing data with caregivers you invite
Sending service, verification, and invitation emails

5. Data sharing and processors

We never sell data. We only share data with essential processors:

Supabase (database)
Vercel (hosting, infrastructure, and privacy-focused web analytics)
Resend (email delivery)

We maintain processor agreements where required. If processing happens outside the EEA, we rely on appropriate safeguards (such as Standard Contractual Clauses).

6. Data security

Encrypted transport (HTTPS/TLS)
Passwords stored hashed
Role-based access for invited caregivers
Daycare photos are stored privately and shown only through temporary, secured access
Native app supports Face ID / Touch ID

7. Daycare photos

Daycare photos are optional. Parents/caregivers can enable consent per child so that a linked daycare or childminder may share solo photos of that child. Without consent, daycare cannot upload daycare photos.

Only parents/caregivers with access to the child and linked daycare staff or childminders with access to that child can view the photo. Daycare photos are kept for up to 90 days and are deleted when consent is withdrawn.

8. Your rights

Under GDPR, you have rights of access, rectification, deletion, restriction, portability, and objection.

Contact us at privacy@babynoel.nl for requests. You may also lodge a complaint with your local data protection authority.

9. Data retention

We keep data while your account is active. After account deletion, data is removed within approximately 30 days, unless legal retention obligations apply. Unconfirmed Android waitlist registrations are deleted after 7 days. Confirmed registrations are kept until you unsubscribe or the waitlist is no longer needed.

10. Children

BabyNoel is intended for parents and caregivers (18+). We do not knowingly collect data directly from children under 16.

11. Cookies and analytics

We use functional/session cookies needed to run the app. We also use Vercel Web Analytics for aggregated information about page views, referring websites, country, browser, and device type. Vercel Web Analytics does not use tracking cookies and does not connect this data to a personal BabyNoel profile. We do not use advertising tracking or follow visitors across other websites.

In the app, we record limited product events through our own backend to improve features, stability, and security. We do not sell this data, and it does not contain the contents of your baby log. Analytics events in our own backend are retained for up to 13 months.

12. Changes

For material updates, we will notify you in-app or by email.

13. Contact

Privacy questions? Contact privacy@babynoel.nl.

Privacy Policy