Privacy policy

Your baby's log belongs to your family, not to us. We keep it so it can sync between the people you invite, we store it in the EU, we never sell it or show you adverts, and you can download or delete it at any time from Settings.

Who we are

Little Duckling ("we", "us") is a baby tracker and newborn routine app at littleduckling.app. We decide how the information described here is used, which makes us its controller under the UK and EU General Data Protection Regulation (GDPR). You can reach us about anything on this page at hello@littleduckling.app.

What we collect

Your account

• Your email address, to sign you in with a one-time code or link, and the name you choose to show to your family.
• Sign-in with Google or Apple, if you use it: the account identifier and email address they give us. We never see your password.
• Your devices' sessions: a label such as "iPhone · Safari", when each was created and last used, so you can see and sign out of them in Settings.
• Your agreement to this policy and the terms, with the version and date.
• Settings such as millilitres or ounces and which notifications each device wants.

Your family's log

What you and the people you invite enter: your baby's name and date of birth, feeds (time, type, side, amount), sleeps, any notes you add, and your routine's settings such as wake time and bedtime. Each entry records who logged it. Because a baby's feeding and sleep can say something about their health, we only handle it to provide the app to your family, with the agreement you give when you start.

Your family's members

Who is in your family and their role (owner, parent, carer or viewer), and the invitations you send, including the email address of anyone you invite by email.

Security and running the service

• A security log of account events such as sign-ins, invitations, exports and deletions, so we can investigate misuse.
• Your IP address and the requests your device makes, used briefly to limit sign-in attempts, check you are not an automated bot, and in short-lived server logs used to find faults.

Notifications

If you turn notifications on, your browser or phone gives us an address to deliver them to. Notifications are sent through your browser maker's push service (for example Apple, Google or Mozilla); web notifications are encrypted so the push service cannot read them.

The nursery camera

Only families with a connected camera have this. The video goes from your camera to your devices; we pass on the connection but do not record or keep the video. Recordings you make are saved on your own device.

What we do not do

• We do not sell or rent your information, or share it for advertising.
• We do not use analytics, advertising or tracking cookies, and there are no third-party trackers on our pages.
• We do not use your family's log to train AI models.
• We do not look at your family's log unless you ask us to help with a problem, or the law requires it.

Why we use it, and our lawful basis

• To provide the app you signed up for: signing in, syncing the log between your family's devices, notifications and invitations (performing our contract with you).
• Your baby's feeding and sleep log: with your explicit consent, which you give before starting and can withdraw at any time by deleting the log or your account.
• Keeping the service secure and preventing abuse, such as the security log, rate limits and bot checks (our legitimate interest in a safe service).
• Meeting legal obligations, if any apply.

We send you emails only about your account: sign-in codes and invitations. We do not send marketing email.

Who handles it for us

We use a small number of providers who process information only on our instructions:

• Cloudflare runs the app's servers and database, sends our emails and provides the bot check on sign-in. Your account and your family's log are stored in Cloudflare's EU data locations.
• Google and Apple, only if you choose to sign in with them.
• Push services run by your browser or phone's maker, only if you turn notifications on.

Some of these providers are based outside the UK and EU. Where information leaves the UK or EU (for example an email in transit, or a request passing through a nearby Cloudflare data centre), it is protected by the safeguards the law requires, such as standard contractual clauses or adequacy decisions.

Who in your family sees what

Everyone in your family sees the same log and the names of the other members. Owners and parents can invite and remove people; carers can add to the log; viewers can only look. Think about who you invite, as they will see your baby's log for as long as they are in the family.

How long we keep it

• Your account and your family's log: until you delete them.
• Sign-in codes: deleted within a day.
• Sessions: until you sign out, or 400 days after a device was last used.
• Invitations: deleted 30 days after they expire.
• The security log: one year.
• Server logs: a few days.

When you delete your account, a family only you are in is erased with every entry. A family you share stays with its other members, and your entries in it remain part of their log. Deleted data can stay in encrypted backups for a short time before it is overwritten.

On your device

So the app works without a signal, your family's log and a copy of the app are kept on your device (in its browser storage). We set one cookie, which keeps you signed in; it is needed for the app to work, so we do not ask for cookie consent. Signing out removes the session; clearing your browser's data for littleduckling.app removes the rest.

Your rights

You can:

• Get a copy of your data: Settings → Download your data (everything, as JSON) or Download the log (a spreadsheet).
• Correct it: edit any entry, your name or your baby's details in the app.
• Delete it: Settings → Account → Delete my account, delete your whole family's log from the family's page, or delete a single entry.
• Withdraw consent, object to or restrict how we use your information, or ask for it in a portable form, by writing to us.
• Complain to a data protection authority: in the UK the Information Commissioner's Office (ico.org.uk), or the authority where you live in the EU. We would like the chance to put things right first.

We answer requests within one month.

Children

Accounts are for adults: you must be 18 or over and a parent or carer of the baby you log. The app holds information about babies only as entered by the adults looking after them.

Security

Everything travels over encrypted connections (HTTPS). Sign-in codes and session tokens are stored only as hashes, each family's log is kept separately and only its members can open it, and we keep what we hold to what the app needs.

Changes to this policy

If we change what this policy says in a way that matters, we will update the date above and ask you to agree again in the app before you carry on.