Privacy policy

1. Scope and operator

This policy applies to the Web, Apple, and Google versions of 寶貝貼身管家, its official website, and support processes.

Service provider

潘光信 (independent developer)

Product name

寶貝貼身管家

Official website

baby.jinhaoyong.xyz

Contact email

baby-support@jinhaoyong.xyz

For questions about data processing, select “Privacy & data rights” on the official contact page.

2. Data we process

• Account and verification data: The email address, account identifiers, and sign-in method you use to register, verify your email, and sign in.
• Content you provide: Baby names or nicknames, feeds, temperature, stools, medical visits, medicines, vaccines, milestones, reminders, notes, photos, and other data you enter. We do not require your baby's legal name, but content may still be linked to an individual through accounts, photos, or family relationships.
• Family collaboration data: Family members, invitation status, roles and permissions, and who added or edited a record.
• Subscription data: Purchase platform, plan, active status, and subscription verification results provided by Apple App Store or Google Play. Payment-card numbers are handled by the platform; we do not directly receive full card numbers.
• Support data: Your name or nickname (optional), contact email, topic, message, privacy policy version and consent time, and a case ID that contains no personal data.
• Service and security data: Device, app or browser version, network connection, access time, and error records needed for sign-in, synchronization, security, and troubleshooting.

In-app support processes the issue category, messages, conversations and attachments you choose to submit. You can turn off additional environment details; this omits the page, app version and environment details, while the request still requires account, family scope and communication version information. Website contact-form retention rules apply separately from in-app support.

3. Purposes of processing

We use data to create and verify accounts; store and sync care records; support shared family care; show who performed an action; process user-set reminders; confirm plans and subscription access; provide support; prevent abuse; and maintain service security and stability. Data is not used for advertising sales unrelated to these purposes.

4. Duration, regions, recipients, and methods

• Duration: From when you provide data until the account or service purpose ends, you delete it through available features, or a legally required retention period ends.
• Regions: The region where you use the service and regions where we or our technical service providers process data to provide the service.
• Recipients: Family members you authorize, our operations and support personnel, necessary technical service providers, and authorities legally entitled to request data.
• Methods: Electronic and automated collection, storage, synchronization, display, search, backup, security analysis, subscription verification, and deletion.

5. Family sharing and permissions

All members of the same family can view, add, and edit family records and see who added or edited them. Only the family owner can invite or remove members and delete an entire baby profile or family's data. Before inviting someone, make sure they are an appropriate person to access content that may include photos and health-related information.

6. Health-related content and others' data

Temperature, medical visits, medicines, vaccines, and other care content may involve a baby's or another person's health and personal data. Before providing it, ensure you have the right to provide, store, and share it with invited family members. Obtain appropriate consent first where consent from the person, a legal representative, or someone else is required by law.

7. Service providers and disclosures

We do not sell your personal data. Necessary data may be processed by technical service providers for account verification, cloud storage, website and network delivery, notifications, and subscription verification. Website contact processes use Cloudflare for networking, security checks, Workers, and email routing, and Brevo to deliver support inquiries, automatic confirmations, and support replies. We may also disclose data as required by law or as necessary to address security incidents or protect users' rights.

8. Website contact and security checks

• Neither the contact form nor direct email accepts attachments. Received attachments are not forwarded or retained.
• The website does not create a support database or marketing list. Ordinary inquiry content is retained for at most 180 days after a case closes, then deleted. Legal, security, payment, or rights disputes are retained only to the extent and for the period necessary.
• Form processing logs contain only time, status, error type, and case IDs without personal data. They do not contain message bodies, and additional request invocation logs are disabled. Technical logs are retained for at most 30 days.
• To prevent abuse, the form uses security checks, reasonable rate limits, and short-lived hashed identifiers. Raw IP addresses are not included in support emails or retained long-term. We do not use advertising or cross-site tracking.

9. Retention, security, and deletion

Deleting your account also removes your sign-in account and the in-app support reports, conversations, support replies and attachments submitted through that account. Once cleanup is confirmed, the record of that deletion operation is removed immediately, with no additional retention period. If processing is interrupted, necessary operation data is temporarily retained to finish cleanup; deletion is not shown as successful until it is complete.

Account deletion does not delete shared family care records. Existing records remain in the family, with the member name shown as “Deleted member”. Family owners must first complete the family-related steps shown in the app before deleting their account.

We use reasonable access controls, transmission safeguards, and service security measures, but no online service can guarantee absolute security. You can delete accounts or data in BABY Web or an app currently available; completed deletion cannot be undone. Where retention is required by law or legitimate security or dispute-handling needs, we retain data only for the necessary period and scope.

10. Your rights and how to exercise them

Under applicable law, you may request access, inspection, copies, additions or corrections, cessation of collection, processing or use, and deletion of your personal data. Use in-product features where available; otherwise submit a request through the contact page. To protect account and family data, we may first verify your identity and authority.

11. Providing data is your choice

Creating a baby profile requires a nickname and date of birth, but not a legal name. Photos, care content and reminders are optional; without them, related features may be unavailable or records incomplete. Without information required for registration, verification or security, you cannot create an account, sign in or use account-dependent features.

12. Policy updates

We may update this policy when features, data practices, or legal requirements change. The last-updated date and key changes are published on this page only, without separate email or app notifications. If a future purpose or change legally requires fresh consent, the relevant feature will not be enabled until consent is obtained.