Privacy policy

Your family’s care information is private by default.

Effective September 25, 2026

Baby Brief is operated by Ryan Youngdale, a sole proprietor doing business as Baby Brief (“Baby Brief,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information through the Baby Brief iOS app, private caregiver handoff website, getbabybrief.com, and related services (collectively, the “Service”).

Baby Brief accounts are for adults who are at least 18 years old. The Service lets authorized adults record and coordinate care for children, so information about a child may be provided by a parent, guardian, household member, or caregiver rather than by the child.

Health and care information may receive additional protection. Please also read our Consumer Health Data Privacy Policy.

Information we collect

• Account and household information. Your name, email address or Apple private relay address, account identifier, profile image if you add one, adult relationship or role, household membership, and onboarding status.
• Children’s care information. Information adults choose to enter, including names, birth dates or age ranges, photographs, routines, feeding and sleep details, contacts, schedules, allergies, medications, health observations, safety information, care locations, home-access or pickup instructions, notes, Care Cards, and other care instructions.
• Caregiver and handoff information. Caregiver names, relationships, contact details, optional avatars, handoff access, selected Care Card snapshots, care events and updates, messages, access status, and related timestamps.
• Subscription information. Product, transaction, subscription, renewal, expiration, refund, revocation, and entitlement information supplied by Apple. Apple processes payment credentials; Baby Brief does not receive or store payment-card numbers or card security codes.
• Optional communications. If a caregiver turns on text alerts, we process the mobile number, consent record, opt-out choices, message type, and delivery status. If you sign up for product updates, contact us, or make a privacy or support request, we process the information you submit.
• Device, app, and security information. Information needed to authenticate users, maintain sessions, deliver notifications, diagnose errors, and protect the Service, such as an app or device identifier used by the Service, push-notification token, app version, operating environment, IP address and request metadata observed by hosting or security providers, timestamps, and delivery or error records.
• Optional usage analytics. Only after an adult opts in, Mixpanel receives a limited account-linked identifier, technical SDK information, and approved usage events such as successful signup completion or handoff creation. Baby Brief does not send care content, child names, allergies, medications, messages, contact details, photos, or private links as analytics event properties. We do not enable automatic capture or session replay.

Sources of information

We receive information from the adult using the Service; other authorized household members and caregivers; Apple when Sign in with Apple, App Store purchases, or device services are used; and records created when the Service and its security providers process requests. We do not purchase personal information from data brokers, obtain social-network friend lists, or collect family information from public databases, marketing partners, affiliate programs, or advertising data providers.

How we use information

We use personal information to:

• create and maintain accounts, profiles, households, and authentication sessions;
• save, synchronize, display, and share the care information and handoffs selected by authorized adults;
• manage household subscription entitlements and respond to App Store transaction events;
• send requested push notifications, optional caregiver text alerts, support responses, privacy-request communications, and service or legal notices;
• provide support, troubleshoot errors, improve reliability and user experience, and understand limited usage trends when optional analytics is enabled;
• prevent fraud, abuse, and unauthorized access and protect users and the Service; and
• comply with law, valid legal process, and enforceable agreements.

Product-update and promotional email is separate from account, care, privacy, and security communications. You may unsubscribe from promotional email without losing access to the Service.

How information is disclosed

Baby Brief does not provide public profiles or public discussion areas. We disclose information only as described here:

• Authorized household members. Household members may access shared profiles, care records, history, messages, and related household information according to their authorization.
• Invited caregivers. A caregiver may access the information selected for an active handoff. Anyone who receives or is forwarded a valid private link may be able to open it, so protect links and share them only with intended recipients.
• Service providers. Supabase provides authentication, databases, storage, real-time synchronization, and server functions. Cloudflare provides website delivery, DNS, network security, and Turnstile abuse prevention. Apple provides Sign in with Apple, App Store purchases, device services, and optional push delivery. Telnyx and mobile carriers deliver optional text alerts. Zoho Mail processes support, account, and privacy correspondence. Kit manages product-update subscribers and promotional email delivery. Mixpanel processes optional usage analytics after opt-in. Providers receive information needed for the services they perform and may have limited independent obligations or purposes described in their own notices.
• Legal and safety recipients. We may disclose information when reasonably necessary to comply with law or valid legal process; protect a person from an imminent threat; investigate fraud, abuse, or unauthorized access; enforce our agreements; or protect the rights, safety, and security of Baby Brief, our users, or others.
• Business transfers. Information may be transferred as part of a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of the business, subject to applicable law and continuing privacy obligations.

Notification previews may be visible on a device before the app or handoff is opened. Private-link recipients may independently save or export information outside Baby Brief; those copies cannot always be remotely recalled.

No sale or targeted advertising

We do not sell personal information, share it for cross-context behavioral advertising, use care information for targeted advertising, or allow providers to use it for their own marketing. Mobile information and text-message opt-in records are not sold or shared with third parties or affiliates for their marketing or promotional purposes. Baby Brief does not use personal information for automated decisions that produce legal or similarly significant effects.

Browser storage, notifications, and analytics choices

Caregiver pages use browser storage and similar technologies for authentication, sessions, security, and temporary care-history information. Cloudflare Turnstile uses browser and request signals to detect automated abuse. Clearing browser storage may sign you out or remove locally cached information. Baby Brief does not use advertising cookies or retargeting technologies and does not maintain a separate advertising Cookie Notice.

You may disable device notifications in system settings. Caregivers may turn off alerts for a handoff or reply STOP to stop Baby Brief SMS messages to their number. Withdrawing analytics permission stops future optional analytics collection. A separate in-app request is available to seek deletion of analytics data already received by Mixpanel.

Retention and deletion

We retain account, household, care, and handoff information while it is needed to provide the Service or until an authorized user uses the applicable deletion control, subject to limited security, legal, dispute, and request-completion needs. Ending a handoff revokes caregiver access but ordinarily retains the household’s handoff history. Removing one Care Card may not erase snapshots already stored in earlier handoffs.

The authenticated household-care deletion control removes current and historical care information across every child and member while preserving accounts and household membership. Account deletion removes the requesting member and ends active handoffs; shared household records remain for other authorized members, while deletion by the last parent removes the household and queues associated cleanup. Deleting an account does not cancel an Apple subscription.

Provider cleanup, backups, offline devices, independently saved recipient copies, and signed links may follow different schedules. We retain minimal records of completed automated deletion requests for 90 days after all tasks finish and retain unfinished request records until they are resolved. We do not claim a fixed retention period for ordinary support or privacy correspondence; it is kept only as long as reasonably necessary for the request, security, legal, or recordkeeping purpose. Additional health-data deletion rules appear in the Consumer Health Data Privacy Policy.

Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including authenticated access, household authorization, restricted caregiver grants, encrypted transport, service-provider controls, and private links. No storage or transmission method is completely secure. Protect your devices and private links, and do not use Baby Brief as the only record of urgent or critical care information.

Your privacy rights

Depending on where you live and applicable law, you may have rights to confirm whether we process your personal information; access, correct, delete, or obtain a portable copy of it; obtain information about recipients; withdraw consent; opt out of sale, targeted advertising, or qualifying profiling; and appeal a denied request. Baby Brief does not engage in sale, targeted advertising, or qualifying profiling. We will not discriminate against you for exercising an applicable privacy right.

Use the in-app Privacy & Data or Health Data & Consent controls for the actions offered there, or email privacy@getbabybrief.com. An authorized representative may submit a request where applicable. We may take proportionate steps to verify identity and authority before acting. If we deny a request, reply to our decision or email the same address with the subject “Privacy Appeal.”

California notice

During the preceding 12 months, Baby Brief may have collected the categories described above, including identifiers; customer-record information; characteristics and household relationships; internet or electronic activity; photos and other sensory information; commercial information relating to subscriptions; user content; and sensitive personal information such as account credentials, precise care locations entered by users, and health information. We collect and disclose these categories for the service, security, support, legal, subscription, and user-directed sharing purposes described in this Policy.

We do not sell or share personal information as those terms are defined for cross-context behavioral advertising under California law, and we do not use or disclose sensitive personal information for purposes that require a right to limit. California residents may use the request methods above and may request information about categories collected, sources, purposes, and recipients, subject to applicable exceptions.

Children’s information

Children may not create or use Baby Brief accounts. Adults are responsible for providing and sharing a child’s information only when they have authority to do so. We do not knowingly collect personal information directly from children through an account or child-directed experience.

Changes to this Policy

We may update this Policy when our practices or applicable law change. We will post the revised Policy, update the effective date, and provide additional notice or obtain additional permission when required. A material change to a purpose or consent scope will not be applied to previously collected information without the disclosure and permission required by law.

Contact us

For privacy questions, requests, or appeals, email privacy@getbabybrief.com. For general support, email support@getbabybrief.com.