Privacy Policy

Effective Date: April 11, 2026

Track Your Tiny Baby ("we", "our", or "the App") is developed by Ramazan Ocak. This Privacy Policy explains how we collect, use, store, and protect your information when you use our mobile application. By using the App, you consent to the practices described in this policy.

1. Information We Collect

a) Account Information: When you create an account using Apple Sign In or Google Sign In, we collect your email address and display name. If you sign in with Apple and choose to hide your email, we receive Apple's relay email address only.

b) Baby Data: You may voluntarily enter information about your baby, including but not limited to: name, birth date, gender, profile photo, feeding records (breast, bottle, solid food), sleep records, diaper changes, pumping records, growth measurements (weight, height, head circumference), and developmental milestones.

c) Device Information: We collect your device push notification token (APNs token) to deliver notifications. We also collect a unique device identifier (UUID) for data syncing and device management.

d) Usage & Analytics Data: We use Firebase Analytics (Google) to collect anonymized usage data such as screen views, feature usage frequency, and crash reports. This data helps us improve the App experience. No personally identifiable information is sent to Firebase.

e) Purchase Data: If you subscribe to premium features, RevenueCat processes your subscription. We receive subscription status (active/expired) and entitlement information. We do not have access to your payment details — all payment processing is handled by Apple.

2. How We Use Your Information

To provide and maintain the App's core features: activity tracking, sleep monitoring, growth charts, statistics, and developmental milestone tracking.
To synchronize your data across multiple devices linked to your account.
To enable family sharing — allowing household members to collaboratively track your baby's activities.
To send push notifications about activities logged by other family members in your household.
To send daily summary notifications and developmental milestone reminders.
To generate doctor-ready reports summarizing your baby's activity data.
To manage your premium subscription status.
To improve the App through anonymized analytics and to diagnose technical issues.

3. Family Sharing & Household Data

When you create or join a household, the following applies:

All baby profile data and activity records within the household are shared with every household member.
Each member can view, add, edit, and delete activities for babies in the shared household.
Members' display names are visible to other household members when they log activities.
The household owner can invite/remove members and change roles (co-parent, caregiver).
Caregivers have limited permissions and cannot edit baby profile information.
You can leave a household or remove members at any time.

4. Data Storage & Security

Your data is stored securely on cloud servers provided by Supabase, hosted on AWS infrastructure. We implement the following security measures:

All data is transmitted over encrypted connections (HTTPS/TLS).
Row Level Security (RLS) is enabled on all database tables, ensuring users can only access data belonging to their household.
Authentication tokens are verified on every API request.
Device tokens and sensitive credentials are stored securely and never exposed in logs.
Database backups are performed automatically by the hosting provider.

5. Third-Party Services

We integrate the following third-party services, each with their own privacy policies:

Supabase (supabase.com/privacy): User authentication (via Apple/Google OAuth) and PostgreSQL database hosting.
Apple Push Notification Service (APNs): Delivering push notifications to your iOS device.
RevenueCat (revenuecat.com/privacy): Managing in-app subscription purchases and entitlements.
Firebase Analytics (Google) (firebase.google.com/support/privacy): Anonymized usage analytics and crash reporting.

We do not sell, rent, or share your personal data with any third parties for marketing or advertising purposes.

6. Data Retention & Deletion

We retain your data for as long as your account is active. You can request account and data deletion at any time by contacting us at the email below. Upon receiving a deletion request:

Your account, baby profiles, all activity records, growth data, milestones, and device tokens will be permanently deleted within 30 days.
Data that has been shared with other household members may persist in their local device cache until they sync.
Anonymized analytics data (which cannot be linked back to you) may be retained.

7. Children's Privacy (COPPA Compliance)

The App is designed exclusively for use by parents, guardians, and authorized caregivers. We do not knowingly collect personal information directly from children under 13 (or under 16 in the EU/EEA). All baby-related data is entered and managed by the parent or caregiver. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

8. International Data Transfers

Your data may be transferred to and processed in countries outside of your residence (including the United States and EU), where our service providers operate. We ensure appropriate safeguards are in place to protect your data in accordance with applicable laws.

9. Your Rights

Depending on your jurisdiction (including under GDPR, KVKK, and CCPA), you have the right to:

Access: Request a copy of the personal data we hold about you.
Rectification: Request correction of inaccurate or incomplete data.
Erasure: Request deletion of your personal data ("right to be forgotten").
Data Portability: Request your data in a machine-readable format.
Restriction: Request that we limit processing of your data.
Objection: Object to processing of your data for certain purposes.
Withdraw Consent: Withdraw consent at any time by deleting your account.

To exercise any of these rights, please contact us at the email below. We will respond within 30 days.

10. KVKK (Turkish Data Protection Law)

For users in Turkey, your personal data is processed in accordance with the Personal Data Protection Law No. 6698 (KVKK). As the data controller, Ramazan Ocak is responsible for the processing of your personal data. You may exercise your rights under Article 11 of KVKK by contacting us.

11. Cookies & Tracking

The App does not use cookies. Firebase Analytics may use device identifiers (IDFA/IDFV) for anonymized analytics. You can opt out of analytics tracking through your device's privacy settings (Settings > Privacy > Analytics).

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you through the App or via email. The "Effective Date" at the top of this page indicates when the policy was last updated. Continued use of the App after changes constitutes acceptance.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Ramazan Ocak
Email: rmznocak@gmail.com
Location: Istanbul, Turkey