B Suite, Verdunplein 17, Box C3233, 5627 SZ Eindhoven, the Netherlands (KvK 42100856 · btw-id NL005492148B98), is the data controller for the Baby Suite applications (Baby Match, Baby Nest, Baby Journeys). Contact: support@babysuite.app.
| Data | Examples | Why (legal basis) |
|---|---|---|
| Account data | Email address, display name, sign-in identifiers | To create and secure your account (contract) |
| Family content | Baby profile (name, birth/due date), logs (feeds, sleep, diapers, growth, health entries, medicines, temperatures), planned events and reminders, milestones, checklists and assignments, wishlists, saved name-game results, diary entries (feelings, moments, and letters you write for your child), routines, notes | To provide the features you use, including the trends and suggestions shown back to you (contract) |
| Health-related entries (optional) | Medicines, temperatures, doctor visits, growth measurements, allergy notes | These are health data under the GDPR. We rely on your explicit consent: they are stored only when you deliberately record them in a clearly health-related feature, used only to show them back to you and the caregivers you allow, and deleting them removes them permanently — deleting your account withdraws this consent entirely |
| Reveal pages (Baby Match, optional) | If you create a "guess the name" reveal page: the name you chose plus the decoy names, your first names and an optional message, and each guest's entry (a first name they type and the name they pick) | To run the public reveal page you make and share — anyone holding its unguessable link can open it (contract/consent). Reveals delete themselves automatically after 180 days; if you were signed in when you created one, you can delete it anytime, which also removes its guesses |
| Family group data | Caregiver names/roles, invitations | To run shared family spaces (contract) |
| Consents & settings | Terms acceptance, content-disclaimer confirmations, cross-app sharing opt-in, country, language, notification preferences | To respect your choices and document consent (consent; records kept to demonstrate compliance) |
| Usage statistics | Which features are used (e.g. "a sleep was logged") — never the content of entries | To improve the Service (legitimate interest); kept separate from your content |
| Location (optional) | Approximate coordinates, only when you tap the weather feature | To fetch local weather for dressing suggestions (consent); coordinates are sent to the weather provider and not stored by us |
| Sensitive family events (optional) | If you choose to record a pregnancy or infant loss: a quiet-mode marker and the type you select | Only so the apps can respond quietly and appropriately (explicit consent); the type is visible to parents only — other caregivers may notice the apps going quiet but never see the type you selected; erasable at any time |
| AI feature inputs (optional, Premium) | Your baby's first name, age, country, and the recent care logs a feature summarizes — which can include medicine times and allergy notes (the weekly recap sends no name) | To generate the summary or explanation you asked for (contract; your explicit consent for health entries covers their inclusion). You can switch AI features off for your whole family in the app settings |
| Device & notification data | Push-notification tokens per device, notification preferences | To deliver the reminders and updates you enable (consent); removed when you sign out or turn notifications off |
| Plan & billing status | Plan tier, trial and renewal dates, subscription identifiers from our payment provider | To operate the free and Premium plans (contract); your card details stay with the payment provider — we never receive them |
| Feedback & support | Messages you send us, an optional rating, your email address and app/device info | To answer you and fix problems (legitimate interest) |
| Waitlist (website) | Name, email, country, expected stage — only if you sign up on our website | To contact you about access (consent) |
About children's data: the Service is for adults (18+): accounts are created and held by parents and guardians, never by children, and the apps are not directed at children. The apps store information about your child that you choose to enter. You, as the parent or guardian, control this data entirely — including who in your family group sees it, exporting it, and deleting it. We apply the same strict no-marketing, no-profiling commitments to it as to all other data, and treat health-related entries with extra care (temperatures, doctor visits and growth entries are hidden from non-parent caregivers; medicine timing stays visible to all caregivers as a deliberate safety measure).
We do not sell your data. We do not use it for advertising or marketing. We do not profile you or your child for advertising, marketing, or any purpose beyond the features you see in the app — insights and summaries are generated only at your request and only shown back to you, and we make no automated decisions about you with legal or similarly significant effects. We do not analyze your content for any purpose other than providing the features you use. There are no advertising networks in our apps. We use privacy-conscious usage analytics (Google Analytics for Firebase — see section 9) that count which features are used and never see the content of your entries.
| Provider | Role | Data |
|---|---|---|
| Google Firebase (Google Cloud) | Hosting, database, authentication, push notifications (Firebase Cloud Messaging) and usage analytics — data stored in the EU region (eur3) | All account and family content described above; device push tokens; pseudonymous usage events |
| Open-Meteo | Weather data for optional dressing suggestions | Approximate coordinates at the moment of the request; nothing stored by us |
| Google Vertex AI (Gemini) | Optional AI features: name ideas in Baby Match; premium insights, weekly recaps, and night/rhythm explanations in Baby Nest and Baby Journeys | Only the inputs the feature needs, sent at the moment you use it: name-game preferences (style, origin, length); or your baby's first name, age, country, and the recent care logs being summarized — which can include medicine times and allergy notes (the weekly recap sends no name). Results are cached in your family's space and pruned automatically. Under Google Cloud's data-processing terms this data is not used to train Google's models. AI requests may be processed in Google data centres outside the EU: those transfers are covered by the EU–US Data Privacy Framework (Google is certified) and by the standard contractual clauses built into Google Cloud's data-processing terms — email us for details. You can switch AI features off for your whole family in the app settings |
| Creem | Payment processing and billing portal for Premium subscriptions (web checkout) | Your email address, chosen plan, and the payment details you enter with them; we receive subscription status — never your card number. For the payment itself, Creem acts as merchant of record and is independently responsible under its own privacy policy |
| Google Workspace (Gmail) | Delivery of support and feedback email | The feedback you send us (message, optional rating, your email address, app/device info) and our replies |
| Google reCAPTCHA / Firebase App Check | Verifying that requests come from our genuine apps (abuse protection) | Device and browser signals at the moment of the check |
These providers act under data-processing agreements and may not use your data for their own purposes (except where noted for the payment itself). Beyond them, we share data with no one else — unless you direct us to (see section 5) or the law requires it. Where a provider processes data outside the EU, the transfer is protected by the EU–US Data Privacy Framework and/or the European Commission's standard contractual clauses.
Data you enter is visible to the members of your family group according to their role (for example, grandparents and sitters in Baby Nest see only non-health entries). You and your partner control who joins via one-time invitation codes. Optional sharing between Baby Suite apps (for example, Baby Journeys reading care logs from Baby Nest for suggestions or diary attachments) happens only within your own family, only after a parent's explicit opt-in, and can be turned off anytime.
Connections you choose: if you connect your own AI assistant or tool through the app's Connections screen, we share the data it requests — the scope is shown when you approve the connection — with that assistant, at your direction. Connections are parent-only, every access is logged, and you can revoke a connection at any time in the app. What the assistant does with the data is governed by its own privacy policy.
For as long as your account exists. When you delete your account, your data is permanently deleted (where you are the last parent of a family, the entire family's data is deleted; otherwise your personal access and account are removed and the family's data remains with the other parent). Backups held by our infrastructure provider expire on their standard schedule. Some records have shorter or specific lifetimes: AI-generated results cached in your family's space are pruned automatically (typically within 14–30 days), connection access logs are kept for 90 days, expired connection tokens are removed, and plan/billing records are kept for as long as tax law requires. Feedback and support emails are kept only as long as needed to handle your request; website waitlist entries are deleted once we have contacted you, or earlier on request.
Under the GDPR you have the right to access, rectify, export (data portability), delete, and restrict or object to the processing of your data, and to withdraw consent at any time. The apps implement the most important ones directly: export everything and delete everything are self-service buttons in each app's settings. For anything else, email support@babysuite.app. You also have the right to lodge a complaint with your data protection authority (in the Netherlands: Autoriteit Persoonsgegevens; in the UK: the ICO).
Data is encrypted in transit and at rest by our infrastructure provider. Access is controlled by per-family security rules enforced on the server: members of one family can never read another family's data, and role restrictions (such as health-data visibility) are enforced server-side. Parents-only spaces (such as the family diary, and sensitive family events) are enforced server-side too: caregivers who are not parents cannot read them. All content is encrypted in transit and at rest; it is not yet end-to-end encrypted. Keep your sign-in credentials and invitation codes safe — they are the keys to your family's space.
The apps use local storage on your device for sign-in sessions, offline functionality, and your preferences (theme, language, consents). We use Google Analytics for Firebase to count feature usage under a random, pseudonymous analytics identifier — never your name, email, or the content of your entries. These legal pages themselves load no analytics. We do not use advertising or cross-site tracking cookies.
If we change this policy materially, we will notify you in the app or by email before the change takes effect. The current version is always available at this address.
B Suite · support@babysuite.app · Terms of Service · Delete your account & data