Privacy Policy

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address — used for authentication, account recovery, and transactional communications.
• Display name — optional, used to personalize your experience.
• Authentication provider data — if you sign in with Google or Apple, we receive your name and email from the provider. We do not receive or store your password from third-party providers.

1.2 Baby and Sleep Data

To provide sleep tracking and guidance, we collect data you voluntarily enter:

• Baby's name, date of birth, and age.
• Sleep logs (sleep start/end times, nap durations, night wakings).
• Notes you attach to sleep entries.

This data is stored securely and is only accessible to your account.

1.3 Device and Usage Data

We may automatically collect:

• Device type, operating system, and app version.
• Crash reports and performance data (via Firebase Crashlytics).
• Anonymous usage analytics (e.g., which features are used most frequently).

We do not collect precise geolocation data.

2. How We Use Your Information

We use the information we collect to:

• Provide the Service — store and display your baby's sleep data, generate insights and recommendations.
• Authenticate your account — verify your identity via email, Google, or Apple sign-in.
• Send transactional emails — account verification, password resets, and sign-up confirmation. These emails are necessary for the operation of the Service and are not marketing.
• Improve the Service — analyze aggregate usage patterns to fix bugs and develop new features.
• Ensure security — detect and prevent fraud, abuse, and unauthorized access.

We do not use your information for advertising, profiling, or selling to third parties.

3. Email Communications

We send the following types of emails:

• Email verification — sent when you create an account to verify your email address.
• Sign-up link — sent when you use email-based sign-up to complete account creation.
• Password reset — sent when you request a password reset.

All emails include an unsubscribe link. You can opt out of non-essential emails at any time by clicking “Unsubscribe” in any email or contacting us at support@sleepingbaby.app.

We use Amazon Simple Email Service (AWS SES) to send emails. We comply with the CAN-SPAM Act and include our sender identity and unsubscribe mechanism in every message.

4. Data Storage and Security

• Your data is stored in Google Firebase (Firestore database and Firebase Authentication), hosted in the United States.
• Data is encrypted in transit (TLS/HTTPS) and at rest.
• We use Firebase Security Rules to ensure users can only access their own data.
• Authentication credentials (passwords) are managed by Firebase Authentication and are never stored in plaintext.

We implement reasonable administrative, technical, and physical safeguards to protect your information. However, no method of electronic storage or transmission is 100% secure.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information.

We may share information only in the following circumstances:

• Service providers — we use third-party services to operate the app (Firebase for data storage and authentication, AWS SES for email delivery). These providers process data on our behalf and are bound by their own privacy policies.
• Legal requirements — we may disclose information if required by law, regulation, legal process, or governmental request.
• Safety — we may disclose information to protect the rights, safety, or property of our users or the public.

6. Data Retention

• Account data is retained as long as your account is active.
• Sleep data is retained as long as your account is active.
• Email suppression records (bounce and complaint data) are retained indefinitely to maintain email deliverability and comply with anti-spam requirements.
• If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., email suppression lists).

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your account and associated data.
• Export your data in a portable format.
• Withdraw consent for optional data processing.
• Opt out of non-essential email communications.

To exercise any of these rights, contact us at support@sleepingbaby.app.

8. Children's Privacy

Sleeping Baby is a tool for parents and caregivers to track their baby's sleep. We do not knowingly collect personal information directly from children under 13. The baby data entered into the app is provided by the parent or caregiver, not by the child.

If you believe we have inadvertently collected information from a child under 13, please contact us at support@sleepingbaby.app and we will promptly delete it.

9. International Users

Our Service is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer.

For users in the European Economic Area (EEA), we process personal data based on:

• Contractual necessity — to provide the Service you requested.
• Legitimate interest — to improve and secure the Service.
• Consent — where required, such as for optional communications.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: support@sleepingbaby.app
Website: https://sleepingbaby.app