Draft. This policy is being reviewed and is not final yet. Parts marked [like this] are still to be completed.

Privacy Policy

Last updated: [DATE] · Version [1.0]

BetterBaby is an app for expecting and new parents to follow a pregnancy and a child's first years together. What you record in it is personal, and some of it is about health and about your child. So we collect only what the app needs to work.

1. Who is responsible
2. What we collect, and why
3. Your household sees what you record
4. Legal basis and consent
5. Who processes data for us
6. How long we keep data
7. Your rights
8. Security
9. Children
10. Not medical advice
11. Changes
12. Contact

1. Who is responsible

The controller responsible for your personal data is:

Oliver Moelback
Winkelriedstrasse 23, 6003 Luzern
Switzerland
Email: info@betterbaby.ch

[EU REPRESENTATIVE UNDER ART. 27 GDPR, IF REQUIRED: NAME, ADDRESS, EMAIL]

2. What we collect, and why

Your account

• Email address, to create your account, confirm it with a one-time code, let you sign in and reset your password.
• Password, if you sign up with email. It is stored only as a secure hash by our hosting provider. We cannot see it.
• Sign in with Apple, if you choose it. Apple tells us the email address you choose to share (it can be a private relay address) and, the first time, your name if you allow it. We never see your Apple password.
• Your name, shown to the other members of your household (for example next to things you ticked off).
• Your consent: when and to which version of this policy you agreed, so we can show that consent was given (see section 4).

Your household

• Household name, members and their roles (admin or member).
• Invite codes you create to add your partner. A code expires after [7] days.

Your pregnancy and children

• For a pregnancy: the expected due date and, if you like, a name.
• For a child: name (optional) and date of birth.

What you record in the app

Depending on the features you use:

• Tracking: feeds (milk or food), sleeps (start and end) and nappy changes, with times and optional notes.
• Growth: weight, height and head circumference, with dates.
• Milestones and checklists: what you tick off, and items you add.
• Appointments: type, subject, date and time, location, notes, whether you want a reminder, and things to remember.
• Journal: entries with a date, text and an optional photo.
• Bump photos: photos you add, with the date they were taken.
• Baby names: names you suggest and your reactions to them.
• Saved articles and preferences: which articles you saved, your language, appearance and display settings.

Some of this is health information. A due date, pregnancy progress, feeding, sleep and growth records are health-related data about you, your partner or your child. The law treats it as sensitive, and so do we. We process it only because you choose to record it, with your explicit consent, and only to show it back to you and your household.

Data that stays on your phone

• Notification settings and scheduled reminders. Reminders are created on your phone. No reminder content is sent to us or through a push service.
• Calendar entries. If you choose "Add to my calendar", the appointment is written to your phone's calendar. BetterBaby asks only for permission to add events and cannot read your calendar. What your calendar app then does with the event (for example syncing it to iCloud) follows your own settings.
• Your sign-in session, kept in your phone's secure storage.

Technical data

• When the app checks for updates, our update provider receives your device's IP address, the app version and basic device information (operating system and version) to deliver the right update.
• Our hosting provider keeps server logs (such as IP address and time of a request) for security and troubleshooting, for [PERIOD].
• This website sets no cookies and uses no analytics. Our web host may log IP addresses to deliver the pages and protect against abuse.

What we do not do

• No advertising, and no selling or renting of personal data.
• No analytics, tracking or crash-reporting tools.
• No profiling, and no automated decisions about you.
• No AI or machine-learning processing of your data.

3. Your household sees what you record

BetterBaby is built to be shared. Everything recorded for a pregnancy or child is visible to every member of your household, and they can add to it, change it and delete it. This includes photos, journal entries, tracking and appointments.

Only invite people you want to share this with. An admin can remove a member, and anyone can leave a household. A few things stay personal: your notification settings (per device) and your saved articles.

4. Legal basis and consent

Switzerland (Federal Act on Data Protection, FADP). We process personal data in line with the FADP's principles. Health data is sensitive personal data. We process it with your express consent.

EU and EEA (GDPR), where it applies:

• Contract (Art. 6(1)(b)), to provide your account, household and the app's features.
• Explicit consent (Art. 9(2)(a), with Art. 6(1)(a)), for health-related data you record about yourself, your partner or your child.
• Legitimate interests (Art. 6(1)(f)), for security, abuse prevention and server logs.
• Legal obligation (Art. 6(1)(c)), where we must keep or disclose data by law.

How consent works in the app. Before you can record anything, BetterBaby asks for your consent on a separate screen. We keep a record of when you agreed and to which version of this policy. You can withdraw consent at any time in Settings → Privacy & data → Withdraw consent. Because the app cannot work without this data, withdrawing consent deletes your account as described in section 6. Withdrawal does not affect processing that happened before it.

5. Who processes data for us

We use a small number of providers, bound by data processing agreements:

Where a provider can access data from outside Switzerland and the EU/EEA (for example for support), we rely on [the Swiss–US and EU–US Data Privacy Framework, or Standard Contractual Clauses with the Swiss addendum].

We do not otherwise share your data, except where required by law, to protect rights and safety, or if our business is transferred (in which case this policy continues to protect your data).

6. How long we keep data

• While your account exists, we keep your data so the app works.
• When you delete your account (Settings → Privacy & data → Delete my account) or withdraw consent:
  • your account, name and personal settings are deleted;
  • households where you are the only member are deleted with everything in them, including photos;
  • in a household you share, the pregnancy and child records stay available to the remaining members, because they belong to the family. [Entries you made remain without your name.]
• Backups: deleted data can remain in encrypted backups for up to [30] days, after which it is overwritten.
• Invite codes expire after [7] days.
• Consent records are kept for as long as needed to show that consent was given [PERIOD].

7. Your rights

You have the right to:

• access your data and receive a copy;
• correct inaccurate data, most of it directly in the app;
• delete your data, in the app or by contacting us;
• receive your data in a portable format (Settings → Privacy & data → Export my data);
• withdraw consent at any time;
• object to processing based on legitimate interests;
• complain to a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the authority where you live.

To use these rights, email info@betterbaby.ch. We reply within [30 days].

8. Security

• All data is encrypted in transit (TLS) and at rest by our hosting provider.
• Access is enforced in the database itself: each record can only be read by members of its household.
• Photos are stored privately and shown only through links that expire after one hour.
• Your sign-in session is kept in your phone's secure storage.

No system is perfectly secure. If a breach affects your data, we will inform you and the authorities as the law requires.

9. Children

BetterBaby is for adults: parents and caregivers aged [18] or over. Children do not use the app. Parents record information about their children. That information is handled with the same care as health data, and parents can correct or delete it at any time.

10. Not medical advice

The articles, tips and information in BetterBaby are general guidance, not medical advice. For anything about your health or your child's health, contact your midwife, doctor or paediatrician. In an emergency, call 144 in Switzerland or 112 in the EU.

11. Changes

If we change this policy, we update the date above. If a change is significant, for example a new purpose or a new kind of provider, we tell you in the app before it applies and ask for your consent again where required.

12. Contact

Oliver Moelback · Winkelriedstrasse 23, 6003 Luzern, Switzerland · info@betterbaby.ch

A German version will follow once the English text is final.