Privacy Policy

Last updated: 1 October 2026 · Version 3.6 · Deutsch

The company is being formed. A Swiss company (GmbH) is being set up and will be the controller. Until it is entered in the commercial register, write to info@betterbaby.ch with any question about your data. On the day of the entry we add its name, address and company number here, and tell you in the app before the change applies.

About this policy

This policy explains how we handle personal data. It covers:

• the BetterBaby+ app;
• the website betterbaby.ch, including its invite, follow and referral pages;
• emails you send us;
• our Instagram account.

BetterBaby+ is for expecting and new parents who want to follow a pregnancy and their child's first years. Some of what you record in it is about your health and about your child. The Swiss Federal Act on Data Protection (FADP) treats that as sensitive personal data, and so do we.

1. Who is responsible
2. Whose data this covers
3. Why we process data
4. What we collect
5. Permissions on your phone
6. Who else can see what you record
7. Consent, and withdrawing it
8. Who processes data for us
9. Our Instagram account
10. How long we keep data
11. Your rights
12. Security
13. Children
14. Not medical advice, and not a medical device
15. Links to other sites
16. Changes to this policy
17. Contact

1. Who is responsible

The controller is:

BetterBaby+
Lucerne, Switzerland
Email: info@betterbaby.ch

For anything about your data, write to info@betterbaby.ch with "Privacy" in the subject line. We have not appointed a data protection advisor, so your request goes straight to the people who run BetterBaby+.

2. Whose data this covers

• Account holders: everyone who signs up.
• Household members: people you invite, who see and add to what is shared.
• Followers: people you add to see what you choose to share, and nothing else.
• Your child or children, including before birth: the data you record about them.
• People who contact us: by email, through the feedback form, or on Instagram.
• Visitors to betterbaby.ch, including anyone who asks to be told when the app opens.

3. Why we process data

We do not use your data for advertising, profiling, selling, training AI models or automated decisions about you.

4. What we collect

Your account

• Email address: to create your account, confirm it with a one-time code, sign you in and reset your password.
• Password, if you sign up with email. It is stored only as a secure hash by our hosting provider, and we cannot see it.
• Sign in with Apple, if you choose it: Apple gives us a stable identifier and the email address you choose to share, which can be a private relay address ("Hide My Email"). The first time, Apple also gives us your name, if you allow it. If you delete your account, we ask Apple to disconnect BetterBaby+ from your Apple ID.
• Sign in with Google, if you choose it: Google gives us a stable identifier, your email address and your name. We never see your Apple or Google password.
• Your first name, shown to the people you share with (for example next to things you ticked off).
• Your consent record: when you agreed, and to which version of this policy.

Your answers in the start-up quiz

• Whether you are expecting, already have a child, or both, and whether this is your first child.
• Your due date, or the first day of your last period. The app calculates the due date from it (280 days), and that date is stored.
• Your role in the family: pregnant, partner, or another caregiver.
• Your first name, an optional name or nickname for the baby, and how much you want to read ("brief" or "in depth").

Your household

• The household's name, its members and their roles (admin or member).
• Invite codes. Each code expires after 3 days and works once. An invite can be shared as a link (betterbaby.ch/invite/…). The page reads the code in the browser of the person you invited. Our web host logs page addresses (see "Technical data").

Pregnancies and children

• For a pregnancy: the due date, and a name if you want.
• For a child: the date of birth, and a name and photo if you want.
• The color you choose for each profile.

What you record

Depending on the features you use:

• Tracking: feedings, sleeps and diaper changes, with times and optional notes, and the statistics calculated from them.
• Growth: weight, height, head circumference and your own measurements, with dates and notes.
• Weight during pregnancy.
• Appointments: type, subject, date and time, place, notes, questions to ask, and whether you want a reminder.
• Checklists and milestones: what you check off, who checked it, and items you add.
• Journal entries, bump photos and video clips, with their dates. A clip is at most 15 seconds long and is made smaller on your phone before it is uploaded. Photos and clips are stored privately.
• Baby names: the names you suggest, lists, notes and your reactions.
• Saved articles and preferences: language, appearance, the order of your tiles, and reading depth.
• Whether an entry is shared with your followers. Each journal entry, bump photo and checked milestone carries its own switch. It is off unless you turn it on.

Data about someone else. If you record data about another person, for example your partner's pregnancy or your child, you confirm that you are entitled to do so and that you have told any adult concerned.

If a pregnancy ends. You can remove a pregnancy or a child at any time. Everything recorded for it is deleted, including photos, and no reminder about it is sent again on any phone in your household.

Much of this is health data about you, your partner or your child. We process it only because you choose to record it, with your express consent, and only to show it back to you and the people you share it with.

Followers

If you are added as a follower, or you add someone as one, we store:

• Your follower account: the same account data as any other account holder — email address or Apple/Google identifier, your first name, and your consent record.
• The link between you and the household: which household you follow, when you asked, who approved it and when, and the name the household gives you there (such as "Grosi"), if it gives one.
• Follow codes. A follow link (betterbaby.ch/follow/…) carries a code. The household has one link, which stays the same until it switches the link off. The page reads the code in your browser and never looks it up; following happens in the app, after sign-in, and the household approves it.
• What the household sees when you ask: your first name and your email address, so they can tell it is you before they say yes. If you signed in with Apple and hid your email, they only see that it is hidden. While you follow, the household's members can also see it on your page under Your people.
• What each household shows its followers: the household's own settings — names, the week or age, the profile photo, and who added a moment — each of which it can switch off.
• Hearts, messages and "thinking of you": when a follower sends a heart on a shared moment, writes to the household under one, or taps "thinking of you" for a household, we store who did it, which moment or household it was for, the words of a message, and when. The household's members see all of it, with the name they gave the follower. A follower sees only their own hearts, their own messages and the household's answers to them, never anything from another follower.

A follower never pays, and a follower is never shown a health record.

Subscriptions

BetterBaby+ is a subscription sold through Apple's App Store. Apple handles the payment; we never see card or bank details. We and RevenueCat receive from Apple:

• the product you chose, its price and currency, and the store country;
• when the trial and the subscription start, renew, end or are refunded;
• Apple's transaction identifiers;
• a random identifier for your household.

Invitation rewards are not running. An earlier version of BetterBaby+ granted free days to households that invited each other. That program is switched off. Links of the form betterbaby.ch/r/… still open, but nothing is recorded about who invited whom, no days of use are counted and no free days are granted. Records created while it was running are kept only as described in section 10 and are not used for anything.

If you ask us to tell you when the app opens

On the home page of this website you can leave your email address so that we write to you when BetterBaby+ is in the Swiss App Store. If you do:

• we store only that email address and the date you left it, with our website host (Netlify, see section 8);
• we use it for that one message and nothing else: no newsletter, no advertising, and it is never passed on or sold;
• we delete it after we have written to you, or sooner if you ask. Write to info@betterbaby.ch and it goes the same day;
• we keep it for at most 12 months even if the app has not opened by then.

Leaving your address is voluntary and has nothing to do with having an account. The legal basis is your consent, which you give by sending the form and can withdraw at any time.

Feedback and emails

• Feedback sent from the app: what you write, the type of message, your app version, platform and language, and which account and household it came from. A copy goes to our inbox, and a copy with your name and household name goes to our internal list for sorting feedback (Notion). Your email address is included only if you allow us to reply. When you suggest an idea, an AI (Anthropic) compares it with the ideas already on that list, so that people asking for the same thing are counted together; when we add it, we write to you if you allowed a reply.
• The support chat (Settings → Help & support → Ask a question): what you type is sent to Anthropic to write an answer from our help pages. Nothing from your account, household or diary is sent with it, and we do not store the conversation. It reaches us only if you tap to send it, and then it is feedback as above. The chat does not answer health questions.
• Emails you send us: your email address, your name and your message. We use them only to answer you and for the purpose you wrote to us about. We send no newsletter unless you ask for one.

Notifications from your household

When someone in your household logs something, for example that a sleep has started or ended, the other phones in the household can show it right away, including on the lock-screen sleep timer. When someone asks to follow your household, every phone in the household is told, so someone can say yes. When a follower writes to your household under a moment, every phone in the household is told at once, with the name you gave that person and the start of the message; your household's answer goes to that follower's phones only. Hearts and "thinking of you" are never told one by one: at most one notification a day, at 18:00, gives only how many people there were.

• For this we store your phone's push notification address (a token from Apple on an iPhone, from Google on an Android phone), linked to your account.
• The notification goes through Apple's Push Notification service on an iPhone and Google's Firebase Cloud Messaging on an Android phone. It contains only what the other phone needs to show: for example "Sleep started" and the child's first name, or, for a follow request, the first name of the person asking, the name your household knows them by if one has been given (such as "Grosi"), and your household's name.
• You can switch these off in Settings → Notifications or in your phone's settings.
• The token is deleted when you sign out or delete your account.

On your phone only

These stay on your phone and are not sent to us:

• Notification settings and scheduled reminders.
• The lock-screen sleep timer (Live Activity). While a sleep is running it shows a timer and the child's name on your lock screen and in the Dynamic Island. Anyone who can see your phone can see it. You can switch it off in Settings → Notifications.
• "Share this week" cards and photo collages. They are made on your phone and leave it only if you share them yourself.
• Calendar entries. "Add to my calendar" writes the appointment to your phone's calendar. BetterBaby+ asks only for permission to add events and cannot read your calendar.
• The Face ID app lock. Face ID is handled entirely by iOS; we never receive biometric data.
• Your sign-in session, kept in the phone's secure storage.

Technical data

• App updates: when the app checks for updates, our update provider receives your IP address, the app version and basic device information.
• Server logs: our hosting provider keeps logs (for example IP address and time of a request) for security and troubleshooting, and deletes them after 7 days.
• betterbaby.ch sets no cookies and loads nothing from anyone else: no analytics script, no advertising tag, no font or map from another company. Our web host logs IP addresses and page addresses to deliver the site and prevent abuse.

5. Permissions on your phone

BetterBaby+ asks for a permission only when you use the feature that needs it. You can change every permission in your iPhone's Settings.

6. Who else can see what you record

BetterBaby+ starts with you and your baby. Everyone else is someone you chose, and there are two different kinds.

Your household

• What is shared: everything recorded for a pregnancy or a child is visible to every member of your household, and they can add to it, change it and delete it. This includes photos, journal entries, tracking and appointments.
• Invite only people you want to share all of this with. An admin can remove a member, and anyone can leave a household.
• What stays personal: your notification settings and your saved articles.

Your followers

A follower is someone you add to look on: a grandparent, a godparent, a friend. A follower is not a member of your household, and the difference matters.

• Nothing is shared by default. A follower sees an entry only when someone in the household switches that entry on. Every journal entry, bump photo and checked milestone has its own switch, and it starts off.
• Followers never see health records. Feedings, sleeps, diapers, growth, weight and appointments are never shown to a follower, whatever their settings.
• Followers cannot add, change or delete any of your records. They can send a heart on a shared moment, write to the household under it, and let you know they are thinking of you. Only your household sees that, never another follower. A follower can delete their own messages; your household can delete any of them.
• The household decides what is shown alongside a moment — names, the week or age, the profile photo, and who added it — and can switch any of them off.
• Approval is required. Someone with a follow link asks; the household approves. A follow link on its own gets nobody in.
• Either side can end it, at any time. The household removes a follower, or the follower stops following. From then on they see nothing.
• Photos shared with followers are still stored privately and shown only through links that expire after one hour.
• Video clips shared with followers are stored privately too. They play in the app from a link that expires after 10 minutes, and the app offers no way to save or pass them on.

7. Consent, and withdrawing it

• When we ask. Before you can record anything, the app asks for your express consent on its own screen, and we keep a record of it.
• Sharing is its own decision. Consent to record is not consent to share. Each entry shared with followers is switched on by hand, one at a time, and can be switched off again.
• Withdrawing. You can withdraw consent at any time in Settings → Privacy & data. The app cannot work without this data, so withdrawing consent deletes your account (see section 10).
• What stays lawful. Withdrawal does not affect processing that took place before it.

8. Who processes data for us

We use a small number of providers. Where a provider processes personal data for us, it is bound by a data processing agreement:

Countries. Your data is stored in Switzerland (Zurich). Sign-in emails are sent through Ireland (EU). Our providers may access it from, or store it in, Switzerland, the EU and the USA. The website and the app updates are delivered through worldwide networks.

Transfers abroad.

• The EU, including Ireland, has an adequate level of data protection recognized by the Federal Council.
• The USA: we rely on the Swiss–US Data Privacy Framework for providers certified under it (recognized by the Federal Council since 15 September 2024). Otherwise we rely on the European Commission's Standard Contractual Clauses, with the adaptations for Switzerland recognized by the FDPIC.
• You can ask us for a copy of these safeguards.

We disclose data to authorities only where the law requires it. If BetterBaby+ were sold or merged, your data would pass to the new owner only under this policy, and we would tell you in advance.

9. Our Instagram account (@betterbaby.app)

• Meta is responsible. If you follow or message us on Instagram, Meta Platforms Ireland Ltd processes your data under its own privacy policy.
• What we see: your messages, and the aggregated statistics Instagram gives us.
• We do not combine this with your BetterBaby+ account.

10. How long we keep data

Deleting your account does not cancel an App Store subscription: cancel it in your Apple Account settings.

11. Your rights

You can:

• get access to your data and a copy of it (Settings → Privacy & data → Export my data);
• correct it, most of it directly in the app;
• delete it (Settings → Privacy & data → Delete my account, or by email);
• receive it in a common, machine-readable format;
• withdraw consent at any time;
• object to processing.

You can also complain to the Federal Data Protection and Information Commissioner (FDPIC), edoeb.admin.ch.

Email info@betterbaby.ch. We answer within 30 days.

12. Security

• Encryption: all data is encrypted in transit (TLS) and at rest.
• Access: the database itself allows each record to be read only by members of its household, and a follower only the entries marked as shared.
• Photos and video clips are private and shown only through links that expire: after one hour for photos, after 10 minutes for clips.
• Our own backups are encrypted (AES-256) with a key only we hold. They are kept on a computer in Switzerland with full-disk encryption, and in iCloud Drive.
• App lock: you can lock the app with Face ID.
• Incidents: we have a written plan. If a breach is likely to lead to a high risk for you, we inform the FDPIC as soon as possible, and we tell you where that is needed to protect you or where the FDPIC requires it.

13. Children

BetterBaby+ is for adults aged 18 or over. Children do not use it. Parents record data about their children and act for them; we protect that data as health data.

14. Not medical advice, and not a medical device

• General information only. Content in BetterBaby+ is general and educational: weekly updates, sizes, tips, articles and leaps.
• Not a medical device. BetterBaby+ does not interpret what you record and is not a medical device.
• An information tool. BetterBaby+ is not engaged in the practice of medicine and is an information tool only.
• Your midwife and doctor. For anything about your health or your child's health, contact your midwife, doctor or pediatrician.
• Emergencies: call 144.

15. Links to other sites

Articles may link to other websites. Those websites have their own privacy policies.

16. Changes to this policy

• Minor changes: we update the date at the top.
• Significant changes, such as a new purpose or a new kind of provider: we tell you in the app before they apply, and ask for your consent again where the law requires it.

17. Contact

BetterBaby+ · Lucerne, Switzerland · info@betterbaby.ch

A Swiss company (GmbH) is being formed and will take over as the controller for BetterBaby+. Until it is entered in the commercial register, write to info@betterbaby.ch with any question about your data.

This policy is available in German and English. If the two versions differ, the German version applies.