Privacy Policy

Summary

Rele Company ("we," "us," or "our") operates AnyBaby, a baby care log. The app is free, with no advertising or in-app purchases. You can keep formula, sleep, diaper, journal and growth records fully offline without signing in. Optional sign-in enables server backup and family sharing of baby profiles, care records and growth measurements, excluding photos. Journal photos are never uploaded or synced. Photo-based character creation and usage analytics and crash reports use external services as explained below.

1. Information Stored on Your Device and Its Purpose

The following information is stored in the app's container and App Group on your iPhone so you can keep and view care records and use widgets and alarms. The widget extension reads this information on the same device.

• Baby profiles: The name, sex, birth date, due date, birth weight and length, and avatar choice you enter.
• Care records: Formula amounts and times; sleep start and end times; poop and pee records, including stool colour; notes about temperature, medicine names, hospital visits and vaccinations; free text; and first moments.
• Growth records: Weight, length and measurement dates.
• Journal photos: Resized JPEG images with location information and EXIF metadata removed. Journal photos stay only on the phone that took them. They are never uploaded to our server or synced to other family members' devices.
• Settings: Alarms, whether Live Activity is on or off, and the accepted feeding amount.

Without signing in, these records are not sent to Rele for backup or family sharing. Photo-based character requests and usage analytics and crash reports are separate data flows described in Sections 4 and 5.

2. Sign-In, Backup and Family Sharing (Optional)

You may sign in with Apple or Google to back up records and share them with family members, such as a spouse. We process the following information on our server to authenticate and manage accounts, identify family memberships and sync records.

• Account information: The sign-in provider and account identifier, the email address supplied by that provider, a display name if provided, and the name or label you choose within your family, such as "Mom" or "Dad." Apple may supply a private relay email address. We store a Google email address only when verified.
• Apple sign-in token: We keep the Apple refresh token encrypted with AES-GCM solely to revoke it when you delete your account.
• Device information: A random device ID, platform, APNs push notification token, Live Activity push tokens and whether alerts are on or off.
• Shared records: Baby profiles, care records and growth measurements, excluding photos, are uploaded to our server and synced to the phones of other members of the same family. Notes and free text within these records are included.
• Invite codes: We store only a keyed hash of each code, rather than the original code. Codes expire after 72 hours.

Our server uses Cloudflare Workers and Cloudflare D1. Shared records are stored as JSON. They are encrypted in transit using TLS, but they are not end-to-end encrypted.

3. Family Notifications and Live Activities

When a family member logs formula or sleep, a short message is sent through Apple Push Notification service (APNs) to other family members whose alerts are on. A message such as "콩이 분유 80 ml · 엄마" can contain the baby's name, formula amount and the recording member's family label. We do not store this notification text on our server. Live Activity updates for family members also pass through APNs. Push notifications are also used for background sync.

4. Creating a Character from a Photo (Optional)

A photo is sent for character creation only when you choose a photo for that purpose. Journal photos are not automatically submitted.

• Information and purpose: The selected photo is resized and sent over TLS to our server, which passes it to Google's Gemini API to draw a character.
• Our retention: Our server does not store or log the input photo. For this feature, it keeps only a per-baby generation count, with a maximum of 3 generations, and rate-limit counters.
• Generated image: The returned character image is saved only on your phone. Other family members see the default character unless they create their own.
• Google's handling: Google's handling of the input photo follows the Google Gemini API Terms.

5. Usage Analytics and Crash Reports

We use the following services to understand app usage and crashes. Turning off "사용 통계 보내기" (Send usage statistics) in the Family tab stops both usage analytics and crash reporting.

• Firebase Analytics and Crashlytics: App events and crash reports include the device model, operating system version, app version and an app-instance identifier. We do not collect IDFA or IDFV. Ad personalisation signals and automatic screen events are disabled.
• PostHog: Anonymous product events, without person profiles, autocapture or session replay.
• Event contents: Only kinds, counts, on/off states and the app language. Events never contain baby names, birth dates, amounts entered by a parent, invite codes or note text.

Analytics retention follows the Firebase and PostHog settings. This policy does not specify a separate fixed retention period.

6. Sharing, Service Providers and International Transfers

Family sharing makes the shared records described in Section 2 available to other members of the same family. The external services used for hosting, character creation, analytics and crash reporting, and their specified processing countries, are listed below.

• Cloudflare, Inc. — USA: Cloudflare Workers and D1 operate our server and database. They process account information and tokens, device information, family memberships and shared records, invite-code hashes, generation counts and rate-limit information. Selected character photos also pass through the server without being stored or logged there. Data may be processed in Cloudflare's global network. Retention and deletion are described in Section 8.
• Google LLC — USA, Gemini API: Receives a resized photo you select to generate a character image. Our server does not retain the photo. Google's handling of API input follows Google's API terms.
• Google LLC — USA, Firebase Analytics and Crashlytics: Processes the app events, crash reports, device model, operating system version, app version and app-instance identifier described in Section 5 to understand usage and crashes. Retention follows Firebase settings.
• PostHog, Inc. — US cloud: Processes the anonymous product events described in Section 5 to understand app usage. There are no person profiles or session recordings. Retention follows PostHog settings.
• Apple — Sign in with Apple and APNs: Apple sign-in is used for account authentication and revocation when you delete your account. APNs processes push tokens, family notification messages, Live Activity updates and background-sync pushes. We do not retain family notification text on our server. Apple's processing countries and its own retention periods are not specified in this policy.

Family information is transmitted for backup and sync after sign-in, a character photo is transmitted when you request generation, and analytics and crash information is transmitted according to the reporting setting. Network transfers use TLS. You can keep care records locally without using backup, family sharing or photo-based character creation, and you can turn off analytics and crash reporting in the Family tab.

7. Permissions

• Notifications: Used for family alerts. Push notifications are also used for background sync.
• Alarms: AlarmKit schedules alarms locally on your iPhone.
• Live Activities: Used to display Live Activities and receive family updates.
• Add to Photos: Add-only photo library permission is requested when saving a monthly journal poster.
• Photo selection: Photos are chosen with the system photo picker, without full photo library access.

The app does not use location, contacts, microphone or camera permissions. There is no advertising or cross-app tracking, and no App Tracking Transparency (ATT) prompt.

8. Retention and Deletion

• On-device information: Remains until you delete it or the app. Deleting records or the app removes the corresponding information stored on that device.
• Signing out: Removes the session from that phone. To delete your server account, use "계정 삭제" (Delete Account) in the Family tab.
• Account information: Account deletion removes your account, linked sign-in identities, devices and tokens, and family memberships. The stored Apple refresh token is used to revoke Apple sign-in.
• A family with only you as a member: If you were its only member, deleting your account also deletes that family and its records.
• A shared family: Records remain for the other members. Ownership passes to the next member so the remaining family can continue using the records.
• Deleted records: Deletion markers are kept for up to 90 days so other phones can sync the deletion, then removed.
• Automatic cleanup: Expired invites, rate-limit rows and expired sign-in challenges are purged automatically. Invite codes are valid for 72 hours after issuance.
• Character photos and analytics: Our server does not store or log character input photos. Per-baby generation counts and rate-limit counters are retained. Google's handling of API input follows its API terms, and analytics retention follows Firebase and PostHog settings.

On-device information is removed through record or app deletion. Server information is removed through account, family and record deletion and the automatic cleanup described above. Shared records that remain for other family members and deletion markers retained for up to 90 days follow the rules above.

9. Your Rights and Choices

You can view, edit and delete records in the app. You can delete your account using "계정 삭제" (Delete Account) in the Family tab and stop analytics and crash reporting by turning off "사용 통계 보내기" (Send usage statistics).

For requests to access, correct, delete or suspend processing of your information or information about a baby in your care, or for requests you cannot complete in the app, contact us at the email address below. Section 8 explains when shared family records remain after account deletion and how long deletion markers are retained.

10. Children Under 14

AnyBaby is for parents and guardians. They enter the baby's information, and optional family sharing processes baby profiles, care records and growth measurements, excluding photos, on our server. We do not knowingly collect personal data directly from children under 14 as users. Please contact us below with related questions or deletion requests.

11. Security Measures

All network traffic uses TLS. Access tokens are short-lived, and our session refresh tokens are stored as hashes. Apple refresh tokens are separately encrypted with AES-GCM, and invite codes are stored only as keyed hashes. Staff access to information is kept to a minimum. Shared family records are encrypted in transit but are not end-to-end encrypted.

12. Contact Us

For privacy questions or requests to access, delete or suspend processing of information, contact us at: