Privacy Policy
In short. Without an account, everything you log stays on your iPhone. If you create an account, your baby's records and photos are stored on servers in the European Union so they're backed up and shared with the family members you invite, and with no one else. We don't show ads, we don't sell or share your data, and we don't track you. You can delete your account and everything it stored, from the app, at any time.
Who is responsible
Moomi is made by David Ortega López, the controller of your personal data. Contact: soporte@studioqbo.com.
Without an account
You can use Moomi without signing in. Then your baby's profile, everything you log, your reminders and your settings are stored only on your iPhone, in the app's own storage, and nothing is sent to us. Reminders and the Lock Screen timers are created on your iPhone too.
With an account: what we store
- Your account: your email address, or the identifier Apple or Google gives us if you sign in with them; when you agreed to this policy and to which version.
- Your baby's profile: name, birth or due date, sex if you give it, whether they were born early, birth weight and length, how they're fed, the colour you chose, and a photo if you add one.
- What you log: breastfeeds, bottles, pumping, diapers and sleep, with their times, amounts, sides and notes, the name you set as the person logging, and your stored-milk stash.
- Your family: who is in it, who started it, and invite codes while they're valid. People in the same family see each other's email address.
Some of this, like feeds, sleep, diapers, weight and being born early, is information about your baby's health. We store it only because you explicitly agree to it when you sign in.
What we use it for
- To back up your records, so a new phone or a reinstall gets them back.
- To share them with the people you invite into your family, on their own phones.
- To sign you in and keep your account secure.
Nothing else. No advertising, no profiling, no selling, no analytics that follow you, and no use of your baby's records or photos to train any AI.
Legal basis
We keep your account to provide the service you ask for (Article 6(1)(b) GDPR). We keep your baby's records and photos, including health information, on the basis of your explicit consent (Articles 6(1)(a) and 9(2)(a) GDPR), which you give as the baby's parent or guardian when you sign in. You can withdraw it at any time by deleting your account in Profile; that doesn't affect what was lawful before.
Who can see it
- The people in your family, whom you invite with a code. The server lets each person reach only the families they belong to; photos are in private storage with the same rule.
- Supabase (Supabase, Inc.), which runs our database, sign-in and storage on our behalf, on Amazon Web Services in Ireland (EU). It processes the data only on our instructions, under a data processing agreement.
- Our email provider, which sends sign-in emails, sees your email address.
- Apple and Google, if you sign in with them, under their own privacy policies. Subscriptions are handled by Apple; we never see your payment details.
Your data is stored in the EU. If a provider needs to access it from outside the EU, for example for support, that is covered by the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.
How long we keep it
- While you have an account. Records and babies you delete are erased from our servers straight away. For 30 days we keep only a note of which record was deleted and when, without anything it said, so every phone in your family removes it too.
- When you delete your account: if no one else is in your family, your account, your babies, their records and photos are deleted from our servers straight away. If you share the family, your account is deleted, your name is taken off what you logged, and the family's records stay with the others, since they're theirs too. This applies as well to family members who joined with an invite code, who can delete their account the same way.
- Copies in our provider's database backups are kept only for a short time, then overwritten.
Signing out does not delete anything; it stops backup and sharing on that phone.
Security
Data travels encrypted (TLS) and is encrypted at rest. Access is checked by the database itself for every request, so the app can't reach another family's records. Sign-in uses one-time codes sent by email, or Sign in with Apple or Google; we never store passwords for you.
Your rights
You can ask to access, correct, delete or receive a copy of your data, to restrict or object to its use, and you can withdraw your consent. Most of it you can do in the app: edit or delete any record or baby, and delete your account in Profile. For anything else, write to soporte@studioqbo.com; we answer within one month. You can also complain to the Spanish data protection authority, the AEPD (aepd.es), or the authority where you live.
Children
Moomi is for parents and caregivers, not for children. The information about a baby is entered by their parent or guardian, who decides on the baby's behalf.
Changes
If we change this policy, we'll update the date above. If a change affects what you agreed to, the app will ask for your agreement again before sending anything more.