Privacy policy

In short

• Entries, photos and recordings stay on your phone. You don't need an account.
• If you create an account to back up or to share entries with someone else, the data goes to our own server and only your family can see it.
• The app sends us anonymous daily totals of what was used, with no ID of any kind. You can switch this off.
• There are no ads and no trackers. We don't sell data.

Who is responsible for the data

The data controller is TODO(owner): full legal name of the person or company that runs Snoomi, TODO(owner): postal address. For anything about privacy, write to support@snoomi.app.

What stays on your phone

Without an account, everything you log stays on your phone only: your baby's name and birth date, entries (sleep, feeds, nappies and the rest), notes, measurements and settings. We have no access to any of it.

Photos and voice recordings stay on your phone even when you have an account.

You can save a backup to a file and export entries as a CSV file. The file goes wherever you save it. To delete the data on your phone, use Settings → Privacy → Erase this phone's data in the app, or uninstall the app.

Account, backup and sharing

An account is optional. You create one with an e-mail address and your name, and you sign in with a one-time code that we send to that address.

Once you have an account, the entries, your baby's details and the settings on your phone are also stored on our server (TODO(owner): hosting provider and the country the server is in). That is how they can be restored on another phone and shared with the people you invite with a code. In the app, only the members of your family can see them.

We use your e-mail address to sign you in and for messages about your account, such as the sign-in code. We don't send advertising.

With the account we also store the app’s language and your time zone (for e-mails and reminders) and, with each entry, a random ID of the phone it was made on. An entry you delete stays on the server marked as deleted, so that the other phones in your family remove it too. It is erased together with your family’s data.

You can delete your account in the app: Settings → Back up & share → Delete account. We then delete the account and your family's synced data from the server. Anyone else in your family keeps access to the shared entries. Your phone keeps its own copy.

Anonymous daily totals

When you leave the app, Snoomi sends us what was used that day:

• which screens, sounds and guides were opened, and which guides were marked helpful;
• whether sleep, a feed or a nappy was logged that day and from where (the app, a widget, the watch), with no details of the entry;
• a new family's first steps, such as the first entry or adding a widget, and the welcome steps reached on the day of install;
• events around Snoomi Plus: that the Plus screen was opened and what happened next, a tap on a paid feature, how the free week of Plus features went;
• how many errors there were, of what kind and on which screen;
• whether the weather forecast had to be fetched from the weather service directly, or couldn't be fetched at all, with nothing about the place;
• once a week, three neutral settings: the chosen companion, the layout of the Today screen and night mode.

With these we send the app version, the system (iOS or Android), the language, whether the family has Plus, and how long Snoomi has been installed, as a range (for example “week 2”). If the split between free and Plus features on this phone differs from the standard one, the message says how.

The message carries no ID and no account token, nothing about your baby, no times of day and no location. Our server adds it to daily counters and doesn't keep it. It doesn't store your IP address either. No single phone's message can be rebuilt from the counters.

In the app, under Settings → Privacy, you can see exactly what was sent today, or switch it off.

Weather and approximate location

The “What to wear” suggestions need a weather forecast. If you allow the app to use your location, the phone rounds the coordinates to about 1 km and sends them to our server, which fetches the forecast and the air quality for them from the Open-Meteo weather service. You can type the name of a place instead. The name you type goes to Open-Meteo the same way, to look the place up.

Our server doesn't store the coordinates or the name you type, and doesn't link them to an account or to your phone's IP address. It only counts how many such requests there were each day. It keeps the weather service's answer in memory for up to an hour, with nothing about who asked, so it doesn't have to fetch it again for the same area. Open-Meteo receives the rounded coordinates or the name, but not your phone's IP address.

If our server can't be reached, the phone asks Open-Meteo directly. Open-Meteo then sees your phone's IP address, like any web service.

Purchases

You buy Snoomi Plus through the App Store or Google Play. The store handles the payment, and we never see your card details.

A service called RevenueCat checks the state of the purchase for us. It receives an ID of the install or of the account, the product bought and the purchase dates. On our server we store whether the family has Plus, until when and from which purchase. When you delete your account, we ask RevenueCat to delete its record of the account too.

Error reports and feedback

An error report is sent only when you tap “Send report”. It contains the app version, the phone's system version, the name of the screen and the technical error message. It contains nothing you've logged. We delete reports after 90 days.

Feedback sent from Settings (“Send feedback”) contains your message, the app version, the language, the phone's system and your baby's age in weeks. If you use an account, the feedback is linked to it. We keep feedback until we've dealt with it, and delete it on request.

The launch notice

If you leave your e-mail address on this site, we store the address, the language of the page, the phone you chose (iPhone, Android or both), whether you've confirmed the address, and the times we last e-mailed you and last changed the record. We don't store your IP address or your browser's name.

We send a link to confirm the address and, on launch day, one message. After that message every address is deleted. An address that isn't confirmed is deleted after 14 days. You can remove yours earlier: the link in the confirmation message opens a page where it takes one tap.

This site and the server

This site sets no cookies and keeps nothing in your browser. Fonts, images and scripts come from our own server.

To know whether the site is read and whether it works, we count visits with PostHog, an analytics service that keeps the figures in the European Union. A visit sends: the address of the page and of the page you came from, the page's language, the kind of device, browser and screen, the browser's language and time zone, what was clicked and how far the page was scrolled, how fast it loaded, and any error it ran into. Nothing you type is sent, so your e-mail address isn't either.

The figures carry no lasting ID. To tell one day's visitors apart, PostHog combines the IP address and the browser's name with a key that changes every day and is then deleted. The IP address itself isn't saved. So nobody is recognised from one day to the next, or on any other site. If your browser sends “Do Not Track” or “Global Privacy Control”, the visit isn't counted at all.

The app's server stores an IP address in one case only: when someone tries to open its admin pages. We then record the day, the IP address, the number of attempts, the last address asked for and the browser's name. We delete these records after 30 days. The app never makes such requests.

Who receives data

• The hosting provider that runs our server: TODO(owner): hosting provider and the country the server is in.
• The mail provider we send e-mails through: TODO(owner): the service that delivers Snoomi's e-mails.
• RevenueCat (the state of a purchase), and Apple and Google (purchases in their stores).
• Open-Meteo (the weather forecast; it receives only approximate coordinates, passed on by our server or, if the server can't be reached, sent from your phone).
• PostHog (visit statistics for this site, kept in the European Union, with no IP address and no lasting ID).

We don't sell data and we don't pass it to advertisers.

Legal bases and how long we keep data

• Account and sync: performance of a contract (Article 6(1)(b) GDPR). Until you delete the account.
• Purchases: performance of a contract and legal obligations. For as long as the law requires.
• The launch notice: consent (Article 6(1)(a) GDPR). Until the launch message is sent, or until you remove your address; 14 days if the address is never confirmed.
• Error reports and feedback: legitimate interest in improving the app (Article 6(1)(f) GDPR). Reports for 90 days, feedback until it's dealt with.
• The record of attempts to reach the admin pages: legitimate interest in keeping the server secure. 30 days.
• Visit statistics for this site: legitimate interest in knowing whether the site works and is read (Article 6(1)(f) GDPR). Up to one year.

Anonymous daily totals can't identify anyone, so they aren't personal data.

Your rights

You can ask for access to your data, for it to be corrected, deleted, restricted or handed over in a portable form. You can also object to processing and withdraw consent at any time.

Most of this you can do in the app: CSV export, a backup file, deleting the account. For anything else, write to support@snoomi.app.

You also have the right to complain to the data protection authority in your country.

Children

Snoomi is for parents and caregivers, who are adults. The details about a baby are entered by the parent.

Changes

When what the app sends or stores changes, we'll update this page and the date at the top.