1. Scope and controller
This notice covers the Babywise mobile application and public website operated by Frontopolar GmbH, Storkower Str. 158, 10407 Berlin, Germany. Privacy enquiries can be sent to info@getbabywise.com.
Babywise is designed for adults responsible for a child’s care. It is not offered directly to children; child information is entered by an authorised adult.
2. Local-first use and optional account
Core records can be kept on the device without an account. If an adult chooses to create or link an account, eligible records may be synchronised through Supabase so they can be restored and used across supported devices.
3. Information involved
- Account identity, such as email address and the Supabase user identifier.
- Adult and child profile details, including name or form of address, date or expected date of birth, sex and selected interests.
- Growth measurements, vaccination entries, development observations and optional notes.
- Language, saved content, reading settings and the currently selected child.
- AI conversations, messages, displayed sources and the selected child’s context sent with a question.
- Microphone audio streamed for a live AI session; raw audio is not intended to be stored as a Babywise product record.
- Doctor questions (a Pro feature for registered accounts): your question and follow-up messages, photos or videos you attach, your profile name and a snapshot of the selected child’s name, date or expected date of birth and sex, all of which the assigned paediatrician can see.
- A Firebase Cloud Messaging device token linked to your account and current sign-in session, when notifications are allowed while you are signed in.
- Subscription status and a RevenueCat customer identifier: your account ID or, without an account, a random installation identifier issued by Babywise. Payment card details are handled by Apple or Google, not by Babywise.
- Anonymous product-usage and diagnostic events, processed with PostHog without creating a person profile: for example screens and features used, purchase and onboarding steps, app errors, crashes and diagnostic logs, device model, operating system, app version, language and an approximate country or city derived from the IP address. These events do not contain names, messages or entries you type; the symptom guide records only the outcome category of a completed guide.
- Advertising-measurement events sent by the Meta SDK: app installs, app opens and in-app purchase events with device information such as device model, operating system and app version, and on Android the advertising ID unless you have reset or deleted it. On iOS, Babywise does not ask for permission to track you and does not access the device advertising identifier.
- Technical security, app-integrity and rate-limit events designed to avoid unnecessary personal information.
4. Purposes and legal bases
Account administration, synchronisation and requested product functions are processed to perform the user agreement under GDPR Article 6(1)(b). Support, service security and abuse prevention rely on legal obligations where applicable and the legitimate interests in operating a secure and reliable service under Article 6(1)(c) and (f). Child or health-related information, optional AI context and doctor-question cases, including attached photos or videos, are processed with the adult user’s explicit consent under Article 6(1)(a) and Article 9(2)(a).
Anonymous usage analytics, crash and diagnostic events help keep the app reliable and improve its features, and advertising-measurement events help Babywise understand how many installs and subscriptions its campaigns on Meta bring. Both rely on the legitimate interests in operating, improving and promoting the service under Article 6(1)(f). You may object to this processing at any time by contacting info@getbabywise.com; on Android you can also reset or delete your advertising ID in the device settings.
5. Service providers and transfers
Supabase supports authentication, database, private storage and server functions. OpenAI processes the user’s question, conversation history, necessary child context and live microphone stream for text, moderation and realtime AI functions. Google Firebase delivers push notifications through Firebase Cloud Messaging and checks app integrity through Firebase App Check, using Apple App Attest/DeviceCheck or Google Play Integrity, to protect video, library and subscription-access services. RevenueCat processes subscription purchases and entitlement status. Apple and Google process store payments and, if chosen, Sign in with Apple or Google under their own terms.
PostHog processes the anonymous usage, crash and diagnostic events on servers in the European Union. Meta Platforms Ireland Limited receives the advertising-measurement events sent by the Meta SDK and also uses them under its own terms and privacy policy.
Doctor-question cases are made available only to the assigned paediatrician, currently Dr. Kurtuluş Hallaç.
Where a provider processes personal data outside the EEA, Babywise uses an applicable lawful transfer mechanism, including an adequacy decision or approved standard contractual clauses, together with contractual and technical safeguards.
6. Permissions, retention and security
Microphone and notification permissions are requested only following a relevant user action, such as starting a live voice session or choosing to enable reminders or reply notifications. Photos and videos are added through the system photo picker, which shares only the items you select; Babywise does not request camera access. Babywise minimises data and applies access controls appropriate to each feature, but no service can promise absolute security.
Doctor-question photos and videos are kept in private storage and opened only through links that expire within minutes. Notifications only say that a new message is available and contain no health information. A push registration is removed when you sign out or turn notifications off and is no longer used if it is not renewed for 90 days.
Local records remain until the user deletes them or removes the app. Linked-account and synchronised records, including doctor-question cases and attachments, remain until account deletion. Support correspondence is retained for up to three years after the matter closes, security logs for up to 90 days, and deletion residuals in rolling backups for up to 30 additional days unless a longer period is required by law.
7. Your choices and rights
The app provides JSON export, deletion of local device data and permanent deletion of a linked account. The export includes doctor-question cases, messages and attachment details, and account deletion also removes stored doctor-question photos and videos. Users may request access, correction, portability, deletion, restriction or objection, and may withdraw consent for future processing by contacting info@getbabywise.com. They may also complain to the Berlin Commissioner for Data Protection and Freedom of Information or another competent supervisory authority.