1. Scope and controller
This notice covers the Babywise mobile application and public website operated by Frontopolar GmbH, Storkower Str. 158, 10407 Berlin, Germany. Privacy enquiries can be sent to info@getbabywise.com.
Babywise is designed for adults responsible for a child’s care. It is not offered directly to children; child information is entered by an authorised adult.
2. Local-first use and optional account
Core records can be kept on the device without an account. If an adult chooses to create or link an account, eligible records may be synchronised through Supabase so they can be restored and used across supported devices.
3. Information involved
- Account identity, such as email address and the Supabase user identifier.
- Adult and child profile details, including name or form of address, date or expected date of birth, sex and selected interests.
- Growth measurements, vaccination entries, development observations and optional notes.
- Language, saved content, reading settings and the currently selected child.
- AI conversations, messages, displayed sources and the child context selected for a question.
- Microphone audio streamed for a live AI session; raw audio is not intended to be stored as a Babywise product record.
- Technical security and rate-limit events designed to avoid unnecessary personal information.
4. Purposes and legal bases
Account administration, synchronisation and requested product functions are processed to perform the user agreement under GDPR Article 6(1)(b). Support, service security and abuse prevention rely on legal obligations where applicable and the legitimate interests in operating a secure and reliable service under Article 6(1)(c) and (f). Child or health-related information and optional AI context are processed with the adult user’s explicit consent under Article 6(1)(a) and Article 9(2)(a).
5. Service providers and transfers
Supabase supports authentication, database, private storage and server functions. OpenAI processes the user’s question, necessary child context and live microphone stream for text, moderation and realtime AI functions. Apple and Google process store activity under their own terms.
Where a provider processes personal data outside the EEA, Babywise uses an applicable lawful transfer mechanism, including an adequacy decision or approved standard contractual clauses, together with contractual and technical safeguards.
6. Permissions, retention and security
Camera, microphone and notification permissions are requested only following a relevant user action. Babywise minimises data and applies access controls appropriate to each feature, but no service can promise absolute security.
Local records remain until the user deletes them or removes the app. Linked-account and synchronised records remain until account deletion. Support correspondence is retained for up to three years after the matter closes, security logs for up to 90 days, and deletion residuals in rolling backups for up to 30 additional days unless a longer period is required by law.
7. Your choices and rights
The app provides JSON export, deletion of local device data and permanent deletion of a linked account. Users may request access, correction, portability, deletion, restriction or objection, and may withdraw consent for future processing by contacting info@getbabywise.com. They may also complain to the Berlin Commissioner for Data Protection and Freedom of Information or another competent supervisory authority.