Privacy Policy

Last updated: August 5, 2026

Overview

Wee Notes ("the App") is a baby activity tracking application developed by Hilary Gridley and Colin MacDougall. This privacy policy explains how we collect, use, and protect your information.

Information we collect

Account information

When you create an account, we collect:

• Email address
• Display name (if you choose to set one)
• Password (encrypted — we cannot read it)
• Authentication tokens from Google or Apple if you use social sign-in

Baby information

You may optionally provide:

• Baby's name
• Baby's birthdate
• Feeding preferences

Activity logs

The App stores the activity logs you create (feeding times, sleep times, diaper changes, notes, and any custom activities you choose to define — for example, medication or tummy time). This data is yours and is stored to provide the App's core functionality. Logs also record which caregiver last edited them to help coordinate between multiple caregivers.

Caregiver and sharing information

If you invite other caregivers to share access to a baby's logs, we collect:

• The invited caregiver's email address
• Caregiver roles (owner or caregiver)
• Invitation status and expiration

Analytics and crash data

We use the following third-party services to improve the App:

• PostHog (analytics): collects which features are used and app performance metrics. This data is linked to an internal user ID (not your name or email) to help us understand usage patterns across sessions. This ID cannot be used to identify you personally outside of the App.
• Sentry (crash reporting): collects crash reports and error information to help us fix bugs. Crash data is linked to an internal user ID for diagnostic purposes.

How we use your information

We use your information to:

• Provide and maintain the App's functionality
• Sync your data across your devices and between caregivers
• Authenticate your account
• Improve the App based on usage patterns

We do not:

• Sell your personal information
• Share your data with third parties for marketing
• Use your data for advertising

Data storage and security

Your data is stored securely using Supabase, a trusted cloud database provider. Data is:

• Encrypted in transit (HTTPS/TLS)
• Encrypted at rest
• Protected by row-level security (you can only access your own data and data shared with you)
• Stored in the United States

The App also stores some data locally on your device (such as cached logs and preferences) to enable offline use. Authentication tokens are stored in your device's secure keychain.

Data retention

Your data is retained as long as you have an active account. You can request account deletion through the App or by contacting us. When you request deletion, your account enters a 30-day grace period during which you can recover it by signing back in. After 30 days, your account and all associated data are permanently deleted.

Your rights

You have the right to:

• Access your data (available through the App's export feature)
• Delete your data (request deletion in the App or contact us)
• Correct inaccurate data (editable within the App)

Children's privacy

The App is designed for parents to track their baby's activities. We do not knowingly collect information from children under 13. The baby information stored is provided by the parent or guardian, not the child.

Changes to this policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy in the App or on our website.

Contact us

If you have questions about this privacy policy or your data, contact us at: