What we know about you, and what we cannot know.

In short

Snuggle is a baby-care journal, not a medical service. In its target architecture, authorized phones encrypt records selected for household sync before sending them through Supabase. The service manages accounts and delivery metadata, but cannot read encrypted records or plaintext household keys. The full tracker migration remains under validation.

We show no advertising. We do not sell, rent or share your data for marketing. We do not build a profile of you or of your child.

Who is responsible

Mehdi Rochdabi is the individual publisher of Snuggle and the contact for data questions. Write to [email protected] to use your rights.

What stays on your phone

The entries of the journal (sleep, feeds, diapers, growth, temperature, medicine, activities, milestones, notes and the rest) are stored encrypted on your phone. Photos you add to a memory or to a meal stay on your phone.

Reminders are prepared and shown by your phone itself. Voice entries are turned into text by the speech recognition of your phone, provided by Apple or Google under their own terms; Snuggle then reads the text on the phone to prepare an entry you confirm.

What our servers hold

Your account: your email address and a protected form of your password. Your household: who belongs to it, with which role, and since when. Technical identifiers of your phones: public keys and session identifiers, which let the household share its keys safely.

For records selected for synchronization, the server stores encrypted operations and key envelopes for authorized phones. It can process metadata such as household and device identifiers, membership roles, key epochs, operation size and time, and delivery sequence numbers. This metadata is personal information, but it is not the plaintext baby journal.

The state of your subscription, when you have one, and the number of questions you asked the assistant today, to apply its daily limit.

Your recovery code

Recovery options under validation include a protected passkey on supported devices, a parent-kept twelve-word code and encrypted transfer from another authorized phone. Plaintext household keys and the recovery phrase are not sent to Supabase. If no usable method remains, neither Snuggle nor Supabase can decrypt and restore the history.

The Snuggle Assistant

When you ask the assistant a question, your question, up to six earlier messages of the same conversation, your baby’s age in months and the language of the app are sent through our server to OpenAI, which writes the answer. Nothing else about your baby is sent, unless you write it in your question.

We do not keep the conversation: it disappears when you leave the screen. We ask OpenAI not to store the request. The assistant is an artificial intelligence, it can be wrong, and it does not give medical advice.

Emails

We send you an email to confirm your address. When a parent invites someone, we send that person one email with their activation code. We send no newsletter and no advertising.

Purchases

Where a subscription is offered, the payment is handled by the App Store or Google Play. We never see your card. A service named RevenueCat tells us whether your subscription is active.

Usage statistics and crash reports

With your agreement where the law requires it, and unless you switch it off in More > Privacy, the app can send anonymous statistics about how it is used, for example that a screen was opened. They never contain your baby’s records, a name, a date of birth, a note or a voice transcript.

When a build has crash reporting switched on, a crash sends a technical category only, with no content from your journal.

Who helps us run the service

Supabase is the target service for accounts, authorization and encrypted synchronization. OpenAI processes Assistant questions when used; Resend may deliver invitations; Apple, Google and RevenueCat may process subscriptions when sales begin. Cloudflare hosts this website and routes support mail. Development builds still retain legacy Firebase components for rollback and technical crash reporting; these are not part of the target authentication or baby-record sync architecture. This processor list will be reconciled with the release build before launch.

Some of these companies process data outside your country, including in the United States. They act on our instructions and for these purposes only.

How long we keep it

We keep your account and the encrypted journal of your household for as long as the account exists. When you ask us to delete your account, we delete the account data held on our servers within 30 days. What is on your phone is removed by deleting the app.

Your rights

You can ask us for a copy of your account data, have it corrected or deleted, and object to the optional statistics. The PDF reports of the app are your export of the journal, which we cannot read ourselves. Write to [email protected] from the address of your account; we answer within 30 days. You can also complain to the data protection authority of your country.

Children

Snuggle is made for adults: parents and the people they invite. It is not directed at children. The information about a child is entered by their parents, who decide what to record and with whom to share it.

Changes

If this policy changes in a way that matters, we will say so in the app or on this page before the change applies. The date at the top is that of the current version.