Private care data deserves careful handling.

BabySteps is intended for adults: parents, legal guardians, and caregivers who are responsible for entering and managing care information. It is not intended for children to create accounts or submit information directly.

If you enter information about a child, you represent that you are the child's parent, legal guardian, authorized caregiver, or otherwise have the right to provide and manage that information.

BabySteps stores the information you choose to enter. Depending on how you use the app, this may include:

• Account information, such as email address, authentication identifiers, subscription state, and account settings.
• Child profile information you choose to enter, such as name or nickname, birth date, photos, growth details, and profile settings.
• Care events you record, including feeding, pumping, diapers, sleep, medicine, activity, growth, milestones, notes, todos, schedules, and attachments.
• Feeding details, including bottle, breast, tube, solid/oral workflows, amounts, calories when entered or calculated, duration, timing, storage notes, and related metadata.
• Medicine details you enter, including medicine names, dose metadata, schedule context, due or overdue status, notes, and reminders.
• Caregiver and family sharing information, including invitations, roles, accepted access, shared child access, and activity associated with shared care.
• Photos or files you attach to a child profile or care event.
• Reports, PDFs, exports, and share payloads generated from your care data.
• Support messages, feedback, and other information you send directly to Forever Frameworks.
• Technical information needed to operate the app, such as device/app version, push notification tokens, sync metadata, and security logs.

Because BabySteps can track sensitive family and care context, you should only enter information you are comfortable storing in the app and sharing with invited caregivers.

BabySteps is local-first. Core tracking is designed to be fast and usable on your device even when connectivity is unreliable. Local app data may also be included in your device backups according to your Apple/iOS settings.

Cloud sync is used for account-backed features such as multi-device access, caregiver invitations, and shared child access. When sync is enabled or required for a shared-care feature, relevant account, child, caregiver, and care-event data is stored with our backend provider so the app can sync that information across authorized users.

We use BabySteps information to:

• Provide the app features you choose to use, including local tracking, dashboards, charts, reminders, reports, and exports.
• Sync account-backed data across devices and invited caregivers when cloud sync is enabled.
• Manage caregiver invitations, permissions, shared child access, and family care coordination.
• Process subscriptions and entitlement state through Apple StoreKit and App Store systems.
• Send local notifications, push notifications, and reminder-related messages when you enable those features.
• Mirror appointments or schedules to your calendar only when you authorize calendar access.
• Respond to support requests, troubleshoot issues, maintain security, prevent abuse, and improve reliability.
• Comply with legal obligations, enforce our terms, and protect the safety and integrity of the service.

Sharing is controlled through invitations and roles. If you invite a caregiver or accept shared access, that person may be able to view, add, edit, or otherwise interact with child and care data according to the permissions available in the app.

Do not invite anyone unless you trust them with the child and care information available in the shared profile. Removing access can stop future access inside BabySteps, but it cannot erase information someone already viewed, exported, saved, screenshotted, or otherwise copied outside the app.

BabySteps may let you attach photos to child profiles or care events. Those photos can contain sensitive personal information. Only attach photos you have the right to use and share with authorized caregivers.

PDF reports, account exports, native share sheets, screenshots, printed reports, and files saved outside BabySteps are your responsibility once exported or shared. BabySteps cannot control what happens to information after it leaves the app.

BabySteps may use local notifications, push notifications, and reminder-oriented workflows to help you remember care tasks. You can control notification permissions in iOS settings. Reminder delivery is not guaranteed and should not be relied on for urgent, critical, or medical care decisions.

We do not sell personal information, use BabySteps care data for advertising, or use child/care data to recommend products. Information may be shared only in these limited ways:

• Invited caregivers and family members can see the child profiles and care data they have been granted access to.
• Apple processes App Store purchases, subscriptions, family sharing, refunds, and related payment/account workflows under Apple policies.
• Supabase and related infrastructure providers may process account-backed cloud sync data so the service can store, secure, and sync shared care information.
• Push notification providers may process notification tokens and delivery metadata to send reminders you enable.
• Email or support providers may process messages you send us for customer support.
• We may disclose information if required by law, legal process, safety needs, fraud prevention, or to protect our rights and users.

BabySteps may contain health-related or care-related information because you choose to enter it. That does not make BabySteps a medical device, medical advice service, electronic health record, or HIPAA-compliant system.

Forever Frameworks is not acting as your healthcare provider, health plan, healthcare clearinghouse, or HIPAA business associate through BabySteps. Do not use BabySteps where HIPAA compliance is required, as a required medical record, as a substitute for professional judgment, or for emergencies.

BabySteps is designed for adults to manage care information about children. Children should not create accounts, manage subscriptions, or submit information directly through the app.

If you believe a child has provided information to us without appropriate parent or guardian involvement, contact us and we will review and delete applicable account-backed information where required.

BabySteps subscriptions are processed through Apple's App Store systems. Apple handles payment information, billing, refunds, subscription management, Apple Family Sharing where applicable, and related account workflows. We receive subscription entitlement information needed to unlock subscription-backed app features.

Local data remains on your device until you delete it in the app, delete the app, or remove it through device-level backup and storage controls. Account-backed synced data remains until you delete relevant records, remove shared access, or request account deletion through the app or by contacting us.

Some information may remain for a limited time in backups, logs, legal records, fraud-prevention records, subscription histories handled by Apple, or records we must retain to comply with law or resolve disputes.

We use commercially reasonable technical, organizational, and administrative safeguards designed to protect account-backed BabySteps data. No app, server, network, device, or cloud service can be guaranteed completely secure.

You are responsible for keeping your device, Apple ID, email account, BabySteps account, and caregiver invitations secure. Use strong authentication and only invite people you trust.

You can control BabySteps data in several ways:

• Use local tracking without enabling shared care.
• Choose whether to subscribe for sync and caregiver sharing.
• Invite, manage, or remove caregivers where the app allows.
• Disable notifications, calendar access, or photo access in iOS settings.
• Export reports or account data from supported app flows.
• Request account deletion for synced account data.

Depending on where you live, you may have rights to access, correct, delete, export, or object to certain processing of personal information. Contact us to exercise those rights.

We may update this policy as BabySteps changes. When we do, we will update the Last updated date and, when appropriate, provide additional notice in the app or on this website.