Puddlekin Privacy Policy

Version 1.0 · Effective 2026-10-03

If you live in Washington, Nevada or Connecticut, our Consumer Health Data Notice explains your rights for baby care records. It is useful to everyone.

1. Who we are

Puddlekin is published by Torstein Skulbru, Norway (sole proprietor). We are the controller of your personal data under the GDPR. Privacy contact: [email protected].

2. The short version

Free use needs no account. Everything stays in the app’s database on your iPhone.
Shared care and cloud restore (Premium) need Sign in with Apple and your explicit consent before anything is uploaded.
Uploaded data is encrypted in transit and at rest by our provider. It is not end-to-end encrypted.
Analytics and crash reports are off until you opt in.
No ads, no tracking, no selling, no data to ad networks.
You can export, delete and withdraw consent in the app.
Puddlekin is for adults caring for a baby. It is not directed at children.

3. Without an account: stays on your phone

If you never turn on shared care, the babies and care entries you log (feeds, sleep, diapers, pumping, tummy time, snuggles, notes) are stored in the app’s local database on your iPhone. We do not receive them. You can export them as CSV or delete them at any time.

4. With shared care or cloud restore (Premium)

Before upload, the app shows you what will be shared and asks for your explicit consent. You sign in with Apple. Then we store this in Google Firebase:

your display name
your Firebase account ID and Apple’s sign-in identifier for you
your family membership and role (owner, caregiver or viewer)
babies: nickname, optional birth date and time zone
care entries: times, amounts, types, notes, who logged or last edited each one, and, if you choose, which family member did it (“Done by”)

Where it is kept:

Cloud Firestore, location eur3 (EU multi-region)
Cloud Functions, europe-west1
Firebase Authentication / Identity Platform

Google encrypts this in transit and at rest. It is not end-to-end encrypted, so our service provider’s systems can technically access it. We do not read it, and we do not use it for anything except running the app.

5. Who in your family sees what

Every approved family member can see all babies and all entries in the family. The owner approves every join request and sees who is asking and for which role.

Owner: manages members and billing.
Caregiver: reads, adds, edits and deletes care entries.
Viewer: reads and exports.

When the owner removes someone, their access stops on the server. Copies already on a disconnected phone, screenshots and exports cannot be erased remotely.

6. Purchases

Purchases go through Apple. We use RevenueCat to manage them. RevenueCat receives a random anonymous ID created by the app (before you sign in) or your Firebase account ID (after you sign in), together with your purchase records and basic device information such as the app version and country of the App Store. It does not receive care data.

7. Optional analytics and crash reports

Both are off until you opt in, and you can turn them off in Settings.

Analytics (Firebase Analytics, without the advertising ID): event names such as “first entry saved” or “paywall viewed”. Never the contents of your care entries.
Crash reports (Firebase Crashlytics): scrubbed of notes, names and amounts.

We do not use the advertising identifier, we do not track you across other companies’ apps or sites, and we do not sell or share data with ad networks.

Website

puddlekin.app uses Google Analytics 4 only if you click Accept in the cookie banner. Until then, nothing is loaded and no cookie is set.

What: pages viewed, how you arrived (for example a search or a link), device type, browser, language and approximate country or city. Google Analytics 4 does not log or store your IP address.
Cookies: _ga and _ga_2P5K48P8NW, which tell visits apart. Google signals and ad personalisation are turned off.
How long: analytics data is kept for 2 months, then deleted by Google.
Change your mind: use Cookie settings at the bottom of any page. Choosing “No thanks” stops measurement and removes the cookies.

The website has no other cookies, trackers or ads. Your choice is stored only in your browser.

What	Basis
Providing shared care, sync and restore	Contract (Art. 6(1)(b))
Uploading baby care data to the cloud	Your explicit consent (Art. 6(1)(a), and Art. 9(2)(a) where the data is health data)
Analytics and crash reports (app) and website analytics	Your consent
Security and abuse prevention	Legitimate interest (Art. 6(1)(f))

You can withdraw consent at any time. Withdrawing does not affect what we did before.

9. Who processes your data

Google (Firebase and Google Analytics): database, sign-in, functions, and, if you opt in, app analytics, crash reports and website analytics.
RevenueCat: purchase management.
Apple: Sign in with Apple, App Store purchases.

They act for us as processors, except Apple, which acts for itself. We do not sell your data.

International transfers. Google and RevenueCat may process data in the United States. Where they do, transfers rely on the EU-US Data Privacy Framework and/or Standard Contractual Clauses.

10. Keeping and deleting data

On this phone: use “Delete all data on this phone” in the app.
Your account: delete it in the app. This removes your account and your family membership. Shared entries you logged stay in the family and are labelled “Former caregiver”. The app tells you this before you confirm.
The whole family: the owner can delete the family in the app. All members lose access and the server records are purged. Active records are purged within 30 days. Backups are overwritten on the provider’s schedule.
Support emails: we keep them as long as needed to answer you.

Deleting your account does not cancel an Apple subscription. Cancel that in your Apple ID settings.

11. Your rights

You can ask for access, rectification, erasure, portability and restriction, and you can object to processing and withdraw consent. Most of this works in the app: edit entries, export CSV, delete data. For anything else write to [email protected]. We reply within the time the law requires.

You can complain to Datatilsynet (the Norwegian Data Protection Authority, datatilsynet.no) or to your local supervisory authority.

12. Age

Use Puddlekin only if you are an adult in your country and at least 16. Puddlekin is not directed at children. Information about a baby is entered by the parent or caregiver.

13. Not medical advice

Puddlekin records care. It makes no predictions and gives no medical advice.

14. Changes

We will date and version each change. For anything that adds a new kind of sharing, we will ask for your consent again in the app.

15. Contact

Privacy: [email protected] Support: [email protected]

Torstein Skulbru, Norway (sole proprietor).