Privacy notice

Updated November 5, 2026.

Baby Journal is a product of Blue Harbor Labs LLC, Suffolk County, New York, United States. Contact: [email protected].

Who this service is for

Baby Journal is for adult parents, guardians and other adults authorized to care for a child. Children are the subjects of journal entries, not the intended account holders. Only enter or share information you are authorized to provide.

Information in your journal

We process your account email and identifiers; family membership, names and relationships; child names, birth dates and journal time zones; feeding, sleep and diaper entries; written memories and photos; and health information you choose to record, such as symptoms, temperatures, doctor visits, medications and vaccinations. Optional fields may be left blank.

Why we use it

We use this information to sign you in, save and display your journal, share updates with your connected family, provide exports, administer memberships, secure the service and respond to support requests. We do not use journal content for advertising. The app does not collect GPS location. It initially detects your device time zone.

Sharing with your family

Everyone connected to your family can view, add, edit, delete and export shared records and photos for all children in that family. Shared child records have no view-only roles. For me check-ins are separate personal records: they are private to the author’s account unless the author shares an individual entry with selected connected people. Recipients can read but cannot edit or delete these entries. Authors can stop sharing; copies already read or saved cannot be recalled. The family owner manages invitations and can remove members. Removing access cannot recall copies already downloaded. No hospital is connected to this version.

Personal check-ins

For me stores the date, mood, energy, rest, optional writing, and your selected sharing recipients. These records are not included in shared child timelines or family exports. You can download, edit, and delete your own check-ins. Leaving or deleting a family ends sharing but does not delete your personal entries. Deleting your sign-in account deletes your personal check-ins. These entries use the same hosted storage providers and are not end-to-end encrypted. We do not send their contents to visitor analytics.

Service providers and payment information

Supabase provides sign-in, database and photo storage; Cloudflare hosts the website; Brevo delivers sign-in emails; and Stripe provides payments and billing. Providers process information needed to operate and secure these services. Stripe and Link collect payment details on their own hosted pages. Baby Journal stores billing references and membership status, not full card numbers. Payment-provider privacy notices apply to their processing.

Public website visitor counts

We use Cloudflare Web Analytics on our public welcome pages to count visits and page views, understand referral sources, and measure page performance. This counter is not installed in the signed-in journal or iPhone app. We do not send account email addresses, names, photos, or journal entries to this analytics service. It does not use cookies or local storage to identify visitors. These counts are separate from account and family setup records stored in Supabase.

Email and device storage

Your browser stores a sign-in session and caches app resources. Sign out on shared devices. Brevo uses anonymous open and click tracking for transactional emails and retains delivery logs for one month. Previews of new transactional emails are disabled. These settings do not erase previously collected email information.

Storage and security

The journal database is hosted in the United States. Our providers may process information in other countries. Family access is restricted to authorized signed-in accounts, but information is not end-to-end encrypted. No system can guarantee absolute security. Do not send unnecessary health information, card details or sign-in codes in support emails.

Retention, exports and deletion

Journal records remain available while your family uses the service unless you or another authorized family member deletes them. You can correct entries and use available exports. Photos are resized, so keep the originals separately. Baby Journal does not currently provide a backup or recovery service; lost or deleted records may not be recoverable. Cancelling Plus does not delete records.

Deleting a family or account

Deleting a family removes its active journal records and revokes photo access. Photo files are queued for physical removal; cleanup is attempted every five minutes and failures remain queued for retry. Families linked to billing must contact support to coordinate cancellation and deletion. Deleting a sign-in account is separate: it removes that person’s access, while shared family records and names recorded in history may remain. Owners must first transfer ownership or delete the family. Provider security logs and payment records may remain separately where needed for security, transactions or legal obligations; deleting a journal does not automatically erase those records.

Questions and privacy requests

Contact [email protected] to request access, correction, export or deletion, report unauthorized sharing, or exercise other privacy rights available under applicable law. We may verify your identity and authority concerning shared or child records. Account ownership in the app does not determine your legal rights. Where processing relies on consent, you may withdraw it; withdrawal does not affect earlier lawful processing. You may also contact your local privacy authority.

Changes

We will date updates to this notice and notify users of material changes through the app or their account email before applying them where required.

Baby Journal is a product of Blue Harbor Labs LLC, Suffolk County, New York, United States. Contact: [email protected].