Privacy Policy

1. Who we are

BabyLoop ("we", "our", or "the app") is a baby tracking application operated by Janaka Premathilaka. If you have questions about this policy, contact us at [email protected].

2. What BabyLoop does

BabyLoop is a web application that helps parents and caregivers log and review their baby's feeds, sleep, nappy changes, medicine, mood and growth. Everything you record is stored on your own device. Connecting Google Drive is optional: if you connect it, a copy of your records is kept in your own Google Drive so that other devices in your family can see the same records. Nothing is ever saved to a server operated by BabyLoop.

3. Information we collect

When you sign in with Google, BabyLoop receives:

• Your Google account email address and display name, read from Google Drive and kept only on your device (used to show which account is connected and to reconnect without an account chooser)
• A short-lived Google OAuth access token (used solely to read and write BabyLoop's own files in your Google Drive on your behalf). Tokens are held in memory only and are never written to storage.

We do not receive or store your Google password.

Tracking data you enter — feed times and amounts, sleep durations, nappy changes, medicine, photos and notes — is stored on your device and, only if you connect Google Drive, written directly to files in a BabyLoop folder in your Google Drive. This data never passes through or is stored on BabyLoop's servers.

4. Google API scopes we use

BabyLoop requests the following Google API scope:

• https://www.googleapis.com/auth/drive.file — Allows BabyLoop to create, read, and update only the files it has created in your Google Drive. It cannot access any other files in your Drive.

We do not request access to your Gmail, Google Contacts, Google Calendar, or any other Google service.

5. How we use your information

We use the information described above only to:

• Authenticate you and display your name within the app
• Read and write your tracking logs to your Google Drive on your behalf
• Let other devices signed in to the same Google account see the same records

We do not use your data for advertising, analytics, profiling, or any other purpose.

6. Data storage and retention

Your tracking data lives on your device and, if connected, in your Google Drive. You can delete it at any time by removing the app's data from your browser and by removing the BabyLoop folder from your Drive. Revoking BabyLoop's access in your Google Account permissions immediately prevents the app from accessing your Drive.

BabyLoop does not maintain any database of user data. We do not retain copies of your tracking logs.

7. Sharing with caregivers

BabyLoop has no invitation system. Another phone sees the same records only when it is connected to the same Google account and chooses the same dataset. Daily reports you create are shared only when you choose to share, download or save them. BabyLoop does not introduce any sharing beyond what you do yourself.

8. Third-party services

BabyLoop uses the following third-party services:

• Google OAuth 2.0 — to obtain your permission to use Google Drive (optional)
• Google Drive API — to keep a copy of your records in your own Drive (optional)

Please review Google's Privacy Policy for details on how Google handles data.

9. Children's data

BabyLoop is designed to be used by parents and caregivers who are 18 years of age or older. We do not knowingly collect data from or about children directly. Baby tracking data (e.g., feed times, sleep logs) is entered by adults and stored on their own devices and, optionally, in their own Google Drive accounts. If you have concerns about data entered about a child, you can delete it from the device and from Google Drive at any time.

10. Security

We use OAuth 2.0 tokens and HTTPS to protect data in transit. If you connect Google Drive, the copy kept there benefits from Google's security infrastructure. BabyLoop uses no analytics, no advertising and no tracking scripts. We recommend securing your Google account with two-factor authentication.

11. Your rights

You have the right to:

• Access the data BabyLoop has stored on your behalf (it is on your device and, if connected, in your Google Drive; Settings offers a full JSON export)
• Delete your data at any time by clearing the app's data on the device and removing the BabyLoop folder from your Drive
• Revoke BabyLoop's access at any time via Google Account settings

12. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of BabyLoop after a change constitutes acceptance of the updated policy.

13. Contact

Questions or concerns? Email us at [email protected].