Privacy Policy

Information We Collect

Baby Bump is designed with your privacy in mind. We collect and process the following information:

• Photos & Media: Photos you take or select are stored locally on your device. When you post to community features or share content to TikTok/Instagram, those specific images may be temporarily processed on our servers
• Album Data: Album names, descriptions, and organization data stored locally on your device
• Health & Pregnancy Data: Pregnancy week tracking, health log entries, kick counter data, journal entries, planning checklists, and other pregnancy-related information you input (stored locally on your device)
• Account Information: When you create an account, we collect your email address, username, and display name. Your password is securely hashed using bcrypt and never stored in plain text
• Sign-In Services: When you sign in with Apple or Google, we receive your email address and name from these providers
• Community Content: Posts, comments, likes, group participation, and responses to daily prompts you create in the community are stored on our secure servers and may be visible to other app users
• Social Media Integration: When you connect TikTok or Instagram accounts for content sharing, we temporarily store access tokens and may collect basic profile information from these platforms
• Device Information: Device type, operating system version, app version, and unique device identifiers for analytics and error reporting
• Notification Data: Push notification preferences and tokens for delivering reminders, community activity alerts, and app updates
• Subscription Information: Purchase history, subscription status, and billing information processed through RevenueCat and Apple App Store

How We Use Your Information

We use your information for the following purposes:

• Core Functionality: To provide photo albums, slideshow features, pregnancy tracking, health logging, kick counting, journaling, planning checklists, and reminder notifications
• Community Features: To enable community posts, comments, groups, daily prompts, and social interactions within the app
• Social Media Integration: To post content to your connected TikTok and Instagram accounts when you choose to share
• Account Management: To authenticate your account, manage subscriptions, and provide access to premium features
• App Improvement: To analyze app performance, fix bugs, and develop new features
• Customer Support: To respond to your inquiries, troubleshoot issues, and provide assistance
• Communication: To send you important updates, security alerts, and subscription-related information
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

Data Storage

Your data is stored in two ways:

• Local Data: Photos, albums, and health logs remain stored locally on your device and are never uploaded to our servers
• Community Data: Account information, posts, comments, and likes are stored on secure servers in the United States using Amazon Web Services (AWS) infrastructure
• Authentication: We use JWT tokens for secure authentication, which are stored securely on your device

Third-Party Services

We use the following third-party services:

• Sentry: For crash reporting and error monitoring to improve app stability. Sentry may collect device information, app version, and error logs. Sentry does not have access to your photos or personal album content. Learn more at sentry.io/privacy
• RevenueCat: For managing in-app subscriptions and purchases. RevenueCat processes subscription status and purchase information but does not have access to your photos or album data. See revenuecat.com/privacy
• Apple App Store: For payment processing and subscription management (handled securely by Apple)
• TikTok API: When you connect your TikTok account and choose to share content, we use TikTok's API to post videos or images to your TikTok account. We only access your account when you explicitly authorize sharing. Learn more at TikTok Privacy Policy
• Instagram API: When you connect your Instagram account and choose to share content, we use Instagram's API to post photos or videos to your Instagram account. We only access your account when you explicitly authorize sharing. Learn more at Instagram Privacy Policy
• Fastify & Prisma: For our community backend infrastructure, securely managing user accounts, posts, comments, and community interactions using industry-standard security practices
• PostgreSQL: For secure database storage of community content and account information, hosted on encrypted servers

These services may collect limited technical information (crash reports, device type, app version) to help us improve the app. Social media posting only occurs when you explicitly choose to share content and authorize the connection.

Permissions

The app requests the following permissions:

• Camera: To take new photos for your albums, pregnancy progress photos, and content for community sharing
• Photo Library: To select existing photos from your device for albums and sharing
• Storage: To save and organize your photos, health logs, journal entries, and app data locally
• Notifications: To send reminders for pregnancy tracking, community activity alerts, and app updates
• Internet Access: To sync community content, manage subscriptions, and access social media integrations

Data Sharing

We respect your privacy and do not sell your data or share it with third parties for advertising purposes. However:

• Community Visibility: Posts, comments, and likes you create in the community are visible to other app users
• Legal Requirements: We may share information when required by law or to protect our rights and safety
• Your Consent: We may share data with your explicit consent

You retain full ownership of all content you create.

Push Notifications

We may send push notifications for community activity such as comments and likes on your posts. You can disable these notifications at any time through:

• The app's notification settings
• Your device's system settings

Children's Privacy (COPPA Compliance)

Baby Bump is not intended for or directed to children under the age of 13. We do not knowingly collect, use, or disclose personal information from children under 13 years of age. If we become aware that we have collected personal information from a child under 13 without proper parental consent, we will take steps to delete such information promptly.

If you are a parent or guardian and believe that your child under 13 has provided us with personal information, please contact us at support@getbabybump.com and we will take appropriate action.

The app is designed for expectant parents and adults planning for pregnancy. All features assume adult users who can make informed consent decisions about their data.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the personal information we collect, use, disclose, and sell
• Right to Delete: You can request that we delete your personal information (subject to certain exceptions)
• Right to Opt-Out: We do not sell personal information, but if we did, you would have the right to opt-out
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

Categories of Information We Collect: Personal identifiers (email, username), pregnancy and health information, photos, community content, device information, and usage data.

Sources: Information is collected directly from you through the app interface, device sensors, and third-party authentication services.

Business Purposes: We use information to provide app functionality, improve services, ensure security, comply with legal obligations, and facilitate community features.

Information Sharing: We do not sell personal information. We share information only with service providers (Sentry, RevenueCat, social media platforms when you choose to post), as required by law, or with your explicit consent.

To exercise your CCPA rights, contact us at support@getbabybump.com. We will verify your identity before processing requests and respond within 45 days.

Data Retention and Deletion

Local Data: Photos, albums, health logs, journal entries, and pregnancy tracking data stored locally on your device remain until you delete them through the app or remove the app from your device.

Account Data: We retain your account information and community content for as long as your account is active. After account deletion, we remove your data within 30 days, except where longer retention is required by law.

Automatic Deletion:

• Inactive accounts (no login for 3 years) may be automatically deleted
• Temporary processing data for social media sharing is deleted within 24 hours
• Error logs and analytics data are retained for up to 90 days
• Subscription data is retained per Apple App Store and RevenueCat policies

Manual Deletion: You can delete your account and associated data through the app's Settings > Account > Delete Account, or by contacting support@getbabybump.com.

Your Rights

You have the right to:

• Access your data: All your photos and albums are stored locally on your device and accessible at any time. Community data is available through your account
• Delete your data: You can delete individual albums, photos, or all local data through the app's Settings > Data & Privacy section
• Account deletion: You can delete your account at any time from the app settings, which removes all your community data from our servers. Local data on your device is not affected by account deletion
• Export your data: Your photos remain in your device's photo library and can be backed up through iCloud or iTunes
• Data portability: Since photos and albums are stored locally, you maintain full control and can transfer your device backup

Contact Us

If you have questions about this privacy policy, contact us at:
Email: support@getbabybump.com

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page.