Baby Care Cards

Privacy Notice

Last updated: 3 September 2026

Who we are

Baby Care Cards is operated by Tech Faculty (“we”, “us”). Tech Faculty is the data controller for the personal data described in this notice, meaning we decide why and how it is processed. You can reach us at support@babycarecards.app.

Child data stays on your device

Children, care details, photos, medications and reminders you enter are stored in your browser's local storage on the device you used. We do not create an account for you and we do not upload that content to our servers unless you explicitly share or export it, or you switch on optional backup.

Optional backup and sync

Backup is off by default and the app works fully without it. If you create an account and switch backup on in Settings, we store a copy of your care data against your account so you can restore it on another device: child names, ageGroup, allergies, age, photos, feeding, routine, medication, emergency contact, pediatrician, reminder and caregiver details, free-text notes, and your account email address. Our legal basis is your consent, which you can withdraw at any time by switching backup off.

We use this data to provide backup and restore, and to improve Baby Care Cards. We do not sell or share your identifiable care data or photos with third parties, and we do not use it to advertise to you. We may publish, share or license aggregated and anonymised insights (for example, how common a feeding pattern is) that cannot reasonably be used to identify you, your household, or an individual child.

If you choose to share a care card by link or QR code while signed in, we publish a copy of that card so anyone holding the unguessable link can open it. The link is not indexed by search engines, and you can stop sharing it at any time from the care card page, which immediately makes the link stop working.

You can delete your backup at any time from Settings, which permanently removes those records from our servers. Deleting your backup does not delete the copy on your device.

Personal data we process

  • Purchase email address — to link your one-time lifetime unlock to you, verify your entitlement and let you restore your purchase on another device. Legal basis: performance of our contract with you.
  • Purchase records (transaction, product and price identifiers, purchase status and dates, refund status) received from our payment provider — to provide and support the purchase and to meet accounting obligations. Legal basis: contract and legal obligation.
  • Support messages you send us, including your email address and the content of your message — to answer you. Legal basis: legitimate interests in supporting our users.
  • Technical data processed by our hosting provider when you load the site (IP address, device and browser information, request logs) — to deliver the service and to keep it secure and free from abuse. Legal basis: legitimate interests in security and reliable operation.

We do not sell personal data, run advertising, or use analytics or tracking cookies. We do not process child health information on our servers.

Cookies and local storage

We use only essential browser storage: local storage to keep your children, care cards and settings on your device, and storage required by our payment provider during checkout. We set no analytics or marketing cookies, so no consent banner is required. Clearing your browser storage removes this data.

Who we share data with

  • Flutterwave, our payment processor. Flutterwave handles checkout, card processing and payment confirmation, and receives the email address and payment details needed for those purposes. See Flutterwave's privacy policy.
  • Service providers and subprocessors — hosting, database and infrastructure providers that operate the site and store purchase records on our instructions.
  • Professional advisers such as accountants and lawyers, where necessary.
  • Authorities where we are required to disclose data by law.

International transfers

Our providers may process data outside your country, including in the United States. Where data leaves the UK or EEA, transfers are protected by an adequacy decision or by Standard Contractual Clauses with appropriate safeguards.

How long we keep data

Purchase records and the associated email address are kept for as long as your lifetime unlock remains valid and, after that, for up to seven years to satisfy tax and accounting rules. Support messages are kept for up to 24 months. Server logs are kept for up to 90 days. Data on your device stays until you delete it. When data is no longer needed it is deleted or anonymised.

Security

We use appropriate technical and organisational measures, including encryption in transit (HTTPS), encryption at rest for our database, access controls limiting who can reach purchase records, and signed, verified payment webhooks. Card details are never handled by us — they go directly to Flutterwave.

Your rights

Subject to applicable law, you may request access to your personal data, correction, erasure, restriction of processing, portability, and object to processing based on our legitimate interests. Where we rely on consent, you may withdraw it at any time. Email support@babycarecards.app and we will respond within one month. If you are in the UK or EEA, you may also complain to your local data protection supervisory authority.

To erase everything held on your device, open Settings and choose “Delete all local data”.

Sharing a care card

When you share a care card, the link or QR code contains only an identifier for the card — never your child's details. Sharing is always initiated by you.

Changes and contact

We may update this notice; the date at the top shows the latest version. Questions or requests: support@babycarecards.app. See also our Terms of Use and Refund Policy.