Skip to main content

1.Information We Collect

BabyBloom doesn’t require an account, and we don’t run servers that store your baby’s records. What you enter stays in the app’s storage on your iPhone or iPad: your baby’s profile (name, date of birth, gender and birth details), feeding, sleep and diaper logs, growth measurements (weight, length/height and head circumference), health notes, vaccinations, milestones, reminders, the photos you add and your Poly AI chats. The Apple Watch app syncs directly with your iPhone.

Information leaves your device only in these cases:

  • (1) Poly AI (chat answers, AI summaries and routine insights, photo analysis, monthly photo recaps and AI costume portraits) sends the question or photo you provide (for monthly recaps, the notes from that month’s photo analyses) to our AI provider, xAI, together with your baby’s name and age and, depending on the feature, a short summary of recent logs, such as feeds, sleep, diapers and milestones from the last 24 hours or daily sleep and feeding summaries for up to 14 days; the routine insight card on the Home screen is prepared automatically when it is shown, and AI images can fall back to Pollinations.ai (see “Third-Party Services & International Transfers”);
  • (2) in the free version, Google AdMob receives device and ad-interaction data, and your advertising identifier only if you allow tracking;
  • (3) Premium purchases are processed by Apple and RevenueCat;
  • (4) if you tap “Detect by My Location” on the Emergency Info screen, your location is used once, through Apple’s location services, to look up your country and is not stored;
  • (5) if you email us, we receive your email address and message.

Anything you share yourself, such as a Daycare Handoff PDF or an exported file, goes only where you send it. BabyBloom is made for parents and caregivers: information about your baby is entered by you as their parent or guardian.

2.Data Retention & Deletion

Your records stay on your device until you delete them. BabyBloom also keeps up to four weekly backup snapshots on the same device, which you can roll back to from Settings › Data & Privacy › Restore from Backup.

To erase everything (baby profiles, logs, photos, Poly AI chats, settings and those snapshots), go to Settings › Account & Subscription › Reset All Data. Deletion happens immediately and can’t be undone, so export a copy first if you need one (Settings › Data & Privacy › Export Data, as CSV or JSON). Deleting the app also removes its data from your device.

We don’t keep copies of AI requests; xAI and Pollinations.ai retain them under their own policies. RevenueCat keeps subscription records for as long as needed to manage your subscription and meet legal obligations, Google retains ad data under its own policies, and we keep support emails only as long as needed to help you. To exercise your rights over data held by these providers, email support@babybloom.kids and we’ll help. Because BabyBloom has no accounts, we may ask for details such as your App Store order ID to locate subscription records.

3.How We Use Your Information & Legal Bases

We use your information only to run BabyBloom’s features on your device (logs, reminders, WHO Child Growth Standards percentiles for weight and length/height, the vaccine list and Daycare Handoff summaries), to create Poly AI answers, insights, photo analyses and images, to unlock and restore Premium, to show ads in the free version and to answer your messages. We don’t sell your data or your baby’s data, we don’t share baby records with advertisers, and we don’t use them to profile you.

Under the GDPR and Türkiye’s Personal Data Protection Law No. 6698 (KVKK), our legal bases are:

  • performance of our contract with you, to provide the app and Premium (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c));
  • your consent, for sending information to our AI provider and, through Apple’s tracking prompt, for personalised ads (GDPR Art. 6(1)(a) and, for health-related details, Art. 9(2)(a); KVKK Art. 5(1) and Art. 6), which you can withdraw at any time without affecting processing that has already taken place;
  • and our legitimate interests in keeping BabyBloom secure, preventing fraud and abuse, and funding the free version with non-personalised ads (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).

4.Third-Party Services & International Transfers

We share information only with the service providers below, and only what each one needs: xAI, Pollinations.ai, Google AdMob, RevenueCat and Apple.

  • xAI (Grok API)

    Powers Poly AI: chat answers, AI summaries and routine insights (including the routine insight card on the Home screen), photo analysis, monthly photo recaps and AI costume portraits. Each request sends what that feature needs: your question or the photo you choose (resized before upload), your baby’s name and age, for chat and insights a short summary of recent feeding, sleep, diaper and milestone logs, and for monthly recaps the notes from that month’s photo analyses. Requests travel over encrypted HTTPS connections and are processed by xAI under its own terms and privacy policy.

  • Pollinations.ai

    Used only as a backup image generator when xAI can’t create a requested AI image. It then receives the text prompt describing the picture, for example the costume you chose and a short description of your baby’s appearance. It never receives your photos or your logs.

  • Google AdMob

    Shows banner and full-screen (interstitial) ads in the free version. To serve and measure ads and prevent fraud, Google receives technical information such as your IP address, device type and ad interactions. Your device’s advertising identifier (IDFA) is used only if you allow tracking in Apple’s App Tracking Transparency prompt, and you can change this at any time in iOS Settings › Privacy & Security › Tracking. We never pass your baby’s records to Google. BabyBloom Premium is ad-free.

  • RevenueCat

    Manages Premium subscriptions for us. It receives your App Store purchase and subscription status, a random, anonymous app user ID and basic technical details (such as iOS and app version, App Store country and IP address) so Premium can be unlocked, renewed and restored. It doesn’t receive your baby’s records.

  • Apple

    Processes App Store purchases, payments and refunds (we never see your payment details), and performs the country lookup if you use “Detect by My Location”. Apple’s own privacy policy applies.

International transfers: xAI, Google and RevenueCat are based in the United States, and our other providers may also process data outside Türkiye and the EU/EEA, where data protection laws may differ from those in your country. Transfers are limited to the data described above, and each provider handles it under its own terms and privacy policy.

5.Data Security

Your records are kept in BabyBloom’s private storage on your device, which iOS protects with its built-in file encryption when your device has a passcode. You can also turn on App Lock (Face ID, Touch ID or your device passcode) under Settings › Data & Privacy. Requests to our providers travel over encrypted HTTPS connections.

Because we run no servers holding baby records, there is no central database of your family’s data to breach, but it also means your device holds the only copy: export your data regularly, since the weekly snapshots live on the same device. If you back up your iPhone with iCloud Backup or a computer, iOS may include BabyBloom’s data in that backup under Apple’s terms.

This website uses no cookies, analytics or trackers; our hosting provider processes standard technical logs, such as IP addresses, to deliver pages securely.

6.Data Controller, Your Rights & Contact

The data controller is BabyBloom (BabyBloom Management), reachable at support@babybloom.kids. Under the GDPR and Article 11 of the KVKK, you can ask whether we process your data, request access, correction, deletion, restriction or a portable copy, object to processing based on our legitimate interests, and withdraw your consent at any time.

Because your records live on your device, you can view, correct, export and delete most of them yourself in the app. For anything else, email us and we’ll respond within the legal deadlines (one month under the GDPR, 30 days under the KVKK).

You also have the right to lodge a complaint with Türkiye’s Personal Data Protection Board (KVKK Kurulu) or with the data protection supervisory authority in the EU/EEA country where you live.