Privacy Policy — babycuco

1. Data controller

The controller of personal data collected on babycuco is the owner of this website. You can contact us at admin@babycuco.com.

2. Data we collect

Account data: name, email address.
Baby data: name, date of birth, sex. We never collect identifying data about the baby.
Events: feeding, sleep, nappy, medication and weight/height records entered voluntarily.
Technical data: IP address, browser and session cookies required for the service to function.

3. Purpose and legal basis

Providing the baby diary service (contract performance).
Sending you communications about the service (legitimate interest).
Improving the tool using anonymised aggregate statistics (legitimate interest).

4. Data retention

Data is retained while you have an active account. You can delete your account and all associated data from your user profile. We apply effective deletion within 30 days.

5. Third parties and transfers

We do not sell or share data with third parties for commercial purposes. We use the following trusted providers:

Google OAuth: optional authentication. We only receive your name and email.
Stripe: payment processing. babycuco does not store card details.
Hosting: data is stored on servers located in the EU.

6. Your rights

You have the right to access, rectify, erase, port and object to the processing of your data. To exercise these rights write to us at admin@babycuco.com.

7. Security

We apply HTTPS encryption, bcrypt-hashed passwords and secure sessions. We regularly review our security measures.

8. Changes to this policy

We will notify you of relevant changes by email or via an in-app notice.