kuma baby.

YOUR INFORMATION, HANDLED WITH CARE

Privacy at Kuma Baby.

Last updated October 8, 2026. This policy covers the Kuma Baby iOS app and Apple Watch companion, kumababy.app, and the forms we provide for support, partnerships, and launch updates.

Privacy at a glance

  • Access to shared records depends on household membership and roles. Invite only people you trust.
  • We use your records to provide app features. We do not sell personal information or give advertisers access to care records.
  • You can manage profiles, export records, and delete your account in the app. See the details below for how deletion works.

Kuma Baby is designed for adult parents and caregivers. A caregiver creates any child profile and decides which trusted adults to invite into a household. The app can contain personal information about children, including feeding, diaper, sleep, and growth records. Please share household access only with people you trust.

Information in the app

Depending on the features you use, Kuma Baby may process:

On-device storage and household sync

Sign in with Apple is required to use the current App Store version. Once signed in, the app keeps a local copy of household information for offline use and queues changes until they sync to Kuma Baby’s backend. A change still waiting to sync remains on that device and has not yet been shared with the household. Imports are processed in the app and their records sync to the signed-in household after you confirm the import.

The app backend is operated by Kuma Baby using self-hosted Supabase software. The primary app backend and database are hosted in Beauharnois, Quebec, Canada (BHS). We use them to authenticate accounts and store the household profiles and records you choose to sync. Household members can access the shared child profiles and records for that household. Apple Watch transfers selected profile and activity information between your paired devices through Apple’s Watch Connectivity framework.

You can export records to a CSV file. If you use Apple’s share sheet or save the file elsewhere, the destination you choose handles that copy under its own terms. Your iPhone or Apple Watch may also back up app data according to your device and iCloud settings.

How we use information

We use app information to provide feeding, diaper, sleep, growth, history, export, and household-sharing features; sign you in; synchronize records; manage invitations and account requests; maintain the service; and respond to support requests. We do not use child care records to build advertising profiles, and the app does not add feeding, diaper, sleep, or growth records to advertising requests.

Promotions and advertising

As of the date above, the app’s public ad catalog displays Kuma Baby partner promotions. The app also contains an optional Google Mobile Ads integration that is not currently enabled by that catalog. If we enable third-party ad requests, Google may process information such as IP address and approximate location, device or advertising identifiers, ad impressions and interactions, diagnostics, and performance information. Google describes its SDK practices in its iOS app data disclosure and Privacy Policy. We will update this policy and our App Store privacy disclosures if our advertising setup changes.

When information is shared

We do not sell personal information. We do not give advertisers access to household profiles or care records.

Website, launch-list, and contact forms

If you join the launch list, we collect your email address, your name if you provide it, the app you select as your current tracker, your email-update consent, and the signup time. We use these details to manage the list and send the updates you requested. An email delivery provider processes the email address for list delivery.

If you contact us, we collect your email address, message, topic if selected, and submission time so we can respond. Contact details are stored by the website service and may be sent to an email delivery provider for an owner notification; messages submitted as support or partnership tickets may also be routed through our hosted helpdesk system.

The website service uses a salted, temporary identifier derived from the network address for abuse prevention and deletes that identifier after one hour; it does not save the raw address in the form database. When Turnstile is enabled, the browser loads Cloudflare’s form-verification service and the website sends Cloudflare the verification token and network address for server-side validation. Cloudflare may process technical details such as IP address and browser signals to assess abuse. Website hosting and network providers may also process technical connection details when delivering and protecting the site.

Please do not include a child’s care records or other sensitive health information in a website message. The support form is not a way to delete app data; use the in-app account deletion controls described below.

Retention and deletion

We keep account and household information while it is needed to provide the service or until the applicable account or household is deleted. To delete an account, open the Household tab, then choose Delete account in the Account section. If a household owner deletes their account, the household, child profiles, and shared records are deleted for everyone. If a caregiver deletes their account, that account and household membership are removed, while shared household records remain for the other caregivers and are no longer attributed to the deleted caregiver. A caregiver can also leave a household without deleting their personal account.

When you sign out while changes are still waiting to sync, the app warns that those changes exist only on this device and will be removed if you continue. Account deletion may show as pending while server-side deletion finishes; follow the in-app status or contact support if it remains pending.

We keep launch-list details until you unsubscribe or ask us to delete them. We keep website messages while they are needed to handle and follow up on your request; privacy requests are reviewed manually, and we may ask you to confirm the email address you used. Removing a website message from the service and related inbox copies is a manual step, not an automatic action triggered by this form. Production database backups, when created, are encrypted before storage with an online storage provider and expire under a 90-day deletion lifecycle. Backups are not created on a fixed schedule, so a backup copy may remain until its lifecycle expires. Our backup setup does not guarantee storage in a particular country or region. We may retain limited information where needed to comply with law, resolve disputes, or protect the service.

Security

App and website connections use HTTPS. Household access is checked by the backend, and sign-in sessions are stored in the iOS Keychain. We use access controls and safeguards appropriate to operating the service, but no storage or transmission method can be guaranteed completely secure.

Your choices and privacy requests

You can review or change household profiles and records in the app, manage household invitations, export records, and delete your account from the Household tab’s Account section. To unsubscribe from launch emails, request deletion or correction of website information, or ask a privacy question, use the contact form below. Please use the email address associated with the request. Sending the form does not automatically delete app or website records; we will review the request and may ask you to confirm it.

Contact Kuma Baby

Questions about this policy or a request about your information? Send us a message. Please leave out baby or health details.

We’ll use your email to respond. Sending a message won’t subscribe you to launch updates.

Back to Kuma Baby