Privacy Policy
Last updated: November 12, 2026
The short version
- ✓BabySafe works without an account. Without one, nothing about you or your children leaves your iPhone.
- ✓Your trips, routes, and motion data always stay on your iPhone, with or without an account. So do your children’s photos.
- ✓With an account, your family sees your name, the children you share, who each child is with, the parking alerts, and only two kinds of location: where a child was left at a safe place and where someone confirmed being with them.
- ✓No ads, no tracking, no analytics, and we never sell data.
- ✓You can delete your account in the app at any time.
1. Who we are
BabySafe (“BabySafe”, “we”, “us”) is an iPhone app that helps parents and caregivers never forget a child in a car. The data controller is Leonardo Albregard Bortolotti, the developer of BabySafe, based in Brazil. You can reach us at contact@babysafe.care.
This policy explains what data the BabySafe app and this website handle, why, and what choices you have.
2. What stays on your iPhone
BabySafe is designed so that the most sensitive data never leaves your device. The following is processed and stored only on your iPhone:
- Location and route. BabySafe uses your location in the background to notice when a trip starts and when you park. Your trips, routes, and location readings are never sent to us or to your family.
- Motion and activity. Data from the motion sensors (for example, whether the phone is in a vehicle) is used on the device only.
- Car connection. If you set up the car shortcuts (CarPlay or Bluetooth), the signal that you got in or out of the car is used on the device only.
- Children’s photos and your trip history.
- Field recordings. If you turn on the optional trip recordings in Settings, they stay on your iPhone until you choose to export and share them yourself.
- Nearby family members. To know whether another caregiver is with you, each iPhone decides on its own. The location of a person who is merely nearby never leaves their device.
3. What leaves your iPhone (only with an account)
Signing in is optional. If you sign in with Apple to share care with your family, the following data is stored on our servers and shared with the members of the families you belong to:
| Data | Why | Who sees it |
|---|---|---|
| Your name (from Apple, which you can edit) | So your family knows who you are | Your family members |
| An account identifier | To sign you in and link you to your families | Only our systems |
| Your device’s push token | To deliver family alerts to your iPhone | Only our systems |
| Your time zone | To reset “who has the children” each day at the right time | Only our systems |
| Each shared child’s name, color, and date of birth | So everyone in the family sees the same children | That child’s family |
| Parking times (without location) and check-in answers | To alert the family if nobody answers | That child’s family |
| Who each child is with | So BabySafe asks only the right person | That child’s family |
| Where a child was left at a safe place, rounded to about 11 m (36 ft) | So the family knows the child is there | That child’s family; erased once someone picks the child up |
| Where someone confirmed being with a child, rounded to about 11 m (36 ft) | So the family knows where the child was last confirmed | That child’s family; replaced at each new confirmation |
| Family alert activity (who took or closed an alert) and family history (who joined, who has the child, and when) | To coordinate the family during an alert | That child’s family |
| Invitation codes | To let someone join a child’s family | Whoever you give the code to; expires after 7 days |
We do not ask Apple for your email address.
Crash reports
If the app crashes, it sends a crash report (device model, iOS version, app version, and technical details of the crash) through Firebase Crashlytics. Crash reports are not linked to your account and are used only to fix bugs. Google keeps them for up to 90 days.
App integrity
To protect the service from abuse, the app uses Apple’s App Attest through Firebase App Check to confirm that requests come from the genuine BabySafe app. This doesn’t involve personal data.
4. Children’s data
BabySafe is meant to be used by adults: parents, guardians, and the caregivers they invite. Children don’t use the app. A child’s name, color, and date of birth are entered by a parent or guardian, who confirms they have the authority to do so. A child’s photo is never uploaded. We don’t knowingly collect any data directly from children, and we never use children’s data for advertising or profiling.
5. Why we process your data (legal bases)
- To provide the service you asked for (contract): detecting parkings, asking about your children, and, with an account, sharing care and alerts with your family.
- To protect life and physical safety: escalating an unanswered check-in to the family exists precisely to protect a child.
- Legitimate interest: crash reports and abuse prevention, to keep BabySafe reliable and secure.
- Your permission: location, motion, and notifications are only used after you allow them in iOS. You can turn them off in the iPhone’s Settings at any time, although BabySafe won’t be able to protect you without them.
This applies under Brazil’s LGPD, the European GDPR, and similar laws.
6. Service providers and where data is stored
We use a small number of providers, who process data only on our behalf:
- Google Firebase (Google LLC): sign-in, database, server functions, push delivery (Firebase Cloud Messaging), Crashlytics, and App Check.
- Apple: Sign in with Apple, the Apple Push Notification service, and App Attest.
- Hostinger: hosts this website.
Account data is stored in Google data centers in the United States. When data is transferred out of your country, we rely on our providers’ standard contractual safeguards.
7. What we never do
- We don’t show ads and don’t track you across apps or websites.
- We don’t use analytics in the app or on this website.
- We don’t sell, rent, or share your data with data brokers or advertisers.
8. How long we keep data
- Account data is kept while your account exists.
- A safe-place location is erased as soon as someone picks the child up; a confirmation location is replaced by the next confirmation.
- Invitation codes expire after 7 days.
- When you delete your account, we delete your profile, your devices, your check-ins, and your invitations, and you leave every family. Children for whom you were the only guardian are deleted for the whole family. Past entries in a family’s history keep only a random account identifier, without your name.
- Data that stays on your iPhone is removed when you delete the app.
9. Your rights
Depending on where you live, you have the right to access, correct, delete, or receive a copy of your data, to object to or restrict its processing, and to withdraw consent. You can:
- Edit your name and your children in the app.
- Delete your account in the app: Settings › Family › Delete Account.
- Write to contact@babysafe.care for any other request. We’ll answer within the time required by law.
You can also file a complaint with your data protection authority (in Brazil, the ANPD; in the European Union, your local supervisory authority).
10. Security
Data is encrypted in transit. Access to the database is restricted by security rules, so that each person only reaches the families they belong to, and the server only accepts requests from the genuine app. No system is perfectly secure, but we work to keep your data safe and to collect as little as possible.
11. This website
This website uses no cookies, no analytics, and no third-party content. Like any web server, our host may keep standard access logs (such as IP address and browser type) for a short time for security and operation.
12. Changes
If we change this policy, we’ll update the date above. If the change is significant, for example if new data starts to leave your iPhone, we’ll let you know in the app before it takes effect.
13. Contact
Questions about privacy: contact@babysafe.care.