Privacy Policy

Effective Date: September 7, 2026

Last Updated: September 7, 2026

SiteSafe Technologies Ltd. ("SiteSafe," "we," "us," or "our") operates Baby Care Log (the "App"), a family baby-care tracking application that allows parents and caregivers to record and share information about feeding, diaper changes, notes, and Vitamin D for one baby, twins, or triplets.

This Privacy Policy explains what information we collect, how we use and disclose it, how we protect it, and the choices available to you.

By using Baby Care Log, you acknowledge the practices described in this Privacy Policy.

Baby Care Log uses passwordless email authentication. We collect and store:

Plaintext session tokens and confirmation codes are not stored in the database. User sessions may remain valid for up to 30 days.

The App may store:

The App does not currently request baby photographs, medical diagnoses, healthcare-provider information, insurance information, or government identification numbers.

Care-log entries may contain:

Because notes are free text, you may voluntarily enter information that the App does not specifically request, including personal, family, or health-related information.

The App may store:

Baby Care Log allows family members and caregivers to share access to a family care log.

Family access records may include:

Pending invitations may include:

Members of a shared family can see the email addresses and roles of other people who have access to the shared family log.

Only the family owner can invite or remove caregivers. Caregivers cannot invite or remove other members.

The App may allow users to import care-log and Vitamin D records. Imported information may include dates, times, feeding values, diaper values, notes, creation information, identifiers, and Vitamin D status.

The App does not currently retain uploaded files, file names, import-source information, or a separate import history.

We use information to:

We do not sell your personal information.

We do not use baby-care records for targeted advertising.

We do not currently use analytics or advertising systems to create profiles about users.

Baby Care Log uses email to provide certain account functions, including:

Our email service provider receives information necessary to deliver these messages, including recipient email address, sender information, subject, email content, and applicable confirmation codes.

Invitation emails may also contain the inviting owner's email address.

Baby names, birth dates, and care-log records are not sent to the email provider through the current integration.

The web version of Baby Care Log uses an HTTP-only authentication cookie to maintain user sessions.

The cookie is secure in production and uses appropriate SameSite settings.

The App does not currently store user information in:

Temporary interface information may be held in browser memory while the App is being used.

Our application logs may contain limited technical information such as:

Authentication headers, cookies, and normal request/response bodies are excluded or redacted from application request logs.

We do not intentionally log confirmation codes, raw session tokens, baby profiles, care-log contents, notes, or Vitamin D records.

Our hosting infrastructure may independently process ordinary network information such as IP addresses, user agents, timestamps, and security information.

We use third-party service providers to operate Baby Care Log.

Replit provides application hosting, API hosting, database infrastructure, routing, deployment infrastructure, secret management, logging infrastructure, and connector services.

Replit may process application database contents, server logs, network metadata, IP addresses, user agents, timestamps, deployment information, and email requests routed through its connector infrastructure.

Resend provides transactional email delivery.

Resend may receive recipient addresses, sender details, subjects, email content, confirmation codes, and inviter email addresses as necessary to deliver transactional messages.

Resend is not provided baby profiles or care-log records through the current integration.

The web version of the App currently requests fonts from Google Fonts.

Depending on browser behavior, Google may receive ordinary font-request information such as IP address, user agent, requested resource, referrer information, and request timestamp.

No account, baby, family, or care-log information is deliberately included in Google Fonts requests.

Baby Care Log does not currently use:

The App also does not currently use Clerk, Firebase, Auth0, Supabase, Stripe, RevenueCat, Sentry, Google Analytics, Mixpanel, PostHog, Twilio, or social-login SDKs.

If these practices change, we will update this Privacy Policy and our applicable App Store privacy disclosures.

Baby Care Log is designed to allow parents and caregivers to share access to the same family care log.

By inviting another person, the family owner authorizes that person to access the information available through the shared family account.

Family owners are responsible for inviting the correct people.

We recommend that family owners only invite people they trust with access to the family's information.

We retain personal information for as long as reasonably necessary to provide the App, maintain accounts, operate our services, resolve disputes, comply with legal obligations, and maintain security.

Where you delete your account, we delete the information described in the Account and Family Deletion section below, subject to information we may be required or permitted to retain by law or information that remains temporarily in secure backups.

Account deletion is available within the App.

For a family owner, the deletion process requires:

When a family owner completes deletion, the App permanently deletes:

Deletion is completed through a database transaction.

A caregiver cannot delete their account while remaining a member of a shared family. The family owner must first remove the caregiver. Removing a caregiver does not delete the shared family log.

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, use, alteration, disclosure, or destruction.

These measures include authentication controls, hashed confirmation codes and session information, secure authentication cookies, access controls, and redaction of sensitive information from application logs.

However, no electronic storage system or method of transmitting information over the Internet can be guaranteed to be completely secure.

Baby Care Log is intended for adults, including parents and caregivers, and is not directed toward children.

The minimum age to use the App is 18.

Adults may enter information about babies and children for whom they are responsible or otherwise authorized to provide care.

We do not knowingly collect information directly from children as users of the App.

The information entered about babies and children may include names, birth dates, feeding records, diaper records, notes, and Vitamin D records.

Depending on applicable law, you may have rights concerning your personal information, including the ability to:

To make a privacy request or ask a privacy question, contact us using the information below.

Our service providers may process or store information outside the country where you live.

The location of processing may vary depending on the infrastructure used by our service providers.

By using the App, you acknowledge that information may be processed in jurisdictions outside your own, subject to applicable legal requirements and protections.

Baby Care Log is a tracking and organizational tool.

It is not a medical device and does not provide medical advice, diagnosis, or treatment.

Feeding, diaper, Vitamin D, and other information displayed by the App should not be used as a substitute for professional medical advice.

If you have concerns about your baby's health, feeding, hydration, development, or safety, contact a qualified healthcare professional.

In an emergency, contact your local emergency services.

We may update this Privacy Policy from time to time.

When we make material changes, we will update the effective date and, where appropriate, provide additional notice through the App or another reasonable method.

We encourage you to review this Privacy Policy periodically.

SiteSafe Technologies Ltd.

1100 Jervis St

Vancouver, BC V6E 2C4

Canada

Privacy and Support Email: support@sitesafehq.com