Privacy Policy

Last updated: 10 April 2026

Introduction

BubDaze (“we”, “us”, or “our”) is committed to protecting the privacy of our users and their families. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the BubDaze mobile application and website (collectively, the “Service”).

We understand that you are trusting us with some of the most sensitive information there is — data about your child. We take that responsibility seriously. This policy is written in plain English so you can understand exactly what we do with your data.

Information We Collect

We collect the following types of information:

Account information

  • Email address
  • Name (optional)
  • Password (stored as a secure hash — we never see your actual password)
  • Country and state/territory (for localised content)
  • Measurement unit preference

Child information

  • Child's first name
  • Date of birth
  • Sex (optional, used for growth chart percentiles)
  • Photo (optional)

Tracking data

  • Feeding logs (type, duration, volume, side, notes)
  • Sleep logs (start time, end time, quality, location)
  • Nappy change logs (type, notes)
  • Growth measurements (weight, length, head circumference)
  • Milestone records
  • Health logs (temperature, symptoms, medications, notes)
  • Activity logs

Technical data

  • Device type and operating system
  • App version
  • Crash reports and performance data
  • Anonymous usage analytics

How We Use Your Information

We use your information to:

  • Provide and personalise the Service
  • Sync data between caregivers in real time
  • Generate growth charts and percentile calculations using WHO standards
  • Provide age-appropriate milestone tracking and guidance
  • Generate AI-powered daily summaries and sleep predictions (paid plans)
  • Generate GP health reports (paid plans)
  • Send notification reminders you have opted into
  • Improve the Service through anonymised, aggregated analytics
  • Respond to support requests

We never sell your data. We never share your data with advertisers. We neveruse your child's data for marketing purposes.

Data Storage and Security

Your data is stored securely using Supabase, with databases hosted in Australia-region servers. All data is encrypted in transit using TLS 1.2+ and encrypted at rest. Authentication tokens are stored using your device's secure enclave (Keychain on iOS, Keystore on Android), not in plain storage.

We implement industry-standard security practices including row-level security policies, parameterised queries, and regular security reviews.

Third-Party Services

We use the following third-party services to operate BubDaze:

  • Supabase— Database hosting, authentication, and real-time sync. Your data is stored in Supabase's Australia-region infrastructure.
  • RevenueCat — Subscription and payment management. RevenueCat processes subscription status but does not have access to your tracking data.
  • Anthropic (Claude AI) — AI-powered features including daily summaries and sleep predictions. Only anonymised, aggregated tracking data is sent to generate insights. No personally identifiable information is shared with Anthropic.
  • Sentry — Error monitoring and crash reporting. Sentry receives anonymised crash data (device type, OS version, stack traces) to help us fix bugs. Your user ID may be attached to crash reports to help diagnose issues, but no tracking data or child information is sent to Sentry.
  • Apple / Google — App distribution and payment processing through the App Store and Google Play.

Your Rights

Under Australian Privacy law and the Australian Privacy Principles (APPs), you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your account and all associated data
  • Export your data in standard formats (CSV, PDF)
  • Opt out of non-essential communications
  • Withdraw consent for data processing at any time

To exercise any of these rights, contact us at privacy@bubdaze.com.au. We will respond within 30 days.

Children's Privacy

BubDaze is designed for parents and caregivers to track information about their children. The app is not intended for use by children. We collect child data (name, date of birth, health tracking data) only as provided by the parent or caregiver, and only for the purpose of providing the Service.

We take extra care to protect child data. It is never used for advertising, never shared with third parties for marketing, and is deleted promptly when an account is closed.

Deleting Your Data

You can delete your data in two ways:

Self-service (in the app)

  • Open BubDaze → More → scroll to the bottom → tap “Delete Account”
  • Confirm the deletion when prompted
  • Your account, profile, all children's data, tracking logs, and any uploaded photos will be permanently deleted within 30 days
  • Active subscriptions should be cancelled through the App Store or Google Play before deletion to avoid further charges

By request

  • Email privacy@bubdaze.com.au with the subject line “Delete my data”
  • Include the email address associated with your account
  • We will verify your identity and process the deletion within 30 days
  • You will receive a confirmation email once deletion is complete

Once deleted, your data cannot be recovered. If you only want to export your data before deleting, use the Data Export feature in the app (available on Plus and Premium plans) or request an export via email before requesting deletion.

Data Retention

We retain your data for as long as your account is active. If you delete your account, all personal data and tracking data is permanently deleted within 30 days. Anonymised, aggregated data that cannot be linked back to you may be retained for product improvement purposes.

Notifiable Data Breaches

In accordance with the Privacy Act 1988 (Cth) and the Notifiable Data Breaches (NDB) scheme, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) if we become aware of an eligible data breach that is likely to result in serious harm to any individual whose personal information is involved.

We maintain an incident response plan and will take prompt action to contain and assess any suspected breach, notify affected users within 30 days where required, and take steps to prevent future breaches.

Cookies and Website Analytics

The BubDaze website (bubdaze.com.au) uses essential cookies for authentication and session management. We do not use third-party advertising cookies or tracking pixels.

The mobile application does not use cookies. It stores session tokens securely on your device using platform-native secure storage mechanisms.

International Data Transfers

Your data is stored in Australia-region servers. Some third-party services (such as Anthropic for AI features and Sentry for crash reporting) may process data outside of Australia. Where this occurs, we ensure appropriate safeguards are in place, including contractual obligations that require these providers to protect your data to a standard comparable to Australian privacy law.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through a notice in the app. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).