Privacy policy — NurtureLog
- App
- NurtureLog — listed on the App Store as “NurtureLog: Baby Tracker”
- App IDs
- iOS: com.coroutinelab.nurturelog · Android: com.nurturelog.app
- Developer
- PhomoTech
- Company
- CoroutineLab
- Website
- https://nurturelog.coroutinelab.com
This privacy policy covers the NurtureLog apps for iPhone and Android. NurtureLog is developed by PhomoTech and published by CoroutineLab ("we", "us"). It helps parents and carers log a baby’s feeds, nappies, sleep and health, share that log with the rest of the household, and keep track of appointments and vaccinations.
We are based in the United Kingdom and follow the UK GDPR and the Data Protection Act 2018. This policy explains what data the app handles, where it goes and what you can do about it.
The short version
- You can use NurtureLog without an account. Your logs then stay on your phone, and we never see them.
- If you create an account, your household’s logs are stored in Google Firebase so every carer’s phone stays in sync.
- Usage analytics are off until you agree to them, and they never include what you log.
- We have no advertising, we don’t track you across other apps, and we never sell your data.
- You can download or delete everything from Settings → Privacy and data.
What stays on your phone
Everything you log is first saved in a private database on your device:
- Baby details you enter: name, date of birth, sex, gestation, birth weight and feeding method.
- Logs: feeds, bottles, pumping, nappies, sleep, temperatures, medicines, jaundice checks, growth, notes, milestones, appointments and vaccinations, with who logged them and when.
- Your own wellbeing check-ins, if you use them: mood, recovery and your medicines. These stay on your phone and are never synced, unless you choose to share a mood check-in with your partner.
- Your settings, such as reminders, night mode and units.
If you use NurtureLog without an account (“on this phone only”), this data never leaves your device.
What leaves your phone
Your account and household sync (only if you create an account). When you sign in with your email address, with Google or (on iPhone) with Apple, we store your account (email or sign-in ID, your name, country and role in the household) and your household’s baby details and logs in Google Firebase (Cloud Firestore, London region). This is what lets your partner and other carers you invite see the same log in real time. Invites and account changes are handled by our Firebase Cloud Functions.
Notifications. To send reminders and tell you when another carer logs something, your phone registers with Firebase Cloud Messaging and Apple Push Notification service or Google, which gives us a device token. The token identifies the app install, not you.
App integrity. Firebase App Check confirms requests come from the genuine NurtureLog app, using Apple App Attest on iPhone and Google Play Integrity on Android. It sends a token about the app install, not about you.
Subscriptions. NurtureLog Plus is sold through the App Store or Google Play. Apple or Google handle the payment; we never see your card details. We use Superwall to show the subscription screen and learn which version works best. Superwall receives your subscription status, which screens you saw, and a few details used to personalise the screen: your first name, your baby’s name, your partner’s name, how many days you’ve tracked and how many entries you’ve logged. It never receives your logs themselves.
Usage analytics (only if you agree). If you turn on “Share usage”, the app sends usage events to PostHog (EU cloud, Germany): which screens and features you use, linked to a random account ID, plus basic details such as plan, country, household size, your baby’s age band and feeding method. Events never contain names, notes or the content of your logs. Session recording is off. You can turn analytics off at any time in Settings → Privacy and data.
Research sharing. The app has a “Research sharing” switch, which is off by default. No data is shared for research today. If we ever start a study, we will explain it and ask you first.
Export and share. If you download your data or create a PDF report, NurtureLog makes the file on your phone and opens the share sheet. It goes only where you send it.
Calendar. If you add an appointment to your calendar, NurtureLog writes that event to your phone’s calendar. It can’t read your other events.
Health information
Baby logs and your wellbeing check-ins are health data, a special category under the UK GDPR. We process them only with your explicit consent, which you give when you first add them, and only to provide the features you use. We never use health data for advertising or sell it.
Why we use your data, and our lawful basis
- To run the app and sync it across your household: contract.
- To send the reminders and alerts you switch on: contract.
- To show and manage subscriptions: contract.
- To improve NurtureLog with usage analytics: your consent.
Who we share it with
Only the carers in your household and these service providers, who process data for us under contract: Google (Firebase), Apple and Google Play (payments and notifications), Superwall (subscription screen) and PostHog (usage analytics, only with your consent). Where data is processed outside the UK, we rely on the safeguards UK law requires, such as the UK International Data Transfer Addendum.
Permissions and why we ask
- Notifications: for feed, medicine and appointment reminders, health alerts, and updates when another carer logs something.
- Face ID or Touch ID (iPhone, optional): to lock NurtureLog. The check happens on your phone; we never receive biometric data.
- Calendar, add events only (iPhone, optional): to add appointments and vaccinations you choose to your calendar.
- Internet: for account sync, subscriptions and, if you agree, analytics.
NurtureLog does not access your contacts, camera, microphone, location or photos.
Backups
On Android, NurtureLog opts out of Android’s automatic backup. On iPhone, your local data can be included in your iCloud or computer backup if you have device backups turned on; Apple manages those backups. With an account, your synced data is also kept in Firebase.
Your choices
- Keep data on this phone only: Settings → Privacy and data. This turns off backup and carer sync.
- Turn usage analytics on or off: Settings → Privacy and data.
- Download all your data as JSON and PDF: Settings → Privacy and data.
- Turn off any notification type in Settings, or in your phone’s settings.
How long we keep data
Data on your phone stays until you delete it or remove the app. Synced data stays while your account is open. When you delete your account, we delete your data within 30 days, and from our backups within 90 days. Analytics events are kept only as long as they help us improve the app.
Deleting your data and your rights
Delete your account and all its data in the app under Settings → Privacy and data → Delete account and all data. You can also ask us to access, correct, export or delete your data, to restrict or object to how we use it, and to withdraw consent at any time. Email nurturelog@coroutinelab.com and we will reply within one month. If you are unhappy with how we handled your data, you can complain to the Information Commissioner’s Office (ico.org.uk) or your local data protection authority.
Children
NurtureLog is for parents and carers, not for children to use. It holds information about babies only because their parents or carers enter it. We do not knowingly collect data from children using the app themselves.
Security
Local data sits in the app’s private storage, which other apps can’t read. Everything sent over the network uses an encrypted (HTTPS) connection. Firebase security rules limit each household’s data to its own carers.
Changes to this policy
When we update this policy, we change the "Last updated" date above. If a future version of NurtureLog collects a new kind of data, we will update this policy before that version is released.
Contact
Email: nurturelog@coroutinelab.com
Developer: PhomoTech · Company: CoroutineLab