Privacy Policy

Last updated: Mar 5, 2026.

At Note Baby, your family's trust is our priority. We are committed to protecting the sensitive data you share about your children and family life.


We collect your data to provide and improve our services. This includes personal information, usage data, and any content you share within the app. We never sell your data to advertisers.

This Privacy Notice (“Notice”) explains how Note Baby (“we,” “us,” or “our”) collects, uses, discloses, processes, stores, and protects your personal information when you access or use our mobile application and related services (collectively, the “Services”). By using our Services, you acknowledge that you have read, understood, and agree to the practices described in this Notice. If you do not agree with our policies or practices, please discontinue use of the Services immediately. For any questions, concerns, or requests regarding this Notice or your personal data, please contact us at mailto:privacy@notebaby.app or our Data Protection Officer at mailto:dpo@notebaby.app.

1. Summary of Key Points

This summary highlights essential aspects of our data practices. For full details, please review the complete Notice below. What We Collect: We collect personal information you provide directly (e.g., name, email) and automatically (e.g., IP address, device data). Sensitive Data: We do not process sensitive personal information (e.g., race, religion, health data). Third-Party Sources: We may receive limited data from public sources, marketing partners, or social platforms. Why We Process Data: To deliver, improve, and secure our Services; communicate with you; prevent fraud; and comply with legal obligations. Sharing: We share data only in specific circumstances—such as with service providers, during business transfers, or as required by law. Security: We implement industry-standard technical and organizational safeguards, though no system is 100% secure. Your Rights: Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your data, and to withdraw consent. International Transfers: Your data may be transferred to and processed in countries outside your residence, including the United States. Children: Our Services are not intended for individuals under 18, and we do not knowingly collect their data.

2. Information We Collect
A. Personal Information You Provide

We collect information you voluntarily submit when: Creating an account or using social logins (e.g., Facebook, X) Making purchases or providing payment details Contacting customer support Participating in surveys, promotions, or feedback initiatives This may include: Name, email address, profile picture Payment information (processed securely via RevenueCat; see their Privacy Policy) Communications you send to us Note: All information you provide must be accurate and up to date. Please notify us of any changes.

B. Automatically Collected Information

When you use our Services, we and our third-party partners may automatically collect: Device identifiers (e.g., IP address, device model, OS version) Usage data (e.g., pages visited, features used, session duration) Location data (inferred from IP address, if enabled) Log files and diagnostic information We also use cookies and similar technologies (e.g., pixels, local storage) to enhance functionality, analyze trends, and personalize your experience. You can manage cookie preferences through your browser settings.

3. How We Use Your Information

We process your personal information only when we have a valid legal basis, such as: Contractual necessity (to provide the Services you requested) Legitimate interests (e.g., improving user experience, preventing fraud, internal analytics) Legal compliance (e.g., tax, regulatory, or court requirements) Your consent (where required by law) Specific purposes include: Operating, maintaining, and improving our Services Processing transactions and managing subscriptions Responding to your inquiries and providing support Detecting, preventing, or investigating security incidents or fraudulent activity Sending service-related communications (e.g., updates, security alerts) With your permission, sending promotional messages (you may opt out anytime)

4. Sharing of Your Information

We do not sell your personal information. We may disclose it only in the following circumstances: Service Providers: Trusted partners who assist with hosting, analytics (e.g., Google Analytics), payment processing (via RevenueCat), customer support, or marketing. These parties act on our instructions and are contractually bound to protect your data. Business Transfers: In connection with a merger, acquisition, bankruptcy, or sale of assets, your data may be transferred as a business asset. Legal Obligations: If required by law, regulation, subpoena, or to protect our rights, safety, or property—or that of our users or the public. With Your Consent: When you explicitly authorize sharing (e.g., social media integrations). Google Analytics: We use Google Analytics to understand usage patterns. You may opt out via Google’s opt-out tool or visit Network Advertising Initiative for broader ad tracking controls.

5. Social Media Logins

If you sign in using a third-party platform (e.g., Facebook, X), we receive basic profile information (e.g., name, email, profile photo) as permitted by your privacy settings on that platform. We do not control how these platforms use your data—please review their privacy policies separately.

6. International Data Transfers

Our Services are operated from the Philippines, but data may be transferred to, stored in, and processed in other jurisdictions—including the United States—where our servers (e.g., AWS) and service providers are located. If you reside in the EEA, UK, or Switzerland, please note that these countries may not offer equivalent data protection laws. Where required, we rely on approved transfer mechanisms (e.g., Standard Contractual Clauses) and ensure appropriate safeguards are in place.

7. Data Retention

We retain your personal information only as long as necessary to: Fulfill the purposes outlined in this Notice Comply with legal, tax, or accounting obligations Resolve disputes or enforce agreements When no longer needed, we securely delete or anonymize your data. Backups may be retained temporarily but are isolated from active processing.

8. Data Security

We implement reasonable administrative, technical, and physical safeguards—including encryption (TLS/SSL), access controls, and regular security audits—to protect your data. However, no internet transmission or electronic storage method is 100% secure. You use our Services at your own risk and should take precautions (e.g., strong passwords, updated software).

9. Children’s Privacy

Our Services are not directed to individuals under 18 years of age, and we do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected such data, we will promptly deactivate the account and delete the information. Please contact mailto:dpo@notebaby.app if you believe a child has provided us with personal data.

10. Your Privacy Rights

Depending on your location, you may have the right to: Access, correct, or update your personal information Request deletion of your data Restrict or object to certain processing activities Withdraw consent (without affecting prior lawful processing) Receive your data in a portable format (where applicable) Opt out of marketing communications To exercise these rights, contact us at mailto:privacy@notebaby.app or mailto:dpo@notebaby.app. We will respond within 30 days (or as required by local law). Note: Some rights may be limited—for example, if retention is required by law or necessary to complete a transaction.

11. Do Not Track (DNT)

Our Services do not respond to Do Not Track signals from browsers or devices, as there is currently no industry-wide standard for DNT recognition. We will update this Notice if standards evolve.

12. Regional Disclosures

Australia & New Zealand We comply with the Privacy Act 1988 (Australia) and Privacy Act 2020 (New Zealand). You have the right to request access to or correction of your personal information. Complaints may be lodged with: Office of the Australian Information Commissioner (oaic.gov.au) Office of the New Zealand Privacy Commissioner (privacy.org.nz)

13. Changes to This Notice

We may update this Privacy Notice periodically to reflect changes in our practices or legal requirements. The “Last Updated” date at the top will indicate revisions. Material changes will be communicated via in-app notice or email. We encourage you to review this Notice regularly.

14. Contact Us

For questions, requests, or complaints regarding this Notice or your data, please contact: Note Baby Data Protection Officer Email: dpo@notebaby.app.