Draft for legal review. This document hasn’t been checked by a lawyer and isn’t in force yet. Don’t rely on it until this notice is removed.
BabyBooBoo is a shared planner for what to buy before a baby arrives. This policy explains what we collect, why, where it is kept, who can see it, and the choices you have. It is written to meet the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Who we are
BabyBooBoo is run by [operator’s legal name, ABN if any] (“we”). For anything about your privacy, email [privacy contact address].
What we collect
- Your account: your email address, and the name you choose to show to your household. If you sign in with Apple or Google, we receive your email address and, the first time only, your name from them.
- Your household’s list: the due date, an optional budget, baby shower date, the names you choose for the baby and for the weeks line, categories, sub-categories, products, shops, links, prices, what was purchased or gifted, who gave gifts, notes and buy-by dates.
- Who changed what: each change records which member made it and when, and the household’s activity feed lists recent changes by each member.
- Links you save: when you add a product link, our server reads that page and keeps a copy of the product photo.
- If you use the social features: who follows your household’s list and whose lists you follow, posts you share to the feed (the item, product, shop, photo and an optional caption), hearts, comments, direct messages, the people you block, reports you make, your notifications, and suggestions your household has hidden.
- On your device: your sign-in session, your light or dark choice, the last household you opened, edits waiting to be sent while you’re offline and, on a phone, whether reminders are on.
We don’t collect your location, contacts or payment details, we don’t use advertising or analytics trackers, and we don’t sell or rent personal information.
Pregnancy information is sensitive
A due date tells others that someone is pregnant, which can be health information, a kind of sensitive information under the Privacy Act. We collect it only with your consent, which you give by entering it, and use it only to run the planner (the countdown, the pathway and buy-by dates). You can change or delete it at any time.
How we use it
- To run the app: show your list, work out costs and dates, and sync it between the members of your household.
- To sign you in: we email you a one-time code or link.
- To fill in product details from links you save.
- If product filing is turned on: the product title, brand, shop and link, and your household’s sub-category names, are sent to Anthropic’s Claude service to suggest where the product belongs. Nothing else about you or your household is sent.
- If “Similar to this” is turned on and you ask for it: the item’s name, category and timing, and the products and shops you’re considering for it, are sent to Claude to suggest similar products. Prices, budgets, notes, names and the due date are not sent.
- To suggest items: from the starter list, based on what your household has changed lately, and from products shared by lists you follow. This happens inside BabyBooBoo; nothing is sent elsewhere.
- To tell you about follow requests, hearts, comments and messages in the app.
- To keep the service secure, such as limiting how often codes and links can be used.
Who can see it
Only the members of your household can see its full list, its members and its activity. A household member can invite someone by code or link; anyone who joins can see and change the whole list. Owners can remove members, and anyone can leave. Product photos are kept at web addresses that aren’t listed anywhere, so only someone given the address can open one.
Followers. Nothing is public or searchable. Following is off until your household makes a follow link, and each person who asks must be approved by a member. Approved followers see your categories and items, whether each is purchased or gifted, and the chosen product, shop and photo. They never see prices, what you paid, your budget, your due date, notes or who gave a gift. Pausing following hides your list from all followers, and you can remove any follower at any time.
The feed. Nothing is posted unless you choose “Share to the feed” for an item. Your household’s members and approved followers see the post, its hearts and its comments. Posts never include prices or who gave a gift.
Messages. You can message people you share a household with, your approved followers, and the people whose lists you follow. A conversation can be read only by its two people. If you block someone, they can’t message you and the conversation is hidden for you both; they aren’t told.
Where it is kept, and the companies that help us
- Supabase stores the data and runs sign-in, in its Sydney (Australia) region.
- Vercel serves the website. Requests may be handled outside Australia.
- Apple and Google deliver the phone apps and, if you choose them, sign you in. Reminders are scheduled on your phone; their content isn’t sent to us.
- Anthropic (United States), only if product filing or “Similar to this” is turned on, as described above.
Where information goes overseas, we take reasonable steps under Australian Privacy Principle 8 to make sure it is handled consistently with the Australian Privacy Principles.
How long we keep it
We keep your household’s list while the household exists, and its activity feed for a year. You can delete your account at any time in Setup. That deletes your name, email and sign-in straight away, and any household only you belong to, with its list and activity. A household you share stays with the other members; your name remains only in its past activity entries. Deleting your account also deletes your follows, hearts, comments, direct messages (for both people in each conversation), blocks and notifications. Posts belong to the household that shared them and stay until a member deletes them. Notifications you caused keep your name but no longer link to your account. Reports are kept for [report retention period] so we can act on them. Product photos of deleted households are removed within [clean-up period]. Backups are overwritten within [backup period].
Your choices and rights
- See and correct your information in the app at any time, or ask us for a copy.
- Delete items, leave a household, or delete your account in Setup.
- Turn reminders off on your phone in Setup.
- Pause following, remove a follower or stop following a list on the Friends page; delete a post or a comment; mute, block or report someone in Messages; report a comment in the feed.
- Complain to us at [privacy contact address]. We’ll reply within 30 days. If you’re not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Security and data breaches
Data is encrypted in transit and at rest. Each household’s rows are protected in the database so only its members can reach them. If a data breach is likely to cause serious harm, we’ll tell you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.
Children
BabyBooBoo is for adults planning for a baby. It isn’t meant for anyone under 18.
Changes to this policy
If we change this policy in a way that matters, we’ll tell you in the app before the change takes effect.