Privacy Policy

Effective Date: March 27, 2026

Last Updated: March 27, 2026

Lucas: Simple Baby Tracker ("Lucas", "we", "our", "the app") is committed to protecting the privacy of our users and the data they entrust to us about their children.

1. Information We Collect

We collect the following information that you voluntarily provide:

• Account Information: Display name and email address (when you create an account for cloud sync)
• Baby Profile Data: Baby's name, date of birth, gender, photo (optional), blood type (optional), allergies (optional), pediatrician information (optional)
• Tracking Data: Feeding records, sleep records, diaper changes, pumping sessions, activities, mood entries
• Medical Data: Growth measurements, health records (symptoms, temperature, medications), immunization records, doctor visit notes, developmental milestone tracking

2. How We Store Your Data

• Locally: All data is stored on your device using Apple's SwiftData framework, encrypted by iOS device encryption.
• Cloud (Optional): If you create an account, data is synced to Microsoft Azure cloud services (Cosmos DB) with encryption at rest and in transit (TLS 1.3).
• Photos: Baby photos are stored locally on your device. If cloud sync is enabled, photos are uploaded to Azure Blob Storage with encryption.

3. How We Use Your Data

Your data is used solely to provide the baby tracking functionality of the app. Specifically:

• Displaying tracking records, charts, and insights to you
• Generating PDF reports for your pediatrician
• Syncing data across your devices (if you opt in)
• Sharing data with caregivers you explicitly invite
• Sending reminder notifications you configure

4. What We Do NOT Do

• We do NOT sell your data to anyone, ever.
• We do NOT share your data with third parties.
• We do NOT use advertising or ad-tracking SDKs.
• We do NOT use analytics that track individual users.
• We do NOT use your data for machine learning or AI training.

5. Data Sharing (Caregiver Feature)

You may invite other users (caregivers) to access your baby's data. This is entirely under your control:

• Only you (the baby profile owner) can invite caregivers
• Caregivers get read/write access to tracking data only for babies you share
• You can revoke a caregiver's access at any time
• Caregivers cannot delete baby profiles or manage other caregivers

6. Children's Privacy (COPPA)

Lucas does not collect data from children under 13. The app collects data about children (babies/toddlers) as entered by their parents or authorized caregivers. The app is intended for use by adults only.

7. Data Export

You can export all your data at any time:

• CSV export of all tracking data
• PDF reports for medical professionals

8. Data Deletion

You have the right to delete all your data:

• In the app: Settings > Account > Delete Account & All Data
• This permanently deletes all data from your device and our servers
• Deletion is completed within 30 days

9. Data Retention

We retain your data for as long as you have an active account. When you delete your account, all data is permanently removed from our servers within 30 days.

10. Security

• All data in transit is encrypted with TLS 1.3
• All data at rest is encrypted (iOS device encryption + Azure server-side encryption)
• Authentication tokens are stored in the iOS Keychain
• API access is rate-limited and authenticated with JWT tokens

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy in the app and updating the "Last Updated" date.

12. Contact Us

If you have questions about this privacy policy or your data, please contact us at:

Email: privacy@ilbg.co