Privacy & Security
Your Data, Your Control
Parent photos are used only to run your prediction and are deleted from our servers a few hours after it finishes — never before the prediction completes, and at least 4 hours after upload. The prediction itself — the report and the generated images — is removed from your account after 48 hours by default; you can choose 24 hours, 7 days or 30 days in Settings. Scientific mode sends no photos at all. Face ID / Touch ID app lock. Screen-recording and mirroring blocked. Jailbroken devices refused. Row Level Security at the database engine. Encrypted family sync. No tracking, no ads, no data selling.
Security Features
Multiple layers of protection built into every aspect of the app
What Happens to Your Photos
Parent photos are used only to run your prediction and are deleted from our servers a few hours after it finishes — never before the prediction completes, and at least 4 hours after upload. The prediction itself — the report and the generated images — is removed from your account after 48 hours by default; you can choose 24 hours, 7 days or 30 days in Settings. Scientific mode sends no photos at all. Photos are never used for advertising or AI model training.
Offline-First Architecture
Local-first design: logging a feed, a symptom or a contraction writes to your device first and works with no signal at all.
Biometric Authentication
Face ID and Touch ID with configurable lock timeouts. Your biometrics are handled by Apple's Secure Enclave and never reach us — the app only ever receives a yes or no.
Jailbreak Detection
Blocks compromised devices entirely — no bypass option. Protects against disabled sandboxing, malware, encryption bypass, and code injection on jailbroken devices.
Screenshot & Recording Protection
App blocks usage while screen recording is active. Screenshots trigger privacy warnings on sensitive screens. App preview blurred in multitasking view.
Encrypted in Transit and at Rest
Encrypted in transit and at rest. Credentials are stored securely in the iOS Keychain on your device.
Data Protection
Database-level isolation and encryption for your family's data
Row Level Security
Supabase RLS enforces data isolation at the PostgreSQL database engine level. Even if application code had a bug, the database itself blocks unauthorized access.
Encrypted Family Sync
Family data is encrypted in transit and at rest. Row Level Security at the PostgreSQL level ensures only authorized family members can access shared data.
No Tracking, No Ads
No advertising, attribution or product-analytics SDKs. No cross-app tracking, no device fingerprinting — our privacy manifest declares zero tracking domains. Crash reporting runs through Firebase Crashlytics; Firebase Analytics is switched off, and our own product analytics are first-party and stay in our backend. We earn from credit purchases and from supporters — never from your data.
Your Rights and Our Safeguards
What you can do from inside the app, and what protects your data underneath
Encryption and App Lock
Face ID / Touch ID app lock; data encrypted in transit; iOS data protection at rest. No advertising, attribution or product-analytics SDKs — crash reporting uses Firebase Crashlytics and Firebase Analytics is switched off.
Your Rights, Everywhere
You can delete your account from inside the app (the policy commits to removing personal data within 30 days) and export your account data; refunds are handled through Apple. We extend the same rights to everyone who uses ProbaBaby, not just EU residents: access, export, erasure, and objecting to or restricting processing. For anything the in-app export does not cover, email us and we will respond within 30 days.
We Never Sell Your Data
There is no data sale to opt out of: we do not sell or share your personal information, and we run no advertising, attribution or product-analytics SDKs. ProbaBaby is paid for by credit purchases and by supporters — never by your data.
Your Data Rights
Full control over your personal information — extended to all users worldwide
Access & Export
Export your account data from the app in JSON or plain text, free of charge. For anything the export does not cover, email us and we will respond within 30 days.
Data Portability
In-app export covers your account details, credit balance and recent predictions, in JSON or plain text. For your pregnancy, baby and visit records, the richer route is the PDF suite — Doctor Visit and Pediatrician Visit summaries, shareable by QR link that expires in 24 hours and opens once.
Permanent Deletion
Delete your account and your data from the app, behind a two-step confirmation. Deletion runs as a server-side sweep across your records and then removes the account itself; all personal data is removed within 30 days. It cannot be undone — export anything you want to keep first.
Privacy FAQ
Common questions about how we protect your data
Parent photos are used only to run your prediction and are deleted from our servers a few hours after it finishes — never before the prediction completes, and at least 4 hours after upload. The prediction itself — the report and the generated images — is removed from your account after 48 hours by default; you can choose 24 hours, 7 days or 30 days in Settings. Scientific mode sends no photos at all. While the run is in flight, photos sit in a private, non-public storage bucket, and every automatic deletion is written to an audit log.
Row Level Security at the PostgreSQL level means an ordinary signed-in session can only ever read its own rows — so one user can never reach another's data, even if application code had a bug. Day to day we work from anonymized, aggregated metrics. A small number of admin tools can act on an individual account for support, refunds and account deletion; those actions are role-gated and logged.
Your password is never stored in readable form — authentication is handled by Supabase Auth, which stores a one-way hash. Sensitive data is encrypted in transit and at rest. Some data is reachable by our systems for features to work (family sharing logic, for example), but always behind PostgreSQL Row Level Security, so only authorized users can read it.
We never sell your data. Everything that touches it is infrastructure: backend and storage, the AI models that read the photos and generate the baby images in the photo modes, Apple StoreKit for payments, crash reporting, and Google Sign-In if you choose it. Our Privacy Policy names each processor. Firebase Analytics is switched off. No advertising, attribution or product-analytics SDKs; no marketing partners.
Profile → Delete Account, behind a two-step confirmation. Deletion runs as a server-side sweep across your records and then removes the account itself; all personal data is removed within 30 days. It cannot be undone — we recommend exporting anything you want to keep first.
Multiple layers protect you. Data is encrypted at rest, so stolen storage is unreadable ciphertext. Row Level Security blocks cross-user data access. Encryption in transit protects your sessions. If a breach ever affected your data, we would notify affected users without undue delay.
Parent photos are never used to train AI models: the photo-analysis step runs under paid-tier API terms behind an explicit consent box, and Scientific mode sends no photos. Our Privacy Policy names each processor, and the image-generation providers operate under API terms that restrict training use as well.
Your logs are written locally first, so the app works with no signal. What syncs is your tracking data, so your family and your other devices stay in step — plus first-party usage events that record which action happened, never the content of your journal, photos, measurements, symptoms or notes.
If Face ID is enabled, your data is biometric-protected. Use Apple's Find My to erase the device remotely. If cloud sync is enabled, your data is backed up (encrypted) and will restore to a new device when you sign in.
No. We never share your data with employers, insurance companies, pharmaceutical companies, advertisers or data brokers. The only third parties that ever touch your data are the essential infrastructure providers named in our Privacy Policy — backend and storage, the prediction models, App Store payments and crash reporting — none of which have advertising, insurance or employment relationships. Your pregnancy data is never monetized.
Your Privacy, Guaranteed
Download ProbaBaby and track your pregnancy on an app that stores as little as it can: parent photos deleted a few hours after your prediction, the prediction itself clearing after 48 hours by default, a Face ID app lock, vaccination schedules covering 240 countries and territories, and an emergency number for every one of the 128 countries in the app's region list.
- Free to download
- No subscription
- 32 free tools