Legal

Privacy Policy

Last Updated: August 30, 2026
Effective Date: August 30, 2026

1. Introduction

This Privacy Policy describes how Macca Design d.o.o. (“we,” “us,” or “our”) collects, uses, processes, and protects your personal information when you use the My Baby App mobile application (the “App”).

We are committed to protecting your privacy and ensuring transparency about our data practices. This Privacy Policy applies to all users of our App, available on both Android and iOS platforms.

Contact Information:

Company: Macca Design d.o.o.

2. Information We Collect

2.1 Personal Information

The only personal information we collect from users is:

  • Email Address: Used for user account creation, authentication, and communication purposes

2.2 Children’s Profile Information

For each child profile created in the App, we collect:

  • Birth Date: To provide age-appropriate content and recommendations

  • Height: For tracking growth and development

  • Weight: For tracking growth and development

  • APGAR Score: Medical assessment score from birth

  • Child’s Image: Optional profile picture for identification within the app

2.3 Family Members Information

For family member profiles, we only collect:

  • Email Address: To connect and share information between family members

2.4 App Usage Data

We may automatically collect certain technical information, including:

  • Device type and operating system

  • App usage statistics and performance data

  • Crash reports and error logs (which do not contain personal information)

2.5 Accounts Created Before You Sign Up

You can start using the App without creating an account. When you do, the App creates an anonymous account on your device at first launch so that anything you log has somewhere to be stored. That account holds no email address, no name and nothing that identifies you as a person — only the child data you choose to enter.

If you later register with an email address, the same account is kept and your existing data carries over. Nothing is re-entered and nothing is lost.

Anonymous accounts are deleted after 90 days without use. If an anonymous account is not opened for 90 days, we permanently delete it together with every child profile, activity, note and photo stored under it. Deletion runs on a periodic job rather than continuously, so in practice it happens within a couple of weeks after the 90-day point. This is irreversible and there is no way for us to restore the data afterwards.

The reason we delete is that an anonymous account cannot be recovered by the person who created it — there is no email address to sign in with — so keeping it indefinitely would mean storing a child's data that nobody can reach, correct or ask us to erase.

Register an email address if you want to keep your data. Registering removes the 90-day limit, and it is also the only way to get your data back if you lose or replace your phone.

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Core App Functionality

  • User account creation and authentication

  • Providing personalized content based on child’s age and development stage

  • Enabling family sharing features

  • Maintaining user preferences and settings

3.2 App Improvement

  • Analyzing app performance and usage patterns

  • Identifying and fixing technical issues

  • Improving user experience and app features

3.3 Communication

  • Sending important app updates or notifications

  • Responding to user inquiries and support requests

  • Managing paid plans and purchases

3.4 AI Features

The App includes several optional AI features: an assistant you can ask questions, short plain-language explanations of a report or a data point, and feeding suggestions based on what you have logged. All of them use the same provider and the same context described below, and all of them run only when you choose to use them — nothing is sent for processing in the background.

When you use one of these features, we send the following to Google’s Vertex AI service so that it can produce an answer:

  • Your question, as you typed it, or the report you asked to have explained

  • The child’s first name, date of birth, and birth height and weight if you have entered them

  • Up to the 250 most recent activities recorded for that child — for example feeds, sleep, diaper changes, solid foods, measurements and health entries

We do not send your email address, your account identifier, your payment information, or any photographs. These features only ever receive data for the one child whose profile is open at the time.

Processing takes place on Google Cloud infrastructure, which for this service is currently located in the United States. See Section 9 on international transfers. The assistant is subject to usage limits (currently 300 questions per month and 60 per day) which we enforce on our own servers.

If you would rather no child data was processed this way, simply do not use these features. Everything else in the App works without them.

3.5 Barcode Scanning

If you scan a product barcode while adding a food, the App sends the barcode number only to Open Food Facts, an independent open database of food products, to look up what the product is. No information about you, your account or your child is sent with it, and Open Food Facts is not told who is asking.

Results are cached on our servers so that a product already looked up does not need to be requested again.

3.6 Home Screen Widgets and Live Activities

If you add a widget to your Home Screen, or start a feed or sleep timer that shows on your Lock Screen, the App writes a small summary — the child's first name, the day's totals and any running timer — to a shared storage area on your own device so the widget can draw it. It stays on the device and is not sent to us or to anyone else.

Be aware of what this means in practice: anything shown on a widget or a Lock Screen timer is visible to whoever can see your screen, including while the phone is locked. Remove the widget, or do not use Lock Screen timers, if you would rather that information were not on display.

4. Information Sharing and Disclosure

4.1 No Sale of Personal Data

We do not sell, rent, or trade your personal information to third parties.

4.2 Limited Sharing

We may share your information only in the following circumstances:

  • With your consent: When you explicitly authorize us to share information

  • Family sharing: Email addresses are shared with connected family members within the app

  • Legal requirements: When required by law, regulation, or legal process

  • Service providers: With trusted third-party service providers who assist in app operation (subject to confidentiality agreements)

4.3 Business Transfers

In the event of a merger, acquisition, or sale of our company, user information may be transferred as part of the transaction, subject to the same privacy protections.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest

  • Secure authentication protocols

  • Regular security assessments and updates

  • Access controls and monitoring systems

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Specifically:

  • User account information: Retained until account deletion

  • Children’s profile data: Retained until profile deletion or account termination

  • Usage data: Typically retained for up to 24 months for analytics purposes

  • Anonymous accounts: Deleted, with all data under them, after 90 days without use — see Section 2.5

7. Your Rights and Choices

Under applicable data protection laws, including the GDPR, you have the following rights:

7.1 Access and Portability

  • Right to access your personal information

  • Right to receive a copy of your data in a portable format

7.2 Correction and Deletion

  • Right to correct inaccurate or incomplete information

  • Right to delete your personal information (“right to be forgotten”)

7.3 Processing Controls

  • Right to restrict or object to certain processing activities

  • Right to withdraw consent where processing is based on consent

7.4 How to Exercise Your Rights

To exercise any of these rights, please contact us at info@maccadesign.hr. We will respond to your request within 30 days.

8. Children’s Privacy

While our App is designed to help parents track their children’s development, we do not knowingly collect personal information directly from children under 16 years of age without parental consent. If we become aware that we have collected personal information from a child without proper consent, we will take steps to delete such information.

9. International Data Transfers

If you are located outside Croatia, please note that your information may be transferred to and processed in Croatia or other countries where our service providers are located. We ensure that any such transfers comply with applicable data protection laws and include appropriate safeguards.

10. Paid Plans

The App is free to download and free to use for one child on one account. Paid plans (currently Premium and Professional, available monthly or annually, plus a one-time lifetime purchase and optional consumable AI assistant top-ups) unlock additional features. Purchases are made through the Apple App Store or Google Play, and are processed by them — we never see or store your card details.

10.1 Subscription Data

For paid plans and purchases, we may collect and process:

  • Payment information (processed by third-party payment providers)

  • Subscription status and renewal dates

  • Billing history

10.2 Auto-Renewal

Our subscriptions automatically renew unless cancelled. You can manage or cancel a subscription through your device’s app store settings; the one-time lifetime purchase does not renew.

11. Third-Party Services

Our App may integrate with third-party services for analytics, crash reporting, advertising, payment processing, or other functionality. For example, we may use Firebase (Google) for analytics and crash reporting, and Google AdMob / Google Mobile Ads to display advertisements, including rewarded ads that provide in-app benefits (such as temporarily disabling ads). These providers may collect information such as device identifiers (e.g., advertising ID/IDFA), IP address, app usage and interaction data, and other technical data to provide, measure, and improve their services, and (where permitted) to personalize ads.

Where required by law (e.g., in the EEA/UK), we will request your consent before using cookies/identifiers for personalized advertising or analytics, and you may withdraw your consent at any time through your device settings and/or in-app settings (where available). These third parties have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of third-party services.

11.1 Named Processors

The providers below process personal data on our behalf. This list covers the services that receive information about you or your child; it is not a list of every library the App uses.

  • Google Firebase (Google Ireland Limited / Google LLC) — hosts your account and all child data you enter, and provides authentication, file storage, push notifications, analytics and crash reporting.

  • Google Vertex AI (Google LLC) — processes AI assistant questions and the child context described in Section 3.4. Only used when you ask the assistant a question.

  • Google AdMob / Google Mobile Ads (Google LLC) — serves advertising in the free version, including rewarded ads.

  • Open Food Facts — receives a product barcode number when you scan one, so it can return what the product is. It receives nothing about you or your child.

  • RevenueCat, Inc. — manages subscription entitlements and purchase validation. It receives a purchase receipt and an anonymised app user identifier, not your card details.

  • Apple and Google Play — process all payments. We do not receive your payment card information from either of them.

11.2 New Features

We release some features gradually rather than to everyone at once. Where a feature involves data processing that is not described in this policy, we will update the policy before that feature reaches you.

12. Content Disclaimers

12.1 Informational Purpose Only

All content in our App, including:

  • Food ingredient information and nutritional data

  • Recipe suggestions and serving guidelines

  • Parenting tips and advice (“Good to Know” articles)

  • Activity suggestions

is provided for informational and inspirational purposes only and is not written by medical or nutritional experts.

12.2 No Medical Advice

The App does not provide medical, health, or professional advice. Always consult with qualified healthcare professionals regarding your child’s health, nutrition, and development.

12.3 AI-Generated Answers

Answers, explanations and suggestions produced by the App's AI features are generated automatically by a language model. They are not written or reviewed by a clinician, they can be wrong or incomplete, and they must never be relied on for a decision about your child’s health, feeding or safety. Treat an answer as a summary of what you yourself have logged, not as advice. If something concerns you, contact a healthcare professional.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or app features. We will notify you of any material changes by:

  • Posting the updated policy in the App

  • Sending an email notification to registered users

  • Providing in-app notifications

The “Last Updated” date at the top of this policy indicates when the most recent changes were made.

14. Legal Basis for Processing (GDPR)

For users in the European Union, our legal basis for processing personal information includes:

  • Consent: For optional features and marketing communications

  • Contract Performance: For providing app services and subscription management

  • Legitimate Interests: For app improvement, security, and customer support

  • Legal Obligation: For compliance with applicable laws and regulations

15. Complaints and Contact Information

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us at:

Email: info@maccadesign.hr

Company: Macca Design d.o.o.

For users in the EU, you also have the right to lodge a complaint with your local data protection authority.

16. Compliance with Platform Requirements

This Privacy Policy complies with the requirements of:

Croatian data protection laws

Apple App Store guidelines

Google Play Store policies

General Data Protection Regulation (GDPR)

Website cookies and analytics

This section covers mybabyapp.io, the website. The sections above cover the MyBaby mobile app.

Essential cookies. When you first arrive we store a small first-party cookie (mb_src) recording which channel you came from — for example a search engine, a link on another site, or an AI assistant. It contains no personal data, no identifier, and nothing that can be linked back to you. We use it so we can tell which pages are worth writing.

Your consent choice. Your cookie preferences are stored in your browser's local storage (mb_consent) together with the date you made the choice, so we can honour it and demonstrate that it was given. You can change or withdraw it at any time using the "Cookie settings" link in the footer.

Analytics. With your permission we use Google Analytics 4 to understand how the site is used in aggregate. It runs in Google Consent Mode, which means all analytics and advertising storage is switched off until you agree, and no analytics cookies are set before then. If you decline, Google Analytics stores nothing on your device. We do not use advertising or marketing cookies on this website unless you explicitly turn them on.

Server logs. Like any website, our host records requests — the page requested, the time, and technical information such as the browser type. We use these to keep the site working and to see which automated crawlers visit.

Links to the app stores. Choosing a download link sends you to the Apple App Store or Google Play, each with its own privacy policy, and passes a label identifying which part of our site you came from. It does not pass any information about you.

Contact. Questions about this section: info@maccadesign.hr.