Privacy Policy

Effective October 1, 2026

This Privacy Policy explains how Graham Gnall ("Baby Soup," "we," "us") collects, uses, stores, and shares information when you use the Baby Soup iPhone app and this website (together, the "Service").

1. Information we collect

Information you give us

• Account information. Your email address, used to sign in with a one-time code. We don't use passwords.
• Child information. The name and birthdate of each child you add. Birthdate is used to show your child's age on each moment.
• Moments. Audio recordings, text you type, when each moment was captured, whether it's a note or a recording, and which child it's about.
• Transcripts. The text your iPhone produces from a recording, including any corrections you make and whether you've confirmed it.
• Vocabulary. Names, nicknames, and words you correct in transcripts, which the app uses to improve future transcripts.

Information collected automatically

• Technical metadata needed to store and sync your moments, such as file sizes, recording lengths, waveform data used to draw recordings, and timestamps.
• Server logs. Our cloud provider keeps standard logs when the app connects to it, which can include your IP address, device and request information, and the time of the request.
• Website logs. When you visit this website, our website host keeps standard logs, which can include your IP address, browser and request information, and the time of the visit.

What we don't collect

The app doesn't include advertising, analytics, or third-party tracking tools. We don't collect your location, contacts, or photo library. We don't use cookies on this website.

2. How we use information

• To provide the Service: saving, syncing, and restoring your moments across installs and devices.
• To sign you in and keep your account secure.
• To produce your data export when you ask for one.
• To respond to you when you contact us.
• To keep the Service working and fix problems.
• To comply with legal obligations.

We don't sell your personal information, use it for advertising, or use your content to train machine learning or AI models.

3. Transcription

Transcription uses Apple's speech recognition and runs entirely on your iPhone. Recordings are never sent to Apple, to us, or to anyone else for transcription. Your iPhone may download speech recognition models from Apple the first time you use the feature. That download doesn't include any of your recordings.

4. Where your information is stored

• On your device. Moments are saved on your iPhone as soon as you capture them. Depending on your settings, your iPhone's own iCloud or computer backups may include the app's data.
• In our cloud. Moments, recordings, transcripts, and account and child information are backed up to servers operated by our infrastructure provider, Supabase, in the United States (US East, North Virginia).

Data is encrypted in transit and stored with our provider's encryption at rest. It is not end-to-end encrypted, which means it can be read on our servers. Access controls separate each family's data from every other family's. We access your content only when operating the Service requires it, for example to fix a problem you report, or when required by law.

5. How we share information

We share information only in these cases:

• Service providers that run the Service for us: Supabase, which hosts your data and sends sign-in emails, and Vercel, which hosts this website. They may use your information only to provide services to us.
• Legal reasons, when disclosure is required by law.
• Business transfers. If Baby Soup is involved in a merger, acquisition, or sale of assets, your information may be transferred, and this policy will continue to apply to it.

6. Retention and deletion

• Deleting a moment moves it to Recently deleted for 7 days, where you can restore it. After 7 days, the next time you open the app, the moment and its recordings and transcripts are permanently removed from your device and our servers. You can also remove one sooner with Delete now. Deleted moments aren't included in exports.
• Deleting your account. Email us at support@babysoup.app from the address you sign in with. We'll delete your account, your children's records, and all associated moments, recordings, and transcripts from our servers within 30 days.
• Removing the app deletes the copy on your device but not the copy in our cloud.

Before deleting your account, we recommend exporting your data. Once deleted, it can't be recovered.

7. Your choices and rights

• Access and portability. Export all your moments, original recordings, and transcripts from Settings at any time, for free.
• Correction. Edit transcripts and text in the app.
• Deletion. Delete individual moments in the app, or ask us to delete your account as described above.
• Microphone. You can turn off microphone access in iOS Settings at any time. You can still type moments.

For any other privacy request, email support@babysoup.app.

8. Children's privacy

Baby Soup is for parents and other adults. It isn't directed to children, and children under 13 (or the minimum age where you live) may not create an account. The Service stores information that adults choose to record about their own children. We treat that information with the same care as all your content and use it only to provide the Service to you. If you think a child has created an account, contact us and we'll delete it.

9. Changes to this policy

We'll update this policy as the Service changes. For example, we'll update it before launching family sharing or photo attachments. If we make material changes, we'll notify you in the app or by email before they take effect. The effective date above shows when this policy was last updated.

10. Contact us

Graham Gnall
support@babysoup.app