Privacy policy

Last updated 27 September 2026. Operator: [OWNER ENTITY]. Contact: support@duckaby.com.

The short version

Duckaby keeps your baby’s log and your health notes on your phone. We don’t have accounts, ads, analytics or tracking SDKs. If you share with family, what travels is end-to-end encrypted and we can’t read it. We only get your email if you type it into our website.

What stays on your phone

Everything you log — baby’s name and dates, sleeps, feeds, diapers, notes, your pregnancy and recovery entries, glucose and blood-pressure readings, mood screens — is stored in the app’s local storage on your device. It is not sent to us. Deleting the app deletes this data (unless your phone’s own backup kept a copy).

Family sharing (optional)

• When you create a family, your phone makes a random secret. The invite link looks like duckaby.com/join#…; the secret is the part after #. Browsers never send that part to a website, and our join page never sends it anywhere.
• From the secret, each phone derives an encryption key (AES-GCM, 256-bit) and a separate access proof. Changes are encrypted on the phone before they leave it.
• Our relay (a Cloudflare Worker) stores and forwards those encrypted blobs, with a sequence number and the time received, so phones that were offline can catch up. It never has the key and cannot read them. Like any web server, it sees network information such as IP address while a phone is connected.
• Anyone with the invite can read and edit the shared baby log. Share it only with family.
• Your pregnancy and recovery health is not shared unless you turn sharing on. If you do, every family phone with the invite receives it; the caregiver role hides it in the app but is not a separate lock.
• There is not yet a button to delete the encrypted family copy from the relay; email us and we will delete it. It is unreadable to us either way.

Your location

Duckaby never asks for location permission. To show state facts you pick your state with a tap; the app may suggest one from your phone’s time-zone setting, on the device.

Assistant and optional connections

“Ask Duckaby” works on your phone from your own log. Optional and off by default: you can point it at an AI model you run yourself (for example Ollama at home), or connect your own Home Assistant for devices. Those connections go from your phone to servers you control, not to us.

Nursery Listener (coming soon)

When it ships, the Nursery Listener will process sound on the device to log sleep. Audio will never be stored or sent. It is not a breathing, oxygen or safety monitor.

Your email (only if you give it)

If you submit the form on our website, we store your email and the option you chose, to email you about that product. We don’t sell or share it. Ask us at support@duckaby.com and we’ll delete it.

Payments

Pre-orders are paid on a Stripe-hosted page. Stripe processes your payment details under its own privacy policy; we receive your email and the purchase record, not your card number.

This website

No cookies, no analytics, no trackers, no third-party fonts or scripts. Our host (Cloudflare) processes standard request logs to serve the site.

Children

Duckaby is used by parents and caregivers. Information about a baby is entered by the parent and stays on the family’s devices as described above.

Not medical advice

Duckaby helps you keep notes and shows general, sourced information. It does not diagnose and it is not a safety monitor. In an emergency call 911 or your local emergency number.

Changes and contact

We’ll post changes here and in the changelog. Questions or deletion requests: support@duckaby.com.