← Back to Home

Privacy Policy

Last updated: April 7, 2026

Robin Baby — a product of Bunny Hopper Labs Inc.

Effective Date: April 7, 2026

Robin Baby is a voice-first baby tracking app that helps parents and caregivers record, organize, and understand their child's daily events. We know you're trusting us with some of the most personal information there is — your child's health, growth, and everyday moments — and we take that responsibility seriously.

This Privacy Policy explains what data we collect, why we collect it, how we use it, who we share it with, and what choices you have. We've written it in plain language because we believe you deserve clarity, not legal fog.

If you have questions, contact us anytime at hello@robinbaby.com.

Table of Contents

1. Who We Are

Robin Baby is operated by Bunny Hopper Labs Inc., a Canadian corporation ("we," "us," or "our"). We provide a mobile application for iOS and Android and a backend service that processes your data.

2. Who This App Is For

Robin Baby is designed for parents, guardians, and adult caregivers who want to track their baby's or child's daily events, health, and milestones. The app is not directed at children under 13 (or under 16 in certain jurisdictions). Only adults should create accounts and use the app. See Section 11 for more details on children's data.

3. Information We Collect

We collect the following categories of information:

3.1 Account Information

When you create an account, we collect:

  • Email address — used for login via email one-time passcode (OTP), Google Sign-In, or Sign in with Apple
  • Display name — so family members can identify you within a shared family

3.2 Child Profile Information

You provide information about your child to use the app's tracking features:

  • Child's name and nickname
  • Date of birth
  • Gender
  • Gestational weeks (if your child was born early — used for adjusted-age calculations)
  • Profile photo (optional)

3.3 Family Information

If you share access with a partner, grandparent, or other caregiver:

  • Family relationships and caregiver roles (admin or member)
  • Invitation tokens (used to securely invite family members)

3.4 Timeline and Event Data

The core of the app. You create event entries — either by speaking, typing, or scanning handwritten notes — and we store the structured data that results:

  • Feeding events: type (bottle, breast, solids), amount, duration
  • Sleep events: start and end times, quality notes
  • Diaper events: type, notes
  • Medication events: medication name, dosage, time
  • Symptom events: description, severity
  • Temperature readings
  • Growth measurements: weight, height, head circumference
  • Milestone events
  • Vaccination records
  • Allergy and allergen tags
  • Nursing diet entries
  • Custom notes and free-form observations

3.5 Voice Recordings

When you use the voice input feature, the app records audio through your device microphone. This audio is sent to our backend server, where it is transcribed into text using AI services (see Section 6).

Voice recordings are processed transiently and are not stored long-term. Once the transcription is complete and the structured event data is extracted, the audio is discarded. We retain the resulting text transcript and structured event data. Text transcripts are stored as part of your event records and may be used as context for AI-powered features such as question answering.

3.6 Photos and Scanned Images

When you use the scan feature to capture handwritten notes, or attach a photo to an event:

  • Images are sent to our backend for AI-powered text recognition
  • Scanned images used for text extraction are processed transiently and discarded after processing
  • Photos attached to events or child profiles are stored as long as your account is active

3.7 Questions and AI Answers

When you use the "Ask" feature to ask natural language questions about your child's data:

  • Your questions are sent to our AI services for processing
  • Your questions are saved to your local question history so you can re-ask them later. A brief preview of the answer headline is stored locally, but the full generated answer is not persisted — it is regenerated each time you revisit a question
  • On the backend, questions are logged for service quality and diagnostics purposes

3.8 Doctor Summary Data

When you generate a doctor-ready PDF summary:

  • The summary is generated from your existing event data based on the date range and event types you select
  • Generated PDFs are created on-demand and delivered to you

3.9 Import and Export Data

  • Import: If you upload CSV or data files to import historical records, those files are processed and the extracted data is stored as events in your timeline
  • Export: You can export your data at any time. Export files are generated on-demand from your stored data

3.10 Device and Technical Data

We collect limited technical information to operate the app:

  • Push notification tokens (Firebase Cloud Messaging) — so we can send you reminders and alerts
  • Device platform (iOS or Android)
  • App version

3.11 Analytics Data

We use PostHog for product analytics. This includes:

  • Screen views and feature usage events
  • Onboarding progress
  • Your user ID is linked to analytics events so we can understand feature adoption and improve the app

3.12 Crash and Diagnostic Data

We use Sentry for error tracking. This includes:

  • Crash reports and error logs
  • Session data (app state at the time of a crash)
  • Your user ID is linked to crash reports so we can diagnose issues affecting your account

3.13 Purchase Data

If you subscribe to a paid plan, RevenueCat processes your subscription:

  • Subscription status and product ID
  • Trial start and end dates
  • Subscription period dates
  • Your user ID is linked to your subscription record

Actual payment processing is handled entirely by Apple (App Store) or Google (Play Store). We never see or store your credit card number, bank details, or billing address.

3.14 Preferences

We store your preferred measurement units:

  • Volume (oz/ml)
  • Weight (kg/lb)
  • Length (cm/in)
  • Temperature (°F/°C)

4. How We Use Your Information

We use the information we collect to:

Purpose Data Used
Provide the core service — record, organize, and display your child's events and timeline Account info, child profiles, event data, voice recordings, photos
AI-powered event extraction — convert your voice or text input into structured events Voice recordings, text input, child names
Answer your questions — use AI to answer natural language questions about your child's data Questions, event data, child profiles
Generate doctor summaries — create PDF reports from your data Event data, child profiles
Family sharing — let multiple caregivers access and contribute to a shared timeline Family info, invitation tokens
Send notifications — reminders, feeding timers, and important alerts FCM tokens, device platform
Process subscriptions — manage your paid plan Purchase data, user ID
Improve the app — understand which features are used and how Analytics data
Fix bugs and crashes — identify and resolve technical issues Crash/diagnostic data
Import and export — let you bring in historical data or take your data with you Import/export files
Personalize display — show measurements in your preferred units Unit preferences

We do not use your data to:

  • Serve advertisements
  • Build advertising profiles
  • Sell to third parties
  • Train AI models (see Section 6)
  • Make automated decisions that produce legal or similarly significant effects

5. Third-Party Services We Use

We rely on the following third-party service providers to operate Robin Baby. Each receives only the data necessary for its specific purpose:

5.1 Supabase (supabase.com)

  • Data shared: All user data including account information, child profiles, event data, family relationships, and authentication credentials
  • Purpose: Primary database hosting, user authentication, and data storage with Row-Level Security for family-level data isolation
  • Privacy policy: https://supabase.com/privacy

5.2 OpenAI (openai.com)

  • Data shared: Text transcripts of voice recordings, event data, user questions, and child names
  • Purpose: AI-powered event extraction (GPT-4.1-nano/mini), natural language question answering, and text embeddings for semantic search
  • Privacy policy: https://openai.com/privacy
  • Important: Per OpenAI's published API data usage policy, data sent via their API is not used to train their models

5.3 Groq (groq.com)

  • Data shared: Audio recordings (for transcription), text transcripts, and child names
  • Purpose: Whisper-based speech-to-text transcription and fallback LLM event extraction
  • Privacy policy: https://groq.com/privacy-policy
  • Important: Data sent to Groq via their API is not used to train their models, per Groq's API terms

5.4 Google Cloud / Vertex AI (cloud.google.com)

5.5 Firebase Cloud Messaging (firebase.google.com)

5.6 RevenueCat (revenuecat.com)

  • Data shared: User ID, purchase and subscription information
  • Purpose: Subscription management, receipt validation, trial and renewal tracking
  • Privacy policy: https://www.revenuecat.com/privacy

5.7 PostHog (posthog.com)

  • Data shared: User ID, app usage events, screen views
  • Purpose: Product analytics — understanding feature usage and improving the app
  • Privacy policy: https://posthog.com/privacy

5.8 Sentry (sentry.io)

  • Data shared: User ID, crash reports, session data, error logs
  • Purpose: Error tracking, crash reporting, and performance monitoring
  • Privacy policy: https://sentry.io/privacy

5.9 Google Sign-In (accounts.google.com)

  • Data shared: OAuth authentication token, email address, display name
  • Purpose: Optional authentication method — only used if you choose to sign in with Google
  • Privacy policy: https://policies.google.com/privacy

5.10 Sign in with Apple

  • Data shared: Apple ID token, email address (which may be hidden via Apple's relay), display name
  • Purpose: Optional authentication method — only used if you choose to sign in with Apple
  • Privacy policy: https://www.apple.com/legal/privacy

6. How AI Processing Works

Robin Baby uses AI (large language models) in several ways. We want to be transparent about how this works:

Voice-to-Event Processing

  • You speak into the app
  • Your audio is sent (encrypted) to our backend server
  • Our server sends the audio to Groq for speech-to-text transcription
  • The resulting text transcript is sent to Groq (or OpenAI/Vertex AI as fallback) for structured event extraction
  • The AI identifies events in your speech (e.g., "She had 4 oz of formula at 2pm") and returns structured data
  • The structured events are saved to your timeline
  • The original audio recording is discarded — it is not stored long-term

Question Answering

  • You type or speak a question (e.g., "How much did she sleep this week?")
  • Your question, along with relevant event data from your timeline (which may include child names, health events, feeding records, sleep data, and other logged information), is sent to Groq (or OpenAI as fallback) for processing
  • The AI generates an answer based on your data
  • Your question is saved to your local question history so you can re-ask it later. A brief preview is stored locally, but the full generated answer is not persisted — it is regenerated each time you revisit a question. On the backend, questions are logged for service quality and diagnostics.

AI Model Training

  • Based on their published API terms, OpenAI, Groq, and Google Cloud/Vertex AI do not use data submitted via their APIs to train their models. We select providers whose terms prohibit using customer data for model training, and we monitor their policies for changes. We encourage you to review their terms directly for the most current information.
  • We do not use your data to train any AI models. Your child's data is used solely to provide you with the Robin Baby service.

7. Data Sharing and Disclosure

We do NOT:

  • Sell your personal information to anyone, ever
  • Share your data with advertisers or advertising networks
  • Share your data for cross-app tracking
  • Use your health data for marketing or advertising purposes

We DO share data with:

  • Third-party service providers listed in Section 5, solely to operate the app. Each provider receives only the minimum data needed for its purpose and is bound by its own privacy commitments.
  • Family members you invite — when you add a caregiver to your family, they can see and contribute to the shared child timeline. You control who has access.
  • Law enforcement or legal process — only if we are compelled by a valid legal request (subpoena, court order, or equivalent). We will notify you unless legally prohibited from doing so.

We will NEVER share data with:

  • Data brokers
  • Insurance companies
  • Employers
  • Any party for purposes unrelated to providing the Robin Baby service

8. Data Security

We implement the following security measures to protect your data:

  • Encryption in transit: All data transmitted between your device and our servers uses HTTPS/TLS encryption
  • Encryption at rest: Data stored in our database is encrypted at rest using industry-standard encryption provided by our hosting infrastructure
  • Row-Level Security: Our database enforces family-level data isolation, meaning one family's data is inaccessible to another family — enforced at the database level, not just the application level
  • Authentication: Secure login via email OTP, Google Sign-In, or Sign in with Apple. No passwords are stored.
  • Access controls: Only authorized personnel at Bunny Hopper Labs Inc. have access to production data, and only when necessary for operating and maintaining the service

No system is perfectly secure. If we become aware of a security breach that affects your personal data, we will notify you in accordance with applicable law.

9. Data Retention and Deletion

While your account is active

We retain all your data for as long as your account is active and you continue to use the app.

Voice recordings

Voice audio is processed transiently for transcription purposes and is not retained after processing is complete. Only the resulting text transcript and structured data are stored.

Account deletion

You can request deletion of your account and all associated data at any time by:

  • Using the account deletion option within the app (Settings > Account > Delete Account)
  • Emailing us at hello@robinbaby.com

When you request account deletion:

  • Your account enters a 30-day grace period during which you can change your mind and restore your account
  • After 30 days, your account and all associated data are permanently and irreversibly deleted, including:
    • Your account profile
    • All child profiles you created
    • All event data, timeline entries, and question history
    • All family relationships and invitation data
    • All analytics and crash data linked to your user ID
  • Data that has already been processed by third-party services (e.g., analytics events already sent to PostHog) is subject to those services' own retention policies

Subscription data

If you cancel a paid subscription, RevenueCat retains a record of your subscription history. Deleting your Robin Baby account will remove your user ID association from our systems, but RevenueCat may retain anonymized purchase records as required by Apple and Google for financial compliance.

10. Your Rights and Choices

Depending on where you live, you may have the following rights regarding your personal data:

For all users

  • Access: You can view all the data we have about you and your children directly within the app
  • Export / Portability: You can export your data at any time using the export feature in the app
  • Deletion: You can delete your account and all associated data (see Section 9)
  • Correction: You can edit your profile information, child profiles, and event data directly in the app at any time

For users in the European Economic Area (EEA), UK, and Switzerland (GDPR)

In addition to the above, you have the right to:

  • Rectification: Request correction of inaccurate personal data
  • Restriction: Request that we limit processing of your data in certain circumstances
  • Objection: Object to processing of your data based on our legitimate interests
  • Portability: Receive your personal data in a structured, commonly used, machine-readable format (CSV) via the app's export feature
  • Automated decision-making: You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. Robin Baby does not make such decisions — all AI outputs are informational only.
  • Withdraw consent: Withdraw your consent to data processing at any time (this does not affect the lawfulness of processing before withdrawal)
  • Lodge a complaint: File a complaint with your local data protection authority

Legal basis for processing:

  • Contract performance: We process your data to provide the Robin Baby service you signed up for (account data, event data, AI processing)
  • Consent: You consent to data collection when you create your account and agree to this Privacy Policy. Certain features (voice recording, camera access, push notifications) require additional device-level permission
  • Legitimate interests: We process analytics and crash data to improve the app and fix bugs, balanced against your privacy interests

To exercise any of these rights, contact us at hello@robinbaby.com. We will respond within 30 days (or sooner as required by applicable law).

For users in California (CCPA/CPRA)

  • You have the right to know what personal information we collect, use, and disclose
  • You have the right to request deletion of your personal information
  • You have the right to opt out of the sale of personal information — however, we do not sell your personal information
  • You will not be discriminated against for exercising your privacy rights

Device-level permissions

You can revoke the following permissions at any time through your device settings:

  • Microphone access — required for voice input features
  • Camera access — required for scanning handwritten notes
  • Photo library access — required for selecting photos
  • Push notifications — required for reminders and alerts

Revoking a permission will disable the associated feature but will not affect the rest of the app.

11. Children's Privacy (COPPA)

Robin Baby takes children's privacy seriously.

The app is for parents, not children

Robin Baby is designed for use by adults (parents, guardians, and caregivers). The app is not directed at children under 13 and children should not create accounts or use the app directly.

Data about children, collected from parents

The app collects personal information about babies and children — including names, dates of birth, health events, and growth measurements — but this information is provided by their adult parents and caregivers. Parents are the users of the app and control all data about their children.

Parental control

  • Parents decide what to record. Every piece of data about a child is entered by a parent or caregiver.
  • Parents control access. Only family members explicitly invited by a parent can view a child's data.
  • Parents can delete everything. Deleting an account removes all data about the associated children (see Section 9). Individual child profiles can also be removed independently.
  • Parents can export data. All data about a child can be exported at any time.

Verifiable parental consent

Because only authenticated adults can create accounts and enter child data, the act of creating a child profile and entering data about a child constitutes verifiable parental consent under COPPA and PIPEDA. We verify that users meet our age requirement (18+) through the age restrictions enforced by the Apple App Store and Google Play Store.

Our commitment

  • We do not knowingly collect personal information directly from children under 13
  • We do not use children's data for advertising, marketing, or profiling
  • We do not share children's data with third parties for any purpose other than providing the Robin Baby service (as described in Section 5)
  • If we learn that a child under 13 has created an account, we will delete it promptly

If you believe a child has provided us with personal information directly, please contact us at hello@robinbaby.com and we will take immediate steps to remove that information.

12. International Data Transfers

Robin Baby is operated by Bunny Hopper Labs Inc., based in Canada. Your data is processed and stored on servers located in the United States through our third-party service providers (including Supabase, OpenAI, and Groq).

If you are located outside the United States or Canada (including in the European Economic Area, UK, or elsewhere), your data will be transferred to and processed in the United States. By using Robin Baby, you consent to this transfer.

We rely on the following safeguards for international data transfers:

  • Our third-party service providers maintain their own data protection commitments and, where applicable, participate in recognized transfer mechanisms (such as Standard Contractual Clauses or equivalent)
  • All data is encrypted in transit and at rest
  • Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) provides a framework for data protection that is recognized as adequate by the European Commission

If you have concerns about international data transfers, please contact us at hello@robinbaby.com.

13. Health Data

Robin Baby stores health-related information about your child, including feeding data, sleep patterns, medication records, symptom logs, temperature readings, growth measurements, vaccination records, and allergy information.

Important points about health data:

  • This data is entered and controlled entirely by you — we do not collect health data from any other source
  • Health data is used solely to provide the Robin Baby service (timeline, AI answers, doctor summaries)
  • Health data is never used for advertising, marketing, or profiling
  • Health data is never sold or shared with insurers, employers, data brokers, or any non-essential third party
  • Health data is shared with AI providers (OpenAI, Groq, Vertex AI) only to the extent necessary to process your requests (event extraction, question answering) and is not used to train AI models
  • You can export all health data at any time and delete it by deleting your account

Robin Baby is not a medical device and does not provide medical advice. The data and AI-generated answers in the app are for informational and tracking purposes only and should not be used as a substitute for professional medical care.

14. Advertising and Tracking

We keep this simple:

  • No advertising. Robin Baby does not display ads of any kind.
  • No IDFA / Advertising Identifier. We do not collect or use Apple's Identifier for Advertisers (IDFA) or Google's Advertising ID.
  • No cross-app tracking. We do not track you across other apps or websites.
  • No data sold to advertisers. Period.
  • No tracking SDKs from ad networks, social media platforms, or data brokers.

The only analytics we collect (via PostHog) and crash data (via Sentry) are used exclusively to improve Robin Baby. They are never shared with advertisers.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we do:

  • We will update the "Last Updated" date at the top of this page
  • For significant changes, we will notify you via in-app notification or email before the changes take effect
  • Continued use of Robin Baby after changes take effect constitutes acceptance of the updated policy

We encourage you to review this policy periodically.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

We aim to respond to all inquiries within 30 days.

This Privacy Policy is effective as of April 7, 2026.