Little Routine is operated by [to be completed]. Contact: [to be completed].
What we collect
Account: your name, email address and a securely hashed password.
Baby profiles you create: name, date of birth, gender, prematurity and feeding details.
Records you enter: activities (meals, sleep, diapers, baths, walks, medication), meal plans, foods offered and eaten, allergen exposures, possible reactions and symptoms, growth measurements, breastfeeding and pumping sessions, stored milk, temperature readings, vaccinations given, milestones ("firsts") and teeth with their dates, and notes.
Family sharing: which accounts you invite to a baby profile.
Device information for notifications: a push token, the platform (Android/iOS), the app language and the time zone (so summaries arrive at the right local time).
Server logs of each request to the service: time, IP address, device and app information, and the data sent (passwords, codes and login tokens are removed). They are used only to find and fix problems.
Why we use it
To provide the app: storing your records, sharing them with the family members you choose, sending reminders and notifications, and resetting your password.
Information about your child's health, such as allergies and reactions, is processed only with your explicit consent, given when you create your account. You can withdraw it at any time by deleting the records or your account.
We do not sell your data, show advertising or use your data for marketing.
Who can see it
You and the family members you invite to a baby profile.
Service providers that help us run the app: our hosting provider ([to be completed]); Expo (push notification delivery, receives the push token and the notification text); our email provider (password reset and confirmation codes). They process data only on our instructions.
Some of these providers may process data outside the European Economic Area; where they do, transfers rely on safeguards required by the GDPR.
How long we keep it
As long as you keep your account. Deleting your account (Settings → Delete account) removes your account and every baby profile that only you can access, with all its records.
Baby profiles shared with other family members are kept for them; ownership passes to another member.
Server request logs are deleted automatically after 14 days.
Database backups are kept for recovery: daily copies for 14 days, weekly copies for 8 weeks and monthly copies for 12 months, after which they are deleted. Data you delete disappears from backups once the last backup containing it expires.
Your rights
Under the GDPR you can access, correct, export or delete your data, withdraw consent and object to processing. Most of this can be done in the app; for anything else, contact us.
You can also complain to the Romanian data protection authority (ANSPDCP, www.dataprotection.ro) or the authority in your country.
Children
The app is meant for parents and carers. Information about babies is entered by their parents or carers.
Not medical advice
Records, guides and reports in the app are for information only and do not replace advice from a doctor.
Changes
We will update this page if this policy changes and show the date of the latest version above.