Privacy policy

This is a working draft for Minimoo, published by Pinkwhale, for the service at minimoo.app. Have it reviewed against UK GDPR, the Data Protection Act 2018 and, before a US launch, COPPA, before you rely on it.

Who the account is for

The account holder is a parent or carer aged 18 or over. Children do not create accounts. Information about a child is stored because you entered it, to show it back to you and to carers you invite.

What we store

Your email and sign-in, your child’s name, date of birth and optional photo, and the foods, teeth, milestones, sleep sessions and potty logs you record. Notes and photos you attach stay in private storage. We do not sell children’s information and we do not use children’s photos or records for advertising.

Where it lives

The app keeps a copy on the device so tracking works offline. When Supabase is connected, the same records sync to a private Postgres database. Other users cannot read them. Access is limited to people on that child’s access list. Photos use a private storage bucket and short-lived signed links.

Subscriptions

Payments are handled by Apple or Google through RevenueCat. Minimoo stores whether your account is entitled to Premium. We do not store your card number.

How long we keep it

We keep the record while your account exists, because the point of the product is a childhood history. You can delete individual entries at any time. Deleting the account deletes the children you solely own, their logs, and their stored photos, then the login itself.

Export and your rights

Premium includes an export of your records. Depending on where you live you may also have rights to access, correct, delete, or complain to the ICO in the UK. Write to hello@minimoo.app.

Analytics

The current build does not ship a third-party analytics SDK. If one is added later, it should be optional and must not include children’s photos or free-text notes.