Privacy Notice

Who is responsible for your data

Circle Baby Care ("Circle") is operated by [Your legal name], based in [Your country]. We are the data controller for personal information you provide when using the Service.

What we collect

• Account data — email, display name, and (if you sign in with Google) basic profile info.
• Baby data — the baby's name, date of birth, and the logs you and your caregivers create (feeds, sleeps, nappies, meds, notes).
• Support & feedback — messages you send us, and any feedback submitted from within the app.
• Technical data — IP address, device type, browser, and basic usage events, used to keep the Service secure and diagnose issues.
• Payment data — handled directly by Paddle, our payment provider. We never see or store your card details.

Why we use it (legal basis)

• To provide the Service — creating your account, storing your logs, syncing with caregivers (contract performance).
• Security & fraud prevention — detecting abuse, preventing unauthorised access (legitimate interests).
• Product improvement — anonymous, aggregated usage data to see which features are used (legitimate interests).
• Support — replying to your emails (legitimate interests).
• Legal obligations — where required by law.

Who we share it with

We only share personal data with the following categories of recipients:

• Service providers & subprocessors — hosting (Supabase / Cloudflare), email delivery, analytics. All under written data-processing agreements.
• Paddle.com, our Merchant of Record for the sale of the subscription, subscription management, payments, tax compliance, and invoicing.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law.

We do not sell your personal data, and we do not run advertising.

Cookies & analytics

We use essential cookies to keep you signed in and remember your preferences. We may use lightweight, privacy-friendly analytics to understand aggregate usage. We don't use ad-tracking cookies.

International transfers

Some of our providers may process data outside your country. Where required, we rely on approved safeguards such as UK/EU Standard Contractual Clauses or adequacy decisions.

How long we keep it

We keep your data for as long as your account is active, plus a short period for legal/accounting requirements. When you delete your account, we permanently delete or anonymise your data within 30 days, except where we're legally required to retain some records longer.

Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• correct or update it;
• delete it ("right to erasure");
• restrict or object to certain processing;
• request a portable copy;
• withdraw consent, where processing is based on consent;
• complain to your local data protection authority (in the UK, the ICO).

To exercise any of these rights, email privacy@circlebabycare.com. We'll respond within one month.

Security

We apply appropriate technical and organisational measures — encryption in transit, access controls, and regular reviews — to protect your data. No system is perfectly secure, but we take this seriously.

Contact

Questions about privacy? Email privacy@circlebabycare.com.