Orca Baby Privacy Policy

1. Overview & Our Commitment

Orca Baby (“we”, “us”, or “our”) is built for parents and caregivers to track sleep, feedings, diapers, and growth. We believe your family’s data is deeply personal and sacred.

2. Information We Collect

• Account & Authentication Information: When you sign in via Magic Link or Google Sign-In, we store your email address and display name strictly to authenticate your account and securely associate your family’s tracking data.
• Baby Activity & Health Data: Data you explicitly log, including sleep sessions, breast and bottle feeds, diaper changes, tummy time, growth measurements (weight, height, head circumference), medications, and temperatures.
• Media (Photos): If you choose to upload child milestone photos, they are stored securely in encrypted private cloud storage and accessible only to members invited to your family account.
• Diagnostic & Technical Information: Basic device details (operating system version, app version) strictly for bug diagnostics, crash prevention, and reliable real-time WebSocket sync.

3. How We Use Your Information

• To provide real-time synchronization across devices for parents and authorized caregivers.
• To generate historical charts, trends, awake window calculations, and milestone logs.
• To authenticate your session and protect against unauthorized access.
• To send passwordless login links (Magic Links) requested by you.

4. Data Storage, Security & Encryption

We implement industry-standard security safeguards to protect your personal data:

• Encryption in Transit: All communications between your device and our servers use TLS 1.3 / HTTPS and secure WebSockets (WSS).
• Encryption at Rest: All database records and media files are encrypted at rest using modern AES-256 cloud encryption.
• Account Isolation: Each family account is partitioned with strict access-control policies in secure cloud infrastructure.

5. Third-Party Service Providers

We rely only on essential cloud infrastructure providers to operate the service:

• Amazon Web Services (AWS): Secure hosting, database, and storage infrastructure within the United States.
• Google Identity Services: Optional authentication provider for one-tap Google Sign-In.

None of these providers are permitted to use your data for advertising, machine learning model training, or any purpose outside of operating our service.

6. Children’s Privacy

Orca Baby is intended for use by adult parents, guardians, and authorized adult caregivers. We do not knowingly collect personal information directly from children under 13. All data entered regarding an infant is managed solely by the child’s legal guardian.

7. Your Rights & Data Deletion

You maintain complete ownership of your family’s data:

• In-App Deletion: You can delete individual events or clear all data at any time from within the application.
• Full Account Deletion: You can permanently erase your account, all family profiles, and all associated media by visiting our Account Deletion Page or via the Settings menu in the app.

8. Contact Us

If you have any questions or concerns regarding this Privacy Policy or your data, please contact us: