Privacy policy

Last updated 9 October 2026

The short version. Your family's logs live on your phone and, when you turn on family sync, in a private space in Google Firebase, stored in London. Only people you invite with a code can see it. We never sell your data. If you use Ask Naps & Notes, your question and a summary of recent logs are sent to Google's Gemini AI to write the answer, but only after you allow it.

Who we are

Naps & Notes is made by Ololade Oyenuga, trading as Naps & Notes, a sole trader based in Belfast, Northern Ireland ("we", "us"). We are the data controller for the personal data described here.

Contact: hello@napsandnotes.com.
Post: Ground Floor, Gallery Building, 65-69 Dublin Rd, Belfast BT2 7HG, United Kingdom.

What the app stores

Everything below is entered by you or the other carers in your family.

  • Your baby's profile: name, date and time zone of birth, and sex if you choose to add it.
  • Logs: feeds (breast, bottle, pumping and solids), sleeps, nappies, growth measurements, vaccines, temperatures, medicines and appointments, milestones, notes and time-capsule letters.
  • Who logged what: the carer name each entry was made under, such as "Emma".
  • Memory photos you add.

Some of this, such as vaccines, temperatures and medicines, is health information about your child. We use it only to provide the features you use.

Where it is stored

Your data is always stored on your phone. When you turn on family sync, it is also stored in Google Firebase:

  • logs and profile in Cloud Firestore, and memory photos in Firebase Storage, both in Google's europe-west2 (London) region;
  • our server functions, including the one behind Ask Naps & Notes, also run in London.

Google acts as our processor. Data is encrypted in transit and at rest.

Sign-in and your family space

  • There are no passwords. The app uses Firebase anonymous sign-in, which gives each install a random ID. We don't ask for your name, email or phone number to use the app.
  • Your family space is members only. Our security rules let only signed-in members read or add to it. People join with an invite code that one of you creates in the app; each code works once and expires after 24 hours.
  • We use Firebase App Check to confirm requests come from the genuine app. We keep small server-side records of invite codes, invite attempts and request counts so we can stop abuse.

Ask Naps & Notes (the assistant)

The assistant is optional. The first time you open it, the app asks your permission and shows exactly what will be shared. Nothing is sent until you allow it, and you can turn it off at any time in Settings. When you ask a question, our server in London sends Google's Gemini API:

  • your question;
  • your baby's name, age in days and your time zone;
  • a summary of recent logs from your phone (such as today's totals, recent entries, patterns, recent growth measurements, milestones and bottle totals); and
  • if family sync is on, a short summary of up to 40 recent entries from your family space.

We use Gemini's paid service, so Google does not use these requests to train its models. Google may keep them for a limited time to detect abuse, as our processor under its data processing terms.

If a question needs current guidance, Gemini looks it up with Google Search instead. That request carries only your question, your baby's age in days and your time zone, never their name or your logs. Google keeps these search-backed requests for 30 days to produce and check the results, under the same data processing terms. The answer then shows Google's search suggestions, as Google requires.

Google may process this data outside the UK. Where that happens, we rely on the safeguards in Google's data processing terms, such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

Not medical advice. In an emergency, call your local emergency number (999 in the UK), or 111 in the UK for urgent advice.

Voice logging

If you log by voice, the app uses Apple's speech recognition. Depending on your device and settings, Apple may process the audio to turn it into text. We receive only the resulting log, never the recording.

This website and the waitlist

If you join the waitlist we collect your email address and, if you choose to tell us, which phone you use (iPhone or Android), plus the time you signed up, which form you used, any campaign tags in the link you followed (utm_source, utm_medium, utm_campaign) and the page that referred you. It is stored in Cloud Firestore and used only to email you about the launch. You can ask us to remove it at any time.

The website is hosted on Firebase Hosting and loads the Firebase library from Google, so Google processes your IP address to deliver the pages.

Cookies on this website

The website uses Cookiebot to ask which cookies you're happy with. Until you choose, only the cookie that remembers your choice is used, and no advertising or analytics tool loads. You can change your mind at any time with Cookie settings at the bottom of every page.

  • Necessary: Cookiebot remembers your choice. Cookiebot (Usercentrics) records your consent, with an anonymised IP address, as proof that you gave it.
  • Statistics (only if you accept): Google Analytics counts visits and how people use the pages, so we can improve them. Google signals and ad personalisation are switched off.
  • Marketing (only if you accept): the Google Ads tag and the Meta Pixel (Facebook and Instagram) tell us when someone who clicked one of our ads visits the site or taps "Become a tester", so we can see which ads work. Google and Meta receive your IP address, details about your browser and device, and the pages you visit here, and may link them to your Google or Meta account under their own policies.

Google and Meta may process this data outside the UK, under their own safeguards. See how Google uses data and Meta's privacy policy. The full, current list of cookies on this website is below.

Android beta testing

If you join the Android beta, you join a Google Group that we use as the list of testers for Google Play. Joining shares the email address of your Google account with us, and Google Play tells us that you have opted in. We use this only to give you access to the test version. We don't email you through the group or add you to a mailing list, and other testers can't see who is in it. If you send us feedback, through Google Play or by email, we use it to improve the app.

If you give us your Gmail address (and, if you like, your first name) on the beta page instead, we store it in Cloud Firestore in the same way as waitlist emails. We use it only to add you to the tester list and to email you the install link, which we send through our email provider, Resend. We delete it with the tester group.

What we never do

  • No advertising or analytics trackers in the app.
  • We never sell your data.
  • Your family's logs, photos and app data are shared only with the processors named here (Google), and only to run the features you use. They are never used for advertising.
  • Advertising and analytics tools on the website load only if you accept them (see Cookies).

Children's data

Naps & Notes is for parents and carers. Information about a baby is entered by their parents or carers, who decide what to record. The app is not intended for use by children.

Our lawful bases

  • Providing the app (contract): storing and syncing your logs and photos.
  • Explicit consent: for health information about your child, which you give by entering it and can withdraw by deleting it.
  • Legitimate interests: keeping the service secure and preventing abuse.
  • Consent: for sharing data with Google's Gemini AI through Ask Naps & Notes, which you give in the app before your first question and can withdraw in Settings.
  • Consent: for waitlist emails.
  • Consent: for statistics and marketing cookies on this website (Google Analytics, Google Ads, Meta Pixel), which you can withdraw with Cookie settings.
  • Consent: for the Android beta, which you give by joining the tester group and can withdraw by leaving it.

How long we keep it

We keep your family's data while your family space exists. When an entry is deleted in the app, a deleted marker is kept in the family space so that both phones stay in step. Waitlist emails are kept until launch and for up to 12 months afterwards, unless you ask us to remove them sooner. We delete the Android beta tester group within 3 months of the app launching on Google Play.

Deleting your data

  • Everything, in the app: Settings, then Delete my family's data, permanently deletes your baby's profile, every log and every memory photo, from that phone and from your family space, for everyone in the family. It happens straight away and can't be undone. We keep only the random ID of the deleted family space and the date, so it can't be recreated by mistake.
  • Just this phone: Settings, then Start over, removes the baby and logs from that phone only. Deleting the app also removes its local data.
  • Leaving sync: resetting the pairing in Settings disconnects this phone but does not delete the shared family space.
  • No longer have the app? Email hello@napsandnotes.com and we will delete your family space for you. We will check that you are a member of that family first, and we aim to reply within one month.
  • Waitlist: email us from the address you signed up with.
  • Android beta: leave the tester group at any time, from the group's page in Google Groups.

Your rights

Under UK data protection law (UK GDPR and the Data Protection Act 2018) you can ask to access, correct, delete, restrict or move your data, object to how we use it, and withdraw consent at any time. Email hello@napsandnotes.com.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113. We would appreciate the chance to put things right first.

Changes

If we change this policy we will update the date at the top, and tell you in the app if the change is significant.