Privacy Policy

Last updated: 9 July 2026

RoyaCradle ("the App") is a parenting guidance application. Your privacy is fundamental to our design — we built the app so your personal data stays on your device by default. Cloud sync is entirely optional.

What Data We Collect

Profile information: Parent name, baby name, date of birth, gender, cultural background, language preference. Stored locally on your device by default.
Activity logs: Feeding, sleep, nappy, mood, and growth records you enter. Stored locally on your device by default.
AI conversations: Messages you send to the AI Guide are transmitted to our server to generate responses. We do not store or log these conversations.
Anonymous device identifier: A randomly generated ID (not linked to you personally) used solely to enforce weekly usage limits. Stored temporarily for 7 days.
Cloud sync data (optional): If you create an account and enable cloud sync, your family profiles, children's information, activity logs, and carer relationships are synced to our cloud database (Supabase). This enables multi-device access and the carer invitation system. All data is encrypted in transit (TLS). You can disable sync or delete your cloud data at any time.

What We Do NOT Collect

Email addresses are optional and stored only on your device (unless you create an account for cloud sync)
We do not collect IP addresses, location data, or browsing history
We do not use cookies or tracking pixels
We do not use advertising identifiers
We do not sell, share, or transfer any user data to third parties

Third-Party Services

Google Fonts: We load fonts from Google's servers. Google may process your IP address in accordance with their privacy policy.
Anthropic (Claude AI): AI conversations are processed by Anthropic's API. Messages are sent through our secure server proxy and are subject to Anthropic's privacy policy. Anthropic does not use API data for training.
Supabase: If you create an account, your synced data (profiles, logs, carer relationships) is stored in Supabase's cloud infrastructure. Data is encrypted in transit and at rest. Supabase is subject to their privacy policy.
Cloudflare: Our app and API are hosted on Cloudflare's infrastructure, subject to Cloudflare's privacy policy.

Data Storage & Security

By default, all personal data (profiles, logs, preferences) is stored exclusively in your browser's local storage on your device. We have no access to locally stored data. Your local data is protected by your device's own security (PIN, fingerprint, etc.).

If you create an account and enable cloud sync, your data is additionally stored in Supabase's cloud database. Cloud-stored data is encrypted in transit (TLS) and at rest. Access is controlled by row-level security policies ensuring only you and your authorised carers can access your family's data. You can delete your cloud data at any time by deleting your account.

Your Rights

Access: All your data is visible to you within the app at all times.
Export: You can export all your data as a JSON file from Settings.
Deletion: You can permanently delete all local data using "Reset all data" in Settings. If you have a cloud account, you can request full deletion by contacting privacy@royacradle.com.
Portability: The exported JSON file can be used however you wish.
Withdraw consent: You can disable cloud sync at any time to stop data being sent to our servers.

Children's Privacy

RoyaCradle is designed for adult parents and carers (18+). While the app tracks information about babies/children, this data is entered and controlled by the parent and stored on their device (or in their cloud account if they opt in). We do not knowingly collect data directly from children.

Health Disclaimer

RoyaCradle provides general parenting guidance and information. It is not a medical device and does not provide medical advice, diagnosis, or treatment. Always consult a qualified healthcare professional for medical concerns about your child.

International Data Transfers

If you use cloud sync, your data may be processed in countries outside your own. We ensure appropriate safeguards are in place for any international transfers of personal data in accordance with applicable data protection laws (including GDPR and POPIA).

Changes to This Policy

We may update this policy as features are added. Material changes will be communicated through the app. The "last updated" date at the top indicates when changes were last made.

Contact

For privacy questions or data requests, contact us at: privacy@royacradle.com