Privacy Policy for Sparrow: Baby Tracker
Last updated: 27 August 2026
Sparrow: Baby Tracker ("the app") is a care-tracking app for parents and caregivers of young children, including children with complex medical needs. This policy explains what the app stores, who can see it, and how to get rid of it.
It is written to be read by an actual person. If something here is unclear, that's a fault worth fixing — contact details are at the bottom.
The short version
- Everything you log is stored so that you and the caregivers you invite can see it. Nobody else can.
- We do not sell your data, and we do not share what you log with anyone.
- The app shows ads, but advertisers never receive anything you log. Ads are non-personalised and the app does not track you across other apps or websites.
- You can delete your account, and everything in it, from inside the app.
Who is responsible
Sparrow: Baby Tracker is operated by an individual developer, not a company. Contact details are at the bottom of this page.
What the app stores
Information you provide about a child
Whatever you choose to record, which may include:
- name, date of birth and sex
- feeds (bottle, nursing, tube feeds, solid food), including volumes and times
- medications, doses and when they were given
- diaper changes, sleep, symptoms and temperature
- growth measurements, milestones and appointment notes
- photos of medical supplies and equipment, if you attach them
- any free-text notes you write
Some of this is health information about a child. It is entered by you, an adult caregiver — the app is not designed for, marketed to, or intended to be used by children.
Information about your account
- Your Apple ID identifier, and the email address Apple provides when you sign in. If you choose Hide My Email, Apple gives the app a private relay address instead of your real one, and that is all the app ever sees.
- Which household you belong to, and whether you own it.
- Which caregiver recorded each entry, so a shared log is accountable.
Information collected automatically
- A push notification token for your device, if you turn reminders on.
- Standard technical information needed to serve ads (see Advertising).
The app has no analytics or crash-reporting SDK. It does not record your location, contacts, photos library, or anything you do in other apps.
How it is used
Only to make the app work:
- to show you and your invited caregivers what has been logged
- to send the reminders you configure
- to produce the exports and visit summaries you ask for
- to show ads (see below)
Your logged data is not used for advertising, profiling, training machine learning models, or any purpose other than showing it back to you and the people you have invited.
Who can see your data
Caregivers you invite. A household is shared. Anyone who accepts your invite code can see and change every record for every child in that household. Invite codes work once and expire after 14 days — but treat one like a key, and only send it to someone you want to have full access.
Our hosting provider. Data is stored with Supabase, which provides the database and authentication. Access is restricted at the database level so that a request can only ever read rows belonging to a household you are a member of.
Apple, for sign-in only. Apple tells the app that you signed in successfully and gives it an identifier and an email address. Apple does not receive anything you log.
Nobody else. Your logged data is not sold, rented, shared with advertisers, or given to third parties. There is no exception for "partners" or "affiliates", because there aren't any.
Advertising
The app shows a single banner ad on some screens, using Google AdMob — never more than one at a time. Ads never appear on the medications screen or on any sheet used to record something, so no ad is ever placed next to the control you press to log a dose or a feed.
Ads are non-personalised. The app does not ask for permission to track you, does not access the advertising identifier (IDFA), and does not track you across other apps or websites. Google receives the technical information it needs to serve and measure an ad — such as your IP address, device type and coarse region — and uses it for frequency capping, reporting and fraud prevention.
Google never receives anything you log. No child's name, no medication, no feed, no note. A banner is displayed next to the content; it is not given the content.
Google's own handling of that information is covered by Google's Privacy Policy.
If you later purchase the ad-free version, no ads are requested at all.
Children's privacy
The app records information *about* children, entered *by* an adult caregiver. It is not directed to children, is not listed in the App Store Kids Category, and is not intended for anyone under 13 to use.
We do not knowingly collect personal information directly from a child. If you believe a child has used the app to create an account, contact us and it will be deleted.
How long it is kept, and how to delete it
Your data is kept until you delete it.
To delete everything: in the app, go to Settings → Account → Delete account. If you are the only caregiver in your household, this permanently deletes the household, every child in it, and every record of their care. If other caregivers share the household, it removes your access and leaves their household intact.
Deletion is immediate and cannot be undone. Export your data first if you might want it — Settings → Data → Export last 90 days (CSV).
You can also delete individual entries at any time by tapping them.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to certain processing.
The app already gives you all of these directly: everything you have logged is visible in the app, editable by tapping it, exportable as CSV, and deletable either entry-by-entry or all at once. For anything the app does not cover, contact us.
Security
- Data is encrypted in transit (HTTPS) and encrypted at rest by the hosting provider.
- Your login session is stored encrypted on your device, with the encryption key held in the iOS Keychain.
- Access is enforced at the database level, per household, rather than only in the app — so a bug in the app cannot expose another household's records.
No system is perfectly secure, and this app is operated by one person rather than a company with a security team. Please bear that in mind when deciding what to record.
Not a medical device
Sparrow: Baby Tracker is for tracking only. It does not provide medical advice, diagnosis, or dosing recommendations. Always confirm dosing and rates with your care team.
Changes to this policy
If this policy changes materially, the "last updated" date above will change and the new version will be posted at this address. Continuing to use the app after that means you accept the updated policy.
Contact
Questions, requests, or anything that looks wrong:
This address is monitored by the developer. It does not have to match the Apple ID the app is published under, and it is not used for anything except replying to you.