EMOY — Privacy Policy
Effective date: 25 August 2026 Contact: support@emoy.app
Who we are
EMOY ("the app") is a shared care record for parents and caregivers. It is operated by the individual developer reachable at the contact address above.
The short version
- Your family's data is private to your household by default. Nothing is public, and there is no public profile.
- We do not sell your data, and we do not share it with advertisers.
- There are no advertising, analytics or tracking SDKs in the app.
- You can delete your account and your data from inside the app, at any time, without contacting us.
What the app stores
Everything below is stored because the app cannot do its job without it. There is no secondary collection.
Your account
- Email address and password. Handled by our authentication provider; the password is stored only as a salted hash, never in readable form.
- Display name. Used to show who logged each entry ("Logged by Ayden").
Your child's profile
- Name, date of birth, sex, and whether they were born prematurely (with gestational age, if given).
- Birth weight and birth length, if entered. Optional.
Sex and gestational age are stored because growth percentiles are calculated against sex-specific and age-corrected WHO/CDC reference tables. They are not used for anything else.
Care records
- Sleep, feeding, nappy changes and activities — start and end times, plus details for each kind: feed volumes and units, nursing side and duration, nappy contents, colour and size, activity type.
- Growth measurements — weight, length, the date measured, and any note.
- Milestones — which developmental or "first" milestones were reached, when, and any note.
Photos and videos
- Photos and videos you add, and any milestone they are attached to.
- These are stored in private storage. They are never public. They are served only through short-lived signed links to people you have shared with.
Camera and microphone. If you record a video inside the app, we use the camera and the microphone to make that recording — the sound is part of the video you chose to record. The app never records audio on its own, in the background, or at any time other than a recording you started. If you only ever add photos from your existing library, neither is used at all.
Who you share with
- Your household and its members, and each member's role.
- Your Circles, who is in them, and which categories each Circle can see.
- Comments and reactions people leave on shared photos and milestones.
- A record of anyone removed and blocked from a household or Circle, so they cannot rejoin with a shared invite code.
Diagnostics
The app sends crash reports and performance data to Sentry so that failures on real devices can be found and fixed. This is deliberately configured to exclude personal information: identifying request data is disabled, session replay (screen recording) is not enabled, and crash reports are not associated with your account.
Stored only on your own device
Your appearance preference (day/night), your measurement units, and whether you have seen the introductory walkthrough. These never leave your phone.
What the app does NOT do
- No advertising, and no advertising identifiers.
- No analytics or behavioural tracking SDKs.
- No selling, renting or sharing of personal information with third parties for their own purposes.
- No access to your device's contacts or location, and no health data from Apple Health or Google Fit.
- No use of your photos or your child's data to train machine-learning models.
- Push notifications are not used. Milestone reminders are scheduled locally on your device and never involve a server.
Why we process this data
To operate the service you asked for: to record and display your child's care, to synchronise it between the caregivers in your household in real time, to show the slices you have chosen to share with your Circle, and to keep the app working (diagnostics).
Where GDPR applies, our lawful basis is performance of a contract for the core service, and legitimate interests for diagnostics. Health-related data (growth measurements, care records) is processed on the basis of your explicit consent, given by choosing to enter it, and you may withdraw that consent by deleting the data or your account.
About the child's data
The information in this app is *about* a child but is provided *by* an adult caregiver who holds the account. The app is not directed at children, is not offered in the Kids Category, and we do not knowingly allow anyone under 13 to create an account.
The adult account holder is responsible for what they enter and for whom they invite into a Circle.
Who else is involved
We use three service providers. They process data on our behalf, under their own security commitments, and are not permitted to use it for their own purposes.
| Provider | What they do | What they see |
|---|---|---|
| Supabase | Database, authentication and file storage | All app data described above |
| Sentry | Crash and performance reporting | Diagnostic data only; no account or child data |
| Expo (EAS) | Delivers app updates | Technical request data needed to serve an update |
Security
- All traffic between the app and our servers is encrypted in transit (HTTPS).
- Data is encrypted at rest by our database and storage provider.
- Access is enforced at the database level by row-level security rules, not only in the app: a household's records are readable only by that household's members, and a Circle member can read only the categories that Circle has been granted.
- Photos and videos are held in a private bucket and are never publicly addressable.
No system is perfectly secure, and we cannot guarantee absolute security.
How long we keep it
We keep your data for as long as your account exists.
- Delete your account — Settings → Delete my account. This permanently deletes your login and removes your access. If you are the only member of a household, that household and everything in it is permanently deleted. If others remain, the shared record stays intact for them, with your entries no longer attributed to you.
- Leave a household or Circle — removes your access without deleting the shared record.
Deletion is immediate and cannot be undone. Backups may retain data for a short period before being cycled out.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict processing, and to complain to a data protection authority.
Most of this is available directly in the app: your data is visible to you, editable by you, and deletable by you. For anything else, contact us at the address above and we will respond within 30 days.
Changes
If this policy changes materially, we will update the effective date above and notify you in the app before the change takes effect.