Version 2026-10-21 · Last updated: October 21, 2026
Babyzu is a log for your baby's day (feeds, diapers, sleep, medicines, growth, doctor…), with an Android app and a web version.
Data controller: Javier Muñoz Sastre ("we"). Contact for any privacy matter: info@babyzu.app.
1. Without an account, everything stays on your device
You can use Babyzu without creating an account. Everything you log (photos included) then stays only on your phone or, on the web, in that browser's storage, and we receive nothing. Babyzu has no ads, no trackers, no analytics and no tracking cookies.
2. If you turn on "Sync with family"
It's optional and lets your family share the same data across devices. We process:
| Data | Purpose | Legal basis |
|---|---|---|
| Your email | To send you a login code (there are no passwords), identify your account and, if someone invites you by email, send you the invitation. | Performance of the service you request (Art. 6(1)(b) GDPR). |
| What you log about your baby: feeds, diapers, sleep, medicines, measurements, milestones, doctor visits, foods, notes, lists, names of the babies and family members. | To sync it with your family's devices. Part of it is health data about a child. | Your explicit consent (Art. 9(2)(a) and 6(1)(a) GDPR), given by ticking the box when you log in. We store its date and the version of this text. |
| Your name and family permission (admin, can edit or view only) | So your family knows who is who and to control who can change data. | Performance of the service. |
| Technical data: sign-up and last access date, device or browser name of each session, IP address when requesting a code or on failed attempts. | Security and abuse prevention (rate limits). | Legitimate interest in protecting the service (Art. 6(1)(f) GDPR). |
Photos are never uploaded: they stay on the device where you add them.
We don't sell or share your data, don't use it for advertising or profiling, and make no automated decisions with it.
3. Your family on Babyzu: invitations and permissions
- Whoever creates the family is its admin and decides whom to invite and with which permission: can edit or view only. Everyone in the family sees all the family's data.
- Invitations are made with a link (and by email too, if the admin enters one). The link works once and expires after 7 days; whoever opens it sees only the inviter's name and the baby's name. Share it only with people you want to join.
- The admin can change permissions or remove someone at any time; anyone can leave the family.
4. Who else processes the data
Only our hosting and email provider, Hostinger (servers in the European Union), as data processor. There are no transfers outside the European Economic Area.
5. How long we keep it
- Your account and family data, for as long as you keep the account.
- If you delete your account, we immediately delete your email and sessions; if you were the family's last member, all the family's data too.
- Login codes expire after 10 minutes and are deleted after a day; failed-attempt records after a day; invitations after 30 days; unused sessions after 6 months.
6. Security
Encrypted connection (HTTPS), no passwords to steal, session tokens and codes stored only as hashes, rate limits, server code outside the public web folder and permissions enforced on the server.
7. Your rights
You can access, correct, export (portability), object to, restrict and delete your data, and withdraw your consent at any time without affecting prior processing. In the app: Settings → Sync with family → Delete my account; or email info@babyzu.app. You can also complain to your data protection authority (in Spain, the AEPD: aepd.es).
8. Children
Babyzu is meant for adults (parents and caregivers) who log their baby's data under their own responsibility. It is not directed at children.
9. Cookies and local storage
Neither the website nor the app uses cookies. The web version stores your data in the browser's local storage (IndexedDB and localStorage) and, if you log in, your session code: this is strictly necessary technical storage, it doesn't track you and needs no banner. Logging out or deleting your account on the web also deletes the data in that browser.
10. App permissions
Notifications (timers and appointment reminders), internet (for sync), the Android photo picker (only the photos you choose) and a foreground service for sleep sounds.
11. Changes
If we change this policy in an important way, we'll tell you in the app and ask for your consent again if needed.
Babyzu · Javier Muñoz Sastre · info@babyzu.app · Privacy · Terms · Delete account · Versión en español