Privacy Policy

Effective date: September 30, 2026

This policy explains how Lotoki (also presented as Lotoki on this website) processes personal data. Lotoki is a record-keeping and sharing tool for parents, guardians, and caregivers. It is not a medical device and does not provide medical advice, diagnoses, treatment recommendations, or health assessments.

Data Controller

The controller responsible for the processing described in this policy is:

Lotoki is currently a free personal project and is not operated by a company.

Who May Use Lotoki

Lotoki is intended for adults acting as a parent, legal guardian, or authorized caregiver. It is not directed to children. You must be at least 18 years old, or the age of legal majority where you live, and have authority to enter and share information about the baby or child.

Information We Process

Depending on the features you use, Lotoki processes:

• Account information: email address, authentication identifier, confirmation state, and security/session information.
• Baby profile information: name, optional birth date, profile identifier, join code, creator, and caregiver membership.
• Care records: feeding, breastfeeding side, bottle amount, sleep and wake times, diaper changes and type, solid foods, baths, timestamps, and optional notes.
• Growth records: weight, height, measurement date, unit, and optional notes.
• Milestones: title, category, date, completion state, typical-age label, and optional notes.
• App preferences and local feature state: language, theme, dashboard choices, timers, reminders, notification preferences, and widget state.
• Limited technical and security data: information required by our service providers to authenticate users, operate synchronization, prevent abuse, diagnose failures, and secure the service.

Lotoki does not access HealthKit, precise location, contacts, photos, financial information, advertising identifiers, or browsing history. It does not use third-party advertising or cross-app tracking.

Care and growth records, particularly weight and height, may be considered health-related information under applicable law even though Lotoki does not interpret them medically. For that reason, account creation includes an explicit request for consent to process user-entered baby care and growth information for the app's record-keeping, synchronization, and sharing functions.

Purposes and Legal Bases

• Creating your account, authenticating you, storing your records, synchronizing devices, and caregiver sharing: performance of the service you request and steps taken at your request before providing it (GDPR Article 6(1)(b)).
• Processing optional baby care, growth, and similar information that may qualify as special-category data: your explicit consent (GDPR Articles 6(1)(a) and 9(2)(a)).
• Securing the service, preventing misuse, investigating errors, and maintaining reliability: our legitimate interests in operating a safe and reliable service (GDPR Article 6(1)(f)).
• Responding to valid legal requests and applicable obligations: compliance with a legal obligation (GDPR Article 6(1)(c)), where relevant.

We do not use the data for advertising, profiling, automated decisions with legal or similarly significant effects, or medical evaluation.

Sharing and Service Providers

Lotoki does not sell or rent personal data.

We use Supabase for authentication, database hosting, synchronization, Edge Functions, and related security and operational services. The primary Lotoki database is hosted in the European Union in West EU (Ireland). Supabase and its subprocessors process data only to provide these services under their applicable data-processing terms.

Apple system services are used for app distribution and device features such as Keychain, local notifications, and widgets. Local notification content and widget state are handled on the device unless the same underlying record is also synchronized through Supabase.

If a provider processes data outside the European Economic Area, the transfer is made using an applicable lawful safeguard offered by that provider, such as an adequacy decision or Standard Contractual Clauses.

Shared Baby Profiles

A person who enters a valid join code becomes an authorized caregiver for that baby profile and can view records already associated with the profile, including records created before they joined. Authorized caregivers can also add, edit, or delete shared records according to the app's permissions. Only share a join code with people you trust. If access was granted incorrectly, contact us promptly.

Retention and Deletion

Account and synchronized baby data are kept while the account is active and as needed to provide the app. Individual records may be removed in the app where a delete control is available.

You can delete your account in the app's account settings. You may delete it permanently immediately or schedule deletion after a 10-day grace period. To cancel a scheduled deletion, contact support@trackyourbaby.app before the displayed deletion date.

When deletion completes, the authentication account, caregiver membership, and records attributable to that user are deleted. A baby profile shared with another caregiver may remain for the remaining caregiver. Records entered by other caregivers are not deleted merely because one caregiver leaves. If no caregivers remain, the baby profile and its associated records are deleted.

Minimal security, deletion, or system logs may remain temporarily where necessary to demonstrate deletion, prevent abuse, comply with law, or complete routine backup expiration. Such information is restricted, is not used to provide normal app features, and is removed or anonymized when no longer required.

Security

Lotoki uses encrypted HTTPS connections, Supabase authentication, row-level database access controls, server-side authorization for shared profiles, rate limiting for sensitive operations, and Apple Keychain-backed session storage. No service can guarantee absolute security. If you believe your account or a join code has been compromised, contact us immediately.

Your Data-Protection Rights

Subject to applicable law, you may request access, correction, deletion, restriction, or portability of your personal data; object to processing based on legitimate interests; and withdraw consent at any time without affecting processing that was lawful before withdrawal.

You can delete individual records where that control is available, delete your account from the app, or contact support@trackyourbaby.app. We may need to verify your identity before fulfilling a request. We normally respond within one month, subject to legally permitted extensions.

You may complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) at aepd.es, or to the supervisory authority where you live or work.

Changes to This Policy

We may update this policy when the app, service providers, or legal requirements change. Material changes will be identified by a new effective date and, where required, presented in the app for renewed consent.

Contact

For privacy questions, rights requests, security reports, or deletion assistance, contact support@trackyourbaby.app.