Privacy Policy
Last updated
Gaia is a baby tracker. It holds a health record for a child, and this policy is written on the assumption that this is the most sensitive thing we will ever be trusted with.
Gaia is currently operated by Adam Perlis as an individual, operating from Spain. Contact the current operator at support@gaiababy.lol about this policy or your data.
What we store
To give you an account and sync your log between caregivers, we store:
- Your name and email address.
- A hashed password, or the fact that you sign in with Google or Apple. Password sign-in processes the password to authenticate you; we store its hash, not the plaintext password.
- Your baby’s first name, date of birth and sex, and — if you give them — birth weight, birth length and gestational age.
- The entries you record: feeds, diapers, sleep, pumping, tummy time, growth measurements and milestones. Under Health, that also means a body temperature, the name and dose of a medication you gave, a symptom, or an appointment. Any entry can carry a note, and a note is whatever you typed.
- Photographs, if you add them: a picture for your baby and one for yourself. They are cropped on your phone and stored with the rest of your family’s record. Gaia asks for photo-library access at the moment you pick one and at no other time.
- Which caregivers belong to your family.
- Whether you have agreed to receive email about Gaia, when you decided, and whether you decided it while signing up or later in Settings. Consent you cannot date is not consent, so the date is the record.
- If — and only if — you turn on notifications, a push token identifying your device. Turning them off deletes it.
- For each sign-in, the address and browser or app version it came from, kept with the session so you and we can tell a real sign-in from a stolen one. It goes when the session does.
Who can see it
Among app users, your log is restricted to the caregivers in your family, using authenticated API access and database row-level security. The operator and infrastructure providers also process data to run, secure and support Gaia. This is access control, not a claim that your records are anonymous or that the service operator can never access them.
Gaia carries no advertising today. We are considering sponsorships from baby companies. Any future placement will be clearly labeled as a paid advertisement and disclosed before launch. Marketing-email permission is separate from analytics and is not permission for advertising tracking.
What will not change is the part that matters: your baby’s record is not for sale and never becomes the thing being advertised against. No entry, no measurement, no photo and no name is sold, rented, handed to an advertiser or a data broker, or used to train anything. An advert, if one ever appears, is something we show you — never something you are sorted into using your child’s health record.
What stays on your phone
Growth percentiles are calculated on your device using the WHO Child Growth Standards. Percentiles are calculated locally, without sending measurements to a separate chart service. Measurements still sync with your family’s cloud log. Import files are parsed on your phone; the resulting entries sync to Gaia when you confirm the import.
Analytics
Optional app usage analytics go to PostHog. They include which main screen was visited; an entry’s activity type; timer starts, stops and duration ranges; onboarding and sign-in methods; import outcomes and size ranges; caregiver invitation, joining and handoff actions; and whether a marketing email preference changed. The SDK also sends app lifecycle events, event timestamps and device/app metadata under an installation identifier.
- Gaia does not attach your account ID, family ID, name or email to these events. An installation identifier is pseudonymous, not a guarantee of anonymity.
- They do not include baby names, entry contents, notes, photos, exact measurements or a logged entry’s timestamp. Analytics events have their own timestamps.
- Durations and counts are grouped into ranges before they leave your phone, because an exact duration next to a timestamp starts to describe one particular night.
- There is no session recording, and nothing automatically captures what is on your screen.
- The events Gaia may send are a fixed list written into the app. Adding one is a deliberate change, not something a new screen picks up by accident.
You can turn this off in the app under Account › Preferences. Off means optional usage analytics stop. Account sync, sign-in security, crash reports and a support report you choose to send are separate. The next privacy update makes optional app analytics off until you turn them on; older app versions may have enabled it by default. You can turn it off in those versions using the same setting.
On this website, neither Google Analytics nor Vercel Web Analytics loads until you choose Allow analytics. Vercel provides cookie-free traffic statistics. Google Analytics measures the pages you visit, where the visit came from, approximate location, browser and device type, and interactions such as scrolling or following a link. Google Analytics does not load until you make that choice, and the choice is stored in your browser when storage is available. You can change it using Analytics settings in the footer. Advertising personalization and Google Signals are disabled. We do not send account or baby-log data from this website to either service.
Separately, Gaia sends aggregate account totals and signup counts from its server to PostHog for service reporting. These snapshots contain no individual account IDs, email addresses, family IDs or baby records, and do not depend on whether an individual device enables optional analytics. Providers also receive ordinary network-request metadata when their services are contacted.
Notifications
Gaia sends two kinds of notification, both off until you ask for them. One is that another caregiver in your family logged an entry. The other is a feed reminder you set for yourself, which your own phone schedules and which counts from the whole family’s log — so somebody else feeding her calls it off. There are no streaks and nothing asking you to come back.
They are off until you turn them on in Preferences, and turning them off deletes the token. Gaia delivers them through Apple’s own push service rather than a third-party provider, so the name of your baby and what was logged do not pass through anyone else on the way to the phone.
When something breaks
If a screen fails, Gaia sends a crash report so it can be fixed. The report carries the error, where in the code it happened, the device model and the app version — and deliberately not much else:
- Gaia does not deliberately attach your name, email or account ID.
- What you tapped is not recorded. Most crash tools log the label of every button pressed, and in this app those labels are your baby’s name — so that is switched off rather than filtered.
- Anything logged along the way is dropped for the same reason.
- As a last check, the names Gaia knows — yours, your baby’s, the other caregivers’ — are struck out of the report before it is sent, in case one of them ended up inside an error message.
Separately, Report a problem under Account writes an email you can read before you send it. It includes the app version, your device and a short list of what the app did recently — that a screen opened, that a save failed, not a copy of your baby’s log. It attaches a ZIP of diagnostic details. The email address, message and any attachments you send are available to support; do not include information you do not want us to receive. Nothing is sent through this flow unless you press send.
The next diagnostics update also adds sampled performance monitoring in Sentry: app-start and screen-load times, API request duration, slow or frozen frames and JavaScript stalls, with app release and technical device/OS details. Screen and endpoint names come from a fixed list. Performance payloads exclude raw URLs and queries, request bodies, route parameters, account identifiers and baby records. There is no screen recording or advertising use. These technical diagnostics are separate from optional PostHog usage analytics.
Two kinds, and they are kept apart on purpose.
Email the app owes you. Resetting your password, or an invitation to join a family. These are the account working, so there is nothing to turn off.
Email about Gaia. Occasional news about the app — monthly at most. This is off unless you tick the box when you sign up or turn it on later under Settings, and one tap of the same switch stops it. Every message carries an unsubscribe link as well. We record when you turned it on or off, which is how we can prove we only mail people who asked.
Your address is never sold, rented, shared with an advertiser, or uploaded to an ad platform, and nothing we send you is about your baby.
Deleting everything
You can delete your account from inside the app, under Account. If you are the only caregiver in your family, this permanently deletes the family and every entry in it. If other caregivers remain, they keep the shared log and the entries you made stay in it without your name attached.
Deletion removes your account from the live service and cannot be undone through the app. Hosting-provider backups and separately held support or security records may have different retention periods. Contact support about those records and their retention periods.
Children
Gaia is for parents and caregivers, not for children. The account holder is an adult. The information recorded about a child is entered by that adult and is shared with the caregivers they choose, subject to the operational access described above.
Where it is stored
On servers in the United States, encrypted in transit and at rest. We keep your log for as long as your account exists.
Saying no third party receives your entries only means something if we say who the infrastructure is. The database is hosted by Neon, the API runs on Vercel, password-reset and invitation email is sent by MailerSend, crash reports go to Sentry, and the usage events and aggregate account counts described above go to PostHog. These are service providers, not a claim that no third party receives data. Notifications go directly to Apple. Website analytics run only after the visitor permits them, as described above. There is no advertising network or data broker. If a name is ever added to this list, it appears here first.
If Gaia is sold
A sale of Gaia to a baby company is one possible future monetization path. An acquisition or merger could transfer accounts and logs to the new operator. That is different from giving an advertiser access to family data, but it is still a transfer of personal data.
We would require privacy commitments to be part of any acquisition terms, tell users before a transfer or a material change to data handling, and provide a chance to export their log and delete their account. A new purpose for personal data would also need its own lawful basis; notice alone is not permission to use a family’s log for advertising.
Your rights
You can view, edit and export your family’s log, and delete your account in the app. Contact us for access, correction, deletion or other requests about personal data, including operational records not visible in the app. We handle requests according to applicable law and may need to verify your identity. Where applicable, you can also withdraw consent, object to processing, request restriction or portability, and complain to a data protection authority, including Spain’s AEPD.
Contact
Questions, or a request to see or remove your data: support@gaiababy.lol. There is more on the support page.