Privacy Policy

Last updated: 23 May 2026

This policy explains what information Babble collects about you and your family, what we do with it, and the rights you have over it. We try to keep it short and plain. If anything is unclear, email hello@babbleapp.co and we'll explain it.

The short version: we collect only what we need to run the app for you, we never sell your data, we never use it to train AI models, and you can delete everything from inside the app at any time.

1. Who is responsible for your data

Babble is a trading name of Katya-yani Vyas, a sole trader based in the United Kingdom. Katya-yani Vyas is the data controller for the information described in this policy and is registered with the UK Information Commissioner's Office (ICO).

Contact: hello@babbleapp.co.

2. What we collect

Account information. When you sign up: your first name, last name, email address, and a hashed password. Optionally an avatar photo or colour.

Baby profiles. Information you add about a baby: name, date of birth, gender, and any photo you upload.

Milestones, growth records, and photos. Anything you record through chat or by entering manually — first words, weights, heights, dates, captions, and uploaded photos and videos.

Chat messages. The conversation between you and the Babble assistant, including any photos you send to it.

Family connections. When you invite someone to a baby's timeline, we store the invitation (email, role, status) and the resulting membership.

Device and app data. If you opt in to crash reporting, we collect crash logs and basic device information (operating system, app version) via Sentry. Without your opt-in, we don't track usage or device data.

Marketing preference. Whether you've ticked the box at signup (or in Settings) to receive product updates. Defaults to off.

3. Why we use it and the legal basis

To run the app for you — store milestones, generate timelines, sync between devices. Legal basis: contract (we need this to deliver what you signed up for).
To process chat messages through AI — extract structured milestones, growth, and photo captions. Legal basis: contract.
To send transactional emails — password reset, magic links, family invitations. Legal basis: contract.
To send product updates and parenting tips — only if you've opted in. Legal basis: consent, which you can withdraw at any time.
To diagnose crashes and keep the app secure — when you opt in to crash reporting. Legal basis: legitimate interests (keeping the app working).

4. How AI processing works

When you chat in Babble, your message — and any photos you attach to the message — is sent to Anthropic, the company that makes the Claude AI model we use. Anthropic processes the message to generate a response and to extract structured records (milestones, growth, captions). We then store the result on our servers and show it to you.

Anthropic does not use Babble's API traffic to train their models.
Anthropic does not retain inputs or outputs beyond a short trust-and-safety window (30 days at the time of writing).
We never share your data with the AI for any purpose other than answering your message and extracting structured records for your own timeline.
The AI can be wrong. Always review what it logs — this is the only way to catch mistakes.

5. Who we share data with

We use a small number of trusted service providers ("processors") to run Babble. They process data on our behalf and only for the purposes we tell them to. They are:

Supabase — hosting, database, and authentication. Data is stored in the EU.
Anthropic — the Claude AI used to read your chat messages and extract milestones.
Resend — sending transactional and (if you opt in) product-update emails.
Sentry — crash reporting, when you have it enabled.
Expo / EAS — building, distributing, and over-the-air updating the mobile app.
Vercel — hosting this website and the auth callback pages.

Family members you invite to a baby's timeline can see the records and photos you've added for that baby. They can't see your other babies, your account email, or your chat history.

We do not sell your data. We do not share data with advertisers. We do not run trackers on this site or in the app.

6. Data about children

Babble is designed for adult parents and guardians to record memories about their own children. It is not directed at children, and children may not create accounts. The records you add about a child are stored under your account, controlled by you, and visible only to the family members you choose to invite.

If you stop using Babble or delete your account, the records about your child are deleted with it.

7. International transfers

Some of our processors are based outside the UK (Anthropic, Resend, Sentry, Expo, and Vercel operate in the United States). When data is transferred outside the UK or EEA, we rely on the UK's International Data Transfer Agreement or the EU Standard Contractual Clauses with each processor to make sure your data has equivalent protection.

8. How long we keep your data

We keep your data for as long as your account is active. When you delete your account (Settings → Delete account), all account information, baby profiles, milestones, growth records, chat history, photos, and family connections are permanently removed. Backups are purged within 30 days of deletion. Emails you've already received are not recalled — that's outside our control.

9. Security

All traffic to and from Babble is encrypted with TLS.
Data is encrypted at rest by Supabase.
On iOS, your authentication session is encrypted on the device using a key stored in the iOS Secure Enclave.
Photos are stored in a private bucket and served only via short-lived signed URLs.
We follow standard practices for password hashing and never see your password.

No system is perfectly secure. If you spot a security issue, please email hello@babbleapp.co.

10. Your rights under UK GDPR

You have the right to:

Access the personal data we hold about you.
Correct it if it's wrong (most of it you can edit directly in the app).
Delete it (use Settings → Delete account, or email us).
Restrict or object to certain processing.
Port your data to another service — email us and we'll send you an export.
Withdraw consent for marketing emails at any time, in Settings or via the unsubscribe link in any marketing email.

To exercise any of these rights, email hello@babbleapp.co. We respond within 30 days.

If you're unhappy with how we've handled your data, you have the right to complain to the UK Information Commissioner's Office at ico.org.uk — though we'd appreciate the chance to put things right first.

11. Cookies and tracking

This website uses no cookies and no analytics. The mobile app stores your authentication session locally so you don't have to log in every time, but it doesn't use cookies in the web sense and doesn't include analytics or advertising trackers.

12. Changes to this policy

We may update this policy from time to time. The "Last updated" date above changes when we do. For significant changes (for example, a new processor or a meaningful change in how we use AI), we'll notify you in the app or by email.

13. Contact

Questions, requests, or complaints: hello@babbleapp.co.