Privacy Policy
Last updated
Gaia is a baby tracker. It holds a health record for a child, and this policy is written on the assumption that this is the most sensitive thing we will ever be trusted with.
What we store
To give you an account and sync your log between caregivers, we store:
- Your name and email address.
- A hashed password, or the fact that you sign in with Google or Apple. We never see or store your actual password.
- Your baby’s first name, date of birth and sex, and — if you give them — birth weight, birth length and gestational age.
- The entries you record: feeds, diapers, sleep, pumping, tummy time, growth measurements and milestones. Under Health, that also means a body temperature, the name and dose of a medication you gave, a symptom, or an appointment. Any entry can carry a note, and a note is whatever you typed.
- Photographs, if you add them: a picture for your baby and one for yourself. They are cropped on your phone and stored with the rest of your family’s record. Gaia asks for photo-library access at the moment you pick one and at no other time.
- Which caregivers belong to your family.
- Whether you have agreed to receive email about Gaia, when you decided, and whether you decided it while signing up or later in Settings. Consent you cannot date is not consent, so the date is the record.
- If — and only if — you turn on notifications, a push token identifying your device. Turning them off deletes it.
- For each sign-in, the address and browser or app version it came from, kept with the session so you and we can tell a real sign-in from a stolen one. It goes when the session does.
Who can see it
Only the caregivers you have added to your family. This is enforced in the database itself through row-level security, so a mistake in the application code still cannot show one family another family's log.
Gaia carries no advertising today. That may change — a free app has to be paid for somehow, and advertising is one of the ways it might be. If it does change we will say so on this page before it happens, not after.
What will not change is the part that matters: your baby’s record is not for sale and never becomes the thing being advertised against. No entry, no measurement, no photo and no name is sold, rented, handed to an advertiser or a data broker, or used to train anything. An advert, if one ever appears, is something we show you — never something you are sorted into using your child’s health record.
What stays on your phone
Growth percentiles are calculated on your device using the WHO Child Growth Standards. Your baby's measurements are not sent anywhere in order to draw a chart. If you import a log from another app, the file is parsed on your phone — it is never uploaded somewhere to be converted.
Analytics
Gaia counts anonymous usage events — that a feed was logged, that a timer was started or stopped, that an import finished — so we know which parts of the app are worth improving. There are eight of them and that is the whole list; which screens you visit is not one, and does not leave your phone. They are built so they cannot describe your baby or identify you:
- They are never linked to your account, email or name. We can see that timers are used; we cannot see that you use them.
- They record that something happened and of what kind, never the values. “A feed was logged” — never how much, when, or for whom.
- Durations and counts are grouped into ranges before they leave your phone, because an exact duration next to a timestamp starts to describe one particular night.
- There is no session recording, and nothing automatically captures what is on your screen.
- The events Gaia may send are a fixed list written into the app. Adding one is a deliberate change, not something a new screen picks up by accident.
You can turn this off in the app under Account › Preferences. Off means nothing is sent at all.
Notifications
Gaia sends two kinds of notification, both off until you ask for them. One is that another caregiver in your family logged an entry. The other is a feed reminder you set for yourself, which your own phone schedules and which counts from the whole family’s log — so somebody else feeding her calls it off. There are no streaks and nothing asking you to come back.
They are off until you turn them on in Preferences, and turning them off deletes the token. Gaia delivers them through Apple’s own push service rather than a third-party provider, so the name of your baby and what was logged do not pass through anyone else on the way to the phone.
When something breaks
If a screen fails, Gaia sends a crash report so it can be fixed. The report carries the error, where in the code it happened, the device model and the app version — and deliberately not much else:
- It is never attached to you. No name, no email, no account.
- What you tapped is not recorded. Most crash tools log the label of every button pressed, and in this app those labels are your baby’s name — so that is switched off rather than filtered.
- Anything logged along the way is dropped for the same reason.
- As a last check, the names Gaia knows — yours, your baby’s, the other caregivers’ — are struck out of the report before it is sent, in case one of them ended up inside an error message.
Separately, Report a problem under Account writes an email you can read before you send it. It includes the app version, your device and a short list of what the app did recently — that a screen opened, that a save failed, never what was in it. Nothing is sent unless you press send.
Two kinds, and they are kept apart on purpose.
Email the app owes you. Resetting your password, or an invitation to join a family. These are the account working, so there is nothing to turn off.
Email about Gaia. Occasional news about the app — monthly at most. This is off unless you tick the box when you sign up or turn it on later under Settings, and one tap of the same switch stops it. Every message carries an unsubscribe link as well. We record when you turned it on or off, which is how we can prove we only mail people who asked.
Your address is never sold, rented, shared with an advertiser, or uploaded to an ad platform, and nothing we send you is about your baby.
Deleting everything
You can delete your account from inside the app, under Account. If you are the only caregiver in your family, this permanently deletes the family and every entry in it. If other caregivers remain, they keep the shared log and the entries you made stay in it without your name attached.
Deletion is immediate and cannot be undone.
Children
Gaia is for parents and caregivers, not for children. The account holder is an adult. The information recorded about a child is entered by that adult and is visible only to the caregivers they choose.
Where it is stored
On servers in the United States, encrypted in transit and at rest. We keep your log for as long as your account exists.
Saying no third party receives your entries only means something if we say who the infrastructure is. The database is hosted by Neon, the API runs on Vercel, password-reset and invitation email is sent by MailerSend, crash reports go to Sentry, and the anonymous usage counts described above go to PostHog. They host or carry data on our behalf under their own terms and may not use it for anything else. Notifications go directly to Apple. That is the complete list as it stands: no advertising network, no analytics vendor holding identified data, and no data broker. If a name is ever added to it, it appears here first.
If Gaia is sold
Gaia is made by two people. If it is ever acquired, or merged into another company, the accounts and logs would transfer with it — there is no way to hand over an app and leave the data behind, and a log you cannot take with you is not much of a log.
Two things would not change. Whoever holds it would be bound by this policy until you were told otherwise, and you would be told before anything about how your data is handled changed — in the app, not buried in a version history. If you did not want to go, you could export your log and delete your account first.
This is not a plan. It is the clause that means you find out from us rather than from a press release.
Your rights
You can see everything Gaia holds about you from inside the app, correct any of it, and delete all of it under Account. If you would rather we did any of that for you — including sending you a copy of your log — email us and we will, within 30 days and at no charge.
Contact
Questions, or a request to see or remove your data: support@b150.ai. There is more on the support page.