Privacy Policy

Last updated: October 13, 2026

Burpling helps parents and caregivers keep a shared baby-care journal. This policy explains how Burpling ("we") handles information in our iOS app and web service.

Information we collect

• Account information: your email address, display name, account identifier, language and other preferences, and account verification and security records. Our authentication provider processes your password and stores a password hash.
• Household and baby information: household names and membership, invitations and their acceptance, and baby profiles, including name, birth date, and sex if supplied.
• Care records: feeding, breastfeeding, pumping and diaper entries, amounts, durations, event dates and time zones, notes, and information about who created or edited a record. These records may contain sensitive health-related information about a baby or caregiver.
• Technical information: request times, requested paths, response status, service errors, and account or household identifiers used for security and troubleshooting. Our web server and hosting infrastructure may process IP addresses and browser or device information when handling requests. Time zones are used to display and organize records; the app does not request GPS location.
• Communications: information you choose to include when contacting us for help or sending feedback.

How we use information

We use information to create and authenticate accounts, send verification and password-recovery emails, manage household access, store and synchronize care records, generate your reports, apply your preferences, respond to requests, and protect and troubleshoot the service.

We do not sell personal information or use care records for advertising. Burpling does not include third-party advertising or cross-app advertising tracking.

Families kept on your device

In the iOS app you can record without an account. A family created this way, with its baby profile and care records, is stored only on your device. We do not receive it unless you export it or turn on Burpling Pro for it. The device's own backups, such as iCloud Backup, include this data and are stored by Apple under its terms.

Turning on Burpling Pro for such a family uploads its name, baby profile and every care record that has not been deleted to your account, so that members you invite and your other signed-in devices can see them. The app keeps a copy of the family's records on your device for 30 days after uploading, as a safety backup.

Household sharing

Care records, baby profiles, and caregiver display names are available to authorized members of your household. Members can record and edit shared care information and export it. Only invite people you trust. Someone with an invitation link can see limited invitation details, such as the inviter or household name, before joining.

The person who created a household can remove other members. Records a removed member added stay with the household.

When you leave a household or are removed from it, the iOS app removes the household's copy from each of your devices when it next connects, including records that had not been sent yet. Leaving or being removed does not erase records you contributed, or copies other members have already exported or stored on their devices.

Service providers and other disclosures

We use Supabase for authentication and database storage, together with infrastructure and email-delivery providers needed to operate the service. These providers process the information needed for their services, such as account and care data for storage, email addresses for authentication messages, and connection information for hosting and security.

Information may be processed outside your country, depending on where the service and its providers operate. We may also disclose information when required by law or when necessary to protect the security of the service or the rights and safety of others.

If you use TestFlight, Apple separately processes testing information under its own privacy terms. Feedback you send through TestFlight may be made available to us. See Apple's privacy policy.

Cookies and storage on your device

The web app uses a session cookie to keep you signed in, browser storage for preferences and account-scoped offline records, and a service worker to cache app files. The iOS app stores its session credential in the device Keychain and keeps local data to support offline use.

Unsynced care actions remain on your device until they can be sent to the service. Signing out isolates pending actions rather than silently deleting them. Protect access to your device; signing out or revoking server access does not erase every copy already stored on a device. Clearing app or browser storage can permanently remove records that have not synced.

Retention and deletion

We retain account and care information to provide your journal and shared household history. Security records, operational logs, and backup copies may remain for security, recovery, or legal purposes. Retention depends on the type of information and why it is needed; we do not promise automatic deletion after a fixed period.

Deleting a care entry in the app removes it from ordinary history and reports but marks it as deleted in the database rather than immediately erasing it. Uninstalling the app does not delete your cloud account or shared records.

To request account or personal-data deletion, contact us below. We may need to verify your identity and clarify which shared household records are involved. We will explain any information that must be retained and why. The current app does not provide an automated account-deletion feature. See our Account & Data Deletion page for the current request process, local deletion instructions, subscription handling, and the in-development self-service flow.

We are developing separate choices for leaving a shared family, deleting a cloud account, and erasing local records. The planned family-exit flow will require an explicit choice to transfer eligible contributions to the family or delete them, and an owner will select a successor. Transfer is not deletion: retained categories and the treatment of personal information will be explained before that feature is released. These planned controls do not change the current retention practices above.

The account-deletion flow in development includes uploaded profile and baby photos, replaced uploads, and unfinished uploads owned by the deleted account. A retained shared baby may return to its default avatar. Images still used by another profile or family are retained when only one family is deleted. Service-cache cleanup does not recall copies already downloaded to someone else's device. See the Account & Data Deletion page for availability and the full scope.

Your choices

You can review and correct information using the app, export household care data, and choose what optional information to enter. Depending on your location, you may have rights to access, correct, delete or receive a copy of your personal information, or to object to or restrict certain processing and withdraw consent where processing relies on it. Contact us to make a request or stop using the service. You may also raise concerns with your local data-protection authority.

Children's information

Burpling is intended for adult parents and caregivers, not for children to create accounts. Adults enter baby information to maintain a care journal and should only provide information they are authorized to share. Contact us if you believe a child has created an account or information has been provided without appropriate authorization.

Security

We use HTTPS for service connections, password hashing, session controls, and household access restrictions. The service is not end-to-end encrypted: our backend and service providers process data to operate the app. No storage or transmission method can be guaranteed completely secure.

Changes to this policy

We may update this policy as the service changes. The date above identifies the latest revision. Where required, we will provide additional notice or request consent for material changes.

Contact

For privacy questions and requests, contact Burpling at admin@paul-verse.com.