Minibao privacy policy

Publisher: company name and registration number ("we"), Singapore.
Contact for privacy: privacy@minibao.app.
Effective date: date of first public release.

1. What Minibao does

Minibao is a log for the care of a baby: feeds, diapers, temperature, notes and photos. A family can share one log between several phones.

2. What we collect

Without an account. The log stays on your phone. We receive nothing.

With family sharing on. Our server stores:

Your email address, if you sign in with email. A caregiver who joins by invite gives a first name only.
Your display name, your relationship to the child (for example Mother or Helper) and your access level.
Each child's name, date of birth and the other details that you enter.
Each log entry: type, time, amount, temperature, note, and the name of the person who made it.
Photos that you attach to an entry, after you agree to photo upload.
A session record for each signed-in device: a hashed token and the time of last use.

What we never collect.

Camera video, camera passwords and camera addresses. They stay on your phone.
Your contacts, your location, or an advertising identifier.

We do not sell personal data. We do not show advertisements. We do not use the log to build an advertising profile.

3. Data about children

A parent or guardian enters the data about a child. Minibao is not for use by a child. The owner of a family confirms that they are the parent or guardian of each child in the log, or that they act with the parent's permission.

4. Why we use the data

To keep the same log on each family member's phone.
To send the sign-in code to your email.
To keep the service secure, for example to limit sign-in attempts.
To answer you when you contact us.

5. Who processes the data for us

Cloudflare, Inc. (database, file storage, network). Data can be stored and processed in more than one country.
Resend (sign-in email only: your email address and the code).
Apple and Google, if you pay for a plan through their stores. We do not receive your card number.

Add the payment and analytics providers here if any are added before release.

6. Where the data is

Minibao is made in Singapore. The servers belong to Cloudflare and can be in other countries. When data leaves Singapore, we require the provider to protect it to a standard comparable to the Personal Data Protection Act 2012.

7. How long we keep it

Log entries: until you delete them, delete the family or delete your account.
Photos: free plan, 14 days on the server; paid plan, as long as the plan is paid, plus 30 days after it ends. Confirm with spec 06. A photo also stays on the phone that took it.
Sign-in codes: 10 minutes.
Sessions: 90 days after the last use.
Backups: removed within 30 days after a delete.

8. Your choices

Export. The owner or a parent can download the whole log from Settings.
Delete. You can delete an entry, a child, the family or your account from inside the app. A family delete removes the log from our server for each member.
Correct. You can edit each entry and each profile in the app.
Withdraw consent. You can turn photo upload off and sign out of family sharing. The log stays on your phone.
Ask us. Write to privacy@minibao.app. We answer within 30 days.

9. Security

Data moves over an encrypted connection. Session tokens are stored as a hash. Each request is checked against family membership. No system is free of risk; if a breach is likely to cause significant harm, we tell the affected users and the Personal Data Protection Commission as the law requires.

10. Where Minibao is offered

Minibao is not offered in the European Union, the European Economic Area, the United Kingdom or Switzerland at this time.

11. Changes

We post a new version here and show a notice in the app before a material change takes effect.

Last changed 2026-10-12. The app shows the same text.