Privacy Policy

Summary

• No account required for simple tracking. You can use Bramble to keep a log without signing up.
• Syncing with a co-parent requires accounts. You will each need to create one using an email address and password. That is how your devices find the same log. Everything you logged before creating an account is uploaded when you sign up.
• Sharing is a paid feature. Bramble Sharing is $4.99/month in the United States and covers up to four registered caregivers. Apple handles the payment; we receive transaction and subscription status, not your card or bank details.
• We store your child’s log. Names, birth dates, feeds, diapers, sleep, potty trips, growth, health notes, medicines, milestones, and anything you type into a note are stored on our server so they can sync.
• We can technically read it. The data is encrypted in transit and encrypted at rest on disk, but it is not end-to-end encrypted: the server holds the keys it needs to serve your timeline. We do not read it, profile it, sell it, or share it. But we will not tell you we cannot, because that would not be true.
• No tracking, no ads, no analytics SDKs. Unchanged, and not changing.
• It still works offline. The app keeps a full copy on your phone and logs without a connection, syncing when one returns.

What we store

Your account

• Email address. Used to identify your account and to reach you about it.
• Password. Stored only as a slow one-way hash (PBKDF2-HMAC-SHA256 with a per-account random salt). We cannot recover it, and neither can anyone who obtains the database.
• Session tokens. Stored hashed, expire, and are replaced each time they are used.

Your child’s log

Each child record holds a name, a birth date, and your display settings. Each logged event holds its type, its timestamps, and its details — a bottle volume, a nap length, a weight, the text of a note. All of it is stored on our server, and all of it is readable by the server in order to show you a timeline.

Subscription information

If you buy or are covered by Bramble Sharing, we store the App Store product, a reported transaction identifier, purchase and expiry dates, courtesy-period or revocation status, App Store environment, and the Bramble account and caregiver seats covered by the subscription. We use this to prevent one subscription from covering more than four registered caregivers and decide whether Sharing is active. Apple processes the purchase itself; your payment-card or bank details never reach Bramble.

The You section is yours alone

The You section — your own daily mood check-ins and journal notes — is stored on our server and synced across the devices you are signed in on, so it survives losing your phone. It is never visible to your co-parent, to a babysitter, or to anyone else you share a child’s log with. How a caregiver is doing is not a shared fact about the child, and putting it on a co-parent’s phone would be a privacy failure rather than a feature.

That separation is built into the database rather than enforced by a rule we have to remember: these rows are keyed to your user account and have no family column to join through, so there is no query that could return them to somebody else. They are stored in a form we can read, the same as everything else described above.

Milestone media

Photos and videos attached to a milestone stay on the device they were added on. What syncs is the milestone itself, not the media.

Notifications

If you enable them, we store an Apple push notification token so your co-parent’s change can wake your phone. Notifications carry no content — they wake the app, which then fetches the change itself.

What we do not collect

No advertising identifiers, no device fingerprints, no location, no contacts, no analytics events, no third-party SDKs of any kind. We do not track you across other apps or sites, and there is nothing in Bramble that could.

Who can reach your data

• You, and the caregivers you invite. A co-parent sees every child in your family. A babysitter you invite sees exactly one child, and only that child.
• Us, technically. Operating a database means being able to query it. We access it to keep the service running and to investigate a problem you report — not to read your records, and never to build a profile of you or your child.
• Our infrastructure providers. Named below. They hold the data on their hardware and are bound by their own agreements.
• Nobody else. We do not sell your data, share it with advertisers, or hand it to third parties for their own purposes. If we are ever compelled by law to disclose something, we will tell you unless we are legally barred from doing so.

Where it lives

• Database. PostgreSQL hosted by Neon in the United States. Encrypted at rest.
• API and website. Cloudflare, which processes standard request metadata such as IP addresses.
• Notifications. Apple Push Notification service, which receives a device token and an empty wake signal.
• Purchases. Apple processes Bramble Sharing purchases and sends signed transaction and subscription-status information to Bramble so we can provide access.
• Support email. Resend, which delivers messages sent from the support page.

All traffic between your phone and our servers is encrypted with TLS.

Your rights

You can request a copy of everything we hold for your account, or ask us to delete it, by writing to us from the support page using the email address on the account. Deletion removes your account, your children, and every event logged against them. It is permanent, and we cannot undo it.

Deleting a shared family’s data affects your co-parent too, so we will confirm with you before acting on a request that would remove records another caregiver still relies on.

Backups are retained for a short period after deletion as a matter of ordinary operation and age out on their own.

Children’s privacy

Bramble is used by adults to record information about the children in their care. We do not knowingly collect information directly from a child, and there is nothing in the app directed at one. Records about a child exist because a caregiver entered them, and that caregiver controls them.

Website

This site uses no tracking cookies and no analytics scripts. Google Fonts are served directly. Support form submissions are retained only long enough to answer you. Please do not include medical details in a support request.

Changes

If this policy changes, the updated date at the top of this page changes with it, and any change that affects what we collect or who can reach it will also appear in the app’s release notes.

Contact

Questions about this policy can be sent from the support page.