Privacy Policy

1. Who we are

Little Days is provided by Simons Digital Solutions (ABN 94 882 310 730), a business based in Western Australia ("we", "us"). We are responsible for your personal information under this policy. We handle personal information in line with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles. Because Little Days stores health information, we follow the Privacy Act whatever the size of our business. Where other laws apply to you, such as the EU or UK General Data Protection Regulation (GDPR) or US state privacy laws, we follow them too. For GDPR purposes we are the "controller" of your personal information.

2. What we collect

Information you give us

• Your account: your name, email address and password. We store the password only as a secure hash, never as plain text.
• Your baby's profile: name, birth or due date, sex and the colour you pick.
• What you log: feeds, sleep, nappies, pumping and milk stash, tummy time and activities, milestones, notes, and health details such as temperature, medicines and doses, vaccines, symptoms, doctor visits, booked checkup and vaccine dates, weight, length and head size. Health details are health information, which is "sensitive information" under Australian law and "special category data" under the GDPR. We collect it only with your consent, which you give when you create your account.
• Photos you add to entries or milestones.
• Your family group: who you invite, their role (owner, can log or view only) and the invite links you create.
• Your wellbeing check-ins (optional): if you use "Your wellbeing", your mood, how much you slept and any notes you write. This is health information about you. It's private to you: it is never shown to your family members (including owners), never included in reports or anyone else's export, and it is deleted with your account.
• Settings: units, clock format, theme, which baby is selected and your state or territory (for the child health check schedule).
• Messages and feedback you send us, including feedback from Settings and the in-app "How's Little Days going?" star rating, with your device type, used to fix problems and improve the app.
• Import samples, only if you agree: if an export file from another app can't be imported yet, you can choose to share up to its first 200 rows. They're encrypted before they're saved, used only to build an importer for that format, and deleted once it's built.

Information collected automatically

• Sign-in and security data: your sessions, including IP address and device or browser type, and sign-in attempts used for rate limiting.
• Notification tokens: if you turn on reminders, a token from Apple or Google that lets us send them to your device.
• Advertising data (free plan, in the Android and iPhone apps): our ad provider, Google AdMob, receives limited device and app information (such as IP address, device type and app version) to show non-personalised ads, measure them and prevent fraud. It never receives your logs, your baby's details or your photos.

Information from others

• Purchases: if you subscribe, Apple or Google (through our subscription provider RevenueCat) tells us whether your subscription is active. We never see your card or bank details.
• Family members: people in your family group can add and edit entries about the babies you share.

We don't ask for your location, contacts or microphone. The camera and photo library are used only when you choose to add a photo.

3. How we use it

• To provide Little Days: storing your logs and photos, syncing them between family members, and showing charts, insights, timers and reminders.
• To create and secure your account, including sign-in, password resets and protecting against abuse.
• To manage Premium subscriptions and the free plan's limits.
• To show non-personalised ads on the free plan.
• To answer your messages and send important service emails, such as password resets or changes to these terms. We won't send you marketing emails unless you opt in, and you can opt out at any time.
• To fix bugs and improve the app, using aggregated or de-identified information wherever possible.
• To meet legal obligations and enforce our Terms of Use.

Legal bases (GDPR and UK GDPR): we use your information to perform our contract with you (providing the app), with your explicit consent (health information and photos), for our legitimate interests (keeping the app secure, preventing fraud, improving it and showing non-personalised ads), and to comply with the law.

4. Advertising

In the Android and iPhone apps, the free plan shows one small banner ad along the bottom of the screen, below the app's buttons. Premium has no ads, and the website has none. Ads are non-personalised: they are not based on your baby's data, your health logs, your photos or your activity in other apps. We don't track you across other companies' apps or websites. We block ads for infant formula and other categories unsuitable for a family app. Where the law requires it (for example in Europe and the UK), the app asks for your consent first, and you can change it in Settings. In future we may show sponsored tips from brands, chosen by your baby's age range only. Sponsors never receive your personal information.

We do not sell or rent your personal information, and we don't "share" it for cross-context behavioural advertising as defined by US state laws.

5. Who we share it with

We share personal information only as described here:

• Your family group: the people you invite can see (and, depending on their role, edit) the babies, entries and photos in that family.
• Service providers who run parts of Little Days for us, under contracts that limit how they can use it:
  • Vercel: app hosting
  • Turso: database for your account and logs
  • Cloudflare: photo storage
  • Resend: account emails such as password resets
  • RevenueCat, Apple and Google: subscriptions and payments
  • Apple and Google: push notifications
  • Google AdMob: non-personalised ads on the free plan
• If the law requires it, for example a valid court order, or to protect someone from serious harm.
• If our business changes hands, to the new owner, who must keep protecting your information under this policy. We would tell you first.

6. Where your information is stored

Our service providers store and process information in the United States and may also use data centres in other countries, including the EU and Asia-Pacific. This means your information may leave Australia (or your own country). We choose providers with strong security and privacy commitments and take reasonable steps so they handle your information consistently with the Australian Privacy Principles. Where the GDPR applies, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

7. How we protect it

• Everything is sent over HTTPS and encrypted at rest by our storage providers.
• Photos are kept in private storage and shown only through short-lived links to members of your family.
• Every request is checked so that only members of a family, with the right role, can see or change its data.
• Passwords are hashed, sign-in attempts are rate limited, and invite links work once and expire after 48 hours.

No system is perfectly secure. If a data breach is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme, and any other regulator as required where you live.

8. How long we keep it

• We keep your information while your account is open, so your family's history stays available.
• Entries and photos you delete are removed from the app. Copies may remain in backups for up to 30 days before being overwritten.
• When you delete your account, we delete your account details straight away. If you were the only member of a family, that family's babies, entries and photos are deleted too. If other members remain, the shared family history (including entries you logged) stays with them, because it belongs to the family.
• Sign-in sessions expire after 30 days without use. Sign-in and security records are kept only as long as needed to keep accounts safe and investigate abuse.
• We keep limited purchase records where tax or consumer laws require it.

9. Your choices and rights

• Access and download: export everything as CSV or JSON from Settings → Your data.
• Correct: edit your details, your baby's details and entries in the app, or ask us.
• Delete: delete entries and photos at any time, or your whole account from Settings → Delete account. See how to delete your account, including if you can't sign in.
• Withdraw consent: you can withdraw consent to us storing health information or photos by deleting them or your account. We can't provide the tracking features without it.
• Notifications: turn reminders off in the app or in your device settings. A running timer can show on your lock screen with your baby's name; turn this off in your device's notification or Live Activities settings.

Depending on where you live, you may also have the right to ask us to restrict or stop certain uses, to object to processing based on legitimate interests, to receive your data in a portable format, and not to be treated differently for using your rights. To use any right, email us at joshua.s@simonsdigitalsolutions.com. We'll reply within 30 days and may need to confirm your identity first.

Complaints: please contact us first so we can try to fix it. If you're not satisfied, you can complain to the OAIC at oaic.gov.au, or to the data protection authority where you live (for example, in the EU or the UK Information Commissioner's Office).

10. Children

Little Days is made for adults. You must be 18 or over to create an account. Parents, guardians and carers enter information about their child, and by doing so confirm they're allowed to share that information with us and with the family members they invite. We don't knowingly let children use Little Days or collect information from them directly. If you think a child has created an account, contact us and we'll delete it.

11. Changes to this policy

If we make important changes, we'll update the date at the top and ask you to review and accept the new version in the app before you continue. We may also email you. Previous versions are available on request.