Privacy policy

Liten for iPhone and iPad · Last updated 13 October 2026

Liten helps parents log sleep, feeds, nappies, and growth. This policy explains what the app keeps, where, and how to delete it. Questions or requests: jbr.mobile.studio@gmail.com.

Using the app on your own

Without sharing, everything you enter stays on your device: babies' names, birth dates and photos, activities, notes, measurements, reminders, and settings. Nothing is uploaded to us unless you send us an idea (see below). The data is stored with iOS file protection. Your device's own backups (iCloud or computer backups) may include it, depending on your settings.

Backups, CSV files, and PDF reports you export are created on your device and go only where you send them.

Sharing with a partner (Premium)

If you choose to share a household, you sign in with Apple, with Google, or with an email address and password, and the app sends the following to our backend:

• Your sign-in: an account identifier, your email address, and your name. With Apple, the email may be a private relay address and the name is only what you allow Apple to share. With Google, they come from your Google Account. With an email and password, they're what you type; the password is handled by Firebase Authentication, stored only as a secure hash, and never seen by us. The other parent sees your name, never your email.
• Your household: its name, members, and who owns it.
• Each shared baby's name, birth date and growth reference, and every activity, note, measurement, and running timer logged for them. They're end-to-end encrypted (see below).
• Only the photos you choose to share: a photo on an entry goes to the other parent when you turn on Share with Family for it (Premium). It's deleted from our servers when you turn that off, remove the photo, delete the entry, or stop sharing. Other photos, including profile photos, stay on your phone. Shared photos are end-to-end encrypted too.
• Proof of your Premium purchase from the App Store (a transaction identifier), so the backend can check it.
• For each of your devices: a random identifier made when the app is installed, and the push token Apple gives it, so the backend can quietly tell it when the other parent logs something. These pushes carry no baby data and show nothing on screen. The token is deleted when you stop sharing, sign out, erase the app's data, or the device hasn't been used for 60 days.

The backend runs on Google Firebase (Firebase Authentication, Cloud Firestore, and Cloud Functions). Household data and functions are located in the European Union (europe-west1, Belgium). Firebase Authentication and Google's logging and support services may process data outside the EU under Google's terms. Data is encrypted in transit and at rest. Your babies' details, entries, and shared photos are also end-to-end encrypted: your phones seal them with a family key that passes from phone to phone only in person, as a QR code, and never reaches our servers, so neither we nor Google can read them. The backend still sees your sign-in, the household's name and members, which baby each record belongs to, who logged it, and when it changed. A household shared before October 2026 is end-to-end encrypted once its owner turns it on in Settings › Sharing.

Parents in a household see everything logged for its babies. A helper you invite, such as a nanny, sees only the last 7 days, with a key of their own, never the family key. If you're removed from a household or it's deleted, you lose access to the shared copy; anything already on another member's device stays there.

Purchases

Purchases are handled by Apple. We never see your payment details. Apple tells our backend when a purchase is refunded so Premium sharing can be turned off.

Ideas and app requests

If you send us an idea or ask for another app in Settings, we receive what you write, any link you add, and the app's version and language. It carries no account, name, or baby data; your email only if you add it, so we can answer, and for nothing else. To stop floods, your network address is turned into a keyed code that can't be reversed, used only to count messages, and deleted within a few days. Messages are deleted within a year. It reaches us by email through Resend, an email service.

What we don't do

• No ads, no advertising identifiers, no tracking across apps or websites.
• No analytics SDKs.
• We don't sell or rent your data, and we don't use it for anything other than running the app.

Deleting your data

• On your device: Settings › Delete All Data on This Phone removes everything the app stored on that device. Deleting the app does too.
• Stop sharing: the household owner can stop sharing and delete the household's cloud copy; a partner can leave.
• Delete account: Settings › Sharing › Delete Account removes your account and membership from the backend. If you own a household, its cloud copy is deleted too.

We keep backend data only while your account or household exists. Backend logs, which don't contain your records, are kept for a limited time by Google. Ideas and app requests you send are kept as described above.

Children

The app is meant for parents and caregivers, not for children to use. The information about a baby is entered and controlled by their parent or caregiver.

Your rights

Depending on where you live (for example, under the GDPR), you can ask to access, correct, export, or delete your data, or object to how it's used. Most of this you can do in the app; for anything else, email us. You can also complain to your local data protection authority.

Changes

If this policy changes, we'll update this page and the date above. Significant changes will also be mentioned in the app's release notes.