Privacy Policy

This Privacy Policy explains how Seedflow Limited (“we”, “us”, “BabyBerry”), a company registered in Hong Kong, HK, collects, uses, and protects your personal information when you use the BabyBerry mobile application and this website.

Plain-language summary. We use the information needed to provide pregnancy and baby-care profiles, shared records, AI features, subscriptions, support, and product reliability. A linked family member can access designated shared baby records; personal health check-ins, journals, mood logs, account settings, AI chats, and AI memory remain private. We do not sell your data or use health records for advertising profiles.

1. Who we are

BabyBerry is operated by Seedflow Limited, contactable at contact@seedflowhk.com. We are the data controller for the personal data described below.

2. What we collect

• Account and family data — email, display name, profile image, role, sign-in identifiers, family membership, and invite codes.
• Pregnancy, baby, and tracker data — profiles, check-ins, symptoms, water, mood, weight, kicks, contractions, checkups, and baby-care records including feeding, pumping, sleep, diapers, growth, temperature, medication, and vaccination.
• Content you add — journals, belly photos, avatars, checkup documents, ultrasound or appearance references used for Baby Preview, captions, and notes.
• AI and Insight data — messages and photos sent to AI features, generated responses, and bounded tracker aggregates used for reports you request or eligible reports you enable. Journal text, tracker notes, and photos are excluded from pregnancy Insight aggregate requests.
• Support, subscription, and technical data — feedback, support messages, entitlement and usage-allowance status, device details, crash logs, analytics events, attribution, and push tokens where permission is granted.

We do not sell your personal data, share it with advertisers, or use it to build cross-site advertising profiles.

3. How we use your data

• To provide pregnancy and baby profiles, timelines, trackers, journals, checkups, guidance, and family collaboration.
• To sync data across your devices and share designated records when you choose family sharing.
• To generate AI responses, summaries, reports, document extractions, and Baby Preview portraits that you request or enable.
• To manage subscriptions, usage allowances, support, reminders, product reliability, security, and legal obligations.
• To analyse feature use and confirmed subscription conversion without using advertising identifiers or sending free text, photos, or AI messages as analytics properties.

Health-related information you choose to record, upload, or make available to AI or a linked family member is processed with your direction and, where required, explicit consent. You can withdraw that consent by disabling the relevant optional feature, deleting the data, unlinking family sharing, or deleting your account, subject to the shared-record rules below.

4. Sharing

A family member you choose to link can view and edit the shared baby profile, prenatal checkups, and designated baby-scoped pregnancy or care records. Personal health check-ins, journals, mood logs, account settings, AI chats, Insight Profile, and long-term memory are not shared. Entries added to a baby owned by the other member may remain with that shared baby for care continuity after unlinking, with account attribution removed.

We use the following providers only for the relevant service purpose:

• Supabase for database hosting, authentication, and file storage. Checkup documents and Baby Preview files use private storage controls. Avatar, belly-photo, and journal-photo media currently use unlisted public object URLs; anyone who obtains one of those URLs can access that file.
• Apple, Google, and RevenueCat for sign-in, store billing, notifications, subscription status, and entitlement management.
• OpenRouter and its model providers for AI messages, requested document extraction, and bounded report context. We require routes that deny data collection; personal Chat and Insight requests also require zero-data-retention endpoints.
• SuperToken for requested Baby Preview image generation.
• Sentry, PostHog, Expo, Discord, and Resend for crash reporting, product analytics, notifications and updates, submitted feedback, and operational error alerts.
• Meta receives limited iOS app-activation and confirmed subscription-conversion events with standard app or device context. We disable advertiser-tracking identifiers and do not intentionally send health records, free text, photos, or AI content.

We may also disclose data when required by law, to protect users or the Service, or as part of a corporate transaction with appropriate notice.

5. Your rights

Depending on where you live, you may have rights under the EU GDPR, UK GDPR, California Consumer Privacy Act (CCPA), Japan's APPI, or Hong Kong's PDPO — including access, correction, deletion, and portability of your data. To exercise these rights, email contact@seedflowhk.com.

6. Children

Account holders must be at least 16. An adult parent, guardian, or authorised caregiver may record information about a baby or child and confirms that they are authorised to do so.

7. Retention

Account, pregnancy, baby, tracker, journal, media, checkup document, AI chat, and Insight data is generally kept until you delete the relevant content, baby, chat history, or account. Subscription and transaction records may be retained for tax and accounting obligations, typically seven years; crash and analytics data is usually retained for 90 days to 12 months. Data tied only to a deleted account is deleted or anonymised within 30 days, except shared entries, limited security, support, and transaction records, or information the law requires us to retain.

8. International transfers

Your data may be processed outside your country of residence by our service providers. We rely on standard contractual clauses or equivalent safeguards where required.

9. Security

We use TLS in transit, encryption at rest for hosted databases and storage, access controls, audit logging, and least-privilege staff access. Certain uploaded media currently uses the unlisted public object URLs disclosed above. No internet service is fully secure.

10. Notifications and cookies

If you grant permission, notifications may include reminders, family activity, Baby Preview status, or Insight summaries and may be visible on your lock screen. The mobile app does not use browser cookies; it uses local storage, device identifiers, and SDK installation identifiers for the purposes described here.

11. Changes to this policy

We will update this page when the policy changes, and the “Last updated” date above will reflect the change. Material changes will be highlighted in-app.

12. Contact

Privacy questions: contact@seedflowhk.com.