BubSync (“we”, “us”, or “our”) is committed to protecting your family's privacy. This policy explains what we collect, how we use it, where it is stored and processed, and the main limits and risks you should understand when using the service.

1. Who we are

BubSync is a baby activity tracking service operated from Australia by Rowe Digital Holdings Pty Ltd (ACN 697 515 521) as trustee for the Rowe Digital Trust (ABN 13 313 912 737), trading as BubSync. This policy applies to the BubSync mobile apps, the BubSync web app / PWA, and the marketing website at bubsync.com where those products link to or rely on this policy.

2. What data we collect

Account and profile data: email address, display name, caregiver role, Google profile details if you choose optional Google sign-in, and subscription or entitlement status metadata.
Family and activity data: baby profiles, feeds, sleep, nappies, growth, notes, milestones and memories, custom activities, timestamps, invite records, and family-sharing settings.
Photos and memories data: photos you choose to attach to memories, together with related collage layouts and per-memory sharing-scope settings. Photos are stored on your device by default; encrypted cloud copies exist only for premium families, as described in section 5.
Technical and service data: device push tokens, app/browser state needed for offline use and sync, diagnostics, and operational metadata needed to provide, secure, and support the service. Product analytics events identify your account by its email address, so that we can recognise a single account across your devices and sign-in methods; all other identifiers in those events are hashed, and they are designed to exclude names and baby names. Optional crash reporting is off by default and is only enabled if you turn on the diagnostics option in-app.
AI interaction and output data:data used to generate AI-powered snapshot summaries, guidance, predictive notifications, and future chat-based Q&A, including relevant prompts, outputs, and feature-quality signals where those features are enabled. Section 6 explains this in more detail.

We do not intentionally collect precise location data or full payment-card details.

3. How we use your data

Create and authenticate your account.
Store, display, and sync family and activity records.
Support invitations, shared-care workflows, exports, notifications, and subscription features.
Monitor reliability, security, and abuse prevention.
Generate, improve, and safety-monitor AI-powered snapshot summaries, guidance, predictive notifications, and future chat-based Q&A features.
Comply with legal obligations and respond to lawful requests.

We do not sell your personal data or use it for targeted advertising.

4. Where data is stored and processed

BubSync's primary production application data is hosted and processed mainly in AWS ap-southeast-2 (Sydney).

Some supporting website delivery, CDN, certificate, routing, or provider operations may also involve us-east-1 and global services such as CloudFront and Route 53. As a result, connection metadata such as IP address, request timing, user agent, and routing information may be processed outside Australia.

BubSync is also designed to work offline first. When sync is unavailable or disabled, a local copy of relevant data may remain on your device or in browser storage until you reconnect, re-enable sync, sign out, clear storage, or delete the relevant data.

5. Photos and memories

Photos attached to memories are handled differently from other activity data, and where each copy lives depends on your plan and choices:

On your device by default.On the free plan, memory photos are stored only on the device that captured or added them and are not uploaded to our servers. The app says so where you add them: “Photos stay on this device until the family has Premium”. That is a statement about storage, not about audience. Because we hold no copy, we cannot recover free-plan photos if the device is lost, reset, or the app is removed.
Metadata is stripped on-device. Every photo is re-encoded on your device before it is stored or shared, which removes embedded photo metadata such as camera EXIF details and GPS location.
Premium cloud copies.For premium families, photos are backed up to private cloud storage in AWS ap-southeast-2 (Sydney), encrypted at rest with managed encryption keys. Photos are never publicly accessible: they are delivered only through short-lived signed URLs issued after we verify your identity, your family membership, any carer baby-scope, and the memory's sharing scope.
Shared with your family by default, and you choose who.BubSync is built for shared care, so a memory — its note, its photos, and any collage — is shared by default with the people you have already added to your family: the parents of the family, and anyone in your Family group. Carers do not see memories by default. That default is yours to set, for the whole family, on the Memories tab, and any single memory can carry its own audience instead — including “Only me”, which hides it from everyone but you. Memories are never visible to anyone outside your family, and never public.
Deletion.Deleting a photo or memory removes the cloud copies for your whole family. Copies already cached on family members' devices may persist locally until those devices refresh or clear their storage, and copies you or others saved to a device camera roll are outside BubSync's control.
If premium lapses.If a family's premium subscription ends, cloud photo copies are permanently deleted after a grace period of at least 30 days. Copies on your devices are not affected.

6. AI features and your data

Some BubSync features use AI to generate content: a welcome poem for a new baby, AI-generated day schedules, sleep-rhythm guidance, play ideas, milestone pointers and insight summaries in the AI hub, predictive notifications, and future chat-based Q&A.

What is sent:structured summaries of relevant recorded activity (such as recent feeds, sleep, and nappy changes), the baby's name and age, and the requesting caregiver's role — the data needed to produce the output you requested. Photos are not sent to AI models.
Where it is processed:AI features currently run on our cloud provider's managed AI service (Amazon Bedrock, within AWS), using foundation models from providers such as Amazon and Anthropic. Invocations run primarily from Australia, but may be routed through other AWS regions where a model is not available locally.
Model training: under our current arrangements, prompts and outputs processed through this managed service are not used to train the underlying models and are not shared with the model developers for their own purposes. If a future provider change would materially alter this, we will update this policy as described in section 11.
Logging: AI-enabled features may create short-retention prompts, outputs, and audit logs used for quality, abuse prevention, security, and legal compliance, retained as described in section 9.

7. Who we share data with

We share data only where needed to run BubSync, where you enable a feature, or where law requires it.

This can include providers that help us with:

cloud hosting, authentication, storage, notifications, and email delivery
optional diagnostics, analytics, and monitoring
AI/ML model and language-processing providers (current or future)
subscription management and app-store billing flows
optional third-party sign-in
legal or regulatory compliance

8. Cookies and website analytics

This section applies only to the marketing website at bubsync.com — the pages you are reading now, including the blog, guides, and free tools. The BubSync mobile apps and the BubSync web app do not use Google Analytics or Google signals, and nothing in this section describes what happens inside the product.

We use Google Analytics 4 on the marketing website to understand how people find us and which pages help them decide. It sets first-party cookies (named _ga and _ga_<id>) to recognise a returning browser and to group page views into a visit. We use it to count visits, see which pages and search terms bring people in, and measure how many visitors go on to download the app or contact us. Event-level analytics data is retained for 14 months.

We also have Google signals enabled. If you are signed in to a Google account that has Ads Personalisation turned on, Google may associate your visit to this website with that account, and report back to us aggregated information such as age range, gender, and general interest categories, along with a de-duplicated view of visitors who use more than one device. We only ever see these as aggregated statistics: Google does not tell us who you are, and we cannot single out an individual visitor from them.

We do not run advertising, we have no Google Ads account linked to this property, and we do not build advertising or remarketing audiences from this data. As stated in section 3, we do not sell your personal data or use it for targeted advertising.

Your choice. The first time you visit, a banner asks whether you accept analytics cookies, and we remember your answer on that device. If you decline, we tell Google to store nothing on your device and to disable the Google signals association described above; we still receive an anonymous, cookieless count of the visit, which cannot be tied to you or to any later visit. If you are in the European Economic Area, the United Kingdom, or Switzerland, nothing is stored and no association is made unlessyou accept. Elsewhere, analytics runs until you decline — and a decline is honoured wherever you are. To change your answer, clear this site's data in your browser and the banner will ask again.

You can also opt out at any time, independently of us:

turn off Ads Personalisation, or review and delete what Google has associated with your account, at myaccount.google.com/data-and-privacy
install Google's official Google Analytics Opt-out Browser Add-on
block or clear cookies for this site in your browser settings

Opting out affects only this marketing website's analytics. It does not change your BubSync account, and it does not limit any part of the product.

9. Security, retention, and important limitations

We use reasonable technical and organisational measures to protect personal information, including encryption in transit, access controls, and operational safeguards appropriate to the service.

Even so, no internet-connected service, device, or browser environment can be guaranteed to be perfectly secure. In particular:

locally cached data may be exposed on a shared, lost, compromised, rooted, or jailbroken device
service providers and infrastructure may process technical metadata and limited logs needed for routing, monitoring, support, and security
push-notification providers receive device-token and transport metadata, and notification previews may be visible on lock screens or shared devices
deleted data may remain temporarily in short-retention logs or encrypted disaster-recovery backups before those copies expire
AI-enabled features may create short-retention prompts, outputs, and audit logs used for quality, abuse prevention, security, and legal compliance

We retain account, family, and activity data until you delete the relevant records or your account, subject to backup, security, and legal retention needs. We aim to remove active account data within 30 days after deletion requests are processed. Production disaster-recovery backups may remain for up to 35 days.

AI-related prompts, outputs, and audit logs follow the same retention principles and are retained only as needed for service operation, security, abuse prevention, legal compliance, and model-quality monitoring before deletion or de-identification.

If a data breach occurs that is likely to result in serious harm, we will notify affected users and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme, and other regulators where applicable law requires it.

10. International transfers

Because BubSync uses global infrastructure and third-party providers, your data may be transferred or made accessible outside Australia. We rely on contractual, technical, and organisational safeguards that are appropriate to the relevant provider relationship and required by applicable law.

11. Feature and service variations

BubSync is currently in pre-launch. Specific features, providers, workflows, and technical implementations may vary over time by platform, feature availability, provider availability, or legal and compliance requirements.

Where a change materially affects how personal information is handled, we will update this policy or provide additional notice where required by applicable law.

12. Children's privacy

BubSync accounts are for adults. Information about babies and children in BubSync is entered by the parents and caregivers who manage it, and those adults are responsible for having the authority to record and share it. We do not knowingly collect personal information directly from children.

13. Health information and medical advice

The activity, growth, and note data you record may include health-related information about your child, and we handle it under this policy. BubSync is an information and record-keeping tool: it does not provide medical advice, and nothing it displays or generates (including AI outputs) is a substitute for advice from a qualified health professional. Our Terms of Service explain this in more detail.

14. Your rights

Depending on your jurisdiction, you may have rights to access, correct, export, delete, restrict, or object to certain processing of your personal data. We aim to respond to valid privacy requests within 30 days.

Where available, you can disable optional AI-powered summaries, guidance, predictive notifications, or future chat features in-app. Some AI processing is still required when those features are enabled to deliver requested outputs and maintain security.

15. Contact

For privacy questions, rights requests, or complaints, contact:

Email: privacy@bubsync.com

Australian users may also complain to the OAIC at oaic.gov.au.

Privacy Policy