BEBELOOP

BEBELOOP is an Android and iOS app for recording feeding, sleep, diapers, solids, baths, notes, manually entered medication, meal plans, shopping, growth measurements and schedules. You can share these in a family space with caregivers you choose. No login is required for first installation or guest use. Account connection and login are optional when using account features such as family sharing.

Public policies · Read only

Privacy Policy

Service and operator

Service name: BEBELOOP
Android package / iOS bundle: com.babyroutine.mobile
Development and operation: BEBELOOP operator (sole proprietor in South Korea)
Privacy and deletion inquiries: jmh6868@gmail.com

1. Information we process

Category	Information processed	When
Account and authentication	Email address, Supabase user identifier, authentication status and method, login session information, and caregiver display name	When creating an account or logging in
Google sign-in	Google user identifier, and email and basic profile information that you consent to share and Google supplies	When you choose Google sign-in
Kakao sign-in	Kakao user identifier, and nickname, profile and email information that you consent to share and Kakao supplies	When you choose Kakao sign-in. Email consent is optional, so an email address may not be supplied.
Baby profile	Name, date of birth, due date, feeding and solids settings, and profile photo settings	When you enter or select them
Care records	Times, amounts, types, notes and recording methods for feeding, sleep, diapers, solids, baths and other notes	When creating or importing records
Manually entered medication records	Selected baby, medication name, dose and unit, medication date and time, optional note, and recording method	When a caregiver checks the details and saves them in a supported app version
Growth measurements	Height, weight, head circumference, measurement date, source and note, applied growth reference, and calculated growth indicators	When you enter growth measurements
Calendar and growth diary	Schedules you create, official vaccination and check-up schedules you select and their confirmation status, growth diary entries, and photos you attach to the diary	When using the calendar or growth diary
Meal plans and shopping	Shared family weekly meal plan, menus, ingredients, servings, shopping items and purchase status	When using meal plans, menus or shopping, or sharing them with family
Shared caregiving	Family space, members and permissions, invitation status, recorder identifier, sync status, revision, conflict and deletion job status	When using family sharing after logging in
Public developer chat	Public name, optional profile photo, messages, time of consent to chat rules, message and user reports, and hidden-user status	When joining the public developer chat after logging in. A name is required; a photo is optional.
On-device settings	Quick record, notifications, widgets, screensaver and lock screen settings, medication-name buttons you add, and selected profile, button and idle-screen photos	When setting up those features
Product usage analytics	Daily totals of key button usage, foreground time per screen, and stages from profile setup to opening quick record, choosing an item, requesting a save and completing a local save	OFF by default. In Settings, Share app improvement data is aggregated only after you turn it on and the setting is successfully saved.
Access and security logs	IP address, User-Agent, access country, request path and method, response status, and request time	Created automatically during Supabase server communications for security, troubleshooting and abuse prevention

Email passwords are sent to Supabase Auth for authentication, but the BEBELOOP operator does not retain them in plain text. Google and Kakao sign-in use the provider's system-browser authentication screen; BEBELOOP does not receive the provider password or provider secret keys. We do not use advertising SDKs, external analytics SDKs, automatic click collection, session replay, heatmaps or advertising-identifier tracking.

2. Purposes and storage locations

On the device: Guest records, account-specific sync queues and caches, notification, widget and lock screen settings, and selected local photos are stored in app-private storage. Added medication-name buttons are kept within the account and family scope on that device and are not automatically shared with family.
Supabase: Auth, Database and Realtime support account authentication, babies, care records (including manually entered medication), growth measurements, meal plans, schedules, permissions and real-time synchronization within a family space. Photos attached to a growth diary are uploaded to private Storage with family access and deletion controls. Photos selected specifically in developer chat are stored in private chat Storage and shown through temporary URLs only to logged-in users. Device profile, idle-screen, original OCR and social-login photos are not automatically uploaded or published as chat photos.
Supabase access logs: IP address, User-Agent, access country and request metadata from API communications are kept separate from product usage totals and used for security, troubleshooting and abuse prevention.
Google and Kakao: When you choose these sign-in methods, the provider authenticates you and supplies basic account information you consent to share.
Device speech recognition: Speech is converted to text while you actively start voice input. BEBELOOP does not save original audio files.
On-device text recognition: Photo record import uses Google ML Kit's on-device text recognition. Only text you review and selected records are saved; the original record photo is not retained as a BEBELOOP record.

Optional product usage analytics

Product usage analytics is OFF by default in every app version. In Settings, Share app improvement data is counted locally by device-local date only after you turn it on and successfully save the setting. It covers specified button usage, foreground time per screen and first-record stages. Without a saved choice, when settings cannot be read, or while OFF, no collection, aggregation or transmission occurs. You can turn it off at any time. This choice does not affect app features, family sharing, notifications or widgets.

Today's totals are not sent. After the date ends, the completed day's totals are sent together to Supabase.
The product analytics payload and aggregate tables store day, platform, appVersion, metric, count, duration only.
Product analytics payloads exclude user, account, family, baby, device and installation identifiers, and raw click timestamps.
Access and security logs automatically generated during Supabase API communications, such as IP address, User-Agent and request time, are processed separately from these product totals.
Analytics data excludes record type, amount and time, health information, names, emails, notes, search terms, audio, transcripts, photos and authentication information.
Analytics transmission uses BEBELOOP's fixed allowlist and Supabase aggregation RPC, rather than an external analytics SDK. It is not used for advertising or tracking across other apps or websites.
Turning it off stops collection and transmission and deletes unsent on-device totals and funnel markers. Turning it back on starts new totals without counting past activity retroactively.
On logout, account deletion or account changes, unsent totals and funnel markers are deleted so activity from different accounts is not mixed. The user's on-device ON/OFF choice is retained. If this cleanup fails, the new account boundary is not opened.
Random receipts used to prevent duplicate submissions are retained for 14 days. Identifier-free daily aggregates are retained for the most recent 400 dates, including today, and then deleted.

These are overall totals without identifiers. They do not reconstruct individual usage paths or cohorts and are not used for payments, security, advertising or individual assessments.

3. Permissions and device features

Microphone: voice records and note input started by you
Notifications and vibration: feeding and custom schedule reminders, record results and lock screen feature status
Camera and photo picker: text recognition from record sheets or photos you select for app settings
Android Foreground Service and display-over-other-apps setting: maintaining lock screen quick record when separately enabled by you

Lock screen features do not unlock or bypass the device lock. Sensitive details such as free-text notes, emails and family names are restricted from display.

4. Health information and limits on medical use

BEBELOOP processes caregiver-entered feeding, solids, sleep, medication and growth measurements to keep care records and show trends. Caregivers check the baby, medication name, dose, unit, date and time before manually saving medication. Widgets open the app's medication form and do not create a medication record before you save it. The app does not recommend medication types, doses or administration times, or assess suitability or drug interactions. Official vaccination, infant and oral check-up schedules appear only when selected by a caregiver and do not determine vaccination eligibility or provide medical judgment. Temperature, symptom, hospital visit and allergy entries are records entered by caregivers. They do not provide medical diagnoses or determine whether a child or peers are normal or abnormal. BEBELOOP is not a medical device. It does not diagnose, treat, cure or prevent disease, or determine normality, symptoms or vaccination eligibility. App records and general schedule information do not replace professional medical judgment. Consult a healthcare professional when medical judgment is needed.

5. Family sharing

Invited family-space members can view or change baby information and records according to their administrator, recording or view-only permissions. This includes saved medication records and growth measurements. Check the family space name, inviter and permissions before joining. When a member leaves or is removed, access to Supabase Database, Realtime and Storage is blocked according to active membership, and that family's on-device cache is cleared.

6. Public developer chat

Developer chat is a public user-content space separate from family spaces and baby records. Registered public names, messages and specifically selected chat profile photos are visible to other logged-in users. Consent to chat rules is obtained before posting. Contact details, external links and specified harmful expressions are rejected during submission. Users can delete their own messages, report messages or users, or hide authors. Operators may review reports and hide or remove content that breaks the rules. Do not post personal, account or detailed child health information in public chat; use the private support email instead.

Photos and files in public chat are visible to other signed-in users. Before sending, the app explains their public visibility and seven-day retention. Access is blocked after seven days from publication and server files are deleted. Sending a photo is not consent to AI image analysis; Lumi currently does not analyze user photos.

Lumi is identified as an AI parenting assistant and answers questions that users send by calling Lumi. Responses currently use OpenAI’s ChatGPT-based execution. Public questions and answers are visible to other chat users. Do not include personal information, detailed child health information or passwords in questions. AI responses are general parenting information, may contain errors and do not replace medical judgment.

Using your child’s information and care records for Lumi responses is OFF by default and requires separate consent. Only authorized information for each child in the current family—age in months, growth information, records from the last 30 days and a seven-day summary—is attached to the question. Names, raw birth dates, photos, contact information and account, family or child identifiers are not sent to the AI. Private summaries are kept separate from public messages and removed on expiry, withdrawal of consent or completion. You can ask general questions without consenting and withdraw through the same setting.

Current official vaccination and infant health-check schedules follow South Korean standards. Changing the language does not switch them to another country’s medical schedule.

7. Retention and deletion

Guest and local information: Kept on the device until you delete it in the app, clear app data through the operating system, or uninstall the app.
Account and family-space information: Retained while using the account and family sharing. Deleting records, babies, family spaces or the account is handled as follows.
Individual record deletion: Deleted records, including medication and growth measurements, are excluded from screens, statistics and reports. Minimal metadata may remain in the family space to communicate deletion status and conflicts consistently during shared-care sync.
Resetting a baby or all records: In a shared family space, restoration is available for 7 days. After that period, or if you choose permanent deletion, the server data is permanently deleted.
Account deletion: The login account, memberships and access permissions for all family spaces, and account-specific device caches are deleted. A family space used only by you is permanently deleted with its babies, records, schedules and attachments. The last administrator of a shared family space can appoint another administrator to keep the space, or explicitly choose Delete the family space too.
Exception for shared records: If you delete only your account, past care records may remain in a family space still used by other caregivers to preserve family history. The deleted account's author identifier is detached from records and that user loses access. Choosing to delete the family space ends other members' access and permanently deletes its babies, records, schedules and attachments.
Deletion safety information: Deletion job IDs, processing status and non-identifying audit metadata needed to prevent duplicate deletion, retry failures and check security may be retained to a limited extent for operations. They are not used for login or advertising.
Product usage analytics: Duplicate-submission receipts are retained for 14 days; identifier-free daily aggregates cover only the most recent 400 dates. With no personal identifiers, server aggregates cannot be linked back to an individual user or deleted per person.
Access and security logs: Logs are retained for up to 1 day, the current API and Database log retention period for the Supabase Free project, and then deleted under the provider's policy. This policy will be updated first if the plan or retention period changes.
Public developer chat: Public names, optional photos, messages and hidden-user status are retained until you delete them or delete your account. When you delete your own message, its body is immediately replaced and it is excluded from public lists. Reports may be retained for the limited period needed to handle reports and disputes.

BEBELOOP currently does not process payment or subscription information. Information subject to legal retention obligations is kept separately for the required period and is not used for other purposes.

8. Your choices and rights

You can view, correct or delete account information and linked data in the relevant app settings. To delete the entire account, go to Today settings → My account → Account settings → Delete account. If you cannot use the app, follow the Account and data deletion guide without logging in. Product usage analytics starts only if you turn on Share app improvement data yourself, and you can turn it off in the same setting at any time. In developer chat, you can edit your public name and optional photo, delete your messages, and hide or report other authors.

9. Security

Server communications use HTTPS. Supabase Row Level Security and active-membership checks restrict access to family spaces. Account and permanent family-space deletion require recent reauthentication and confirmation text. Server-only privileges and social-login secrets are not included in the mobile app or public pages.

10. Changes and contact

If processing or the service changes, this page is updated before the change takes effect. Important changes are also announced in the app.

Privacy and account deletion inquiries: jmh6868@gmail.com

Effective: July 19, 2026 · Last updated: October 7, 2026