Privacy Policy

Last updated: 30 September 2026

1. Who We Are

Womb Mates is operated by David Moftakhar, trading as Womb Mates, based in England.

David Moftakhar is the Data Controller for personal data processed in connection with this app and website, as defined under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact: support@wombmates.app

2. Overview

Womb Mates is designed to help parents monitor and track twin feeding and diaper activity. This policy explains what personal data we collect, the legal basis on which we process it, how it is used and your rights as a data subject.

3. Information We Collect

We do not track you across other companies' apps or websites.

We do not collect precise location data or contact lists.

We do collect the following information:

Account information

• Email address used to create an account.
• Account identifier (such as your user ID) needed to operate the service.

User Content

• Feeding logs, including solid foods eaten and portion sizes, diaper change logs, timestamps, notes and related tracking information inputted by caregivers.
• Child profile information you provide, such as child names and date of birth.
• Optional profile photos you upload for a child profile.

Shared account data

• If you use caregiver sharing, linked caregivers can access the shared account's baby profiles, feeding and diaper logs, notes, timestamps and other baby-related records available in the app.
• Linked caregivers can add or update feeding and diaper records and other shared baby data within the shared account.
• We store caregiver names supplied by the account owner, account links and invite codes to manage sharing. The account owner can invite and remove linked caregivers.
• A linked caregiver may also choose to leave a shared account from within the app.

Device & App Data

• App version
• Device type and operating system version
• Locally cached feeding, diaper and profile data stored on your device to support offline use and sync when connectivity is restored
• Crash and error reports, collected through Firebase Crashlytics in released versions of the app. These include error messages, stack traces, device and operating system details, app version, installation and session identifiers, and diagnostic app state. When available, we attach your account identifier and whether the account has purchased, is linked to a shared account and is online. We do not deliberately attach feeding or diaper records, notes or photos to reports. Error messages may contain contextual values from the operation that failed.

Website analytics and consent

• If you accept analytics on our website, we use Google Analytics to collect website usage information such as pages viewed, approximate location, browser and device information, and referral information.
• We store a cookie named wm_analytics_consent for up to 180 days to remember whether you accepted or rejected analytics cookies. This preference cookie is used for either choice.
• Google Analytics is off by default and is only enabled on the website after you choose to accept analytics.

4. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR Article 6:

Where we rely on legitimate interests, we have assessed that those interests are not overridden by your rights and interests.

5. How We Use Information

We use data to:

• Provide app functionality.
• Sync data across devices signed in to the same account.
• Enable shared accounts, including allowing linked caregivers to view and update shared baby data and allowing account owners to manage caregiver access.
• Find and fix crashes and errors, and improve app stability and performance.
• Measure website usage with Google Analytics, but only where you have accepted analytics cookies on the website.
• Process and restore purchases.
• Respond to support requests.

6. Data Sharing

We do not sell personal data.

Personal data may be processed by trusted third-party service providers that support operation of the app. These providers act as data processors or independent service providers, as applicable, and are required to protect data and use it only for the relevant service purpose. Key services we use include:

• Google Firebase — used for app infrastructure such as authentication, cloud database/storage, crash and error reporting (Firebase Crashlytics) and related backend services.
• Google Analytics — used on the website, with your consent, to understand website usage and performance.
• RevenueCat — used to manage in-app purchase status, entitlements, and purchase restoration.
• Apple App Store — used to process iOS in-app purchases and related billing events.
• Google Play — used to process Android in-app purchases and related billing events.

When you use a shared account, linked caregivers can view and log feeding and diaper activity. The account owner can remove caregivers, and caregivers can leave a shared account from within the app. Removing access prevents further authorised access to the shared cloud data. It cannot remotely erase information already downloaded, cached or copied onto another device.

7. Data Retention

We retain personal data only for as long as necessary to provide the Womb Mates service and maintain account functionality.

When an account owner completes account deletion, we delete their baby profiles, feeding and diaper records, uploaded profile photos, account document and active invite codes from the app backend. Deleting a linked caregiver account removes their own account and independently stored baby data, but does not delete the shared household records held under the owner account. Leaving a shared account also leaves those shared records in place.

Crashlytics retains crash reports and associated identifiers for 90 days before starting removal from live and backup systems. Deleting your Womb Mates account does not automatically erase previously submitted crash reports. Contact support@wombmates.app to request deletion of reports associated with your account.

Firebase Authentication removes deleted account information from its live and backup systems within 180 days. Purchase records held by payment and purchase-service providers are subject to their retention requirements and are not automatically erased by deleting your app account.

Offline records can remain on a device after sign-out or leaving a shared account. Account deletion clears the deleting account's own queued records on that device, but does not remotely clear copies on other devices.

8. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access — you may request a copy of the personal data we hold about you.
• Right to rectification — you may request correction of inaccurate or incomplete data.
• Right to erasure — you may request deletion of your personal data in certain circumstances.
• Right to restriction — you may request that we restrict processing of your data in certain circumstances.
• Right to data portability — you may request a copy of data you have provided to us in a structured, machine-readable format.
• Right to object — you may object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

If you have accepted website analytics and want to withdraw consent, you can reject analytics from the website banner when shown again or clear the wm_analytics_consent cookie in your browser settings and revisit the site.

To exercise any of these rights, contact support@wombmates.app.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at any time:

• Website: ico.org.uk
• Telephone: 0303 123 1113

We would, however, appreciate the opportunity to address any concern directly before you approach the ICO.

9. Children's Privacy

Womb Mates is intended for parents and caregivers. We do not knowingly collect personal information directly from children.

The app does process personal data about children (such as child names, dates of birth, and optional profile photos) where a parent or caregiver has provided that information. This data is processed on behalf of the parent or caregiver, on the legal basis of contract performance.

You can delete your own account via Profile → Delete Account. Deleting a caregiver account does not delete the owner household records. To request deletion of data about a child, contact support@wombmates.app.

10. Security

We protect data using industry-standard administrative, technical, and organisational safeguards, including encrypted data transmission (HTTPS/TLS) and controlled access to systems.

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours as required by UK GDPR and, where appropriate, notify affected users without undue delay.

11. International Transfers

Some of our third-party service providers may process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, such as relying on the UK's adequacy regulations or UK International Data Transfer Agreements (IDTAs), to protect your data to a standard equivalent to UK GDPR.

12. Changes to This Policy

We may update this policy from time to time. Material updates will be reflected by revising the "Last updated" date above.

13. Contact

For any privacy questions or to exercise your data rights, please contact support@wombmates.app.