Pebble & Petal

Privacy Policy

Last updated: March 13, 2026

Pebble & Petal ("we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your information.

1. Information We Collect

1.1 Data You Provide

  • Account Information: If you create an account, we collect your email address, name, and authentication credentials (or OAuth tokens if using Sign in with Apple/Google).
  • Baby Profile Data: Names, birthdates, photos, and other details you choose to enter about your children.
  • Tracking Data: Sleep logs, feeding records, diaper changes, growth measurements, developmental milestones, medications, allergies, medical notes, and any other information you enter into the app.
  • Photos and Media: Images and videos you attach to timeline events, milestones, or journal entries.
  • Voice Data: If you use voice logging features, we process your voice input to transcribe and log events. Voice recordings are processed on-device or via speech recognition services and are not stored permanently.
  • Support Communications: Messages you send to our support team.

1.2 Automatically Collected Data

  • Usage Analytics: App interactions, feature usage patterns, and performance metrics (anonymized where possible).
  • Device Information: Device type, operating system version, app version, and unique device identifiers.
  • Crash and Diagnostic Data: Error logs and crash reports to improve app stability.

2. How We Use Your Data

We use the information we collect for the following purposes:

  • Core App Functionality: Store and display your tracking data, generate timelines, provide developmental insights, and deliver the features you expect.
  • Personalization: Tailor recommendations, activity suggestions, and developmental leap notifications based on your child's age and tracked data.
  • Visit Summaries: Generate pediatrician visit reports from your logged data.
  • Service Improvement: Analyze usage patterns to improve features, fix bugs, and enhance user experience.
  • Customer Support: Respond to your inquiries and troubleshoot issues.
  • Legal Compliance: Comply with applicable laws, regulations, and legal processes.

3. Data Storage and Architecture

Pebble & Petal follows a local-first architecture. Your core tracking data is stored directly on your device using encrypted local storage. This means:

  • Your baby's data remains on your phone by default
  • No cloud syncing occurs unless you explicitly enable optional backup features
  • You can use the app fully offline
  • Data is not transmitted to our servers for storage unless you opt in to cloud features

4. Third-Party Services

We use the following third-party services that may collect or process data:

  • RevenueCat: Manages in-app purchases and subscription billing. RevenueCat collects transaction data and device identifiers. See RevenueCat's Privacy Policy.
  • Apple/Google Authentication: If you sign in with Apple or Google, those providers handle authentication. We receive only your email and name (if you choose to share it).
  • Speech Recognition Services: Voice logging uses on-device speech recognition (iOS) or cloud-based services (Android). Voice audio is transcribed and discarded; transcriptions are processed locally.
  • Analytics Services: We may use privacy-focused analytics tools to understand app usage. These are configured to minimize personal data collection.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share data only in the following circumstances:

  • Service Providers: We work with vendors who help us operate the app (hosting, analytics, payment processing). These providers are contractually obligated to protect your data and use it only for the services they provide to us.
  • Legal Requirements: We may disclose data if required by law, subpoena, court order, or government request, or to protect the rights, property, or safety of Pebble & Petal, our users, or others.
  • Business Transfers: If Pebble & Petal is acquired or merged, your data may be transferred to the new entity. You will be notified of any such change.
  • With Your Consent: We may share data with third parties if you explicitly authorize us to do so.

6. Your Rights and Choices

6.1 Access, Correction, and Export

You can view, edit, and export your data directly within the app. Use the export feature to download your complete timeline and baby profile data in JSON or CSV format.

6.2 Deletion

You may delete individual entries, entire baby profiles, or your entire account from within the app settings. For complete account deletion, email privacy@pebbleandpetal.com.

6.3 Data Portability

You can export your data at any time in machine-readable formats (JSON, CSV).

6.4 Permissions

You control app permissions through your device settings:

  • Microphone: Required only for voice logging (optional feature).
  • Camera/Photos: Required only to attach photos to milestones and journal entries (optional).
  • Notifications: Required only for optional reminders and leap notifications.

7. Children's Privacy (COPPA Compliance)

Pebble & Petal is designed for use by parents and caregivers, not by children. The app collects information about children (names, birthdates, photos, developmental data) entered by parents/guardians. We do not knowingly collect personal information from children under 13 without verifiable parental consent.

Parents have full control over the data entered about their children and can delete it at any time. If you believe we have inadvertently collected information from a child under 13, contact us immediately at privacy@pebbleandpetal.com.

8. International Users

8.1 GDPR (European Users)

If you are in the European Economic Area (EEA), UK, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

  • Right to access your personal data
  • Right to rectification (correction)
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent at any time
  • Right to lodge a complaint with your local data protection authority

To exercise these rights, email privacy@pebbleandpetal.com.

8.2 CCPA/CPRA (California Users)

California residents have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Right to know what personal information is collected, used, shared, or sold
  • Right to delete personal information
  • Right to opt-out of the sale or sharing of personal information (note: we do not sell personal information)
  • Right to correct inaccurate personal information
  • Right to limit use and disclosure of sensitive personal information
  • Right to non-discrimination for exercising your privacy rights

To submit a request, email privacy@pebbleandpetal.com with "CCPA Request" in the subject line. We will verify your identity before processing your request.

9. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your data:

  • Local data is stored using device-level encryption (iOS Keychain, Android EncryptedSharedPreferences)
  • Data in transit is encrypted using TLS/HTTPS
  • Cloud storage (if enabled) uses industry-standard encryption at rest
  • Access to your data is restricted to authorized personnel only

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but take all reasonable precautions to protect your information.

10. Data Retention

We retain your data for as long as your account is active or as needed to provide you services. Specific retention periods:

  • Account Data: Retained until you delete your account
  • Tracking Data: Retained until you delete individual entries or your account
  • Analytics Data: Aggregated and anonymized after 24 months
  • Support Communications: Retained for 3 years for quality assurance

After account deletion, we may retain certain data for legal compliance, fraud prevention, or legitimate business purposes, as permitted by law.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the updated policy in the app and on our website
  • Updating the "Last updated" date at the top of this page
  • Sending an email notification (if we have your email address)

Your continued use of the app after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@pebbleandpetal.com
Subject Line: Privacy Inquiry

We will respond to all legitimate requests within 30 days (or as required by applicable law).