Baby tracker for iPhone, iPad, Apple Watch and Android
Privacy Policy
Effective date: 2026-09-29 · Applies to Little Days for iOS, iPadOS, watchOS and Android
This privacy policy applies to the Little Days app for mobile devices and the Little Days sync relay that family sharing on Android uses (together, the "Application"). They are operated by Abdulhafeez Sagaya, referred to here as the "Service Provider".
In short
- Everything you log (feeds, sleep, diapers, growth, notes, photos and other records) is stored on your device. There are no Little Days accounts.
- If you share with family, your records are end-to-end encrypted before they leave your device. The Service Provider cannot read them.
- To deliver notifications and show the weather, the app uses a few services that see limited technical data. Each one is listed below.
- Little Days contains no analytics, advertising or tracking software. It never sells your data or uses it for advertising.
What stays on your device
Baby profiles, care records, notes, photos, reminders, supplies, plans, your caregiver name and app settings are stored in the app's private storage on your device. Reminders are scheduled on your device. Voice notes for "Speak to log" are transcribed on your device where it supports this (see Microphone below).
Family sharing
iPhone and iPad with iCloud
If you're signed in to iCloud, your records sync through your own private iCloud database, operated by Apple. When you invite family members or caregivers through iCloud, the records you share are visible to the people you invite. You can stop sharing at any time in the app.
Android, and families that mix Android and iPhone: the Little Days relay
Android devices, and iPhones in a family that includes Android, share through the Little Days relay, a small service run by the Service Provider on Cloudflare. It works like this:
- End-to-end encryption. Each family has a secret key that exists only on the family's devices. Records and photos are encrypted with AES-256-GCM on your device before upload. The relay stores only this encrypted data, so neither the Service Provider nor Cloudflare can read your records, photos, baby names or notes.
- What the relay can see. Random identifiers for the family, records and devices; the size of each encrypted item; when it was uploaded; and the IP address of connecting devices (seen by Cloudflare as part of normal network traffic).
- Invites. An invite code lets someone join your family. The encrypted invite is stored on the relay for 24 hours and then deleted.
- Deleted records. When you delete a record, its encrypted copy on the relay is replaced with an encrypted deletion marker so that the other devices remove it too.
Notifications (push)
To tell the other devices in your family that something new was logged, or that a timer was started or stopped, the Application uses Apple Push Notification service (on iPhone and iPad) and Firebase Cloud Messaging by Google (on Android).
- Your device gets a push token from Apple or Google. On Android, the Firebase Cloud Messaging software creates this token and a Firebase installation ID when the app first starts. Only Cloud Messaging is used, with Google Analytics for Firebase turned off.
- While your device is in a family, the relay stores its push token, a random device ID and the platform so it can wake your device. It deletes this registration when you leave the family, when Apple or Google reports the token as invalid, or after 60 days without the app checking in.
- Sync notifications carry no record contents.
- Timer notifications carry what the lock screen needs to show a running timer: the kind of timer and its label (for example "Sleep" or "Breastfeeding"), start, pause and end times, status, and for kick counts the count and goal. They never include your baby's name or record contents. The relay passes them straight on to Apple or Google and doesn't store them.
Weather
To draw local weather and sunrise on the Home screen, the app looks up the approximate location of your internet connection (usually your city), using your IP address, from ipwho.is (with ipapi.co as a backup). The resulting place is kept only on your device, for a few hours. The app then asks for the weather at that place from Apple WeatherKit (on iPhone and iPad) or Open-Meteo (on Android). If the lookup fails, the app uses the main city of your time zone instead. The app never uses GPS or asks for location permission. You can turn weather off in Settings (on Android: Settings › Home widgets › Local weather in the sky). These services receive your IP address and the approximate coordinates as part of the request and handle them under their own privacy policies.
Microphone and speech
Only when you tap to record in "Speak to log" does the app listen, and it turns what you say into a draft note that you check before saving. On iPhone, and on Android devices with on-device speech recognition, this happens on your device. On Android devices without on-device recognition, the app asks your device's speech service to work offline where possible. That service is provided by your device maker or Google under its own terms. The app never uploads recordings to the Service Provider and doesn't keep audio.
Camera and photos
You can add photos to records and supplies using the camera or the system photo picker. The app doesn't need access to your photo library. Photos are stored with your records on your device and, if you share, are end-to-end encrypted like other records (on iPhone they may also be stored in your iCloud).
Apple Health (iPhone only)
Only if you allow it, the iPhone app reads and saves caregiver weight records in Apple Health. This data stays in Apple Health on your device and is not sent to the Service Provider. The Android app doesn't use Health Connect.
Backups, import and export
- Your device's own backup (iCloud Backup or Android backup to your Google account) may include the app's data, following your device settings. The Android app leaves the family encryption key and push identifiers out of backups.
- Imports from other baby tracking apps, and PDF, CSV or backup exports, are processed on your device. Exported files go only where you choose to send them.
Services at a glance
| Service | Used for | What it receives |
|---|---|---|
| Apple iCloud (iOS) | Sync and sharing through your iCloud | Your records, in your iCloud account |
| Little Days relay on Cloudflare | Family sharing with Android | Encrypted records and photos, random IDs, sizes, times, push tokens, IP address |
| Apple Push Notification service / Google Firebase Cloud Messaging | Notifications between family devices | Push token, device identifiers, timer notifications described above |
| ipwho.is, ipapi.co | Approximate city for weather | IP address |
| Apple WeatherKit (iOS) / Open-Meteo (Android) | Weather forecast | Approximate coordinates of your city, IP address |
The Service Provider doesn't use any analytics, advertising, attribution or crash-reporting services, and doesn't sell or rent your data.
Children
Little Days is made for parents and caregivers to log care for their children. It is not directed at children, and children are not meant to use it. The Service Provider does not knowingly collect personal information from children. Information about a baby that a parent enters stays on the parent's devices and, if shared, is end-to-end encrypted as described above.
Deleting your data
- Delete individual records, babies or photos in the app, or delete the app to remove all of its data from your device.
- Deleting a shared record removes it from the other devices in your family. Leaving a family (Android: Family › Sync & sharing › Leave family) stops sync on that device and removes its push registration from the relay.
- To have all of a family's encrypted data removed from the relay, contact the Service Provider (below) and it will be deleted.
- Data synced to iCloud can be removed on iPhone in Settings › [your name] › iCloud › Manage Storage.
Security
All connections use encryption in transit (HTTPS/TLS), and records and photos shared through the relay are end-to-end encrypted. On Android, the family key is stored in encrypted storage protected by the device's keystore. No system is completely secure, but the Service Provider takes reasonable measures to protect the relay. If a breach affects data you've provided, the Service Provider will notify you as required by law.
Medical disclaimer
Little Days is a logging tool for parents and caregivers. It doesn't provide medical advice. If anything seems unusual, contact your doctor or care team.
Changes
The Service Provider may update this Privacy Policy from time to time and will post the updated policy here with a new effective date. Where the law requires it, the Service Provider will ask for your consent before material changes take effect. Earlier versions are available on request.
Contact
If you have questions about privacy, or want data deleted, contact the Service Provider through the support page. Messages on the support page are public, so please don't include your baby's records or personal details there.