Last updated: August 11, 2026
When you create an account, we collect your email address, and — if you sign in with Google or Apple — your name and profile picture. You can also register with an email address and password. We use this to create and manage your account.
If you enable Google Calendar integration, we access your calendar events to help schedule tasks. We only read and create events in calendars you explicitly authorize. If you connect iCloud Reminders, we access your reminder lists — using an app-specific password you provide — to sync the tasks you choose.
If you enable notifications, we store the device or browser push token needed to deliver them. A token identifies one device and is tied to whichever account is signed in on it; signing out releases it.
We store the tasks, subtasks, notes, and preferences you create within the app.
If you use the baby-tracking features, we store the information you log about your child: their profile (name, birth date), care entries (feeds, sleep, diapers), growth measurements, milestones, and medical records — immunizations, checkup and sick-visit entries, and the care-provider contact details you add. This is sensitive health information about a child; it is stored only to show it back to you and the caregivers you explicitly invite, it is never used for advertising, and it is deleted with your account.
We use the following third-party services:
Your data is stored securely in encrypted databases. We use HTTPS for all data transmission. We also keep encrypted, off-site backups of our database for disaster recovery. We retain your data for as long as your account is active. You can delete your account at any time from Settings → Delete account. Deletion is immediate and permanent: it erases your account and the data associated with it — including your tasks, routines, chat history, and preferences — and we cannot restore it afterwards. If you ever subscribed, deleting your account also cancels the subscription and deletes the customer record our payment processors hold for you — your email and billing history at Stripe, and your subscriber record at RevenueCat — so nothing about you is left with them either. Residual copies may persist in our encrypted backups until those backups age out.
On your device (offline mode): so the app keeps working without a connection, it stores some data locally on your device — recently viewed pages, and any change you make while offline. A change made offline is held on your device and sent to us (then cleared) the next time you’re online; it stays on your device in the meantime and is not shared with anyone else. This on-device data lives only in your browser or app.
We use essential cookies for authentication and theme preferences. We use Vercel Analytics for basic, privacy-friendly usage metrics, and we record first-party usage events — such as feature usage and onboarding progress — in our own database to operate and improve the app.
We also use advertising measurement pixels from Meta (Facebook) and Reddit, paired with their server-side Conversions APIs, so we can tell which ads lead to sign-ups and spend our advertising budget effectively. These may set cookies and, on sign-up, share a hashed (SHA-256) version of your email address (and, for Reddit, IP address) with those platforms for conversion matching. We never share your tasks, notes, or other account content with them. If you visit from the EEA or the UK, these advertising trackers are disabled until you opt in through our cookie banner, and you can decline them entirely.
We may update this policy from time to time. Significant changes will be communicated via email or an in-app notice.
If you have questions about this policy, contact us at cody@layer3d.io.