# Your Data, Your Control _Parent photos are used only to run your prediction and are deleted from our servers a few hours after it finishes — never before the prediction completes, and at least 4 hours after upload. The prediction itself — the report and the generated images — is removed from your account after 48 hours by default; you can choose 24 hours, 7 days or 30 days in Settings. Scientific mode sends no photos at all. Face ID / Touch ID app lock. Screen-recording and mirroring blocked. Jailbroken devices refused. Row Level Security at the database engine. Encrypted family sync. No tracking, no ads, no data selling._ - Source: https://proba.baby/en/privacy-security - Language: English - Last verified: v1.0.4 · 7 Sep 2026 - Encrypted Data - Face ID / Touch ID - Photos Deleted After Your Prediction ## Security Features Multiple layers of protection built into every aspect of the app - **What Happens to Your Photos** — Parent photos are used only to run your prediction and are deleted from our servers a few hours after it finishes — never before the prediction completes, and at least 4 hours after upload. The prediction itself — the report and the generated images — is removed from your account after 48 hours by default; you can choose 24 hours, 7 days or 30 days in Settings. Scientific mode sends no photos at all. Photos are never used for advertising or AI model training. - **Offline-First Architecture** — Local-first design: logging a feed, a symptom or a contraction writes to your device first and works with no signal at all. - **Biometric Authentication** — Face ID and Touch ID with configurable lock timeouts. Your biometrics are handled by Apple's Secure Enclave and never reach us — the app only ever receives a yes or no. - **Jailbreak Detection** — Blocks compromised devices entirely — no bypass option. Protects against disabled sandboxing, malware, encryption bypass, and code injection on jailbroken devices. - **Screenshot & Recording Protection** — App blocks usage while screen recording is active. Screenshots trigger privacy warnings on sensitive screens. App preview blurred in multitasking view. - **Encrypted in Transit and at Rest** — Encrypted in transit and at rest. Credentials are stored securely in the iOS Keychain on your device. ## Data Protection Database-level isolation and encryption for your family's data - **Row Level Security** — Supabase RLS enforces data isolation at the PostgreSQL database engine level. Even if application code had a bug, the database itself blocks unauthorized access. - **Encrypted Family Sync** — Family data is encrypted in transit and at rest. Row Level Security at the PostgreSQL level ensures only authorized family members can access shared data. - **No Tracking, No Ads** — No advertising, attribution or product-analytics SDKs. No cross-app tracking, no device fingerprinting — our privacy manifest declares zero tracking domains. Crash reporting runs through Firebase Crashlytics; Firebase Analytics is switched off, and our own product analytics are first-party and stay in our backend. We earn from credit purchases and from supporters — never from your data. ## Your Rights and Our Safeguards What you can do from inside the app, and what protects your data underneath - **Encryption and App Lock** — Face ID / Touch ID app lock; data encrypted in transit; iOS data protection at rest. No advertising, attribution or product-analytics SDKs — crash reporting uses Firebase Crashlytics and Firebase Analytics is switched off. - **Your Rights, Everywhere** — You can delete your account from inside the app (the policy commits to removing personal data within 30 days) and export your account data; refunds are handled through Apple. We extend the same rights to everyone who uses ProbaBaby, not just EU residents: access, export, erasure, and objecting to or restricting processing. For anything the in-app export does not cover, email us and we will respond within 30 days. - **We Never Sell Your Data** — There is no data sale to opt out of: we do not sell or share your personal information, and we run no advertising, attribution or product-analytics SDKs. ProbaBaby is paid for by credit purchases and by supporters — never by your data. ## Your Data Rights Full control over your personal information — extended to all users worldwide - **Access & Export** — Export your account data from the app in JSON or plain text, free of charge. For anything the export does not cover, email us and we will respond within 30 days. - **Data Portability** — In-app export covers your account details, credit balance and recent predictions, in JSON or plain text. For your pregnancy, baby and visit records, the richer route is the PDF suite — Doctor Visit and Pediatrician Visit summaries, shareable by QR link that expires in 24 hours and opens once. - **Permanent Deletion** — Delete your account and your data from the app, behind a two-step confirmation. Deletion runs as a server-side sweep across your records and then removes the account itself; all personal data is removed within 30 days. It cannot be undone — export anything you want to keep first. ## FAQ **How long do you keep the photos I upload?** Parent photos are used only to run your prediction and are deleted from our servers a few hours after it finishes — never before the prediction completes, and at least 4 hours after upload. The prediction itself — the report and the generated images — is removed from your account after 48 hours by default; you can choose 24 hours, 7 days or 30 days in Settings. Scientific mode sends no photos at all. While the run is in flight, photos sit in a private, non-public storage bucket, and every automatic deletion is written to an audit log. **Can ProbaBaby employees see my personal data?** Row Level Security at the PostgreSQL level means an ordinary signed-in session can only ever read its own rows — so one user can never reach another's data, even if application code had a bug. Day to day we work from anonymized, aggregated metrics. A small number of admin tools can act on an individual account for support, refunds and account deletion; those actions are role-gated and logged. **Is my data encrypted even from ProbaBaby?** Your password is never stored in readable form — authentication is handled by Supabase Auth, which stores a one-way hash. Sensitive data is encrypted in transit and at rest. Some data is reachable by our systems for features to work (family sharing logic, for example), but always behind PostgreSQL Row Level Security, so only authorized users can read it. **Is my data shared with third parties?** We never sell your data. Everything that touches it is infrastructure: backend and storage, the AI models that read the photos and generate the baby images in the photo modes, Apple StoreKit for payments, crash reporting, and Google Sign-In if you choose it. Our Privacy Policy names each processor. Firebase Analytics is switched off. No advertising, attribution or product-analytics SDKs; no marketing partners. **How can I delete my data?** Profile → Delete Account, behind a two-step confirmation. Deletion runs as a server-side sweep across your records and then removes the account itself; all personal data is removed within 30 days. It cannot be undone — we recommend exporting anything you want to keep first. **What happens if ProbaBaby gets hacked?** Multiple layers protect you. Data is encrypted at rest, so stolen storage is unreadable ciphertext. Row Level Security blocks cross-user data access. Encryption in transit protects your sessions. If a breach ever affected your data, we would notify affected users without undue delay. **Do you use my data for AI training?** Parent photos are never used to train AI models: the photo-analysis step runs under paid-tier API terms behind an explicit consent box, and Scientific mode sends no photos. Our Privacy Policy names each processor, and the image-generation providers operate under API terms that restrict training use as well. **How does offline-first protect my privacy?** Your logs are written locally first, so the app works with no signal. What syncs is your tracking data, so your family and your other devices stay in step — plus first-party usage events that record which action happened, never the content of your journal, photos, measurements, symptoms or notes. **What if I lose my phone?** If Face ID is enabled, your data is biometric-protected. Use Apple's Find My to erase the device remotely. If cloud sync is enabled, your data is backed up (encrypted) and will restore to a new device when you sign in. **Can my employer or insurance company see my pregnancy data?** No. We never share your data with employers, insurance companies, pharmaceutical companies, advertisers or data brokers. The only third parties that ever touch your data are the essential infrastructure providers named in our Privacy Policy — backend and storage, the prediction models, App Store payments and crash reporting — none of which have advertising, insurance or employment relationships. Your pregnancy data is never monetized. --- ProbaBaby (listed on the App Store as “Pregnancy & Baby Tracker - PB”) is a free iPhone, iPad and Apple Watch app for pregnancy, newborn and postpartum tracking, built for twins, in 32 in-app languages, with an optional AI baby-face prediction that computes Mendelian genetics (Punnett squares) from the traits you enter before any image is generated. Tracking, tools, PDF reports and family sharing are free; only AI predictions use credits — 5 starter credits cover your first Scientific prediction — and no subscription is required. Requires iOS 26 or later. Not available on Android.