Privacy policy.
Effective October 16, 2026. This policy describes the Online edition of Our Little Carebook on Android and iPhone, including subscription processing in private testing. The Android and iPhone Online apps are in review and are not yet publicly available. Features vary by platform and build.
Using the separate Offline app? It has no cloud account or automatic caregiver sync. See Our Little Carebook Offline and its privacy and local-data deletion details. For support, tell us which edition you use.
Who operates the app
Our Little Carebook is operated by Salas Software LLC, a Texas limited liability company. For privacy questions or requests, email support@salassoftware.com.
Information used to provide the app
The app uses your email address, authentication credentials through Firebase Authentication, account ID, display name, optional profile photo, family membership and role, invitations, and join requests to provide accounts and family sharing.
Caregivers can enter a child's name, birth date, profile photo, growth measurements, feeding and sleep records, diaper changes, medication and other health information, milestones, notes, and other care activities. The app also stores timers, reminders, and milk inventory. Enter information only for children and families you are authorized to manage.
Family records and child and caregiver profile photos are stored using Google Firebase services so authorized family members can access them. Milestone photo files are stored separately on the device on Android and iPhone; they do not automatically sync to other caregivers. A backup you choose to export can include those milestone photos. Device or operating-system backups may also retain local app data according to your device settings; local storage does not mean every copy is excluded from device backups.
The app uses these records to display history, summaries, estimates, growth charts, reminders, and reports. Estimates and charts are informational features, not diagnoses or individualized medical instructions.
Who the app is for
The app is intended for adult parents and caregivers, not for children to create their own accounts. Child information is entered and managed by an authorized caregiver.
Optional device features
Photo and file selection lets you attach images or import records. Exporting produces files such as CSV, JSON backups, and PDF reports that may contain sensitive family information. These exports are not password-protected by the app. You control where you save or share them.
Voice logging uses your device's speech recognition service when you tap the microphone and grant permission. On Android, the app requests offline recognition, but the provider may use online processing. On iPhone, Apple speech recognition may process audio through Apple's services. Recognized text is used to prepare a care entry for your review. The app does not save raw voice recordings as care records. Your speech provider's privacy practices also apply; you can revoke microphone and speech permissions in device settings.
Notifications can display care information outside the app on either platform. Android widgets and timer notifications can display a child's name and recent care or timer information outside the app. Visibility depends on your device and notification settings. If you enable paired-watch summary sharing, the app supplies the child's name, recent bottle and diaper timestamps, and running timer types and start times to the paired watch. If you separately enable watch logging, the paired watch sends the chosen action, its time, and account/family/child identifiers to the phone for validation and saving. Bottle actions can include milk type, formula, and amount. A pending request stays on the watch until acknowledged or manually cleared; the phone keeps a short-lived duplicate-prevention receipt without full care history. Watch logging needs the phone app running and internet access to confirm a save. Voice logging is available in current Android and iPhone private builds. Android home-screen widgets are platform-specific. Watch availability depends on the installed build; watch features still awaiting device validation are not a release promise.
Who can receive information
Authorized members of your family can access shared family records according to their role. Firebase provides authentication and cloud database services. Your device's speech provider processes voice input when you invoke voice recognition. People and services you choose when exporting or sharing files can receive those files. Messages you send to support are handled through the support mailbox, hosted by Zoho.
The current app does not include advertising, Firebase Analytics, or Crashlytics. Infrastructure providers may process technical information to operate and secure their services. Firebase Authentication processes IP addresses and user-agent information for authentication security and abuse prevention. It keeps logged IP addresses for a few weeks. We do not use this information for advertising. See Firebase privacy information for its service-specific practices.
Subscriptions and private billing tests
The Online edition uses Apple App Store or Google Play purchases and RevenueCat to verify subscription access. These services process purchase and transaction identifiers, products, trial and subscription status, renewal or expiration information, and a billing customer identifier linked to your app account and family. Our Firebase/Google Cloud backend verifies this information and stores billing status and audit records separately from care records. Care entries, child photos, and voice recordings are not sent to RevenueCat for subscription verification.
Current billing tests use approved test accounts and sandbox transactions. Store payment details are handled by Apple or Google; we do not receive your full payment card number. An invited caregiver's access can depend on the family owner's verified plan. Store and RevenueCat privacy practices apply to their processing.
Deleting an app account does not cancel a store subscription. Manage or cancel it through the store where you subscribed. The current deletion flow does not automatically erase RevenueCat records or every billing audit record. Contact support for billing-data deletion assistance; transaction records may remain with the store or service provider under its applicable retention requirements.
Retention and deletion
The app retains care history by default rather than automatically deleting older entries. Family owners can delete individual activities and child records. Other caregivers have access according to their assigned role. Removing a caregiver's access does not remove the family's shared history.
Account deletion is available in Settings → Account & Security → Delete my account. It requires password confirmation. An owner with other family members must transfer ownership before deleting the account. Deleting the sole member's owned family also deletes that family's cloud child records and related family data through the deletion flow.
Account deletion replaces your structured author name and account identifiers with a generic deleted-caregiver value in surviving families you still belong to. Shared child-care values remain. Names typed into notes, previously exported copies, imported third-party attribution, and records in families you no longer have access to are not automatically removed; contact support for a review of those records. No claim of complete erasure from every copy is made.
The app's deletion flow removes local milestone photos for the deleted account on the device performing deletion. Copies on other devices and previously exported or shared files are not remotely erased. The app clears its local Firestore cache on the next launch after account deletion. It also clears the local widget/timer snapshot and paired-watch sharing consent during deletion. Copies already held by another device are separate. Firebase reports that Authentication information is removed from its live and backup systems within 180 days after account deletion is initiated. This is a provider timeline, not a promise that all copies of family records disappear at once. Other provider logs and backups follow the applicable service retention practices.
Requests and updates
Contact support@salassoftware.com to request access, correction, or deletion assistance. Our account-deletion page explains how to request deletion without the app. We verify account ownership before disclosing or deleting account information. Do not send passwords, verification codes, or password-reset links.
We update this page when our practices change and revise the effective date above. Material changes will be communicated as appropriate before they take effect.