Privacy Policy

Last updated: May 4, 2026

Lani ("we", "our", "us") is a baby tracking app for parents and caregivers. This Privacy Policy explains what data we collect, how we use it, and the choices you have.

1. Data we collect

When you create an account and use Lani, we collect:

• Account information. Email address (for sign-in). If you sign in with Google or Apple, we receive only your email and a unique account identifier — we do not receive your contacts, calendar, or any other Google/Apple data.
• User-entered profile data. Your name, your baby's name, date of birth, gender, and any photos you choose to set as a baby avatar (avatars stay on your device only and are never uploaded to our servers).
• Health and care logs. Feedings, diaper changes, sleep, growth measurements, vaccination records, sick-day entries, medication notes, milestones, and journal entries — i.e. the data you enter in the app to track your baby.
• Partner-sharing data. If you enable Partner Sharing, the same data above is synced to our cloud servers (Supabase) so your partner's device can read it.
• Subscription status. If you purchase Lani+, we receive a subscription identifier and entitlement state from Apple/Google via RevenueCat. We never see your payment card or billing address — those stay with Apple or Google.
• Crash and diagnostic data. We use Sentry to receive crash reports and performance metrics so we can fix bugs. Reports include device model, OS version, the user ID, and stack traces. They never include the contents of your baby logs.
• Advertising identifier (only if ads are enabled and you grant permission). If we enable ads in a future build and iOS users grant App Tracking Transparency permission, Google AdMob may receive your device's advertising identifier. See section 5 below for details.

2. How we use your data

We use your data only to provide and improve the app:

• Show you your baby's logs, summaries, and reminders.
• Sync your data between your device and your partner's device (if Partner Sharing is enabled).
• Process subscription purchases and grant access to Lani+ features.
• Diagnose and fix crashes, bugs, and performance issues.
• Respond to your support requests.

We do not sell your data. We do not share it with marketers, data brokers, or advertisers (with the narrow AdMob exception in section 5). We do not use your baby logs for any analytics, profiling, or training of AI/ML models.

3. Storage and encryption

Data on your device is stored in encrypted local storage (iOS Keychain / Android Keystore for authentication tokens, AsyncStorage for app data). Cloud data — used only when Partner Sharing is enabled — is stored on Supabase, encrypted in transit (HTTPS) and at rest. Each family's cloud data is isolated using row-level security: only members of your family can read or write your data.

4. Your rights

You can:

• Delete your account and all data. Open the app, go to Settings → Privacy & Data → Delete all data. This permanently erases all baby profiles, logs, and journal entries from this device AND from our cloud servers, including your account record. The action is immediate and cannot be undone.
• Export your data. Email support@getlani.app and we will provide a copy in a machine-readable format within 30 days.
• Correct inaccurate information. Edit any baby profile or log directly in the app. For account-level corrections, email us.
• Opt out of crash reporting. Email us; we will disable Sentry for your account on request.

If you live in the EU/EEA or UK, GDPR gives you additional rights including the right to access, restrict, or object to processing, and to lodge a complaint with your local data protection authority.

5. Advertising (current status: disabled)

Lani contains the Google AdMob SDK so we can offer a free tier supported by ads in the future. As of the current build, ads are turned off and no advertising data is collected. When ads are enabled in a future build:

• AdMob runs in COPPA-compliant child-directed mode (tagForChildDirectedTreatment) — no personalized ads, no behavioral targeting, no cross-app tracking.
• Ads served are general (e.g. baby products) based on broad context only.
• iOS users will see Apple's App Tracking Transparency prompt before the SDK can access the IDFA. Declining limits AdMob to anonymous frequency capping.
• Lani+ subscribers never see ads regardless of platform settings.

6. Children's privacy (COPPA)

Lani is intended for use by parents and caregivers, who must be at least 18. We do not knowingly collect personal information from children under 13. The data you enter ABOUT your baby is data you choose to record; we treat it with the same care as any other user content and limit its use to providing app features. We never share children's information with third parties.

7. Third-party services

We use the following service providers, each subject to its own privacy policy:

• Supabase — authentication and partner-sharing storage.
• RevenueCat — subscription management.
• Sentry — crash and performance reporting.
• Google AdMob — advertising (currently disabled in production).
• Apple App Store / Google Play — purchase processing and app distribution.

8. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent version. Material changes will be announced in the app before they take effect.

9. Contact

For privacy questions, data requests, or complaints, contact support@getlani.app. We respond within 7 days.