Sunbaby app privacy policy

Effective November 2, 2026

This policy covers the Sunbaby iPhone and iPad app. The sunbaby.ca website and its launch email list have their own privacy page.

Who we are

Sunbaby is made by brito.ai ("we", "us").

Person in charge of the protection of personal information: Junior Brito, Owner, junior@brito.ai. This person is responsible for how Sunbaby handles personal information and answers questions, requests and complaints.

What stays with you

Everything you put into Sunbaby is stored on your device: your due date or your baby's birth date, your province or state, the answers you give during setup, your timeline and tasks, your lists and hospital bag, daycare waitlists, your leave and money plans, your baby's feeding, sleep, diaper, growth and vaccine records, notes, and quiet mode.

If iCloud is turned on for Sunbaby, Apple keeps a copy in your private iCloud storage so it syncs to your other devices and survives a new phone. That copy is held by Apple under your Apple Account and Apple's privacy policy. We can't read it, search it or hand it to anyone, because we never receive it.

Much of this is health information: a pregnancy, a birth, a baby's growth and vaccines. Because it stays on your devices and in your iCloud, we don't collect it, store it, sell it or share it.

Sharing with your partner and family

You can invite a partner or family member to see and edit your plan, lists or baby log. Sharing uses Apple's iCloud sharing between your Apple Account and theirs. The shared information stays in your iCloud, and the people you invite see it on their own devices. We are not part of that exchange and can't see what is shared.

You choose who to invite and can stop sharing at any time from the app or from iCloud settings. When you stop, they lose access to the shared information.

The family gift page (only if you create one)

A gift page is an unlisted web link your family can open in any browser, with no app and no login. It is the one Sunbaby feature that uses our server, because a web page needs somewhere to live.

When you create a gift page, the app asks you to confirm, and we store only what the page needs: the items you choose to put on it, their store links, the nickname you give the page, and which items a guest marked "I'm buying this". We don't ask for your name, due date or contact details, and we don't store any identifier for you or your device. Whatever you type as the nickname is shown on the page, so leave out your full name if you prefer.

Anyone who has the link can see the page, so share the link only with people you trust. We ask search engines not to list gift pages. Guests are not tracked: no cookies, no analytics. Like any web host, Cloudflare processes each visitor's IP address to deliver the page and block abuse; we don't store it.

Turning the gift page off, or deleting all your data in the app, deletes it from our server, and from backups within 30 days. If a gift page is not updated or opened for 12 months, we delete it automatically. If you no longer have the app, email us the link and we will delete the page.

The gift page is hosted with Cloudflare, Inc., under a written data processing agreement. Cloudflare may store and process it outside Québec and Canada, including in the United States and other countries where it operates. While it is there it is subject to the laws of that country and may be accessed by its courts, law enforcement and national security authorities.

Purchases

Sunbaby Plus is sold through Apple. Apple handles payment, and we never see your name, card or Apple Account details. The app asks Apple whether Plus is active on your device; that check stays between your device and Apple. Apple gives us sales totals and anonymous, combined download numbers. Apple's privacy policy covers your purchase.

What we don't do

• No Sunbaby account, sign-up or login.
• No ads and no advertising or analytics code from other companies.
• No tracking across apps or websites, so Sunbaby never shows Apple's "Allow tracking" prompt (App Tracking Transparency).
• No location or GPS. You pick your province or state from a list.
• We never sell or rent personal information, and we never share it for targeted advertising.
• We don't use your information to train AI models.

Reminders are scheduled on your device by iOS and only if you turn them on.

If you choose to share crash reports and usage statistics with app developers in your iPhone settings, Apple sends us anonymous crash reports and usage statistics. You can turn that off in Settings, Privacy and Security, Analytics and Improvements.

Links to stores and official sites

Sunbaby links to stores (for example Amazon.ca or Target) and to official sources (for example Service Canada). Links open in your browser, and those sites have their own privacy policies. Some store links carry a labelled affiliate code, so the store can tell the visit came from Sunbaby and may pay us a small commission. As an Amazon Associate, Sunbaby earns from qualifying purchases. The link carries only our store code and the product, never anything from your plan, lists or baby log. When the store's site opens, it can see what any website sees, such as your IP address and its own cookies, under its own privacy policy.

See, export and delete your data

• See it. Everything you put into Sunbaby is in the app. A gift page shows everything we store about it. To ask about anything else we may hold, such as emails you sent us, write to us.
• Export it. In the app, open You, then Your data, then Export. You get a spreadsheet file of your lists and baby log. Export is free and always will be.
• Delete it. In the app, open You, then Your data, then Delete all my data. This removes the data on this device and in your iCloud, stops any sharing and deletes your gift page. You can also delete the app, and remove its iCloud data in iPhone Settings, your name, iCloud, Manage Account Storage (Manage Storage on older iOS), Sunbaby. If someone else invited you to their plan, this removes your access, but their copy stays with them.

Because we don't hold your app data, we can't recover it once it is deleted. To ask about a gift page or anything else, email junior@brito.ai. We answer within 30 days.

Children

Sunbaby is made for adults: expecting parents, parents and their families. It is not directed to children, and we don't knowingly collect personal information from anyone under 14 (under 13 in the United States). Information you record about your baby stays on your devices and in your iCloud, like the rest of your data.

Consumer health data (Washington, Nevada, Connecticut and other states)

This section is our consumer health data privacy policy under Washington's My Health My Data Act, Nevada's consumer health data law (SB 370) and similar laws.

• What we collect. We designed Sunbaby so that pregnancy, birth and baby information stays on your devices and in your iCloud, which we can't access. The one exception is the family gift page, if you create one. The items on it (for example a breast pump or nursing pads) could suggest that someone is expecting or has a new baby, so we treat gift page content as consumer health data. A gift page holds only the items, their store links, the nickname you choose and which items guests reserved.
• Sources and purposes. This content comes from you when you create or update the page, and from guests who reserve an item. We use it only to show the page to the people you give the link to, and to delete it when you ask.
• Who receives it. Cloudflare, Inc., which hosts the page for us under a written agreement and may use it only to provide that service. We don't sell consumer health data and don't share it with any other third party or affiliate. No third party collects consumer health data about your activities over time and across apps or websites through Sunbaby.
• Consent. We collect gift page content only after you choose to create a page and confirm it in the app. You can withdraw consent at any time by turning the page off, which deletes it.
• Your rights. You can ask whether we hold any consumer health data about you, ask for a copy, ask us to correct or delete it and withdraw consent, by emailing junior@brito.ai. Include your gift page link so we can find it. We answer within 45 days. If we deny a request, you can appeal by replying to the email that gives our decision; we decide the appeal within 45 days and tell you how to contact your state attorney general.

Your rights in the United States

Depending on where you live, laws such as the California Consumer Privacy Act give you the right to know what personal information we hold, to get a copy, to correct it and to delete it, and the right not to be treated differently for asking. We offer these rights to everyone in the United States, whether or not a given law applies to us. In the past 12 months, the only personal information we collected through the app was gift page content (the items, store links, nickname and guest reservations described above), which we use only to show the page and keep only as described above. If you email us, we keep your email address and message to answer you, for up to two years. We don't sell personal information or share it for targeted advertising, and we don't use sensitive personal information to infer anything about you or for profiling. You or someone you authorize can make a request by emailing junior@brito.ai. We may ask for details to confirm the request is yours. If we deny your request, you can appeal by replying to our answer; we decide appeals within 45 days and tell you how to contact your state attorney general.

Your rights in Canada

We follow Canada's federal privacy law (PIPEDA), Québec's Act respecting the protection of personal information in the private sector (as amended by Law 25), and similar provincial laws. You can ask to see or correct personal information we hold about you, to receive information you gave us in a structured, commonly used technological format, to withdraw consent, or to have it deleted, by emailing the person in charge above. We answer within 30 days.

If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada (priv.gc.ca), in Québec the Commission d'accès à l'information (cai.gouv.qc.ca), or the privacy commissioner of your province, for example in Alberta or British Columbia.

Outside Canada and the United States

Sunbaby is offered only in Canada and the United States. If you use it elsewhere, the same practices apply, and you have the rights your local law gives you; email us to use them. If European or UK data protection law applies to you, we rely on your request (to create and show a gift page) and on our legitimate interest in answering your emails.

Security and retention

Your app data is protected by your device's passcode and Apple's iCloud security. Gift pages are served over an encrypted connection and kept only as described in the gift page section above. Emails you send us are stored with our email provider, Google, which may store them outside Québec and Canada, including in the United States. We keep them only as long as we need them to help you, and no longer than two years. If a security incident ever affected information we hold, we would tell you in the app or on this website and notify the authorities, as the law requires.

Changes to this policy

If we change how Sunbaby handles information, we will update this page and the date at the top, and tell you in the app before the change takes effect. We will not use your information for a new purpose without asking you first.

Contact

Junior Brito, person in charge of the protection of personal information, junior@brito.ai.