Spot Privacy Policy

Spot is a baby-tracking app operated by Kinder Tracks Pty Ltd (ACN 701 188 525, ABN 22 701 188 525) (Kinder Tracks, we, us), based in Brisbane, Australia.

This policy explains what we collect, why, where it goes, and what you can do about it. We have tried to write it plainly. If anything is unclear, email us at hello@kindertracks.com.au.

We are bound by the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

1. The short version

• Spot stores the baby-tracking information you enter, your account details, and nothing else.

• We do not store photographs of children or caregivers. Not on our servers, and not in our database.

• We do not sell your data, share it with advertisers, or use it for advertising. Spot has no advertising, no tracking pixels, and no third-party analytics.

• Your family's data is stored in Australia.

• The two optional features that send data overseas, being AI text parsing and crash reporting, are off by default and only run if you switch them on. Signing in and checking your subscription also involve overseas providers, because the app cannot work without them (see section 3).

• You can export your data to a file, and delete your account, from inside the app.

2. What we collect

2.1 Account information

When you create an account we collect:

Data	Why we collect it
Your name	To show who logged an activity, and to greet co-caregivers on invites
Your email address	Your login credential, password resets, and service emails
Your password	Held by Google Firebase Authentication in hashed form. We never see or store your password
Account created and updated timestamps	Account administration
Your privacy choices (AI parsing on or off, crash reporting on or off)	To honour your consent settings
Your family’s timezone	So activity times and daily summaries show in your local time

2.2 Information about your children

You enter this. We store the child's name, date of birth, their sex or gender (optional, you can leave it blank), and whether the child was born early together with the original due date (optional, used to calculate corrected age).

We do not collect a child's address, school, government identifiers, biometrics, or photographs.

2.3 Tracking data

Everything you log about your child, being:

• Feeds: bottle or breast, time, duration, volume in millilitres, side, and bottle type

• Sleeps: start and end time

• Nappies: time and type (wet, dirty, mixed)

• Growth: height and weight measurements with dates

• Medication: medication name, dosage, and time given

• Temperature: body temperature readings, times, and any notes

• Free-text notes attached to any of the above

• Daily reflections: the free-text journal entries you write about your own day

• Input method: how each entry was made (typed, spoken, tapped, dragged, or a quick action)

• Medication list: your family’s custom list of medications

• Reflection prompts: the prompt shown with each daily reflection

Some of this is health information. Under Australian law, health information is sensitive information and receives extra protection. Growth measurements, medication records, temperature readings, and anything health-related you write in a note or reflection all fall into this category. By entering it, you consent to us handling it to provide the service.

A note about free text. Notes and reflections are open fields. You can write anything in them, including health concerns about your child or about yourself. We cannot predict or control what goes in them. Please be aware that whatever you write is stored, and that reflections are visible to every caregiver in your family, not just you. Activity notes are also visible to all caregivers.

2.4 Caregiver sharing and invitations

Spot lets you share tracking with a partner or other caregiver. To do this we store, for each caregiver in your family, their email address, display name, avatar colour, role (admin or caregiver), who invited them, and when they joined.

When you invite someone who is not yet a Spot user, we store the email address you entered for them and your display name, so we can greet them correctly when they accept. If the invitation is never accepted, that record is automatically deleted after 30 days.

2.5 Subscription information

Spot is a paid subscription with no free tier. We store your subscription status, plan, renewal or expiry date, trial end date, and a subscription customer identifier.

We never see or store your payment details. Card numbers, billing addresses, and payment processing are handled entirely by the Apple App Store or Google Play, under their own privacy policies.

2.6 What we deliberately do not collect

This list is as important as the one above. Spot collects:

• No photographs. Children are represented by “Birth Bloom” avatars, being generative artwork calculated on your device from the child's name, date of birth, and sex or gender where you have set it. No image is ever created, uploaded, or stored. Caregivers are shown as coloured initials. There is no photo upload anywhere in Spot, the app does not ask for camera or photo-library access at all, and our file storage is configured to deny all access. Infant faces are biometric-grade data, and we chose to collect none of it.

• No location data. Spot never requests or records your location.

• No contacts. We do not read your address book. Caregiver invitations require you to type an email address manually.

• No advertising or tracking identifiers. Spot contains no ad SDKs, no tracking pixels, and does not take part in any cross-app tracking. We do not ask for App Tracking Transparency permission because we do not track you.

• No third-party analytics. There is no Google Analytics, Mixpanel, Amplitude, Segment, PostHog, or similar in Spot. The only diagnostic tool is Google Crashlytics, which records crashes, not how you use the app, and stays off unless you turn it on (section 5).

• No push notification tokens. Spot does not currently send push notifications.

• No social media logins. Spot uses email and password only.

• One permission we do request. For voice logging, Spot asks for microphone and speech recognition access. This is used only to power your phone’s own speech recognition, described in section 4.

3. Where your data is stored

Your family's tracking data and account records are stored in Google Firebase (Firestore) in the australia-southeast1 (Sydney) region. Our server-side processing runs in the same Sydney region.

Two exceptions send data overseas, both to the United States, and both are optional and off by default:

Service	What is sent	Default	Purpose
Anthropic (Claude AI)	The text you type, with the name of the child you are logging for removed before it leaves your device, the current time, and which activity types you have enabled	Off	Understanding free-text entries like “fed 150ml at 2pm”
Google Crashlytics	Crash reports and error messages	Off	Diagnosing crashes

One further overseas flow is not optional, because the app cannot function without it:

Service	What is sent	Purpose
Google Firebase Authentication	Your email address and login credentials	Signing you in
RevenueCat	Your pseudonymous Spot user ID only, with no email, name or child data	Validating your subscription

We rely on Google's and Anthropic's contractual data protection commitments for these transfers. We take reasonable steps to ensure overseas recipients handle your information consistently with the Australian Privacy Principles, as required by APP 8.

4. How the AI features work

Spot can turn plain sentences into structured entries, so that “she fed for 20 minutes on the left” becomes a breastfeed record. We built these to send as little as possible:

• They are off by default. You must turn on AI parsing in onboarding or settings.

• Most parsing happens on your device. Spot tries to interpret your text locally first, and only calls the AI when it is genuinely unsure.

• The child's name is removed before the text leaves your device. Note that if you type someone else's name into an entry, such as a sibling or your own name, we cannot detect and remove it.

• Text only. We never send images. Spot has no camera or photo-library access at all, so there is nothing of the kind to send.

• We do not keep the text or the AI's responses. We keep two small counters. The first records how many characters were sent, which activity types came back, and what it cost us, so we can monitor accuracy and spend; it contains no text and no user identifiers. The second is a daily tally of your AI usage that carries your user ID, so we can apply fair-use limits to your account. Both are deleted after 7 days, and the daily tally is also deleted if you delete your account.

Anthropic deletes both the text you send and its response automatically within 30 days, and does not use them to train its models. If Anthropic’s automated safety systems flag a request as misuse, it may retain it for up to 2 years.

Correction logging. If AI parsing is on and you correct an entry Spot created, we record the original activity type, the corrected type, and which fields changed, so we can improve accuracy. This log contains no text and no identifiers, and is deleted after 7 days.

Voice input uses your phone's own speech recognition (Apple's or Google's), not ours. By default, your phone performs speech recognition on Apple’s or Google’s servers, which means the audio leaves your device. This happens under their privacy policies and is outside our control. Spot never receives or stores it.

5. Crash reporting

If you opt in, Spot sends crash reports to Google Crashlytics to help us find bugs. These contain error messages, the device model, and the OS version. They are not designed to carry your tracking data or anything you have typed.

Crash reporting is disabled at build time and stays off unless you switch it on. You can turn it off again at any time in Settings.

6. Who can see your data

• You, and every caregiver you have added to your family. Caregivers see all children, all activities, all notes, and all reflections in the family. There is no per-child or per-caregiver restriction. If you invite someone, they see everything.

• Us, only where genuinely necessary to operate the service, investigate a fault, or comply with the law. We do not browse user data.

• Our service providers, being Google (hosting, authentication, crash reporting), Anthropic (AI parsing, if enabled), RevenueCat and Apple or Google (subscriptions), strictly to perform those functions.

• Law enforcement or regulators, where we are legally required to disclose.

We do not sell your personal information, and we never will. We do not disclose it for any advertising, marketing, profiling, or data-broking purpose.

7. How long we keep it

Data	Retention
Account and family data, children, activities, growth, medications, temperatures, reflections	Until you delete your account or your family is deleted
Unaccepted caregiver invitations	30 days, then automatically deleted
AI parser counters (no identifiers), and a daily per-user AI usage tally (carries your user ID)	7 days, then automatically deleted (the per-user tally is also deleted when you delete your account)
AI correction logs	7 days, then automatically deleted
Aggregate service metrics (daily totals, no identifiers)	Indefinitely. These contain no personal information
Crash reports	Per Google Crashlytics' retention, typically 90 days
Server logs	Typically 30 days
Backups	Daily backups kept 7 days, weekly backups kept 8 weeks, point-in-time recovery covers the last 7 days

About backups. We keep encrypted backups so your family's records can be recovered if something goes wrong. When you delete your account, your data is removed from the live database, but copies remain inside existing backups until those backups expire. In the worst case that is up to 8 weeks after deletion, on top of the 30-day grace period, so deleted data is gone within about three months of a deletion request. Backups are stored in Australia in the same Sydney region as the live database, are never used for any purpose other than recovering from a failure, and expire automatically. We do not back up your login credentials at all.

Inactive accounts. If a subscription lapses and no one signs in to the family for 12 months, we may delete the family’s data. Please export your data first if you want to keep a copy.

8. Deleting your account and your data

Every Spot user can delete their own account from inside the app.

• If you are a caregiver (not the family admin): Settings, then delete your account. This removes your login, your profile, and your membership. Entries you logged remain in the family's records, because they are part of the other caregivers' history of their child, but they are no longer linked to a live account.

• If you are the family admin: you delete the family, which removes all children, all activities, growth, medication, temperature and reflection records, and your own account. There is a 30-day grace period during which you can cancel. After that it is permanent and irreversible. Other caregivers keep their logins, they simply no longer belong to a family.

Exporting first. You can export your family's data from inside the app before deleting. The export is a zip file containing several CSV files, created on your device and shared through your phone’s share sheet. It does not pass through our servers.

One thing to know about exporting reflections. The reflections file covers the whole family, not just the entries you wrote. If you export it, you are exporting your co-caregivers' reflections too, which may include personal things they have written about their own wellbeing. This mirrors how reflections already work in the app, where every caregiver can read every reflection. Please treat that file accordingly.

Deleting the app from your phone does not delete your data. You must delete your account.

9. Your rights

Under the Australian Privacy Principles you can:

• Access the personal information we hold about you;

• Correct anything inaccurate, out of date, or incomplete;

• Delete your account and data (see section 8, you can do this yourself in the app);

• Withdraw consent for AI parsing or crash reporting at any time in Settings;

• Complain if you think we have mishandled your information; and

• Ask us not to handle your information in a particular way.

Most of these you can do yourself in the app. For anything else, email hello@kindertracks.com.au. We aim to respond within 30 days.

If you are unhappy with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

10. Children's privacy

Spot is designed for parents and caregivers to use, not for children. You must be the parent or legal guardian of the child you are tracking.

The data in Spot is about children, entered by their parents. When you add a child, you confirm that you are that child's parent or guardian. We rely on that declaration. If you are not authorised to enter information about a child, do not do so.

We treat children's information as sensitive and take particular care with it, with no photographs, no location, no advertising, no profiling, no sharing outside your family, and Australian data storage.

If you believe a child's information has been entered into Spot by someone without authority, contact us at hello@kindertracks.com.au and we will investigate and remove it.

11. Security

• All data in transit is encrypted with TLS.

• All data at rest is encrypted by Google Cloud.

• Access is enforced by server-side security rules, so a caregiver can only ever read or write data belonging to their own family. These rules are automatically tested.

• Passwords are hashed and managed by Google Firebase Authentication. We never have access to them.

• Changing your email address requires re-entering your password and verifying the new address.

No system is perfectly secure. If a data breach occurs that is likely to cause you serious harm, we will notify you and the OAIC as required by the Notifiable Data Breaches scheme.

12. Changes to this policy

We may update this policy as Spot changes. If a change materially affects how we handle your information, we will notify you in the app or by email before it takes effect. The “last updated” date at the top always reflects the current version.

13. Website visitors

Our website is an information site about Spot, hosted by Shopify. It does not take account sign-ups and does not process payments. When you visit, our hosting and website provider automatically log standard technical information such as your IP address, browser type, and the pages you view, so that we can run and secure the site.

The site may set cookies that are necessary for it to work. If we add analytics or other cookies, we will describe them in a cookies notice on the site. Information collected through the website is handled separately from the information you enter in the app, is not linked to your Spot account, and is never sold or used for advertising. Shopify and some other website providers are located overseas, and we take reasonable steps under APP 8 for those transfers.

14. Contact us

Kinder Tracks Pty Ltd

ACN 701 188 525, ABN 22 701 188 525

Registered office: Spring Hill, Queensland 4000, Australia

Privacy enquiries: hello@kindertracks.com.au

Privacy officer: Claire Broesder

Spot is a tracking and record-keeping tool. It does not provide medical advice. See the Spot Terms of Use.