Privacy Policy

Milk Nap Wee is an app for recording a baby's feeding, sleep, diapers and health. If you don't sign in, your records stay only on your phone and are never sent to us. If you sign in or share with family, we keep your records on a server so that your family's phones can stay in sync.

1. Who we are

The controller of your personal data is Onultax.

Contact for all privacy matters: hello@onultax.com

We have not appointed a data protection officer. You can write to us in English, Japanese or Korean.

2. Information kept only on your phone

• Baby information: name, date of birth, sex, birth weight, gestational age at birth and feeding type
• Records: feeding, pumping, sleep, diaper, solid food, temperature, medicine, growth, bath, tummy time, notes and diary entries; earlier versions of records you edited (used to undo changes); and deleted records in the trash
• Letters you write to your baby and letters between Mom and Dad
• Handoff notes and who confirmed them
• Vaccine check marks
• Your name or label and, if you share with family, the names and labels of family members
• Today's summary shown in the home screen widget
• Your settings

If you don't sign in, this information stays in the app's storage on your phone and is not sent to us. Tips based on your records (for example, a fever in a young baby) are also worked out on your phone.

If iCloud Backup or a computer backup is on, your iPhone's backup also includes this information (kept by Apple and you; we can't see it). On Android, device backup is turned off for this app.

3. Information we keep on the server when you sign in or share with family

• Account: the account identifier and email address we receive from Sign in with Apple or Google (if you choose Apple's "Hide My Email", the relay address Apple creates). If you sign in with Google, the name and profile photo URL that Google sends are also stored on the sign-in server (Supabase); the app does not show them. People who join with an invite code get an anonymous account identifier only, without an email address.
• Sign-in records: when you signed in, and the IP address and app information (user agent) of the device. Deleted when you sign out or delete your account.
• Consent record: the version of the server storage consent you agreed to and when.
• Family: each member's name or label (such as Mom or Dad), their role (parent or caregiver) and when they joined.
• Records: the baby information and records listed in section 2, who created each record and when it was changed.
• Invite codes: who created them, when, and who used them. A code stops working after 10 minutes or after one use.
• Times of wrong invite code attempts and the IP address used: used only to stop people from guessing codes.
• Access logs (IP address and time of access): kept separately by our server provider for up to 7 days for security.
• Shared letters: the text of letters you choose to share in Letters to other babies (with your baby's name changed to "our baby" and family names changed to Mom, Dad and so on), the sender's role, your baby's age in days, and your country group (Korea, Japan or elsewhere). Deleted right away when you stop sharing or delete the letter or your account.
• Mom talk: the text of posts you leave, days postpartum, region (Korea, Japan or elsewhere), app language, when you posted, and who liked each post and when. Deleted as soon as you delete the post or your account.
• Reports and hidden authors: the letters or Mom talk posts you report and why, the people whose posts you chose not to see, and when. Used only to hide reported posts and prevent repeat abuse.
• Letters: the text of letters you write to your baby or to the other parent, who wrote each one and when. Only the parents (Mom and Dad) in the family can read them; they are never sent to caregivers' phones. Deleted letters are erased after 30 days.
• Handoff notes: the text of each note, who it is for, who wrote it and when, and who confirmed it and when.
• Notification token: the push token of each phone that gets family notifications, the app language, time zone, whether family activity alerts are on, and whether the phone has a home screen widget. Deleted when you sign out or delete your account.

4. Why we use it

Only to keep the phones in the same family in sync, to bring your records back when you change or lose your phone and sign in again. We do not use your information for advertising, profiling or analytics, and we do not send it to other services or sell it.

We make no decisions about you based solely on automated processing.

5. Legal bases (EU/EEA and UK)

If you are in the EU/EEA or the UK, we rely on these legal bases under the GDPR and the UK GDPR:

• Providing sign-in, cloud backup and family sharing you ask for: performance of a contract with you (Art. 6(1)(b)).
• Keeping your baby's health-related records on the server: your explicit consent (Art. 6(1)(a) and Art. 9(2)(a)), which we ask for in the app before anything is uploaded. We record the version of the consent text you agreed to and when, on your phone and, once you sign in, on the server.
• Security, such as access logs and blocking invite code guessing: our legitimate interest in keeping the service and your data safe (Art. 6(1)(f)).

Giving us this information is optional. Without it, you can't use sign-in or family sharing, but you can still use every recording feature on your phone. You can withdraw your consent at any time by deleting your account, which also deletes the consent record, or stop further uploads by signing out (see section 13). Withdrawal does not affect processing before it.

6. Health-related information

Temperature, medicine, feeding, bowel movement and growth records, birth weight and gestational age are information about your baby's health, and pumping records are information about the recording caregiver's own health. We store them on the server only after you give separate consent when you sign in or join a family with an invite code. If you don't agree, you can still use every recording feature on this phone without signing in.

People you invite to your family see your baby's health records. Don't send your invite code to anyone else; you can remove members you don't want in Drawer > Family sharing.

7. Children's information

Milk Nap Wee is an app for parents and caregivers. It is not directed to children, and children do not use it or create accounts. A parent or caregiver enters the information about the baby.

For the US Children's Online Privacy Protection Act (COPPA): we do not knowingly collect personal information from children under 13. If we learn that a child has created an account, we will delete it. The information about a baby is provided by an adult and is protected as described in this policy.

The parent who creates the family consents as the baby's parent or legal guardian; invited caregivers record with the parent's permission. The parent exercises the rights over the baby's information.

8. How long we keep it

• When you delete your account, we delete your account information, sign-in records, consent record and family member information immediately. Records you used alone are deleted from the server as well.
• Records shared with your family stay with the family because they still need them (including the label of the person who created each record). If you delete your own records before you leave a family, their content is erased after 30 days as described below.
• Deleted records stay in the trash for 30 days, where they can be restored. After that, the content is erased on each phone and on the server, and only a "deleted" marker without the content remains (the record ID, which baby and what type of record it was, when it was deleted and who deleted it) so that other family phones learn about the deletion. When a deleted baby is erased, that baby's records are erased the same way.
• Deleted automatically on the server: wrong invite code attempts after 24 hours, and used or expired invite codes 30 days after use or expiry. Anonymous accounts with no family are deleted after 12 months without use.
• Records on your phone are deleted when you delete the app. Files you export and whole-phone backups follow the rules of wherever you keep them.
• No other law requires us to keep any of this information.
• How we delete: information on the server is deleted from the database so that it can't be recovered. Copies in our server provider's encrypted backups are overwritten when the backup retention period ends.

9. Who receives your information

• Our server provider, Supabase, as our processor (details in section 10).
• Expo (650 Industries, Inc.), which delivers family notifications through Apple (APNs) and Google (FCM) when someone in your family adds a record or a handoff note.
• Apple and Google, when you use their sign-in. They process that information under their own privacy policies.

We do not provide your personal information to any other company or person. Others see your information only when you choose it:

• Family members you invite see the family's records.
• When you export or share a file or a doctor visit summary, only the apps and people you choose receive it.
• If you choose to make a letter public in Letters to other babies, or choose to leave a post in Mom talk, anyone using Milk Nap Wee in the same region (Korea, Japan, or everywhere else) can read that letter or post. Your name and account are not shown. Letters you don't make public and your records are never shown.

The app may show partner cards that introduce baby products or services. We do not give your personal information or records to partners or advertisers to show these cards. If you tap a card and open a partner's page, that page follows the partner's own privacy policy.

10. Where your information is stored and international transfers

We are based in the Republic of Korea, and the server database is stored in Seoul, Republic of Korea (Amazon Web Services). Supabase runs the server for us. The contracting company is Supabase Pte. Ltd. (Singapore), and its affiliate Supabase, Inc. (United States) provides support, so Supabase staff in Singapore and the United States can access the server to run it and fix problems.

• Recipients: Supabase Pte. Ltd. (Singapore) and Supabase, Inc. (United States) · privacy@supabase.io
• Information: the information in section 3
• When and how: each time you sign in or sync, over an encrypted connection
• Purpose and period: running the server, until you delete your account
• Supabase's other sub-processors: supabase.com/legal/customer-resources/subprocessor-list

Transfers from the EU/EEA to the Republic of Korea are covered by the European Commission's adequacy decision for Korea (Commission Implementing Decision (EU) 2022/254 of 17 December 2021). Transfers from the UK are covered by the UK's adequacy regulations for Korea (The Data Protection (Adequacy) (Republic of Korea) Regulations 2022). For access from Singapore and the United States, Supabase's data processing addendum includes the EU Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) and the UK Addendum. You can ask us for a copy of these safeguards at hello@onultax.com.

Nothing is transferred if you don't use sign-in or family sharing. If you don't want this, don't sign in, or delete your account.

Family notifications are sent through Expo (650 Industries, Inc., United States).

• Recipient: 650 Industries, Inc. (United States) · privacy@expo.dev
• Information: notification token, baby's name, the label of the person who recorded, and the type of record (the text of handoff notes is not sent)
• When and how: each time someone in your family adds a record or a handoff note, over an encrypted connection
• Purpose and period: delivering the notification, only as long as delivery needs

If you turn off Family activity alerts in Drawer > Notifications, record alerts are not sent. Handoff notes addressed to you, and a silent signal with no content that tells a home screen widget to refresh, are still sent. Once you sign out, nothing is sent to that phone.

11. Sign-in services

Sign in with Apple and Google sign-in are handled by those companies. Milk Nap Wee uses the account identifier and email address. If you sign in with Google, the name and profile photo URL that Google sends are also stored on the sign-in server (Supabase); the app does not show them. We never receive your password. After deleting your account, you can also remove Milk Nap Wee from "apps connected to your account" in your Apple or Google account settings.

12. What we don't use

We don't use advertising identifiers, location, contacts, your photo library, the camera or the microphone. The app contains no advertising SDKs (code from ad companies), tracking or third-party analytics tools. We don't use cookies or similar automatic collection tools (in the app or in our web documents). Reminders such as feeding reminders are scheduled on your phone and don't go through our server. Family notifications (when someone in your family adds a record) are sent by our server through Expo (sections 9 and 10). Reminders can show your baby's name and feeding or sleep status on the lock screen; you can turn off previews in your phone's settings.

13. Your rights

You can view, correct and delete your records in the app at any time. You can download all records as a file from Drawer > Manage records > Import · Export. You can delete your account immediately from Drawer > Family sharing > Account > Delete account. The same screen shows your account number. If you joined as a caregiver, first tap Settings > Leave family, then follow the same steps.

Ways to withdraw consent:

• Server storage: Delete account deletes your account and consent record from the server. Account > Sign out stops this phone from syncing with the server (information already stored stays until you delete your account).
• Family activity alerts: turn them off in Drawer > Notifications.
• Public posts: tap Stop sharing on a public letter, or delete your Mom talk post. It comes down right away.

Depending on where you live, you also have the right to access, correct, delete or receive a portable copy of your information, to restrict or object to processing, and to withdraw consent. If you can't use the app, email hello@onultax.com. We will act within 10 days of confirming your request, and always within the time the law requires (for the GDPR, one month). We will never treat you differently for using your rights.

In the EU/EEA you can complain to your local data protection authority; in the UK, to the Information Commissioner's Office (ico.org.uk).

14. US state privacy laws

We do not sell or share personal information, as those terms are defined in the California Consumer Privacy Act (as amended by the CPRA) and similar state laws. We do not use personal information for targeted advertising or profiling. We use sensitive personal information, such as your baby's health records, only to provide the features you ask for, so there is nothing to opt out of or limit.

In the last 12 months we collected the categories described in sections 2 and 3: identifiers (account identifier, email address), health-related information about your baby (only with consent) and internet activity (access logs). The sources are you and the Apple or Google sign-in you use.

Retention: as described in section 8.

Residents of California and other states with similar laws can ask us to access, correct or delete their information by emailing hello@onultax.com. You can use an authorized agent; we may ask the agent to show your permission. If we decline a request, you can appeal by replying to our answer, and we will respond within the time the law requires.

15. Consumer health data (Washington, Nevada and similar laws)

This section is our consumer health data privacy policy under Washington's My Health My Data Act and similar laws.

• Health data we collect: the health-related records in section 6, only if you sign in or share with family.
• Why: to sync your records between your family's phones and back them up, as described in section 4.
• Source: you and family members you invite.
• Who receives it: our processor Supabase (section 10) and family members you invite. We never sell health data and never share it with anyone else.
• Your rights: you can confirm, access and delete this data and withdraw consent as described in section 13.

Tips the app derives from your records (for example, a fever in a young baby) are also health data. They are worked out on your phone and are never sent to us.

16. Users in Japan

For users in Japan, the Japanese version of this policy also explains the information required by Japan's Act on the Protection of Personal Information (APPI) about transfers to the Republic of Korea, Singapore and the United States. We ask for your consent to these transfers in the app before uploading anything.

17. How we keep it safe

Everything sent to and from the server is encrypted (HTTPS). On the server, only members of a family can read or write that family's records, and caregivers cannot change the baby's information. We do not open individual families' records unless it is necessary, such as when you ask us to or to fix a fault. If a security breach affects your information, we will notify you and the authorities as the law requires.

18. Changes

If this policy changes, we will tell you in the app and on this page at least 7 days before the change takes effect. If we start keeping more information or using it for new purposes, we will ask for your consent again (the app asks again when the consent version changes).