Privacy Policy

Last updated: April 18, 2026

Tymbr ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our baby tracking application and related services on the web, iOS, and Android.

Intended Audience

Tymbr is intended solely for use by adults — parents, guardians, and caregivers who are 18 years of age or older — to track information about the infants and young children in their care. The app is not directed to, marketed to, or intended for use by children under the age of 13, and we do not knowingly allow anyone under 13 to create an account or use the service. See the "Children's Privacy (COPPA)" section below for more detail.

Information We Collect

We collect information you provide directly to us, including:

Account Information: Email address and password (or Google OAuth identifier) when you create an account.
Profile Information: Your name and optional profile details.
Child Information: Your child's name, date of birth, gender, and optional photo.
Caregiver Information: Email addresses and names of caregivers you invite to help track your child.
Device Identifiers: Push-notification tokens (when you enable notifications) so we can send timely reminders.

We also automatically collect limited technical information when you use our services, including device type, operating system, and app usage patterns, to diagnose issues and improve the product.

Sensitive Data & Health Data Disclosure

Tymbr is a baby tracking app. The primary purpose of the app is to let parents and caregivers log health and wellness information about the infants and young children in their care. Information that may be considered "Health Data" or sensitive personal information under applicable laws and app-store policies includes:

Sleep: sleep start/end times, duration, and stirring periods.
Feeding: breast, bottle, and solid-food feeding records, milk type, amount, and duration.
Diapers: diaper changes, including consistency, color, size, brand, rash, and blowout notes.
Growth Measurements: weight, height, and head circumference.
Temperature Readings recorded by the parent or caregiver.
Medicine Administration: medicine name, dosage, reason, and notes.
Pumping: breast-milk pumping amount, duration, and side (user-specific, not child-specific).
Bathing, Milestones, Memories, and other free-form notes you choose to log.

We use this Health Data only to:

Display your tracking history and generate patterns, summaries, and reports inside the app for your family.
Sync data in real time between the account holder and caregivers the account holder has explicitly invited.
Send optional reminders (for example, nap reminders) that you have enabled.
Diagnose crashes and improve product reliability using aggregated, non-identifying metrics.

We do not sell Health Data, use it for advertising, share it with data brokers, or use it to train machine-learning models. We never share Health Data with third parties except the limited service providers (described below) that are required to operate the app, and even then only under confidentiality obligations.

Google Calendar Integration

If you choose to connect a Google Calendar, Tymbr accesses your calendar events on a read-only basis (the calendar.readonly scope) solely to display those events as an overlay on your family calendar. Tymbr never creates, edits, or deletes your Google Calendar events, and connecting a calendar is entirely optional.

We use this Google user data only to provide the calendar-overlay feature. We do not sell it, use it for advertising, or transfer it to third parties except as necessary to provide this feature or as required by law. Tymbr's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect a calendar at any time from Settings, which removes the synced event data from Tymbr.

How We Use Your Information

Provide, maintain, and improve our baby tracking services.
Display your tracking history and generate insights about your child's patterns.
Enable real-time sharing with caregivers you authorize.
Send you important service updates and notifications you have opted in to.
Respond to your questions and support requests.
Protect against fraudulent or unauthorized activity.

Data Storage, Encryption & Security

We implement industry-standard safeguards to protect your account and Health Data:

Encryption in transit: All traffic between the app and our servers is encrypted using TLS (HTTPS).
Encryption at rest: Our managed PostgreSQL database and backups are encrypted at rest, and connections to the database require TLS.
Secrets management: Credentials, authentication secrets, and tokens are stored in AWS Systems Manager Parameter Store as encrypted SecureStrings.
Access controls: The database is network-isolated and reachable only from our application servers. Access to production systems is limited to authorized personnel.
Authentication: Passwords are hashed, and session cookies are signed and scoped to HTTPS.

Data Retention & Your Right to Delete

We retain your information for as long as your account is active or as needed to provide you services. You can delete your account and all associated Health Data at any time:

Inside the app: open Settings › Danger Zone › Delete Account.
Without opening the app: visit our web-based deletion form at tymbers.com/delete-account — you do not need to sign in.
By email: write to privacy@tymbers.com from the address on your account.

Upon a verified deletion request, we will delete or anonymize your account and associated Health Data within 30 days, except where we are required to retain limited records for legal or legitimate business purposes (for example, fraud prevention and tax records). Backups containing residual copies are overwritten on our regular backup rotation.

Data Sharing

We do not sell your personal information or Health Data. We share information only in these limited circumstances:

With Your Consent: when you invite caregivers to access your child's tracking data.
Service Providers: with trusted infrastructure providers that operate the service on our behalf (for example, AWS for hosting and database, Sentry for error monitoring, Firebase/APNs for push notifications). These providers are bound by contractual confidentiality and data-protection obligations.
Legal Requirements: when required by law, subpoena, or to protect the rights, property, or safety of our users or others.

Children's Privacy (COPPA)

Tymbr is a tool for adult parents, guardians, and caregivers to track information about the infants and young children in their care. The app is not directed to children under 13, is not marketed to children, and we do not knowingly collect personal information directly from children under 13 in compliance with the U.S. Children's Online Privacy Protection Act (COPPA) and similar laws.

Information about a child in the app is entered by the parent or authorized caregiver account holder, who maintains full control over that information and can review, correct, export, or delete it at any time through their account. If you believe a child under 13 has created an account with us, please contact privacy@tymbers.com and we will promptly delete the account.

Your Rights

Subject to applicable law, you have the right to:

Access: request a copy of the personal information we hold about you.
Correction: update or correct inaccurate information.
Deletion: request deletion of your account and personal data (see Delete Account ).
Export: download a portable copy of your data yourself via Settings › Your Data › Export my data, or request one by email.
Withdraw Consent: revoke caregiver access or other permissions at any time.

To exercise these rights, contact us at privacy@tymbers.com or use the settings inside the app.

California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete personal information, and the right to opt-out of the sale of personal information. As stated above, we do not sell personal information. To exercise your California privacy rights, contact us at privacy@tymbers.com.

International Users

If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. By using our services, you consent to this transfer.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Email: privacy@tymbers.com