Peabud privacy policy

The short version

Your baby’s entries are stored on your phone and in Peabud’s database, so your family’s phones can share them. Only members of your family can see them in the app.
Peabud shows no ads, does not sell your data, and does not track you across other apps or websites.
Usage analytics and crash reports are each off until you turn them on in Settings → Privacy. Analytics never include your baby’s details, and crash reports have names, notes and emails removed.
You can save each baby’s entries as a CSV file, and delete your account in the app at any time.

Who runs Peabud

Peabud is run by Sunny Phung (“we”, “us”), who is responsible for the personal information described here. For anything about privacy, email admin@sunnystackhub.com.

What Peabud stores

To make an account and share one record between your family’s phones, Peabud stores the following in its database, hosted by Supabase.

Stored in Peabud’s database
What	Details	Why
Your account	Your email address, your password (stored only as a secure hash by Supabase Auth), the Google or Apple sign-in you linked, and your sign-in sessions. Supabase Auth also records each sign-in, sign-out and session refresh, with the time, your IP address and your browser or device, to protect accounts; these records are kept for 1 day.	So you can sign in, stay signed in, and keep accounts safe.
Your family	The family’s name, and for each member: their name as shown to the family, their role (owner, caregiver or viewer) and when they joined.	So the family knows who is in it and who may log.
Your babies	Name, birth date, sex, due date (optional, for corrected age) and the avatar face you chose.	To show each baby’s age, trends and growth charts.
Entries	Feeds, pumping, nappies, sleeps and their pauses, and growth measurements, with their times, amounts and notes, and who added or last changed each one. Entries imported from Nara Baby keep the caregiver name and the row id from the file.	The record itself, shared with your family.
Feed reminders	For each baby: whether the reminder is on, and after how long.	So every caregiver’s phone reminds at the same time.
Invite codes	The code, its role, who made it, who used it, and when it expires (after 48 hours).	To let someone join your family once.
Join attempts	Your account id, the time, and whether the code worked.	To stop people guessing codes (5 failed tries an hour).

Entries about feeding, nappies, sleep and growth are health information about your baby. The law treats it as sensitive, and we use it only to run Peabud for your family.

Peabud stores no photos or files on its servers. The only phone permissions it uses are notifications and, on Android, exact alarms and restarting reminders after the phone restarts, all for feed reminders and lock-screen timers. It never asks for your location, contacts, photos, camera or microphone.

How it is collected

From you, when you make an account, set up a family or a baby, and log entries.
From other members of your family, who log entries about the same baby and see the name you chose to show them.
From Google or Apple, if you sign in with them (see below).
From your phone, only if you turn on usage analytics or crash reports.
From a Nara Baby file, only if you choose to import one.

Why we use it, and on what basis

To run Peabud for you and your family: your account, family, babies, entries and reminders. We need them to provide the app you asked for.
Your baby’s health information: collected with your consent, which you give when you add a baby and log entries. You can withdraw it at any time by deleting entries, the baby or your account.
Usage analytics and crash reports: only with your consent, given by turning each switch on. Turning it off withdraws consent; it does not affect what was sent before.
To keep Peabud safe: limiting invite-code guessing, and finding and fixing faults.
To meet legal duties, such as answering a lawful request.

We do not use your information for advertising, and we do not use it to make automated decisions about you.

Who can see it

Your family. The members of a family see that family’s babies and entries. Owners and caregivers can add and change entries; viewers can only read them. Nobody outside the family can see them in the app.
Us, only to run the service: for example to answer a support request you send, to fix a fault, or to delete an account on request.
Our service providers, who process data for us, only on our instructions, and have no use of it of their own. Each has its own privacy policy:
- Supabase (database and sign-in);
- PostHog (usage analytics, only if you turn them on);
- Sentry (crash reports, only if you turn them on);
- Cloudflare (hosts this website).
When the law requires or allows it: to comply with a court order, subpoena or similar legal process; or when we believe in good faith that it is needed to protect someone’s safety, to investigate fraud, to protect our rights, or to answer a lawful request from a government agency. We share only what that requires.

We do not sell, rent or share your data for advertising. There are no ads in Peabud, and no data brokers.

You can sign in with an email and a password, with Google, or (on iPhone) with Apple. When you use Google or Apple, they confirm who you are and send Peabud your email address and, from Google, your name. Apple sends your name only the first time, and lets you hide your email behind a relay address. Peabud never sees your Google or Apple password. Google’s and Apple’s own handling of your sign-in is covered by the Google Privacy Policy and Apple’s Privacy Policy.

When you delete your account on an iPhone with Apple linked, Peabud also asks Apple to stop the sign-in. If that does not work, your account is still deleted, and you can remove Peabud yourself in your Apple Account settings.

Usage analytics (optional, off at first)

If you turn on Share usage analytics, Peabud sends anonymous counts of what you use to PostHog, in its EU cloud. These are the only events it sends:

a feed was logged, and whether it was a breastfeed, a bottle or solids;
a nappy was logged, and whether it was wet, dirty, mixed or dry;
a pumping session, a sleep or a growth measurement was logged;
the theme was changed, and to which theme;
a Nara import finished, with the number of rows in a rough band (such as 50 to 199);
a feed reminder was turned on.

PostHog adds the time, and details of the phone and app: the operating system and app version, the device model, screen size, language and time zone. Events carry a random id made on your phone, not your account. Peabud turns off PostHog’s location lookup from your IP address, and we turn on PostHog’s setting that discards IP addresses. There are no screen recordings, no automatic tracking of taps or screens, and no profile of you.

Turning the switch off stops sending at once and throws away the random id, so if you turn it on again later, the new events cannot be linked to the old ones.

Crash reports (optional, off at first)

If you turn on Send crash reports, Peabud sends a report to Sentry, in its EU region, when it hits an error in its own code. A report has the type of error, the error message, where in the code it happened, the device, operating system and app version, and a short trail of what the app did just before.

Before a report leaves your phone, Peabud removes names it knows (babies, caregivers, families), emails, ids, notes, codes, times and dates, amounts and other values. We turn on Sentry’s setting that stops it storing IP addresses. There are no screenshots and no screen recordings.

Never sent to analytics or crash reports

Your baby’s name, caregiver or family names, notes, food, amounts, weights and lengths, the times of entries, invite codes, email addresses, account or family ids, or any database row.

On your phone

Peabud keeps a copy of your family’s entries in a database on your phone, so it works without a connection. Changes wait there until the phone is back online.
Settings such as the theme, quiet hours and the two privacy switches are saved on the phone only.
Feed reminders are scheduled by your phone. The home-screen widget and the lock-screen timers show your baby’s name and the last feed, nappy or sleep, so anyone who can see your lock screen can see them too.
Signing out removes your family’s data from the phone. If some changes have not synced yet, Peabud warns you first; if you carry on, those changes are deleted.
Uninstalling Peabud stops it collecting anything from that phone. It does not delete your account or what is already in Peabud’s database; to remove that, delete your account (see How long we keep it).

Import and export

Nara Baby import: the file you choose is read on your phone. Only the entries you import are saved, like any other entry.
CSV export: the file is saved where you choose on your phone. After that it is your copy, and this policy no longer covers what happens to it.

This website

Peabud sets no cookies on peabud.app and uses no analytics or trackers here. Cloudflare, which hosts it, processes the technical details every website receives, such as your IP address and browser, to deliver the pages and protect the site from attacks, under its own privacy policy.

How long we keep it

Your account, families, babies and entries: for as long as you have an account. When you delete your account, it goes at once, by the rules on Delete your account: a family you were the only member of is deleted; in a family that continues, the entries you logged stay for the rest of the family.
Deleted entries: when you delete an entry, it is hidden from everyone in the family, and Peabud keeps the hidden copy until the family is deleted.
Backups: we do not keep backups of Peabud’s database, so something deleted cannot be brought back, by you or by us.
Usage analytics: up to 24 months from when they were sent. Crash reports: up to 90 days. Neither carries an account id, so we cannot find them for one person; they are removed when that period ends.
Support emails: up to 24 months after the conversation ends.
Information the law makes us keep: for as long as the law requires.

You can delete your account in the app, in Settings → Account → Delete account, or ask us by email.

Where data is held

Peabud’s database and sign-in (Supabase): Sydney, Australia.
Usage analytics (PostHog EU cloud): the European Union.
Crash reports (Sentry EU region): Germany.
This website (Cloudflare): Cloudflare’s worldwide network, including the United States.
Sign-in with Google or Apple: those companies’ own systems, including the United States.

Your account, families, babies and entries stay in Australia. Only the optional analytics and crash reports, the website’s traffic, and Google and Apple sign-in go overseas, to the places above. Before we use a provider outside Australia, we take reasonable steps to make sure it protects personal information in a way that meets the Australian Privacy Principles, including through its data protection terms with us.

Security and data breaches

Data travels between your phone and our providers over encrypted connections (HTTPS). In the database, every table checks family membership, so one family can never read another’s entries. No secret keys are stored in the app. Only the people who run Peabud can reach the database, and only to run the service.

No system is completely secure. If a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner as the law requires, with what happened, what information was involved and what you can do.

Children

Peabud is for parents and other adults who look after a baby. You must be at least 18 to make an account. Children should not use Peabud.

Peabud does hold information about babies: the parent or carer who adds a baby gives it, on the baby’s behalf, and controls it. It is used only to run Peabud for that baby’s family, never for advertising or profiling. A parent or carer can change or delete it at any time, in the app or by emailing admin@sunnystackhub.com.

Your choices and rights

See and correct: every member can see the family’s babies and entries in the app. Owners and caregivers can change them. To ask for a copy of everything we hold about you, email us.
Take a copy: Settings → Export to CSV saves all of a baby’s entries.
Withdraw consent: turn off analytics or crash reports in Settings → Privacy, or delete entries, a baby or your account.
Delete: in the app, or by email; see Delete your account.
Ask or complain: email admin@sunnystackhub.com. We will reply within 30 days. If you are not happy with our answer, you can contact the Office of the Australian Information Commissioner.

We will check that a request comes from you, usually by replying to your account’s email address, before we act on it.

Peabud is offered in Australia, and this policy is written for Australian privacy law (the Privacy Act 1988 and the Australian Privacy Principles).

Changes to this policy

If we change this policy, we will post the new version on this page with its effective date. Where the law requires it, we will ask for your consent before an important change takes effect. Earlier versions are available on request.

Effective from 14 October 2026.

Contact us

Questions about privacy, requests about your data, and complaints: admin@sunnystackhub.com.