SweetWonder

Privacy Policy

SweetWonder · last updated 24 September 2026

The short version: your records are kept so they can reach your other devices and the people you share a baby with. Nothing is sold, nothing is advertised against, and there is no analytics or tracking of any kind in the app. Milestone photos never leave your device.

Who is responsible

SweetWonder is made by Martin Donchev, in Bulgaria, who is the data controller for the purposes of the UK and EU GDPR. For anything in this policy, write to [email protected].

What is stored

Your account

When you create an account we store your email address, an account identifier, and your display name if your sign-in provider supplies one. You can sign in with an email and password, with Google, or with Apple. Sign-in itself is handled by Firebase Authentication; we never see or store your password.

What you record in the app

  • Your baby’s name, sex and date of birth
  • Sleep, feeds, nappies, awake time and temperature entries
  • Growth measurements, milestones, medicines, vaccinations and supply counts
  • Your sleep plan, appointments and reminder settings
  • Pregnancy details you enter: due date, antenatal visits, contractions, your own weight and blood pressure, hospital bag and birth plan lists
  • Pumping sessions and your milk stash
  • Your own mood check-ins

Some of this is health information about you and about your child. It is stored because storing it is the entire purpose of the app, and it is treated as data you have explicitly asked us to keep on your behalf.

What stays on your device

Milestone photos are never uploaded. They are held in the app’s own storage on the device that took them and are not included in any sync. Reminders are scheduled locally by your device; we do not send push notifications.

What is not collected

No analytics, no advertising identifiers, no third-party tracking software, no location data, and no contacts. Nothing about how you use the app is reported back to us.

Health data from Health Connect on Android

What we access

If you choose to connect Health Connect, SweetWonder requests read access to your step counts, sleep sessions and sleep stages, and heart-rate readings. We also read the associated dates, times and source app identifiers to show when the readings were recorded and where they came from. These are the adult user's health and fitness data, not the baby's records. They are separate from the health information you enter manually.

Why we access it and your permission

We use these readings to show your own daily steps and sleep totals for the recent seven-day overview, and your latest available heart rate with its time and source, in the personal health section. Access is optional and starts only after you grant the relevant permissions in Android's Health Connect permission screen. Only the data types you allow can be read. This integration reads existing records; it does not measure your health, write to Health Connect or request background health access.

Processing, storage and sharing

Health Connect readings are processed locally on your Android phone and held temporarily in memory for the health screen. SweetWonder clears that in-memory display when the screen stops or the signed-in account changes. These readings are not saved in the app's local database, uploaded to our servers or Supabase, sent to OpenAI, or shared with another caregiver. They are not used for advertising, tracking or sale. The account retention and cloud deletion periods elsewhere in this policy concern your saved, synced records, not these temporary Health Connect readings.

Turning off access and deleting data

You can refuse individual permissions or revoke SweetWonder's access at any time in Health Connect's app permissions. Without access, the corresponding readings are unavailable, but you can continue using the diary's manual entries. To delete the original health records, use Health Connect or the app that created them. Leaving SweetWonder, revoking access or deleting your SweetWonder account does not delete those original records. Contact [email protected] with questions about this processing.

Where it goes

We use a small number of processors, and nobody else:

  • Firebase Authentication (Google) — sign-in and identity only. It does not receive any of your baby or pregnancy records.
  • Supabase — the database and server functions that hold your synced records and make sharing between caregivers work.
  • OpenAI — only when you use the AI assistant. See below.

These providers operate outside Bulgaria, including in the United States, so your data is transferred internationally. Those transfers rely on the standard contractual clauses each provider offers.

The AI assistant

If you open the AI chat or ask for a written summary of a day, the app sends your baby’s profile and the relevant tracker entries, together with your question, to our server, which passes them to OpenAI’s API to generate the reply. This happens only when you ask for it. If you never open those features, nothing is ever sent.

Please do not type anything into the chat you would not want processed this way. The assistant produces general information and is not a clinician.

Sharing a baby

When you invite another caregiver, they can see and add to the records for the baby you shared — the daily entries, the supply count and the sleep plan. Your own pregnancy records, your weight and blood pressure, and your mood check-ins are not shared with them; those stay on your account. You can see who has access, and remove them, in the app’s settings.

How long it is kept

Your records are kept for as long as your account exists, because their whole purpose is to be there when you look for them. Settings → delete account destroys your sign-in and erases everything on the phone at once, and the synced copy on our server is erased on request within 30 days — deleting your account and data explains both steps and lists exactly what is removed and what is kept. Data already on another caregiver’s device, or in your own device’s backups, is outside our reach.

Your rights

Under the GDPR you may ask for a copy of your data, ask for it to be corrected or deleted, object to or restrict how it is used, and ask for it in a portable form. Most of this you can do yourself in the app — you can edit or delete any entry, export reports, and delete your account outright. For anything else, write to [email protected] and we will answer within one month. You also have the right to complain to your national data protection authority; in Bulgaria that is the Commission for Personal Data Protection.

Children

SweetWonder is for parents and caregivers, not for children, and accounts are held by adults. The records are about a child, but they are entered and controlled by you.

Security

Data in transit is encrypted. Records on the server are reachable only through a server function that checks who is asking, and the database itself is not open to the public internet. No system is perfect, and we do not claim otherwise.

Changes

If this policy changes in a way that matters, the date at the top changes with it, and we will say so in the app. Continuing to use SweetWonder after that means the updated policy applies.