Privacy policy

THE SHORT VERSION

Your baby's log lives on your phone and in your own iCloud. It goes somewhere else only when you choose: to Poppy cloud, if you turn it on, to write the briefing and answer your questions; or to the people you invite to share it. There are no ads, no analytics, and no one at Poppyseed can see your log.

WHAT'S STORED

On your phone

Every entry you log — sleep, feeds, diapers, growth, medicines, moments and their photos — along with your child's name and birth date, your own name and email as you typed them, your School progress, and your conversations with Poppy. It's kept in a database inside the app that the Home Screen widget can also read.

In iCloud

The same log syncs to your other devices through your private iCloud database. Apple holds it under your Apple Account, and Poppyseed can't read it. Turn iCloud off for Poppyseed in Settings and it stays on the phone only.

Your account

Your name and email stay on this phone, unless you ask for our emails (below). If you sign in with Apple or Google, they confirm who you are and send back an ID that the app remembers; your Apple or Google password never reaches Poppyseed.

If you use a password instead, the password itself is never stored. A salted hash of it is kept in the phone's Keychain so the sign-in screen can check what you type, and it never leaves the device.

WHAT LEAVES YOUR PHONE

Nothing about your baby, by default

With Poppy cloud off, the daily briefing is written by the language model built into your iPhone, and nothing about your baby is sent anywhere.

With Poppy cloud on

The day's logged figures — feeds, sleep, diapers, weight, temperatures, medicines and recent moments, with your child's name and age — are sent to Poppyseed's own relay server and from there to Google's Gemini API, which writes the briefing and answers your questions. Anything you type into the Poppy chat, and any photo you attach, goes the same way.

The relay exists so the app never carries Google's API key. It adds nothing to what you send, keeps no copy of it, and counts only how much each install uses per day, against a random ID that isn't tied to you or your child. If you have Plus, the app also sends the App Store's signed record of your subscription so the relay can allow Plus's larger daily amount; the relay checks Apple's signature on it and doesn't keep it.

Google processes it under its paid API terms, which say it does not use the content to train its models. It is not the free tier, whose terms allow that. Google may retain data briefly to enforce its policies; see Google's Gemini API terms for the current details.

Sharing with caregivers

When you invite someone (a Plus feature), that child's log is shared with them through iCloud: it goes from your iCloud to theirs, and Poppyseed never sees it. They see everything logged for that child. Stop sharing from the account screen and their copy is removed from their phone the next time it syncs.

Alerts for the people you share with

When you log something for a child you share, your phone sends a one-line alert — like "Maya logged a bottle · 4 fl oz", never your baby's name — through Poppyseed's relay to Apple's notification service, so the other phones show it straight away. The relay keeps each phone's notification address, which shared children it follows, and its alert settings, so it knows where to send and when to stay quiet. It doesn't keep the alerts or anything else from the log.

Emails from us, if you ask for them

Emails about Poppyseed are off unless you tick Email me about Poppyseed, at sign-up or in Account. While it's ticked, your name and email address go through Poppyseed's relay to Kit (kit.com), the service that keeps our mailing list and sends the emails. Nothing about your baby goes with them, and the relay keeps no copy. Untick the box, or use the unsubscribe link in any email, and you're taken off the list. Kit keeps a record that you unsubscribed so you aren't added back by mistake.

Backups you export

The Export a backup button writes a file you choose where to keep. Once it leaves the app it's yours to protect.

WHAT WE DON'T DO

No advertising. No analytics or tracking. No selling or sharing of data. No account on a Poppyseed server — there isn't one. No emails unless you ask for them. No access to your contacts, your location, or your photo library beyond the pictures you choose to attach.

DELETING YOUR DATA

Deleting the app deletes the database on that phone. To remove the iCloud copy, delete Poppyseed's data under Settings → your name → iCloud → Manage Storage, or turn off iCloud for the app and delete it. Poppy cloud conversations are stored with the rest and go the same way.

THIS WEBSITE

getpoppyseed.com sets no cookies and runs no analytics or tracking. It's served by Cloudflare, which keeps standard request logs to run and protect the service.

CONTACT

Questions about privacy, or a request about your data: hello@getpoppyseed.com.