Privacy Policy

Milkytime is responsible for the processing of your personal data in milkytime. For privacy requests (access, correction, deletion, etc.) please contact us at: [email protected] We will respond to your request within 30 days.

Locally stored data (on your device) The app stores the following data exclusively on your device: • Baby information: name, date of birth, gender and chosen animal avatar • Feeding records: time, amount, method and any notes • Pumping sessions: time, amount, side and duration • Growth measurements: weight and length per date • Night feeding schedule: time blocks per parent/caregiver • Names of parent/caregiver and partner This data is not sent to servers unless you activate partner pairing. We have no access to this local data. It is only available on the device on which the app is installed. When using partner pairing (optional) When you link the app with your partner's app, the following is processed via our server: • A randomly generated device ID (UUID) — not traceable to a person • A temporary pairing code (valid 5 minutes) • Feeding and pumping session records, for synchronisation between the two devices • Baby data (name, date of birth, gender) Synchronisation happens automatically: new records are sent directly to the server, and the app regularly checks the server for updates from the other paired phone. No account required milkytime does not require an account, email address or password. No third-party analytics or advertising services are used.

Local data Processing takes place exclusively on your own device, for your personal use. This falls under the household exception of the GDPR (Art. 2(2)(c)). Data with partner pairing • Performance of contract (GDPR Art. 6(1)(b)) — necessary to provide the synchronisation service. • Consent (GDPR Art. 6(1)(a)) — you activate the pairing yourself. You can undo this at any time via Settings → Family → Disconnect app.

Local data Stored on your device for as long as the app is installed. You can delete all data at any time via the app, or by removing the app. Because we have no access to local data, we are also unable to restore it. If you lose your device, delete the app, or perform a factory reset, your data will be permanently lost. We recommend making regular backups via iCloud or iTunes. Data on the synchronisation server Stored for as long as the family pairing is active. After disconnection or upon a deletion request, server data will be deleted within 30 days at most.

We do not sell or rent your data to third parties. We use a hosting provider for the synchronisation server. This party acts exclusively on our instructions, under a data processing agreement, and has no independent access to the content of your data. No transfer of personal data takes place to countries outside the European Economic Area (EEA).

All communication between the app and our server takes place via HTTPS with TLS 1.2 or higher. Data is stored locally in the secure iOS app sandbox, which is not accessible to other apps. The synchronisation server does not store passwords or personally identifiable information — only the anonymous device ID and the feeding data you have explicitly synchronised.

Under the GDPR you have the following rights: Right of access (Art. 15) You can request which data we process about you. Right to rectification (Art. 16) You can have incorrect data corrected. Right to erasure (Art. 17) You can request deletion of all your data. Local data you delete yourself via the app; server data is deleted upon request. Right to restriction (Art. 18) In certain cases you can request restriction of processing. Right to data portability (Art. 20) You can request a copy of your data. Right to object (Art. 21) You can object to processing based on legitimate interest. Right to withdraw consent (Art. 7(3)) You can undo the partner pairing at any time via Settings → Family → Disconnect app. Submit requests via: [email protected] — we respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority: autoriteitpersoonsgegevens.nl

milkytime is a native iOS application. We do not use: • Cookies • Web trackers or advertising trackers • Third-party analytics services (such as Google Analytics or Firebase) • Cross-app or cross-site tracking Apple's own App Store reports (anonymous download statistics) fall outside our processing.

When there are material changes to this privacy policy, you will be notified via the app. The version date at the top of this document indicates the most recent version. For changes relating to the legal basis of 'consent' (partner pairing), consent will be requested again.

Do you have questions about this privacy policy or do you want to exercise one of your rights? Milkytime Email: [email protected] We will respond to your request within 30 days.