Privacy Policy

Cradler (“Cradler”, “we”, “us”) is a baby sleep tracker for parents and caregivers. We keep this policy short because your time is not what we want to spend. If something below is unclear, email hello@cradler.app and a human will answer.

What we collect

From you:

• Email address (or an anonymous identifier if you sign in with Apple or without an email)
• Display name, family name, and the role you pick (Mom, Dad, Caregiver, etc.)

About your baby:

• Name, birth date, due date (for preemies), avatar color
• Sleep events you log — naps, night sleep, wake-ups, sounds played, free-text notes you choose to add
• Your preferences — clock format, day/night window, layout

Automatically:

• Crash reports and technical error logs (no personal content — just the stack trace)
• Subscription status from the App Store or Google Play (whether you're on trial, active, or canceled)

We do nottrack your location, contacts, photos, microphone, or advertising identifiers. We don't run ads.

Where it lives

Your data is stored with Supabase on Amazon Web Services. Connections are encrypted in transit (TLS) and data is encrypted at rest. Access is gated by row-level security, meaning your family can only read rows that belong to your family — enforced by the database, not just the app.

We are honest about this: Cradler is not end-to-end encrypted. We (and the infrastructure providers above) could technically read your data. We don't look, and we don't sell it, but we're not going to claim cryptographic impossibility when it isn't true.

Who we share it with

• Supabase / AWS — storage and sync infrastructure
• Apple / Google — subscription billing (they receive transaction info, never your baby data)
• RevenueCat — helps us verify your subscription status across devices (receives an anonymous identifier, not your email or baby data)
• Sentry — crash reporting (receives stack traces and device info; we scrub personal content)

That's the full list. No advertising networks, no data brokers, no analytics beyond the basic crash/error reporting above.

Your rights

• Access— export all your sleep data to CSV from Settings → Insights → Export anytime.
• Delete— Settings → Account → Delete account. Cascades through family, babies, events, preferences, subscriptions. We ask for confirmation because it's irreversible.
• Correct — edit any log from the rhythm timeline.
• Move — the CSV export is yours to keep, share, or import elsewhere.

If you're in the EU (GDPR), California (CCPA/CPRA), or Brazil (LGPD), these rights apply to you under your local law too. Email us to exercise any right.

Children

Cradler collects data about children, but not from them — the user is always an adult parent or caregiver. We follow COPPA and LGPD principles for children's data: minimal collection, parental control, easy deletion.

Retention

Your data stays while your account is active. When you delete, it is removed within 30 days (backups may take a little longer to rotate out).

Changes

If we change this policy materially, we'll email you at least 14 days before it takes effect. Non-material edits (fixing typos, clarifying a sentence) can happen without notice.

Contact

Email hello@cradler.app.