Privacy policy
The short version. DADA works without a user account and without a server of our own. Your entries about your child stay on your device. We never receive them, we cannot look at them, and we pass them on to no one. There are no analytics, advertising or tracking components built in.
1. Controller
Goran Delic
Switzerland
Email: info@dada-babytracker.com
The person named above is the controller for the processing of personal data in connection with DADA within the meaning of the Swiss Federal Act on Data Protection (FADP). Where the General Data Protection Regulation of the EU (GDPR) applies, it applies in addition.
2. Data you enter in the app
In DADA you record details about your child, for example the child’s name and date of birth, sleep times, nursing sessions, amounts drunk, diapers, solids, milestones, notes as well as weight, height and head circumference.
This information is stored exclusively locally on your device, in a file in the app’s protected storage area. It is not transmitted to us and not to third parties. There is no server on which this data would be stored, and no account it would be linked to.
Legal basis under the GDPR, where applicable: performance of the contract of use (Art. 6(1)(b) GDPR). Since health-related details about your child may constitute particularly sensitive data, you process them yourself and locally only; they are never disclosed to us.
3. Backing up your data
So that your entries survive a change of device or a reinstall, DADA can back them up to the personal cloud of your device manufacturer:
- iPhone and iPad: backup to your private iCloud database (Apple iCloud/CloudKit) and to your iCloud device backup. These areas belong to your Apple account. We have no access to them.
- Android: inclusion in the encrypted device backup of your Google account, provided you have enabled that feature. We have no access to it either.
The providers are Apple Inc. and Google LLC, or their European entities. Their privacy terms and your own cloud settings apply. If you delete all data in the app under “More → Danger zone”, DADA’s iCloud backup is deleted as well; if the device is offline at the time, the app carries out the deletion the next time it starts with an internet connection and restores nothing until then.
4. Partner sync on your own Wi-Fi
Partner sync lets you keep two devices in step so that both parents see the same picture. The following applies:
- Paired devices exchange their device name (for example “iPhone” or the name of your Android device) so that you can recognise them in the device list. The name stays on your devices.
- The connection runs directly between your two devices on the same local network. No server is involved and nothing leaves your home network.
- The transfer is encrypted. Both devices generate an ephemeral key pair for each session (ECDH on P-256), derive a session key from it together with the scanned code (HKDF-SHA256) and transfer the data using AES-256-GCM. The QR code also contains a fingerprint of the other device.
- The app only connects to addresses in private network ranges, never to addresses on the internet.
- Receiving is only active while the app is in the foreground. No network service is open in the background.
To find the paired device again, a service with a pseudonymous device identifier is announced on the local network (Bonjour or Network Service Discovery). That identifier contains no information about you or your child.
5. Permissions
| Permission | What for |
|---|---|
| Camera | Solely to scan the QR code when pairing with the partner device. No photos are taken or stored. |
| Notifications | For local reminders on the device, such as bottle freshness. No push messages are sent from outside. |
| Local network / internet | Only for partner sync on your own Wi-Fi and for the backup to your personal cloud. |
| Microphone | Only for the baby monitor, and only while you have switched it on yourself. The sound is encrypted and sent solely over your own Wi-Fi to your paired devices. Nothing is recorded or stored. |
On Android the store additionally lists technical permissions that come from the widget library used (start after reboot, wake lock, network state, foreground service). DADA does not use them for purposes of its own, with one exception: while the baby monitor is running, the foreground service and the wake lock keep it active. Not requested are, among others, location, contacts, photos and advertising identifiers.
6. No analytics, no advertising, no tracking
DADA contains no analytics, crash reporting, advertising or tracking components. No usage profiles are created and no identifiers are used for advertising purposes. If you submit a crash report on the App Store or Google Play, that happens solely through Apple’s or Google’s system functions and according to your own settings.
7. Purchases
DADA Premium is purchased through Apple’s App Store or through Google Play. Payment processing lies entirely with those providers; we receive no payment or account data. The app merely remembers locally whether a purchase exists. During partner sync this unlock is passed to your family’s devices as a time-limited entitlement, tied to your baby profile and without personal details.
8. This website
The website loads no content from third parties, uses no cookies, no fonts from external servers, no analytics tools and no social networks. That is why no consent banner is needed either.
When you open a page, our host processes technically necessary server logs. These usually record the IP address, the date and time of access, the address requested, the referring link and details about browser and operating system. Those logs serve secure operation and troubleshooting and are deleted automatically after a short time. Legal basis under the GDPR, where applicable: legitimate interest in secure operation (Art. 6(1)(f) GDPR).
The host is Infomaniak Network SA, Rue Eugène-Marziano 25, 1227 Geneva, Switzerland. The servers are located in Switzerland.
If you send us an email, we process your details solely to answer your enquiry.
9. Disclosure to third parties and abroad
We do not pass personal data to third parties, we do not sell data and we do not trade in data. Processing by third parties only takes place insofar as you use Apple’s or Google’s services yourself, that is for cloud backup, store delivery and purchases. This may involve processing in countries outside Switzerland and the EU, in particular in the United States. Those providers rely on their own safeguards for this, such as standard contractual clauses and the applicable adequacy decisions.
10. Retention and deletion
Your entries stay on your device for as long as you keep them. You can delete individual entries at any time or remove all data under “More → Danger zone”; this also deletes the sync pairing and DADA’s cloud backup. If you uninstall the app, the locally stored data is removed by the operating system. Backups in your iCloud or Google account are managed in the settings of the respective account.
11. Data security
The data sits in the app’s protected storage area. On iOS the file is additionally encrypted with the system’s file protection, on Android device encryption applies. Partner sync is end-to-end encrypted as described above and limited to the local network. Nobody can guarantee complete security against every conceivable attack; we make every effort to keep to the state of the art.
12. Your rights
Under the FADP and, where applicable, under the GDPR you have the right to information, rectification, erasure, restriction of processing, release of data or data portability, as well as the right to object to processing.
Since we never receive your entries, we cannot provide information about them. That data is in your own hands: in the app you can output it as a readable file at any time under “More → Export data” and delete it completely under “More → Danger zone”. For matters that concern us, such as email enquiries, you can reach us at info@dada-babytracker.com.
You may also lodge a complaint with a supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC), in the EU the data protection authority responsible for you.
13. Children
DADA is aimed at parents and other caregivers, not at children. The details about the child are recorded by you and remain in your hands.
14. Changes
We may adapt this privacy policy when the app or the legal situation changes. The version published on this page at the time is the applicable one.