Bcontrol

Privacy Policy

At Bcontrol we look after your baby's data as if it were our own. This policy explains, with no fine print, what data we process, why, where it is stored and what you can do with it.

Last updated: 2026-10-17

1. Who is responsible for your data

The data controller is Samuel Jesús Sánchez Robles, owner of the Bady brand, tax ID 71985346S, registered at La Tejerona, Gijón (Asturias). You can write to us at soportebcontrol@bady.es about anything related to privacy.

2. In short

  • Without an account, nothing leaves your phone. Everything you log is stored encrypted on the device.
  • With an account, your data is stored encrypted on servers in the European Union so it can sync between your phones and with the caregivers you invite.
  • We do not sell your data, there are no ads and we do not track you across apps or websites.
  • You can export your data and delete your account from within the app at any time.

3. What data we process

If you use the app without an account

The data you enter (your baby's profile, logs, journal, mood) is stored only on your device, encrypted with AES-256 and with the key kept in the iOS Keychain or Android Keystore. We never receive it.

If you create an account

  • Account data: your email address (or Apple's relay address if you choose to hide it), the identifier Apple or Google give us when you sign in, and the name and family role you choose (for example, "Laura, mother").
  • Baby data: name, date of birth, sex, weight and height, and the logs you make: sleep, feeds, diapers, medicine, temperature, growth, milestones and notes. Some of this is health data about a child.
  • Your wellbeing: your journal entries and mood check-ins, which may also contain health information.
  • Family: who belongs to each family, who manages it and who your partner is (to share Premium).
  • Subscription: whether you have Premium and until when. Payments are handled by Apple or Google; we never see your card.
  • Technical data: IP address and time of requests, used only to protect the service (for example, to limit sign-in attempts) and never linked to a profile.

Your baby's profile photo never leaves your phone.

4. Why we use it and on what legal basis

  • To provide the service (account, sync, sharing with caregivers, schedule predictions): performance of the contract you accept when using the app (Art. 6(1)(b) GDPR).
  • Health data about your baby and you: your explicit consent (Art. 9(2)(a) GDPR), given when you create your account, which you can withdraw at any time by deleting the logs or your account. By entering your baby's data you confirm that you are their mother, father or legal guardian, or are authorised by them.
  • Managing your subscription and sharing Premium with your partner: performance of the contract.
  • Security of the service and abuse prevention: our legitimate interest (Art. 6(1)(f) GDPR).
  • Complying with legal obligations, such as tax rules.

We do not use your data for advertising, we do not build commercial profiles and we do not make automated decisions with legal effects on you.

5. Who we share it with

  • The caregivers you invite. They can see and log the data of the babies in that family. They never see your journal or your mood check-ins. Whoever manages the family can remove a caregiver at any time.
  • Providers working on our behalf (data processors), under contract and only as needed:
    • Railway Corporation: hosting of the server and database, in data centres in the European Union (the Netherlands).
    • RevenueCat, Inc.: subscription status management.
    • Apple and Google: sign-in and subscription billing, under their own privacy policies.
    • Resend: delivery of the email with your sign-in code.
  • Authorities, when required by law.

Some of these providers are based in the United States. Any international transfer relies on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

6. How we protect your data

  • On your phone: AES-256 encryption with the key in the Keychain or Keystore, and your journal protected with Face ID if you turn it on.
  • In transit: encrypted connections (TLS).
  • On the server: every record is stored encrypted with AES-256-GCM; sessions are stored only as a cryptographic hash, so a copy of the database cannot be used to access any account.
  • Restricted access and rate limits against attacks.

7. How long we keep it

For as long as you have an account. If you delete it, we delete your account, your journal, your mood check-ins and any family with no one else left in it. If you managed a family with other caregivers, those babies' data remains available to them (it is their data too) and the family passes to your partner or, if there is none, to the caregiver who has been there longest. The provider's technical backups are deleted on their normal cycles. Technical access data is kept for up to 30 days.

8. Children

Bcontrol is designed for adults caring for a baby. It is not directed at anyone under 18 and we do not allow them to create accounts. A baby's data is always entered by their mother, father, guardian or an authorised caregiver.

9. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction, portability and to withdraw consent at any time:

  • In the app: edit or delete any log; export your data in Settings › Your data; delete your account in Settings › Account.
  • By writing to us at soportebcontrol@bady.es.

If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or your local supervisory authority.

10. Changes to this policy

If we change anything important, we will let you know in the app before it applies. The date of the last update is at the top of this page.