Privacy Policy

Last Updated: August 19, 2026

1. Information We Collect

1.1 Personal Information You Provide

When you create an account and use Liko, we collect information you voluntarily provide:

1.2 Information Collected Automatically

When you use Liko, we automatically collect certain information:

• Device Information: Device type, operating system version, unique device identifiers
• Usage Data: Features used, time spent in app, interaction patterns
• Crash Reports: Technical logs and diagnostic information when the app crashes
• Analytics Data: Anonymized usage patterns and statistics

1.3 Information from Third Parties

Liko supports two ways to sign in: an email address and password that you choose, or Sign in with Apple. If you use Sign in with Apple, we receive the identifier Apple issues for you and the email address you elect to share — including Apple's private relay address if you choose to hide your real one. We do not offer Google sign-in and receive nothing from Google.

1.4 Device Permissions We Request

Liko asks for a permission only when a feature needs it, and the app works without them:

• Photo Library: only to let you pick a baby profile photo. Liko reads the single image you select; it does not browse or scan your library.
• Notifications: to deliver the reminders and timer alerts you enable.
• Face ID / Touch ID: to lock sensitive screens on request. Biometric matching happens entirely on your device by iOS; Liko never receives your biometric data.

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 Providing and Improving the Service

• Create and manage your account
• Enable baby tracking features and generate reports
• Sync your data across devices
• Provide personalized articles and recipes
• Process subscriptions and in-app purchases
• Schedule the reminders and alerts you've requested on your device

2.2 Analytics and Improvement

• Understand how users interact with the App
• Identify and fix bugs and technical issues
• Develop new features based on usage patterns
• Improve app performance and user experience

2.3 Communications

• Send service-related announcements
• Respond to your inquiries and support requests
• Send promotional communications (with your consent)

3. Third-Party Services and Data Sharing

3.1 Service Providers

Liko uses trusted third-party services to provide certain functionality. Each service has its own privacy policy governing their use of your data:

Liko does not use advertising networks and shows no third-party ads. We do not use Google Analytics, Facebook SDK, or any advertising or data-broker SDK.

3.2 Caregivers You Invite

Liko lets you share a baby's records with a partner, family member, or other caregiver. This sharing only ever happens because you start it:

• You invite a caregiver using their email address. We store that address in order to connect the invitation to their account.
• Once an invitation is accepted, that person can see and add entries for the baby you shared — including the tracking, health and photo data described above.
• You can revoke access at any time from the app. Revocation takes effect immediately, and the caregiver's device is notified and loses access to the shared records.
• Entries a caregiver created remain part of the baby's history after revocation.

4. Data Storage and Security

4.1 Data Storage

Your data is stored securely using Supabase's cloud infrastructure with the following measures:

• Data is encrypted in transit using TLS/SSL
• Data is encrypted at rest
• Regular automated backups
• Secure data centers with physical security measures

4.2 Offline Functionality

Liko is offline-first. Your entries are written to a local database on your device (PowerSync) and synced with our servers when you're online, so the app keeps working without a connection. Your baby's profile photo is also cached in a shared app container so the Liko home screen widget can display it without a network request. Local data is protected by your device's security features (Face ID, Touch ID, passcode), and removing the app removes it.

4.3 Security Measures

We implement industry-standard security measures including:

• Secure authentication protocols
• Regular security audits
• Access controls and monitoring
• Incident response procedures

5. Data Retention

We retain your data for as long as your account is active or as needed to provide you with our services. Specifically:

• Account Data: Retained until you delete your account
• Tracking Data: Retained until you delete your account or manually delete entries
• Analytics Data: Retained in anonymized form for up to 2 years
• Crash Reports: Retained for up to 90 days

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain certain information for legal or legitimate business purposes.

6. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

To exercise any of these rights, please contact us at click to reveal email. We will respond to your request within 30 days.

7. Children's Privacy

Liko is designed for use by parents and caregivers to track their children's development. The App is not intended for direct use by children. We collect information about babies solely from their parents/guardians for the purpose of providing baby tracking services. We do not knowingly collect personal information directly from children under 13.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

9. Notifications

With your permission, Liko shows notifications for:

• Feeding and sleep reminders
• Timer alerts for ongoing sessions
• Occasional encouragement and tips based on your recent entries

You can manage notification preferences in your device settings or within the App. Disabling notifications may affect certain features.

10. Analytics and Tracking

10.1 Analytics

We use PostHog to understand how people use Liko so we can fix problems and decide what to build next. We record events such as which screens you open, which features you use, and when errors occur. Once you sign in, these events are linked to your account identifier rather than being anonymous, which lets us reproduce a problem you report. Signing out unlinks the association on your device.

10.2 Session Recordings

We use recordings solely to diagnose bugs and improve the interface, access to them is limited to our team, and they are not sold or used for advertising. If you would prefer that we do not record your sessions, email us at click to reveal email and we will exclude your account and delete any recordings we hold for it.

10.3 Crash Reporting

Bugsnag collects a report when the App crashes or hits an unexpected error. A report contains device information (model, OS version), the technical state of the App at the moment of the crash, and — if you are signed in — your user identifier, email address and display name, so we can follow up on an issue you reported. Crash reports do not contain your baby's tracking entries or photos.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the categories of personal information we collect and how it's used
• Right to Delete: You can request deletion of your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• Do Not Sell or Share: We do not sell personal information and we do not share it for cross-context behavioral advertising. We do not sell your baby's data.

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR). Our legal bases for processing your information include:

• Consent: For optional features like notifications, session recordings and marketing communications
• Contract: To provide the services you've requested
• Legitimate Interest: For analytics, security, and service improvement

Temperature readings and medicine doses you record are data concerning health, which the GDPR treats as a special category. We process them on the basis of your explicit consent, given by choosing to enter them: the App works fully without them, and you can delete any entry at any time. Our servers are operated for us by Supabase; where data is transferred outside the EEA we rely on the European Commission's Standard Contractual Clauses.

You may withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Updating the "Last Updated" date at the top of this Privacy Policy
• Sending a notification through the App for material changes
• Posting a notice within the App

We encourage you to review this Privacy Policy periodically. Your continued use of the App after any changes indicates your acceptance of the updated Privacy Policy.

14. Third-Party Links

The App may contain links to third-party websites or services (such as articles or recipes). We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party services you access through our App.

15. Data Breach Notification

In the event of a data breach that affects your personal information, we will:

• Notify affected users within 72 hours of becoming aware of the breach
• Provide information about what data was affected
• Describe steps we are taking to address the breach
• Offer guidance on steps you can take to protect yourself