The diary is yours. The photos, letters and milestones are stored encrypted in your own iCloud, not with us. The Wall goes through our own server, but everything is encrypted on your phone first – we can never read a photo, a name or a comment. The app has no analytics, no advertising and no tracking. What our server does keep is described below.
When you add a photo, write a letter or mark a milestone, it is saved on your phone first. It is then backed up to your own iCloud account through Apple’s CloudKit, in a private area that only you can access.
That means we, who make the app, never see the content. The diary itself does not pass through any Babydagbok server – only the Wall goes through our own server, and it is encrypted on your phone before it is sent (more on that below). If you lose your phone, you restore the diary on a new one. It is safe in your iCloud account.
The app also works entirely without internet. When you are offline, everything is saved locally and syncs when you are back online.
Content is encrypted on your device before it is sent to iCloud, and it is stored encrypted there. Each photo file gets its own key. On your phone, the files are protected by iOS’s own file encryption, which locks them whenever the device is locked.
We recommend Advanced Data Protection. If you turn it on under Settings → your name → iCloud, the diary becomes end-to-end encrypted. Only your own devices then hold the keys. Not even Apple can read the content.
Without Advanced Data Protection your data is still encrypted, both in transit and at rest, but Apple manages the keys. That is the standard level of iCloud protection.
The Wall is meant to be shared with family. If you choose to share it, it goes through our own server, but everything is encrypted on your phone or in the browser before it is uploaded. Our server can never read a photo, a name or a comment. You share one private link. The people you invite open the Wall in the browser or in the app, without an account, and can view it and add their own photos. The name of whoever adds something travels with their photos and is encrypted.
The key that unlocks the photos lives only in the invitation link, after the # sign. That is the part of a web address that a browser never sends to a server. So our server never has the key.
The link is the key. Anyone who has the link can see the Wall, so share it only with people you trust, just as you would with a physical album. In the app you can see who has used the link and you can close someone’s access. You cannot take back what someone has already seen or saved.
What our server keeps:
Anyone who opens the Wall in a browser receives a cookie that lets the server recognise that device. The cookie is needed for the Wall to work, is not used for tracking, and lasts 400 days. The key is kept in the browser itself. The server uses the IP address only briefly, in memory, to limit abuse.
Where it is stored. The Wall’s server runs at Render. The encrypted files are stored at Cloudflare (R2). Both are processors working for us. They never have the key and so cannot read the content.
Deleting. If you delete a photo from the Wall, the encrypted file is removed from storage straight away. If you want us to delete everything that remains for your Wall, email hei@babydagbok.no.
The Wall is never shared publicly. The rest of the diary is never shared: the photo of the day, the letters, the milestones and the calendar stay private regardless.
Babydagbok Premium is a subscription you buy in the App Store. The payment itself happens with Apple. We never see your card number, your name, your email address or any other payment details. Apple handles those under its own privacy policy.
Who helps us with the subscription. To keep track of subscriptions we use RevenueCat, Inc. (USA) as a processor. RevenueCat verifies the purchase with Apple and tells the app whether you have Premium. Without this we could not give you what you paid for.
What data RevenueCat processes:
RevenueCat gets no access to the photos, letters, milestones or any other content in the diary. The same goes for the Wall. The content there is encrypted and is never shared with RevenueCat.
Why we process the data. We process it to deliver the subscription you bought: to give you access to Premium, to let you restore the purchase on a new phone, and to handle renewal, trial periods and cancellation. The legal basis is that it is necessary to perform our contract with you (Article 6(1)(b) of the GDPR and the UK GDPR).
We do not use the data for advertising, and we do not track you across apps or websites.
Transfers to the USA. RevenueCat stores the data in the USA. The transfer takes place under the EU–US Data Privacy Framework and its UK Extension, so the data has protection equivalent to that in the EEA and the UK.
How long the data is kept. Purchase data is kept for as long as you have or have had a subscription, and for as long as accounting rules require us to keep it. Apple keeps its own purchase records under its own rules.
Cancelling and deleting. You cancel the subscription in Settings on your iPhone under your name and Subscriptions, or via “Manage” under Babydagbok Premium in the app. Deleting the app or the diary does not stop the subscription. You must cancel that with Apple.
If you want us to delete your purchase data at RevenueCat, email hei@babydagbok.no. Please include your user ID, which you can find under “Manage” in the app. You also have the right to access, correct and delete your data, and to complain to a supervisory authority (see “Your rights”).
In the app you can tell us you would like the baby book, a printed album of the first year. It is not an order and there is no payment. It only means you would like an offer when the book is ready. The pre-order button is shown in the United Kingdom, Norway, Sweden, Denmark and the Netherlands, not in the United States or Canada.
How it works. The button opens a pre-filled email to hei@babydagbok.no in your mail app. You see the whole email and send it yourself. The app sends nothing on its own and has no separate pre-order service.
What we receive:
Anything else in the email is there because you wrote it.
Why. We use this only to send you the offer for the book and to tell you when it can be printed. The legal basis is that you asked for it and that it is needed before any contract is made (Article 6(1)(b) of the GDPR and the UK GDPR). We do not use your email address for newsletters or marketing.
Where it is kept. The email is kept in our inbox at Google Workspace, provided by Google Ireland Limited in Ireland.
How long. We delete the email once you have answered the offer, and no later than twelve months after your baby’s first birthday. If you change your mind, email hei@babydagbok.no and we will delete it straight away.
On your phone, the app only remembers that you have pre-ordered, so the button does not ask again. That is stored locally and sent nowhere.
When you open the app, it asks that same server one single question: is this version still good enough to use? The answer is the same for everyone and lets us stop a version with a bug we have fixed, without waiting for everyone to update on their own.
The question contains nothing about you. No account, no device ID, no cookie, nothing from the diary. We cannot see who asked, and we do not count the questions. If the app gets no answer, it carries on as before: it works just as well without internet.
The app does not use or ask for your location.
You can sign in with Sign in with Apple. We then never receive your password: Apple confirms who you are, and you can choose to hide your email address. Your name and email address are stored locally on your phone and in your own iCloud, like the rest of the diary.
We do not have a database of diaries and cannot look up you or your child. What our server does keep is described under the Wall above.
The newsletter exists only in the Norwegian version of the app. It is not offered in the English, Dutch, Swedish or Danish app, and we do not ask for your email address there. If you use the app in Norwegian, it may ask you once whether you want the newsletter.
It is entirely voluntary, it is separate from signing in, and if you decline you will not be asked again. If you say nothing, nothing happens. You type in the address yourself and are signed up straight away. You receive a confirmation by email. If it was not you who signed up, you can reply to it and we will remove you immediately.
We store your address, the time you said yes and the version of the consent text you agreed to. Nothing more. The legal basis is your consent (Article 6(1)(a) of the GDPR and the UK GDPR), which you can withdraw at any time. The sign-up goes through a Worker at Cloudflare. The list is held at Resend, our email-delivery processor; they send the letters on our behalf and do not use the address for their own purposes. Each sign-up also produces a message in our own inbox with the same details; that inbox is at Google Workspace. The address is never linked to your diary.
Every letter has an unsubscribe link at the bottom. When you press it, you are off the list at once. You can also write to us and we will remove you.
If you send feedback from the app, your own email app opens with a ready-made message. You decide whether it is sent. We then receive what you wrote, any screenshots you attached, and a line with the app version and device type, which helps us understand the problem.
Apart from the newsletter and the baby book pre-order, this email is the only case in which data we can read goes from you to us. We use it only to reply and to fix bugs, and we delete it when the matter is closed.
Everything above is about the app. The website is a separate matter. It is in Norwegian and uses Google Analytics to see how many people visit the pages and which ones are read, and only after the visitor has given consent. This is done with Google cookies, and Google processes the IP address as a processor. This English page does not load Google Analytics and sets no cookies. The fonts on this page are, however, loaded from Google Fonts, which means Google sees your IP address.
This applies only to the website. The diary, photos, letters and milestones in the app are not affected and never pass through Google.
On the front page you can leave your email address to get access to the app. That is voluntary – you do not have to fill in anything to read the website. If you enter the address, you receive a welcome email from us straight away.
We store the address and the time of sign-up. Nothing more. Delivery goes through Resend, our email processor; they send on our behalf and do not use the address for their own purposes. We also get a message in our own inbox at Google Workspace with the same details. This list is entirely separate and is never linked to the diary in the app – it knows nothing about you or your child.
If you want off the list, use “unsubscribe” at the bottom of the email, or write to hei@babydagbok.no and we will remove you. You can also ask to see or correct what we have stored.
You can delete the diary at any time under Settings → Delete the diary. We first move it to “Deleted” for 30 days, so you can change your mind. Within that time you restore it with Face ID.
After 30 days everything is permanently deleted: photos, letters and milestones disappear from your phone and from the iCloud area. You can also choose to delete everything immediately. If you delete the app without deleting the diary, the content stays in your own iCloud until you delete it yourself.
Before you delete, you can export everything: the letters as PDF and the photos as a zip file, in full resolution.
Babydagbok is made for parents, not for children. You, the adult, keep the diary. The content is about your child, but it is never shared further, never used for advertising and never analysed, not by us and not by anyone else. The app is not directed at children, and we do not knowingly collect personal information from anyone under 13 (or under 16 where local law sets that age).
Because the content is in your own iCloud and not with us, you already have full control: you can view, change, export and delete everything directly in the app, without asking us for anything.
For the data we receive or keep ourselves, the General Data Protection Regulation applies (the EU GDPR, and the UK GDPR together with the Data Protection Act 2018 for people in the UK). That data is the details around the Wall (invitation and access details and the notification token), your subscription at RevenueCat, the email you send us yourself and, if you have signed up, your email address for the newsletter or the front page. You can ask us for access, correction or deletion of this data, and for restriction of the processing, portability of your data, or to object. Write to us to do so. If you have given consent, you can withdraw it at any time. We reply within one month.
Making a complaint. You have the right to complain to a supervisory authority. The controller is established in Norway, which applies the GDPR through the EEA. Our lead supervisory authority is therefore the Norwegian Datatilsynet. If you live in the United Kingdom, you can also complain to the Information Commissioner’s Office (ICO). Transfers of UK data to Norway are covered by the UK’s adequacy regulations for the EEA.
If you live in the United States. Some US states, including California, Colorado, Connecticut, Virginia and Texas, give residents rights over their personal information: to know what we hold, to access, correct and delete it, and to opt out of the sale of personal information, of targeted advertising and of profiling. We do not sell personal information, we do not share it for cross-context behavioural advertising, we do not use it for targeted advertising or profiling, and we do not use sensitive personal information to infer anything about you. We will not treat you differently for exercising any of these rights. To make a request, email hei@babydagbok.no. We may need to confirm it is really you before we act, and you can ask someone to make the request for you. If we turn a request down, you can appeal by replying to our answer, and you can also contact your state attorney general.
If we change how the app handles data, we update this page and the date at the bottom. If the change is significant, we say so in the app before it takes effect.
If you have questions about privacy, write to hei@babydagbok.no. We read everything and usually reply within the same week.