Wobble — Privacy Policy
Last updated: 2 June 2026 Effective: 2 June 2026
Wobble is a baby tracker for tired parents. This policy explains what data we collect when you use the iPhone app, why we collect it, who we share it with, and the rights you have over it. It’s written to be readable. If anything in here isn’t clear, email us at [email protected] and we’ll explain.
The short version
- You log things; we sync them so both phones see the same view. That’s the entire product.
- We don’t sell your data. Not to advertisers, not to data brokers, not to anyone.
- No ads, no ad SDKs. No AdMob, no Meta SDK, no Branch — nothing tracking you across apps for advertising.
- Your baby’s real name never leaves your phone — because we never ask for it. Nicknames only.
- When you ask Wobble a question via the AI chat, identifying details are stripped on your device before the question leaves. Nicknames, contact names, anything personally identifiable.
- You can delete your account at any time. This wipes everything — your logs, the baby profiles you own — from our servers and your device.
Who we are
Wobble is operated by Wobble Labs UK Ltd (“Wobble”, “we”, “us”), registered at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
For the purposes of the UK GDPR, the EU GDPR, and similar laws, we are the data controller for the data described in this policy. You can reach us at [email protected].
What this policy covers
This policy applies to the Wobble iPhone app distributed via the Apple App Store, and to the backend services that power it. It does not cover websites or services we don’t operate, even if we link to them.
What we collect and why
We’ve kept the categories small on purpose. Here’s the full list.
1. Your account
When you sign up, we ask for your email address and a password so we can identify you across devices and let you share a baby profile with your partner. Authentication is handled by Supabase Auth (see Sub-processors).
We don’t ask for your name, phone number, or postal address.
2. Your baby’s profile
To make the app useful, you give us:
- a nickname for the baby (we never ask for their real name)
- their date of birth
- optionally, a feeding method preference
3. Your logs
The records you create as you use the app: feeds, sleeps, diapers, solids, pumping sessions, and medications (for the baby and, optionally, for you). Each log carries the time it happened, the values you entered (volume, duration, etc.), an optional note, and stamps that identify which baby and which parent created or last edited it. These stamps are what make partner sync work — both phones need to know who logged what.
4. Feedback you send us
If you use the in-app Send Feedback form, the text you write reaches us along with your app version and device model. This is purely so we can debug and reply. We don’t use it for anything else.
5. Crash reports
If you opt in to share crash reports with Apple (a system-level choice you make in your iPhone Settings), Apple shares anonymized crash data with us through App Store Connect. We use it to find and fix bugs. We don’t tie it to your account.
What we do NOT collect
- We do not collect your real name, your baby’s real name, your phone number, your address, your location, your contacts, your photos library, your browsing history, your search history, your social graph, or your health records from Apple Health.
- We do not use advertising identifiers (IDFA). We don’t track you across apps or websites.
- We don’t profile you for advertising. We don’t run ads.
About Ask Wobble
When you submit a question through the Ask Wobble AI chat, here’s what happens:
- Before the question leaves your phone, an on-device anonymizer strips your baby’s nickname and any contact names you may have typed.
- The anonymized question (plus the 14-day log summary that gives the AI context to answer) is transmitted through our Supabase Edge Function to Anthropic (the company behind Claude).
- Anthropic processes the question and returns an answer. Anthropic does not store the question or train on its content per their API terms.
- The answer is delivered back to your phone and saved to your chat history.
About your baby’s data
You are the parent (or guardian) using the app. All data about your baby is information you choose to enter on their behalf. We never collect data directly from a child. Wobble isn’t designed for use by children and isn’t marketed to children.
We treat the baby’s data with the same care as we treat yours — encrypted in transit, stored on the same access-controlled servers, deletable at any time, never sold, never used for advertising.
If you share a baby profile with a partner, both of you have access to all logs and the baby’s profile. The partner sees what you log; you see what they log. That’s the design.
How we use your data
We use the data above only for these purposes:
- To run the app: storing your logs, syncing them between phones you’ve authorised, displaying them in lists/charts/insights, and generating the PDF pediatrician report you can export.
- To personalise your experience: powering features like Ask Wobble’s context-aware answers, the home-screen briefing, and the age-aware logging wheel. These features use data you’ve already given us; they don’t reach for anything new.
- To support you: replying when you email us, investigating bugs you report, and processing account-deletion requests.
- To keep the service secure: detecting suspicious activity (e.g. unusual sign-in patterns) and protecting your account.
We do not use your data for advertising, marketing without your consent, profiling for third parties, or selling to data brokers.
Sub-processors
Wobble runs on top of services provided by other companies who process data on our behalf, under written agreements that bind them to the same privacy commitments. They are not “third parties” who use your data for their own purposes — they’re vendors acting under our control.
| Sub-processor | What they do for us | Where they store data |
|---|---|---|
| Supabase | Hosts our Postgres database, authentication, real-time sync, and Edge Functions | Ireland (eu-west-1) |
| Anthropic | Processes Ask Wobble questions and returns answers via the Claude API | United States (Anthropic’s processing infrastructure) |
| Apple | Distributes the app, provides TestFlight, and provides opt-in crash reports | Apple’s global infrastructure |
We list every sub-processor here. If we add one, we’ll update this list and (if material) push an in-app notice before the change takes effect.
Where your data lives
Your data is stored on servers operated by Supabase in Ireland (eu-west-1). If you use Ask Wobble, your anonymized question is transmitted to Anthropic in the United States for processing.
For users outside the EU/UK whose data is transferred into the EU, or for the transfer to Anthropic in the United States, we rely on the appropriate transfer mechanisms (such as Standard Contractual Clauses or the UK International Data Transfer Addendum) to make these transfers lawful.
How long we keep your data
- Active data (your account, baby profile, logs) is kept for as long as your account exists.
- When you soft-delete a log inside the app, it’s hidden from view but stays recoverable through the in-app undo flow and remains in your account until you delete the account.
- When you delete your account, we wipe your account, all baby profiles you own, all logs, and your authorship trail from our database.
- Feedback you’ve sent us is kept while it’s still useful for understanding past issues, then deleted on request.
Your rights
Under GDPR, UK GDPR, the California Consumer Privacy Act (CCPA), and similar laws, you have rights over your data. You can exercise any of these by emailing [email protected]:
- Access — request a copy of the data we hold about you. The in-app Settings → Export Data option gives you this immediately for the active account in JSON or CSV format.
- Correction — fix anything that’s wrong. Most of this you can do directly in the app.
- Deletion — delete your account and everything tied to it. Settings → Delete Account wipes everything, locally and on our servers.
- Restriction — ask us to stop processing your data for specific purposes.
- Portability — receive your data in a structured format you can take elsewhere (same export flow above).
- Objection — object to processing we do based on legitimate interest.
- Withdraw consent — for processing we do based on your consent, you can withdraw it at any time.
For California residents: you have the right to know what personal information we collect, to delete it, to correct it, to opt out of any sale or sharing (we don’t sell or share — see the no-sale declaration below), and to be free from discrimination for exercising these rights.
No-sale declaration. Wobble does not sell or share your personal information for cross-context behavioural advertising. We have not done so in the past 12 months and have no plans to.
If you believe we’ve mishandled your data, you can complain to your local data protection authority (in the UK, the Information Commissioner’s Office at ico.org.uk; in the EU, your member-state authority).
Children’s privacy
Wobble is a tool for parents and caregivers, who are adults. We don’t direct the app to children, and we don’t knowingly collect information from a child as a user.
The information you record about your baby is data you voluntarily enter as their parent or guardian. We treat that data with the same care as your own — encrypted in transit, never sold, deletable at any time. If you believe a child has been given access to the app and has created an account themselves, contact us and we’ll close the account.
Security
We protect your data in transit with TLS, and at rest using the encryption mechanisms our infrastructure providers (Supabase) make available. Authentication is via your email and password, stored as a salted hash; we never see your password in clear text. Row-level security policies in our database ensure that only you and partners you’ve explicitly invited can read or write your baby’s data.
No system is perfectly secure. If we ever experience a breach that affects you, we’ll notify you as required by law and tell you what happened, what we did, and what you should do.
Changes to this policy
If we make material changes to this policy, we’ll update the “Last updated” date at the top, and — for changes that meaningfully expand what we collect or how we use it — we’ll push an in-app notice before the change takes effect. Smaller wording changes won’t trigger a notification.
You can always read the latest version at wobblelabs.uk/privacy.
Contact
For privacy questions, support, or anything else, email [email protected].
Postal address:
Wobble Labs UK Ltd
71-75 Shelton Street
Covent Garden
London WC2H 9JQ
United Kingdom
This policy is written in plain English on purpose. If a section feels unclear or you’d like more detail on anything, please ask — we’d rather explain than have you assume.