Privacy Policy – BabyNest
Last updated: July 2026
BabyNest is a native iOS app (SwiftUI) for documenting daily life with babies and toddlers. This privacy policy describes what data is processed when you use the app and the website, on what legal basis this takes place, and what rights you have as a user.
1. Controller
Controller within the meaning of the GDPR:
Yari Fender
Zum Erlenbusch 66D
48167 Münster
Germany
Email: hello@babynest.one
2. Core Principle: No Own Servers, No User Accounts
BabyNest does not operate any servers of its own for storing personal user data. No BabyNest user accounts are created. Registration with an email address or password is neither required nor possible.
The app is used exclusively through the Apple ID or iCloud account already present on your device. BabyNest never gains access to your Apple credentials.
3. Local Data Storage
All data you enter is stored on your device.
The following categories of data may be recorded and stored: breastfeeding sessions (side, start, end, duration), sleep (type, start, end, duration, predictions), diapers (type, time), body temperature (value, time), bottle feeding (amount, type, time), vitamins (type, time), clothing settings, app settings (e.g. theme, enabled sections), and your baby's date of birth. If enabled, optional records of your own fluid intake, food intake and personal goals (such as fluid intake and calories) are also stored.
You can export all stored data at any time from the app settings. Whether and with whom you share exported data is entirely your decision.
Processing is based on Article 6(1)(b) GDPR (performance of a contract) and Article 6(1)(f) GDPR (legitimate interest in providing the app).
4. Synchronization via Apple iCloud (CloudKit)
To synchronize your data across your devices, BabyNest uses Apple CloudKit exclusively, a service provided by Apple Inc. Your data is stored in the private CloudKit database (Private Database) of your personal iCloud account. BabyNest itself has no access to this data; it is accessible only through your iCloud account.
Processing by Apple takes place in accordance with Apple's privacy terms for iCloud and CloudKit. All data remains within the Apple ecosystem. Further information is available in Apple's Privacy Policy at https://www.apple.com/legal/privacy/ and in Apple's iCloud information at https://support.apple.com/HT202303.
Synchronization requires an active iCloud account. Whether and to what extent you use iCloud is controlled through your device settings.
The legal basis for processing is Article 6(1)(b) GDPR (performance of a contract). Where special categories of personal data (such as body temperature) are synchronized, processing is based on your consent under Article 9(2)(a) GDPR, which you give by actively using iCloud synchronization and can withdraw at any time by disabling it.
5. Family Sharing (CloudKit Sharing)
BabyNest allows you to share data with other caregivers (for example, the other parent). This family sharing feature is based exclusively on Apple CloudKit Sharing (Shared Database). Sharing takes place through Apple's own sharing mechanisms; shared data is processed within the Apple ecosystem.
You decide whether, with whom, and for how long you share data. You can end an existing share at any time in the app or through Apple's sharing controls. BabyNest does not transfer any data to its own servers or to any other third-party servers as part of family sharing.
The legal basis is Article 6(1)(b) GDPR and — where special categories of data are involved — your consent under Article 9(2)(a) GDPR.
6. Apple Watch, Widgets and Live Activities
The BabyNest Apple Watch app, home and lock screen widgets, and Live Activities access only the local app data on your device or your own CloudKit data. No data is transferred to BabyNest servers or any other third parties in this context.
7. Website
The website babynest.one serves as an information page for the app. No cookies are set, no analytics or tracking scripts are loaded, and no user profiles are created. No external resources from third-party providers (such as CDN providers or external font services) are loaded when the page is visited.
8. No Advertising, No Tracking, No Profiling
BabyNest does not use any advertising networks, analytics services, tracking services, or other third-party analytics platforms. No cross-device or cross-user profiles are created. No personal data is sold or shared with third parties for advertising purposes.
9. Data Security
Your data on the device is protected by the security mechanisms of iOS. When synchronized via CloudKit, data is encrypted by Apple in transit and at rest on Apple's servers. Details of the security measures used by Apple can be found in Apple's iCloud security overview.
10. Your Rights under the GDPR
You have the right to access your stored data (Article 15 GDPR), to rectification of inaccurate data (Article 16 GDPR), to erasure of your data (Article 17 GDPR), to restriction of processing (Article 18 GDPR), and to data portability (Article 20 GDPR). Because your data is stored on your device and in your personal iCloud account, you can view, export, or delete it at any time directly within the app settings. You can additionally delete the app's iCloud data through the iCloud settings on your device.
Where processing is based on consent, you have the right to withdraw it at any time and without giving reasons (Article 7(3) GDPR), for example by disabling iCloud synchronization or ending a family share. Withdrawal does not affect the lawfulness of processing carried out up to that point.
You also have the right to lodge a complaint with a supervisory authority (Article 77 GDPR), for example with the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.
11. Privacy Contact
If you have questions about this privacy policy or wish to exercise your rights, please contact:
hello@babynest.one