Puddlekin Consumer Health Data Notice

Version 1.0 · Effective 2026-10-03

This notice is for everyone who uses Puddlekin. It is written to meet the Washington My Health My Data Act and similar Nevada and Connecticut rules. It sits beside our Privacy Policy. Baby care logs can be consumer health data, so we treat them that way.

Published by Torstein Skulbru, Norway (sole proprietor). Contact: privacy-puddlekin@tskulbru.dev.

What we do with health data

Without an account, your care records stay on your iPhone. We do not receive them.

If you turn on shared care or cloud restore (Premium), the records are uploaded to our service provider after you give explicit consent. See below.

1. Categories of data

Entered by you or another family member about a baby:

• feeds (bottle amount and milk type, nursing timing and sides), pumping
• sleep, tummy time and snuggles
• diaper changes (wet, dirty or mixed)
• notes you write
• baby nickname, optional birth date and time zone

Plus the account data needed to share it: display name, account ID, family role.

2. Why we collect it

Only to run what you use: logging, history, shared care, cloud restore, handover, trends and CSV export. We do not use it for advertising, profiling for sale or any other purpose.

3. Sources

You and the members of your family. Puddlekin does not read health data from HealthKit, other apps, a camera or any other source.

4. Who we share it with

Only our processors, and only if you turn on shared care or cloud restore:

• Google (Firebase), which hosts the database, sign-in and functions in the EU (Firestore eur3, Functions europe-west1). Google may process some data in the US.
• Members of your family, who see all babies and entries in the family.

RevenueCat receives purchase records and your account ID, never care data. Analytics and crash reports, if you opt in, never include care contents.

We do not sell consumer health data. We do not share it with ad networks or data brokers. We do not use geofencing around health facilities.

5. Consent and how to withdraw it

We ask for your explicit consent before any care data is uploaded. You can withdraw it by turning off shared care in the app, deleting your account, or (as owner) deleting the family. Deleting the app does not remove cloud data by itself. Analytics and crash reports are a separate choice you can turn off in Settings.

6. Your rights

You can:

• Access your data and get a copy: export CSV from the app.
• Delete it: “Delete all data on this phone”, account deletion, or family deletion in the app. Active server records are purged within 30 days.
• Correct it: every entry can be edited.
• Withdraw consent: as above.
• Ask us about this notice, or appeal a decision on a request: privacy-puddlekin@tskulbru.dev.

Washington residents who are not satisfied with our answer can contact the Washington Attorney General. Nevada and Connecticut residents can contact their state Attorney General.

7. How to exercise your rights

Use the app first. Otherwise email privacy-puddlekin@tskulbru.dev from the address you use with us, and say which account or family it concerns. We reply within the time the law requires.

8. Changes

We date and version every change and will ask for your consent again before any new sharing of consumer health data.