Privacy

Last updated October 25, 2026

Who we are

Ours is a baby log made in Toronto, Canada. If you have a question about your information, write to hello@oursbaby.com and a person will answer.

What we collect

• Your account: your email address, the name your family calls you, your country and province or state, and your settings (units, appearance).
• Your family: the family's name, who is in it and their role, and each baby's name, date of birth, due date and sex if you add them, and their picture choice.
• What you log: feeds, sleep, diapers, solids, medicines, temperatures, growth, activities, firsts and notes, with the time and who logged each one.
• Your baby's health record: appointments and checkups, vaccines, sick days, questions for the doctor and their answers, and each visit's short summary and to-dos. Visit notes and papers you scan are encrypted on your phone with your baby's own key before they reach our server, so only your family's phones can read them. We can't.
• Photos: Small previews of the photos you add are stored on our server in Montreal so your family's phones can show them. Full-size photos pass through it only to reach your family's phones, then are deleted. Only the people in your family you share them with can open them.
• Your devices: a notification token for each phone, so a partner's log can reach you in seconds.
• Reports: when you report a message or a note, or report a problem, Ours support receives what you reported, who sent it and when, and your name and email so we can write back.
• Crash reports, from test versions only: when a test version of the app (TestFlight, or a Google Play testing track) breaks, a report of what went wrong. Notes, entry details and names are removed before it is sent. The app from the App Store or Google Play sends none.
• Counts, never contents: to know whether Ours is working for families, we count, from what is already on our server, how many families started fresh or brought a Nara history, invited someone in their first two days, and were still logging after a day, a week and a month. Only the totals, never a family, a person or anything anyone logged, and your phone sends nothing for it. Turn off Count my family in, in Settings, Privacy, and your family is left out.
• The store sign-up: if you leave your email on oursbaby.com/get, that email, which kind of phone it was left from, and the words you agreed to and when. We use it once, to say Ours is in the App Store and Google Play. Write to us and we'll remove it.
• Server logs: basic records of requests, including IP addresses, used only to keep Ours running and secure. They are deleted after 7 days.

What we don't collect

No analytics or advertising tools, no location, no contacts, and no tracking across other apps or websites. Private entries, and the photos on them, stay on your phone and never reach our server.

No audio. The app in the App Store and on Google Play doesn't use the microphone: it can't record a visit or listen for a question. Recording a doctor's visit is being tested and isn't in it yet. When it comes, the sound will stay on your phone. It will never be uploaded, never sent to a speech service, and left out of your phone's backups. Ours will write out what was said only with your phone's own on-device speech recognition, encrypt the written words with your baby's key like your other visit notes, and draft a visit's summary on your phone from the words, never from the sound. You'll choose whether the sound is kept on your phone or deleted. We'll update this page before it arrives.

How we use it

Only to run Ours for your family: to sign you in, to show everyone in your family the same log, to deliver reminders and updates, and to fix things that break. Your baby's information is never used for advertising or research, never used to train AI models, and never sold.

Who can see it

The people in your family, in the roles you give them. Our server can read family logs, which is how every member sees them on any device. The health notes and papers encrypted with your baby's key are the exception: only your family's phones can open them. Everything travels encrypted between your devices and our server.

A few companies help us run Ours, and each sees only what its job needs:

• Our server is in Montreal, Canada, on a machine we run.
• Brevo sends sign-in codes and security notices, such as a note that your password changed, to your email address. Those are the only emails Ours sends you. It also carries the reports you send to Ours support.
• Apple and Google deliver notifications to your phone. A notification can include a family member's name, never your baby's log.
• Sentry receives crash reports from test versions of the app, and error reports from our server, with notes, entry details and names removed.

Because some of these services are outside Canada, your information may be stored or processed in other countries, including the United States, and may be accessible to courts and authorities there under their laws.

We don't sell or rent anyone's information, and we don't share it with anyone else unless the law requires it.

Keeping it and deleting it

We keep your information while you use Ours. You can export your family's whole log from Account, Settings, Your data, Export everything at any time, free.

Deleting an entry or its photo deletes the photo everywhere, including our server.

You can delete your account yourself from Account, Settings, Your data, Delete my account. Here is exactly what that removes. Copies in our backups are gone within 7 days.

The Nara photo helper

The photo helper at oursbaby.com/nara-photos/start/ runs in your browser. Your Nara email and password go straight to Nara, and your family's history and photos come straight to your device. Your family's data never passes through Ours: no entries, no names, no birthdays, no photos.

While it builds your file, the helper keeps it in your browser's private storage for this site, and deletes it once you've saved it, or the next time you open the helper.

To send your file to your phone, the helper and your phone each pass a short pairing note through api.oursbaby.com: the technical details two browsers need to find each other on your Wi-Fi, which can include each device's address on your home network. We keep a pairing for 10 minutes at most, delete it as soon as your phone connects, and never log it. The file itself goes straight from your computer to your phone over your Wi-Fi, encrypted, and never through Ours.

If something goes wrong, the helper sends us a short error report so we can fix it. It says which step failed, the error, your browser and its version, your operating system, the helper's version and counts (how many entries and photos were found, downloaded and matched). It never includes your sign-in, names, birthdays, entries, photos, file names or links. We don't keep your IP address with it, and we delete reports after 90 days.

Children

Ours is for parents and caregivers, not for children to use. The information about your baby comes from you and your family, and it is only ever shown back to your family.

Your choices

You can see everything we hold about your family by exporting it, correct any entry by editing it, and delete entries, a baby, or your whole account. For anything else, including a copy of your account details, write to hello@oursbaby.com. If you're in Canada and not happy with our answer, you can contact the Office of the Privacy Commissioner of Canada. If you live somewhere with other privacy rights, write to us and we'll honour them.

Changes

If this page changes, we'll update the date at the top and say what changed here.

October 15, 2026: the Nara photo helper sends a short error report when it fails (see The Nara photo helper above).

October 15, 2026: the Nara photo helper can send your file to your phone over your Wi-Fi, with a short pairing note through Ours (see The Nara photo helper above).

September 30, 2026: photos you add now reach your family's other phones through our server, and pumping is shared with your family unless you keep it private.

October 13, 2026: the apps in the App Store and on Google Play don't use the microphone; recording a visit is still being tested, and this page says what will happen when it arrives. Crash reports come only from test versions of the app.

October 10, 2026: what happens when you record a visit is now spelled out. The sound never leaves your phone, and the words are written out only by your phone's own speech recognition. The health record, and which parts of it are encrypted with your baby's key, is now listed.

October 5, 2026: you can sign in with a password. Passwords are stored only as a one-way hash, and when you choose one, only the first five characters of its hash are sent to Have I Been Pwned to check it against passwords leaked elsewhere. Ours emails you when your password changes.

Also September 30, 2026: our server keeps only small previews of photos; full-size photos pass through it to your family's phones and are deleted once they have them, or after 7 days. You choose who your photos are shared with.