DRAFT — needs lawyer review before publishing
Short version: the app itself collects nothing. What you log stays on your iPhone and, if iCloud is on, in your own private iCloud account. The app has no accounts and no analytics, and we cannot see what you log. The only thing we hold is an email address if you join our launch waitlist on this website (section 11). We do not sell anything.
1. What the app stores, and where
Seven to Seven stores the following on your iPhone, in the app's own on-device database (Apple's SwiftData):
- Your child's first name (or nickname), birth date, and due date if you enter one.
- Birth weight and current weight, feeding type, and the answers you give in the readiness check (for example feeding and weight gain, medical flags you tick, and whether your pediatrician is on board).
- Your plan: method, night schedule, night-feed windows.
- Your night logs: when your baby settled, woke, fed, and how long, the notes you type, and morning feed amounts. Each entry records whether it was tapped, estimated or edited.
- Your settings, such as coach tone.
iCloud backup. If you are signed in to iCloud and iCloud is on for Seven to Seven, the app also keeps a copy of this data in your own private iCloud database (Apple's CloudKit), under your Apple Account. That copy lets your history come back on a new iPhone and stay the same on your other devices signed in to the same Apple Account. It is stored by Apple, not by us, and only your Apple Account can open it. Everything is saved on your phone first; the app works the same without iCloud. Settings in the app shows whether backup is on.
[OWNER: until iCloud backup is switched on in the build (build plan task 12, Part B), the app keeps data on the phone only. Remove this note once it ships with iCloud on.]
This data is not sent to us by the app. The app does not talk to any server of ours. We never receive it, so we cannot read it, recover it, or delete it for you. If you delete the app, this data is deleted from your phone; the iCloud copy stays until you delete it (see section 7).
2. What we do not do
- The app needs no account, sign-in or email address.
- No analytics, advertising, tracking or crash-reporting libraries are in the app.
- We do not sell, rent or share your data, including waitlist emails.
- We do not build advertising profiles.
- The app does not use your microphone or camera and does not listen to or watch your baby. It is a logger and coach, not a monitor.
3. Payments
The paid plan is a one-time purchase handled entirely by Apple through the App Store. We never see your card or payment details. Apple tells us, through the app's purchase check on your device, whether the purchase is active. Apple's own privacy policy applies to the App Store and your Apple Account.
4. Things that leave your phone only when you tap
- Export. You can export a child's history as a PDF or CSV. The file is created on your phone and handed to the iOS share sheet. Where it goes (Files, Mail, Messages, AirDrop, a cloud drive) is your choice, and that service's own privacy terms apply from then on.
- Share card. After a first full night the app can make a picture with your child's first name, the number of nights, and hours won back. It is only shared if you choose to, each time, through the share sheet.
- Lock Screen and Dynamic Island. Night mode shows the current night status (for example a timer and a button) on your Lock Screen. Anyone who can see your Lock Screen can see it. You can change what your lock screen shows in iOS settings.
5. Backups
- The app's iCloud backup (section 1) is in your own private iCloud account. To turn it off, switch off iCloud for Seven to Seven in your iPhone's Settings (under your name, then iCloud); the app then keeps your data on this iPhone only.
- Device backups. If you use iCloud Backup or an encrypted computer backup of your iPhone, iOS may include the app's data in that backup. That is controlled by Apple and your device settings, not by us.
6. Children's information (COPPA, GDPR and similar laws)
The app holds information about an infant (name, birth date, weights, sleep and feeding logs). The app is for adults. It is meant to be used by a parent or guardian, and it is not directed at children and not made for children to use. We do not knowingly collect information from children.
Because this information stays on your device and in your own iCloud account, and is not collected by us, we do not hold personal information about children, and no consent flow is needed for us to process it. Under laws such as COPPA (US) and the GDPR's rules on children's data (EU/UK), the key points are:
- We do not collect it, transmit it, or use it for advertising.
- You, the parent or guardian, decide what to enter and whether to export or share it.
- Anything you share outside the app (see section 4) is your decision as the parent.
[LAWYER: confirm that on-device processing plus the parent's own private iCloud database (which we cannot access) falls outside "collection" for COPPA and outside controller status under GDPR for this design, and whether any additional notice is required in any launch country.]
7. Your choices and deleting your data
- Edit or delete any entry, or a child's profile, inside the app. With iCloud backup on, the change also reaches your iCloud copy.
- Delete the app to remove its data from your iPhone. If iCloud backup was on, your iCloud copy remains and comes back if you install the app again. To delete that copy, go to your iPhone's Settings, tap your name, then iCloud, then Manage Account Storage (the wording may differ), choose Seven to Seven and delete its data.
- Because we hold no copy, deleting from your phone and from your iCloud cannot be undone, so export first if you want to keep your history.
- A device backup you made earlier may still contain the data until you delete that backup.
8. Health information
You may enter health-related details about your baby, such as weight and feeding. This is stored only on your device and, if iCloud backup is on, in your own iCloud account. The app does not diagnose anything and does not share this information. It does not use Apple Health.
9. Security
Your data is protected by your iPhone's own security (passcode, Face ID or Touch ID, device encryption) and, for the iCloud copy, by Apple's iCloud security and your Apple Account. Please keep your device locked and updated. No method of storage is perfectly secure.
10. Changes
If this policy changes, we will update the date above and say what changed in the app's release notes. If a later version collects data, we will tell you before it does, and ask where the law requires it.
11. Launch waitlist (this website only)
If you join the launch waitlist on seventoseven.app, we collect:
- Your email address.
- Your baby's age range, only if you choose one (for example “4–6 months”). It is optional.
- The date and time you signed up.
We do not store your IP address or browser details with your signup. The form uses Cloudflare Turnstile to tell people from bots; Cloudflare handles that check under its own privacy terms.
Why. To email you when Seven to Seven launches and about big updates. Nothing else. No advertising and no profiles.
Where. In a database in the owner's own Cloudflare account (Cloudflare D1). We do not copy it to other services.
How long. Until you unsubscribe or ask to be removed. After launch we may delete the list.
Sharing. We do not sell, rent or share the list.
Removal. Email support@seventoseven.app from the address you signed up with and we will delete it. Every email we send will also have an unsubscribe link.
This section covers the website waitlist only. The app itself still collects nothing, and an email address is never needed to use it.
12. Contact
Seven to Seven
support@seventoseven.app
[POSTAL ADDRESS, if required in your launch countries]