Privacy policy

Last updated: October 4, 2026

1. About BabiFable

BabiFable is operated by Brownlie Creative Pty Ltd, trading as BabiFable, ABN 68 702 223 005, ACN 702 223 005. In this policy, “we”, “us” and “our” refer to that company.

This policy explains how we handle personal information through our app, website, online store and support services. It covers adult account holders, children whose information is added to BabiFable, other people included in family records, and website visitors and customers.

Contact our Privacy Contact at hello@babifable.com, or by telephone on 0410611887.

2. Adults, children and authority

BabiFable accounts are for adults aged 18 or over. Children do not create their own accounts, but we collect information about children when an authorised adult uses the service.

You must have appropriate authority to provide information about a child or another person. An invitation, relationship label or “owner” role in the app does not establish legal guardianship or override another person's rights.

Some information, including medicine, allergy, temperature and other health records, is sensitive information. We seek consent from the individual or a person legally authorised to act for them where required, unless the law permits collection without consent. Accepting our Terms of Service is not, by itself, consent to every use of sensitive information.

3. Information we collect

Depending on the features you use, we collect:

Account information: your name, email address, account identifier, sign-in details, authentication records and preferences.

Child and family information: a child's name, birth date and birth details, sex at birth where provided, profile image, family relationships, invitations, caregiver roles and permissions.

Care and development records: feeding, pumping, sleep, nappies, medicines, temperature, growth, allergies, milestones, teeth, notes and any care-plan information you choose to enter.

Memories and book content: photographs, stories, captions, journal entries, book text, layouts, revisions and generated book files.

Shopping information: when purchases are available, customer and recipient contact details, billing and delivery addresses, selected products, order details, payment status, transaction references and support or refund correspondence. Payment credentials are processed through the payment provider used at checkout.

Technical and administrative information: IP addresses, device and browser information, app version, connection and security logs, limited diagnostic information, support messages, privacy choices, and records of policy acknowledgements, access requests, exports and deletion requests.

4. How we collect and use information

We collect information from you, authorised caregivers, sign-in or payment providers you use, and the operation of our services. Camera and photo access are used when you choose an associated feature and provide the relevant device permission.

We use information to operate accounts; record and synchronise care information; provide family sharing, memories and book features; generate family-specific summaries and estimates; fulfil purchases where offered; provide support; prevent misuse; and handle legal obligations and privacy requests.

Family-specific estimates, such as possible feeding or sleep times, use records associated with the child. They are estimates, not medical decisions or instructions.

You may browse public pages or make general enquiries without providing your name where practicable, although technical connection data may still be collected. We need some information to operate an account, verify a request or fulfil an order. Optional information can be withheld, but the related feature may not work.

5. Family sharing and private content

Caregivers with access to a child's profile can see or contribute information according to their permissions. Before inviting someone or adding sensitive information, consider who will be able to access it. Contact us promptly about incorrect access or a safety concern.

We do not sell private family content, use children's care records, photographs or memories for advertising, or use that content to train general-purpose or population-based AI models. We do not send that content to external generative-AI services to produce answers or content. We will not use private family content in promotional material without separate permission.

Other caregivers may make their own copies of information they are permitted to access. Removing app access cannot necessarily retrieve independently saved copies. This does not remove our responsibility to handle deletion requests for information we control.

6. Service providers and other disclosures

We disclose information only as reasonably needed for the relevant purpose, including to authorised caregivers and providers supporting the service.

Our providers include Supabase for authentication, databases and media storage; Expo and EAS for app builds, updates and delivery; Resend for service emails; Shopify for our website and online store; and Apple or Google for app distribution, platform services, sign-in or purchases where used. We also use providers for domain management, communications, security and payment processing.

When book ordering is available and you place a print order, we provide the selected print-ready book file and necessary order and delivery information to Gelato and its production and delivery partners. This does not give them access to your entire care journal or unrelated family records. Printing necessarily exposes the content included in that book to the providers fulfilling the order.

We may also disclose information to professional advisers, regulators, courts or other parties when required or authorised by law, or where reasonably necessary and lawful to address fraud, security incidents, legal claims or a serious safety concern.

Shopify also handles information for some purposes under its own privacy terms. More information is available in the Shopify Consumer Privacy Policy (https://www.shopify.com/legal/privacy/consumers).

7. Overseas handling

Some providers and their service partners receive, store or access information outside Australia, including for hosting, support, communications and order fulfilment.

The countries in which overseas recipients are likely to be located are: [CONFIRMED OVERSEAS RECIPIENT COUNTRIES].

We take reasonable steps required by applicable law to protect information disclosed overseas. Overseas processing does not mean that all information is stored in Australia, and this policy does not ask you to waive protections that apply to overseas disclosures.

8. Storage, security and retention

We use technical and organisational measures intended to protect personal information, including account authentication and controls restricting family access. The app may keep information on your device to support signed-in features and synchronisation. Please secure devices and accounts used to access family information.

No online service or device can be guaranteed completely secure. Where an incident creates a notification obligation, we will notify affected people and the relevant regulator as required by law.

We keep account and family information while needed for the service you request, subject to deletion requests and applicable law. Order, payment and business records may need to be retained for accounting, taxation or legal purposes. Support, diagnostic and security records are kept only for the period reasonably needed for their purpose or a lawful retention requirement.

When information is no longer needed and no lawful retention requirement applies, we take reasonable steps to delete or de-identify it. Some backup copies may remain until the relevant backup cycle ends. They are not retained for ordinary ongoing use. We will explain relevant retention limits when handling a request.

9. Access, correction and export

You may update information using available app controls or contact us to request access, correction or a copy of information we hold about you. A person with appropriate legal authority may make a request concerning a child.

We may verify identity and authority before releasing or changing information. We assess requests involving shared records with regard to each person's rights and any relevant legal restrictions. If we refuse all or part of a request, we will explain the reason where permitted and how to complain.

The app's structured account export may include references to media rather than every original photo or PDF. Contact us when you need information that is not included in an export.

10. Account deletion

You may request deletion in the app or by emailing hello@babifable.com. You do not need to reinstall the app to make an email request. Our Account Deletion and Support page (https://babifable.com/pages/delete-account) explains the process.

Deletion covers your account and associated personal information and content, subject to lawful exceptions and applicable platform requirements. We review shared records individually. Prior sharing is not an automatic reason to retain your personal information or uploaded content, although another person's independently created records may continue where they are entitled to retain them.

We will explain any information retained, the reason and the applicable retention period or criteria. Account deletion is separate from cancelling a subscription or a book order.

11. Website cookies and marketing

Our Shopify website uses cookies and similar technologies to operate and secure the store, remember settings and support shopping and checkout. Service providers may also generate technical logs needed to operate their services.

We do not enable optional website analytics, third-party advertising pixels or Shopify Network Intelligence for this store. Our app does not use advertising trackers. Browser settings can restrict cookies, although blocking essential cookies may affect website functions.

We send promotional emails only with consent or another basis permitted by law. You can unsubscribe using the link in a promotional email or contact us. Necessary account, security and order messages are separate from marketing.

12. Privacy complaints

Contact hello@babifable.com with your concern and the outcome you are seeking. Our Privacy Contact will assess the complaint, seek any necessary information, investigate and explain the outcome. We will keep you informed if more time is needed and respond within any applicable legal period.

If you are dissatisfied with our response, or have not received a response within 30 days, you can contact the Office of the Australian Information Commissioner (https://www.oaic.gov.au/privacy/privacy-complaints/lodge-a-privacy-complaint-with-us), which can advise whether it can handle your complaint. A relevant state or territory privacy or health-privacy regulator may also be able to assist.

Do not email passwords, verification codes, sign-in links or unnecessary health information. Contact us first when sensitive documents may be needed.

13. Changes to this policy

We may update this policy to reflect changes to our services, practices or legal obligations. We will update the date and provide appropriate notice of material changes. Where a new use requires consent, updating this policy does not replace obtaining that consent.