Effective 31 October 2026

Privacy & your data

Privacy notice for BabySteps Cloud and its ChatGPT connection, operated by Koel Foundry Pte. Ltd., Singapore. Contact: BabySteps Support.

Adult users and caregiver records

BabySteps is intended exclusively for adult parents and authorized adult caregivers. Children are not intended users or account holders. Adults use the service to manage care records about children in their care; those records can contain children’s personal information. Only provide information you are authorized to manage and share.

Information used

BabySteps processes sign-in identifiers and verified email, household membership and permissions, child profiles and avatars, care records, and journal entries you choose to save. Access records, versions, retry receipts and timestamps support authentication, synchronization and reliable saves.

Purpose and access

These records support household care tracking, shared access and the operations you request. Household permissions determine access. The service operator can administer stored data. The implementation includes access-change audit records.

ChatGPT connection

When you connect BabySteps to ChatGPT, permitted records requested through the tools are returned to ChatGPT. Your requested writes and relevant tool arguments are sent to BabySteps. Grants control the household and features the connection can use. Revoking access prevents future authorized calls; it does not erase data already present in a ChatGPT conversation. OpenAI’s terms and privacy controls apply to its processing.

Service providers and transfers

BabySteps uses service providers for cloud hosting, data storage, sign-in and email delivery. When you use the ChatGPT connection or optional Intelligence, voice or avatar features, relevant information is also processed by the providers that enable those features. Additional details are available in the app’s privacy notice.

Our service providers may store and process information in countries other than your own.

Retention and deletion

The current implementation keeps household data until removed. Earlier entry contents can remain in sync history and retry receipts for the household’s lifetime. Account deletion removes owned households from the active database; shared records in households owned by others remain. Downloaded copies and backups are not erased automatically. Some access-audit, token-rejection and accounting records have separate retention rules, including records without automatic expiry.

For the current free hosting plans, Render publishes a seven-day log retention window for Hobby workspaces and Supabase publishes one day for Free API and database logs. These provider log windows do not determine the lifetime of BabySteps records, downloaded copies or manual recovery backups. No scheduled-backup or recovery guarantee is offered.

Operational and pilot feature counters are pruned to a rolling 30-day window when cleanup runs. Access-change audits, deleted-identity rejection markers and some accounting records currently have no automatic expiry. Contact support to discuss a deletion request and the records or copies it can cover.

Your choices

Use household permissions, Integrations revocation, record corrections, exports and account-deletion controls. Email the contact above for privacy questions or help exercising applicable rights. We may need to verify that a request concerns your account before acting.

Rights and questions

Depending on your location, you may have rights to access, correct, export or request deletion of your personal information, withdraw consent or raise a concern with a relevant authority. Contact support to make a request. We may ask for information needed to verify your authority over the account or household.