Tiny Pulse Labs ("we", "us", or "our") operates the Carol Baby mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the App.
1. Information We Collect
Account information: email address, display name, and authentication identifiers when you create an account.
Baby & care data: information you choose to log such as date of birth, sleep entries, naps, feedings, diaper changes, mood, and notes.
Device & usage data: device model, operating system, crash logs, language, and anonymized usage analytics to improve the App.
Subscription & purchase data: when you subscribe to Carol Premium, our payment processor handles billing — we receive subscription status and transaction identifiers, but never your full payment card number.
2. How We Use Information
- To provide, maintain, and improve the App's features.
- To sync your data securely across your devices.
- To generate personalized sleep insights and AI-powered suggestions.
- To process subscriptions and prevent fraud.
- To respond to support requests and send important service updates.
3. Third-Party Services
We rely on a small set of trusted providers to operate the App. Each processes only the minimum data needed for their function:
- Google Firebase (Google LLC) — authentication, encrypted cloud storage of your logs, crash reporting, and analytics. Data is stored on Google Cloud infrastructure.
- RevenueCat — manages subscription state and entitlements across the App Store and Google Play. RevenueCat receives an anonymized user identifier and your purchase history.
- OpenAI — powers the conversational AI assistant and AI sleep assessments. When you interact with the assistant, the relevant context (e.g., recent sleep entries) is sent to OpenAI's API to generate a response. We do not send your name, email, or any contact information.
These providers are bound by their own privacy policies and data processing agreements. They are not permitted to use your data for their own marketing.
4. AI & Automated Insights
Carol uses automated processing to surface patterns and provide suggestions. AI responses are informational only and are not medical advice. Always consult a qualified pediatric professional for medical concerns.
5. Data Retention
We retain your data for as long as your account is active. You can delete your account at any time from within the App, which will permanently remove your logs from our systems within 30 days, except where retention is required by law.
6. Children's Privacy
The App is intended for use by parents and caregivers (adults). It is not directed at children under 13. The data you log relates to your child but is associated with your adult account.
7. Your Rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal data. To exercise these rights, email us at privacy@tinypulselabs.com.
8. Security
Data is transmitted over TLS and stored encrypted at rest. While we take reasonable measures to protect your data, no method of transmission is 100% secure.
9. Changes to This Policy
We may update this policy from time to time. Material changes will be announced in the App or by email.
10. Contact
Questions? Email privacy@tinypulselabs.com.