Privacy Policy

Effective November 5, 2026

What Coo stores

To do its job, Coo stores what you enter:

• Baby profile: name, birth date, due date, sex and an optional photo.
• Logged events: feeds, diapers, sleep, growth measurements, medicines, pumping, tummy time, baths, vaccines and notes, with their times and details.
• Story: the photos you add, with the date each one was taken.
• Settings: custom events you name, units and your caregiver role. Coo also keeps a random identifier on your device so it can tell which caregiver logged an entry.

Where it's stored

Your data is stored on your iPhone. If you're signed in to iCloud, Coo also syncs it to your private iCloud database so it can appear on your other devices. Apple runs iCloud, and Apple's Privacy Policy covers it. The developer of Coo has no access to your iCloud data.

Sharing with other caregivers

Your log is shared only if you invite someone with Share Log. When you do:

• Everyone you invite can see and edit the whole log, including photos.
• Everyone in the log can see each other's iCloud name. If someone has no name set, their email address or phone number is shown instead.
• The owner can remove a caregiver at any time, and caregivers can leave a log at any time. A caregiver who leaves keeps a copy of everything logged up to then.

Apple's iCloud sharing handles this. Coo's developer doesn't receive the data, and isn't told who you share with.

Family notifications

In a shared log, each caregiver can choose to be notified when someone else logs certain things, such as a temperature, a medicine or a growth check. This is off until you turn it on, and Coo asks for notification permission only then. Coo uses Apple's CloudKit to send notifications. When you log something others may want to hear about, Apple sends the notification to the caregivers who turned it on. A notification carries only who logged it (as a role, such as Mom), and the reading, the medicine's name or the measurements. Coo deletes it from iCloud soon after it's sent.

Notifications also work when the only other caregiver uses a web link. Then our server, not a phone, sends the notification through CloudKit when they log sleep, naming them by the nickname or role you gave the link.

Web links

The log's owner can create a web link for a caregiver without an iPhone, such as a nanny or a grandparent. That caregiver opens the link in any browser and logs sleep, feeds and diapers with no account. Because their browser can't reach your iCloud, these go through Coo's server at api.getcoo.app:

• What they log: the kind of event, its time and a bottle's amount. It waits on the server until one of your family's iPhones adds it to your log. It's then deleted from the server within 7 days.
• What their page shows: the baby's name, or the name you set for the link, and the last 24 hours of the kinds of events their buttons log, such as feeds, sleep and diapers, with who logged each one. Your phone replaces this each time it updates the page. Notes are never sent.
• The link's settings: its buttons, their labels, the page language and the nickname or role you gave the caregiver.
• To send notifications and update widgets: a random identifier for your family that can't be traced back to your Apple Account, and for each family phone, a random device identifier and the token Apple gives Coo's widgets for updates.

Anyone with the link can open the page, so share it only with the person it's for. You can turn a link off, replace it with a new one, or delete it at any time in Profile › Share Log. Deleting a link removes everything the server holds for it. The server keeps no record of your iCloud account, and we don't use this data for anything except running the link.

Photos

Coo uses Apple's photo picker, which gives Coo only the photos you pick and not your library. Coo reads the date a photo was taken, then saves a resized copy. Location and all other metadata are removed from that copy.

Apple Watch and widgets

Coo sends a short summary, such as when the last feed was and whether the baby is asleep, to your paired Apple Watch, and shows it in widgets. This stays on your own devices.

Crash reports and usage counts

Coo is made by one developer, and two kinds of anonymous diagnostics tell us what to fix and what to build next. Neither is linked to your name, your Apple Account or your iCloud data, and neither is used for advertising or to track you.

• Crash reports. If Coo crashes, freezes or is stopped by iOS, it sends a report the next time it opens. Coo uses Sentry for this. A report contains the technical details of the problem (your iPhone model, iOS and Coo versions, and where in Coo's code it happened), the recent steps Coo took before it, such as which screens opened and which kinds of events were logged or edited, and the usage counts below. Sentry is set not to store your IP address.
• Usage counts. Once a day, Coo sends our server at api.getcoo.app a short summary: a random identifier made on this iPhone (a new one if you reinstall), Coo and iOS versions, language, and counts. Those counts are how many events are in the log, of each kind and from each way of logging (the app, a widget, Siri or Shortcuts, Apple Watch or a web link), how many days back the log goes, how many were imported, the baby's age in weeks, how many photos are in the story, how many tips you've opened or put off, which kinds of widgets are installed, and whether an Apple Watch is paired. We keep each day's summary for up to 400 days.

Neither one ever includes your notes, names, photos, event times, measurements or anything else you've typed. Debug builds that the developer runs from Xcode don't send either one.

No ads or tracking

Coo has no advertising. It doesn't track you across apps or websites, and nothing is sold or shared with data brokers. Coo doesn't ask for your location, contacts, camera or health data. It asks for notifications only if you turn on family notifications.

Things you choose to share

Some features hand data to other apps, and only when you act:

• Export creates a text or CSV file and opens the share sheet. You choose where it goes, and that app or person's privacy practices apply from there.
• Copy AI Prompt (when importing from another app) only copies a prompt to your clipboard. If you paste it, with your log, into an AI service, that service's privacy policy applies. Coo doesn't send anything itself.
• Send Sync Report creates a technical log of recent sync activity that you can choose to send to us when asking for help.
• Health tip sources in Explore link to outside websites, such as the CDC, WHO and NHS, which have their own privacy policies.

Children

Coo is made for parents and caregivers, not for children to use. Your baby's log stays on your devices and in your iCloud and is never collected by us. The daily usage counts include only the baby's age in weeks.

Deleting your data

• Delete any entry or photo in the app. If you share the log, it's deleted for everyone in it.
• Stop sharing by removing caregivers, or leave a shared log, in Profile › Share Log.
• Delete a web link in Profile › Share Log. This removes everything our server holds for it.
• Deleting the app removes the data on that device.
• To remove what's stored in iCloud, go to Settings › [your name] › iCloud and manage your account storage. Choose Coo there, if it's listed, and delete its data.

We don't hold a copy of your log, so we can't restore anything you delete. Crash reports and usage counts aren't linked to you, so we can't find yours to delete them; they expire on their own.

Changes to this policy

If Coo's handling of data changes, we'll update this page and the effective date above. A significant change will also be noted in the app's release notes.

Contact

Questions about privacy: contact@getcoo.app