Privacy Policy for Baby Steps

Last updated: October 27, 2026

Baby Steps ("we," "our," or "us") is an educational app for young children and their parents/guardians. This Privacy Policy explains what the app collects or processes, how it is used, and the choices users have.

Website Cookies

The Baby Steps website uses a cookie to remember your cookie choice for 180 days. Optional cookies are off until you choose to allow them.

Cookie choice (bs_cookie_consent): remembers whether optional cookies are allowed or declined, for 180 days.
Dismissed offer (bs_offer_dismissed): with permission, keeps the waitlist offer dismissed for up to 180 days.
Luganda quiz (bs_luganda_quiz): with permission, remembers the current question, selected answer, and score for up to 30 days.

Optional cookies are stored on this browser. They do not contain a name, email address, or advertising identifier. The website does not add advertising or analytics cookies. Browser storage settings can prevent cookies from being saved.

Use Cookie settings in the footer to change your choice. Turning optional cookies off deletes the saved offer and quiz cookies. The website and quiz continue to work without saving those preferences between visits.

The waitlist form is hosted by Tally. Opening the waitlist page loads the form from Tally, which receives the technical information needed to serve it. Details you submit are processed by Tally for the Baby Steps waitlist under Tally’s privacy notice. Website cookie settings apply to Baby Steps cookies; they do not control storage on third-party domains.

1. Information We Collect

Account Information

When a parent/guardian creates an account, the app processes:

Email address
Password

Passwords are handled by our authentication provider and are not available to Baby Steps in readable form. Our service providers may also process limited technical and security information, such as network address, device/browser information, and request logs, as needed to deliver and protect the service.

Child Profile Information

When adding a child profile, the app stores parent-provided information such as:

Child name
Child gender
Child age/range
Preferred learning language
Learning focus/reason from the add-child flow

Learning And Progress Information

To support the parent dashboard, activity history, and achievements, the app may process:

Game/activity progress and completion data
Activity metadata, including activity type, activity name, score, duration, completion time, stage, level, and details
Achievement definition and unlock data
Locally stored game progress

Local Device Storage

The app stores certain data locally on the device with AsyncStorage, including:

Auth session data
App onboarding status
Language preference
Game progress
Session and weekly learning stats in some utilities
Device-local learning reminder preferences and schedule identifiers

Optional Media Access

The coloring feature uses device media and sharing APIs. If a user chooses to save or share artwork, the app may request media/photo access to:

Save images to the device gallery, including a ColoringBook album where supported
Share images using the device share sheet

Baby Steps does not upload coloring artwork to our servers. Saved or shared copies are controlled by the device and by the destination the user selects.

Notifications, Audio, And Language Features

If a parent enables gentle learning reminders, Baby Steps schedules those reminders on the device. The feature does not require a push token or a child's contact information. Audio playback and text-to-speech may use the device's operating-system services. The app's third-party online translation helper is currently disabled, and current UI translations are stored in the app.

2. Information We Do Not Intentionally Collect

Based on the current app implementation, we do not intentionally collect:

Camera recordings
Microphone recordings
Precise location data
Contacts
In-app advertising identifiers for ad targeting
A child's email address or phone number

3. How We Use Information

We use collected information to:

Create and maintain parent accounts
Create and manage child profiles
Track learning activity, quiz scores, and game completion
Show parent dashboard summaries
Display earned achievements
Provide password reset and account security features
Sync supported family progress across devices
Schedule optional device-local learning reminders
Improve app reliability and quality

We may share information with service providers that help operate the app:

Supabase for authentication and database storage
Device and operating-system providers when a user enables notifications, text-to-speech, saving, or sharing

We may also share information:

When a user explicitly shares content through device sharing features
If required by law or to protect rights, safety, and security

We do not sell personal information, and Baby Steps does not show targeted advertising to children.

5. Data Retention

We retain data for as long as needed to provide the app and related services, including:

Account and profile data while an account remains active
Learning/progress records needed for parent dashboards and continuity
Local device data until it is removed, app storage is cleared, or the app is uninstalled

Saved images remain in the device gallery until the user deletes them.

6. Children's Privacy

Baby Steps is intended for children's learning, but children cannot create their own Baby Steps account. Account control is designed for parents/guardians. Parents/guardians are responsible for:

Providing child profile information
Supervising a child's use of the app
Requesting updates or deletion of child-related data

By creating a child profile, the parent or guardian confirms that they have authority to provide and manage that child's information.

7. Security

We use reasonable technical and organizational measures to protect information. No method of storage or transmission is 100% secure.

8. International Data Processing

Depending on user region and provider infrastructure, data may be processed or stored outside the user's country.

9. User Choices And Rights

Users can:

Update profile details where the app supports it
Manage optional media permissions through device settings
Manage optional notification permissions through device settings
Request account or data deletion in the app or by contacting us

10. Account And Data Deletion

Users can request account deletion in the app from:

Settings -> Account -> Delete Account

Account deletion has a 30-day grace period. When deletion is requested, the account is scheduled for deletion, child profiles and learning progress are hidden, and account access is disabled for normal app use. The parent is signed out.

During the 30-day period, the user can log in again and reactivate the account before the deadline. Reactivating restores child profiles and learning progress where available.

After the 30-day period, Baby Steps finalizes deletion through a secure server-side process outside the app. Associated user-owned data is deleted or anonymized, and the Supabase Auth account is deleted using server-only admin privileges. User-owned data includes parent account information, child profile information, learning progress, activity history, and achievement history tied to the account.

Some minimal deletion-record data may be retained only if required for legal, security, fraud prevention, dispute, compliance, backup, or operational reasons.

Shared educational content is not user-owned and is not deleted. This includes shared learning content, language content, stories, achievement definitions, and other global Baby Steps app content.

Account and data deletion request instructions are also available at:

docs/delete-account.html

11. Changes To This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date when changes are made.

12. Contact Us

For privacy questions or deletion requests, contact:

Email: hello@babystepslearn.com
Organization/App Team: Baby Steps