Privacy Policy for Baby Steps
Last updated: July 21, 2026
Baby Steps ("we," "our," or "us") is an educational app for young children and their parents/guardians. This Privacy Policy explains what the app collects or processes, how it is used, and the choices users have.
1. Information We Collect
Account Information
When a parent/guardian creates an account, the app processes:
- Email address
- Password
Passwords are handled by our authentication provider and are not available to Baby Steps in readable form. Our service providers may also process limited technical and security information, such as network address, device/browser information, and request logs, as needed to deliver and protect the service.
Child Profile Information
When adding a child profile, the app stores parent-provided information such as:
- Child name
- Child gender
- Child age/range
- Preferred learning language
- Learning focus/reason from the add-child flow
Learning And Progress Information
To support the parent dashboard, activity history, and achievements, the app may process:
- Game/activity progress and completion data
- Activity metadata, including activity type, activity name, score, duration, completion time, stage, level, and details
- Achievement definition and unlock data
- Locally stored game progress
Local Device Storage
The app stores certain data locally on the device with AsyncStorage, including:
- Auth session data
- App onboarding status
- Language preference
- Game progress
- Session and weekly learning stats in some utilities
- Device-local learning reminder preferences and schedule identifiers
Optional Media Access
The coloring feature uses device media and sharing APIs. If a user chooses to save or share artwork, the app may request media/photo access to:
- Save images to the device gallery, including a
ColoringBookalbum where supported - Share images using the device share sheet
Baby Steps does not upload coloring artwork to our servers. Saved or shared copies are controlled by the device and by the destination the user selects.
Notifications, Audio, And Language Features
If a parent enables gentle learning reminders, Baby Steps schedules those reminders on the device. The feature does not require a push token or a child's contact information. Audio playback and text-to-speech may use the device's operating-system services. The app's third-party online translation helper is currently disabled, and current UI translations are stored in the app.
2. Information We Do Not Intentionally Collect
Based on the current app implementation, we do not intentionally collect:
- Camera recordings
- Microphone recordings
- Precise location data
- Contacts
- In-app advertising identifiers for ad targeting
- A child's email address or phone number
3. How We Use Information
We use collected information to:
- Create and maintain parent accounts
- Create and manage child profiles
- Track learning activity, quiz scores, and game completion
- Show parent dashboard summaries
- Display earned achievements
- Provide password reset and account security features
- Sync supported family progress across devices
- Schedule optional device-local learning reminders
- Improve app reliability and quality
4. How We Share Information
We may share information with service providers that help operate the app:
- Supabase for authentication and database storage
- Device and operating-system providers when a user enables notifications, text-to-speech, saving, or sharing
We may also share information:
- When a user explicitly shares content through device sharing features
- If required by law or to protect rights, safety, and security
We do not sell personal information, and Baby Steps does not show targeted advertising to children.
5. Data Retention
We retain data for as long as needed to provide the app and related services, including:
- Account and profile data while an account remains active
- Learning/progress records needed for parent dashboards and continuity
- Local device data until it is removed, app storage is cleared, or the app is uninstalled
Saved images remain in the device gallery until the user deletes them.
6. Children's Privacy
Baby Steps is intended for children's learning, but children cannot create their own Baby Steps account. Account control is designed for parents/guardians. Parents/guardians are responsible for:
- Providing child profile information
- Supervising a child's use of the app
- Requesting updates or deletion of child-related data
By creating a child profile, the parent or guardian confirms that they have authority to provide and manage that child's information.
7. Security
We use reasonable technical and organizational measures to protect information. No method of storage or transmission is 100% secure.
8. International Data Processing
Depending on user region and provider infrastructure, data may be processed or stored outside the user's country.
9. User Choices And Rights
Users can:
- Update profile details where the app supports it
- Manage optional media permissions through device settings
- Manage optional notification permissions through device settings
- Request account or data deletion in the app or by contacting us
10. Account And Data Deletion
Users can request account deletion in the app from:
Settings -> Account -> Delete Account
Account deletion has a 30-day grace period. When deletion is requested, the account is scheduled for deletion, child profiles and learning progress are hidden, and account access is disabled for normal app use. The parent is signed out.
During the 30-day period, the user can log in again and reactivate the account before the deadline. Reactivating restores child profiles and learning progress where available.
After the 30-day period, Baby Steps finalizes deletion through a secure server-side process outside the app. Associated user-owned data is deleted or anonymized, and the Supabase Auth account is deleted using server-only admin privileges. User-owned data includes parent account information, child profile information, learning progress, activity history, and achievement history tied to the account.
Some minimal deletion-record data may be retained only if required for legal, security, fraud prevention, dispute, compliance, backup, or operational reasons.
Shared educational content is not user-owned and is not deleted. This includes shared learning content, language content, stories, achievement definitions, and other global Baby Steps app content.
Account and data deletion request instructions are also available at:
11. Changes To This Policy
We may update this Privacy Policy from time to time. We will update the "Last updated" date when changes are made.
12. Contact Us
For privacy questions or deletion requests, contact:
- Email: hello@babystepslearn.com
- Organization/App Team: Baby Steps

