Privacy Policy
Family recordings deserve a clear explanation of where they go.
Baby Voice Diary is made for parents and caregivers. The app may handle a child’s recordings, diaries, and family profile, so this policy separates on-device processing, remote processing, and family sharing.
1. Information kept on your device by default
Source recordings are accessed read-only from a folder you choose. The app does not alter or delete them. On-device recognition sends no audio. Family profiles, avatars, scan records, transcripts, diaries, speaker features, edits, and job progress may be stored locally. They are not sent to our servers simply because you use the app, unless you turn on remote recognition, remote generation, or family sharing.
2. Remote recognition
Remote recognition requires separate consent. The app preprocesses recordings on the device and uploads only protected audio copies needed for the job; it does not upload the originals. Copies go to private object storage in Beijing, China, and are provided to the configured speech-recognition service through short-lived read-only links. The app requests immediate object cleanup when a job finishes, stops, or is deleted, with a one-day object-storage lifecycle as a fallback.
A recognition provider may retain audio it has already read, job information, or results under its own terms. The app explains the currently verified handling before each consent, but does not promise a deletion period or training policy that an outside provider cannot guarantee.
3. Diary and cover generation
Transcripts are de-identified on the device before remote generation. A service may receive de-identified text, date, language, clip duration, and random job identifiers needed to complete the request. If you choose it, a child’s nickname may be used only as a speech-recognition hint; it is replaced with a placeholder before later text leaves the device. If you choose an avatar as a cover reference, the app sends only a metadata-stripped thumbnail copy.
4. Family sharing
Family sharing uses a private CloudKit space. Only iCloud users you invite and who accept can join. Shared information can include the child’s display name, birthday and gender, diary text, tags, illustrations, selected audio clips, and edit history. Sensitive record fields use CloudKit encrypted values, and media is stored as CloudKit assets. Apple processes this information under its iCloud and CloudKit terms.
5. Security and operational information
Our service uses Apple App Attest to verify requests and keeps opaque app-instance identifiers, verification counters, and job state for abuse prevention, retries, and recovery. Operational logs are limited to request status, timing, counts, language, error codes, and irreversible short hashes. They do not contain source audio, full transcripts, avatars, signed links, filenames, or family profiles.
6. What we do not do
- We do not sell family profiles, recordings, or diaries.
- We do not use advertising identifiers or track people across apps and websites.
- We do not read Apple Family membership or grant diary access based on it.
- We do not require a complete source recording to be uploaded.
7. Retention and deletion
Local information remains until you delete it in the app or remove the app. Remote job state is kept only as needed to finish, recover, and clean up the job; object copies follow the cleanup process above. Shared CloudKit information follows the family space’s membership and iCloud state. Information already read by an outside provider may be subject to that provider’s separate retention terms.
8. Your choices
You may use on-device recognition only. Refusing or withdrawing remote-processing consent does not remove existing local content. You may stop a remote job, delete local content, leave a family space, or manage members in family-sharing settings. Apple manages purchase history and refunds.
9. Children’s privacy
The app is for parents and caregivers, not for children to register on their own. A parent or guardian should make sure they have the right to process and share information about children and other family members heard in a recording.
10. Contact and changes
For privacy questions, use the developer contact shown on the App Store product page. Please do not send recordings or full diary entries in your first message. If our handling changes in a meaningful way, we will update this page and ask for consent again where required.