Privacy policy

Last updated: 24 October 2026

1. Data controller

MABE STUDIO, a French simplified joint-stock company with share capital of €1,000 Registered with the Romans-sur-Isère Trade and Companies Register under number 108 369 646 Registered office SIRET: 108 369 646 00014 EU VAT number: FR64108369646 Registered office: 110 rue des Castagnoles, 26750 Génissieux, France Email: contact@petitnid.app

2. Data collected

PetitNid collects the following data, strictly necessary to operate the service:

Account data

• Email address
• Display name
• Password (hashed, never stored in plain text)

Family data

• Family name
• Baby’s first name, sex and date of birth
• Baby’s photo (optional)
• Family invitation code

Baby tracking data

• Breastfeeds (time, duration, side)
• Bottle feeds (time, volume, type of milk)
• Sleep (time, duration)
• Nappy changes (time, type)
• Pumping (time, volume)
• Growth measurements (weight, height, head circumference)
• Medicines given (time, name, dose)
• Starting solids (foods, quantities, reactions, allergens)
• Health record: illness follow-ups (temperature, notes), observations, vaccinations (code, date, batch, notes) and paediatrician visits (date, doctor, reason, notes, measurements)
• Childcare periods

AI conversation data

• Up to the last 50 user and assistant messages in the conversation, each limited to 4,000 characters
• Baby’s sex, date of birth and age; their real first name is replaced with a placeholder before transmission
• Summaries and averages over 7 days, sleep patterns over 10 days and event times over 3 days, including the names of medicines given, foods offered and reactions recorded
• Up to the 8 most recent measurements, recorded vaccinations (code, date, batch) and aggregated first-food records covering up to 540 days, limited to 240 entries
• The email address, family name, photo, baby’s real first name and free-text event notes are not included in this context

Technical data

• Authentication session identifier

Website waiting list

• Email address, optional first name, optional message and form source
• Date of consent to receive launch information

Error reports and reliability

• App crashes and errors: stack traces, device type, OS version and user identifier (to link the report to an account without including app content)
• The app does not record sessions: no screen capture or reconstruction is sent.

Pseudonymous usage analytics (product)

• Product events: opening the app, features used and purchase flows (without app content). Used to understand which features are useful and improve the product.
• The Supabase user identifier is associated with events to distinguish users (without including email addresses, names or app content).
• Can be disabled in the app: Settings → Privacy → Improve PetitNid.

Installation source

To understand which campaigns bring families to PetitNid, the app checks where its installation came from. It only does this if Improve PetitNid is enabled at launch, which is the default.

• On Android: once per installation, the app asks Google Play which link led to the installation and keeps only the source, medium and campaign name. An installation made directly from the Play Store returns, for example, “google-play” and “organic”. These codes are included in the pseudonymous usage analytics sent to PostHog. The rest of the link, such as an advertising click identifier, is not transmitted.
• On iOS: the app allows RevenueCat to retrieve the Apple Ads attribution token generated by the iPhone. RevenueCat presents it to Apple, which indicates whether the installation followed an Apple Ads advert and, if so, which one (campaign, ad group, keyword, country). RevenueCat stores this result with your user identifier. This attribution does not require Apple’s App Tracking Transparency (ATT) permission, which PetitNid does not request.
• Neither of these measurements reads the device’s advertising identifier.
• Can be disabled in the app: Settings → Privacy → Improve PetitNid.

Codes and referrals

• Referral code: each account can obtain a personal code (for example, “PNABC234”), shared as a petitnid.app/r/<code> link. We keep a record of who invited whom, the date and whether the referrer received their free month.
• Opening the link on iPhone: the page requests a single-use Apple offer code from PetitNid, assigned to the link rather than to the person. No device data is retained, apart from this code in the browser to avoid assigning a second one. The free month is then activated through the App Store, under Apple’s terms.
• The referrer’s month: when someone they invited subscribes for the first time, a month is set aside for the referrer. On iPhone, this takes the form of an Apple offer code assigned to the referrer’s account; on Android, it is a month of Premium granted through RevenueCat.
• Gift code entered on Android: the code, date and account that used it.

Website analytics, with your consent

• After you accept, PostHog measures visits to public pages, the source of the visit, campaigns and clicks to the App Store or Google Play.
• A pseudonymous identifier is saved in the browser’s local storage to distinguish visits. No form content, email address, authentication parameter or message is sent to PostHog. Authentication and contact pages do not load this tracking.
• You can accept, decline or change your choice using Website analytics at the bottom of the page. Your choice is stored for 180 days. Declining does not prevent you from using the website; withdrawing consent stops collection and removes the SDK’s storage from that browser.
• This measurement is based on your consent. It does not include session recordings or automatically link your visit to your app account.

V6 sleep predictions calculated locally

V6 predictions are calculated locally on the device, using the sleep journal already available to the family in PetitNid. The calculation does not create any separate research processing.

No V6 prediction is transmitted or exported. No associated result is sent to Supabase, PostHog, Sentry or any other third party to train, calibrate or evaluate this model. No specific research consent is therefore requested.

The sleep events used as input remain hosted and synchronised by Supabase to provide PetitNid’s family tracking service, under the same rules as the other journal data described in this policy.

3. Purposes of processing

4. Data hosting and security

• Hosting provider: Supabase Inc., with data stored in the EU West 1 (Ireland) region
• Encryption: data is encrypted in transit (TLS) and at rest
• Authentication: managed by Supabase Auth using JWT tokens
• Passwords: hashed using bcrypt, never stored in plain text
• Data access: restricted by database-level security policies (Row Level Security) — each family can only access its own data
• Photos: stored in a secure bucket accessible only to family members

5. Data sharing

PetitNid does not sell or rent any personal data. To operate the service, data is entrusted to the following processors, each covered by a GDPR-compliant data processing agreement (DPA):

• Supabase (hosting and database, EU Ireland) — all account, family and tracking data.
• Google (Gemini, AI assistant) — a possible provider for the context described in section 2. For a client available in the EEA, PetitNid must use a service linked to active billing. Google states that it does not use prompts and responses from this paid service to improve its products. However, prompts, context and outputs are retained for 55 days for abuse detection; flagged material may be reviewed by authorised personnel. Transfers are governed by the data processing addendum and standard contractual clauses.
• Anthropic (Claude, AI assistant) — another possible provider for the same context; only one provider receives any given request. For the commercial Claude API, Anthropic states that it normally deletes inputs and outputs within 30 days, unless a different agreement, usage-policy enforcement or a legal obligation applies, and does not use them by default to train its generative models. Transfers are governed by the data processing addendum and standard contractual clauses.
• Sentry (error reports, EU Germany) — see section 2 for details.
• PostHog (pseudonymous product usage analytics, Android installation sources and consented website visits, EU Germany) — events described in section 2. App analytics can be disabled in Settings → Privacy; website analytics can be disabled through Website analytics.
• RevenueCat (Premium subscription management and, on iOS, Apple Ads attribution, United States) — user identifier, subscription status and in-app purchase history. Used to validate the active subscription on the server. On iOS, if Improve PetitNid is enabled, RevenueCat also receives the Apple Ads attribution token and asks Apple whether an advert led to the installation, as described in section 2. Governed by standard contractual clauses.
• Resend (emails: getting-started help, warning before an inactive account is deleted, website waiting list) — email address, the baby’s first name in the getting-started email, and optional content from the waiting-list form.
• Telegram (internal alerts for the publisher): at sign-up, at the start of a trial or at a subscription, the parent’s display name and the family name. Never the email address, the baby’s first name or any journal content.
• Vercel Analytics (website audience measurement without advertising cookies) — aggregated pages and interactions, without the app’s user content.
• Apple App Store / Google Play (distribution and in-app payments) — billing data managed directly by the store, which PetitNid cannot access.
• Expo / EAS (app builds and distribution) — minimal technical data (build identifiers, no user data).

PetitNid displays no advertising and includes no advertising-network SDK. The only campaign-related measurement indicates where the app installation came from, without an advertising identifier (section 2).

6. Retention periods

After deletion, technical backups expire within a maximum of 30 days.

When a parent deletes their account while another parent remains a member, their personal profile is deleted immediately. Shared family data and conversations remain accessible to the other parent to preserve their own history.

7. Your rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Access: obtain a copy of your personal data
• Rectification: correct inaccurate data
• Erasure: delete your profile and unshared data directly from the app (Settings → Account → Delete my account). Family data already shared remains accessible to the other parent for as long as they remain a family member.
• Portability: receive your data in a structured format
• Objection: object to the processing of your data
• Restriction: request that processing be restricted

To exercise these rights (apart from deletion, which is immediate in the app), contact us at contact@petitnid.app. We will respond within a maximum of 30 days.

You can also lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés), the French data protection authority: cnil.fr.

8. Children’s data

PetitNid is intended for parents and legal guardians. Information about a baby is entered by the parent who is legally responsible for them. The app is not aimed directly at children and does not collect any data directly from children.

9. Cookies and trackers

The PetitNid mobile app displays no advertising and includes no advertising-network SDK. Its only campaign-related measurement, the installation source, does not use an advertising identifier (section 2). No web browsing data is resold.

The SDKs used for technical or product purposes are described in sections 2 and 5:

• Sentry (reliability, crashes)
• PostHog (product usage analytics and Android installation sources, Supabase identifier only, can be disabled)
• RevenueCat (Premium subscription validation; on iOS, Apple Ads attribution that can be disabled)

The first two (Sentry and PostHog) rely on the GDPR legal basis of legitimate interests and can be disabled at any time in the app (Settings → Privacy). RevenueCat is necessary for the performance of the subscription contract and cannot be disabled while a subscription is active; however, its Apple Ads attribution on iOS relies on legitimate interests and follows the Improve PetitNid setting.

This website (petitnid.app) includes no advertising trackers. Vercel Analytics measures the aggregated audience and interactions described in section 5. The website’s PostHog tracking uses local storage, after consent, as described in section 2.

10. Changes

This policy may be updated. The date of the last update appears at the top of this document.

11. Contact

For any questions about this privacy policy:

MABE STUDIO — 110 rue des Castagnoles, Génissieux, France — contact@petitnid.app