Privacy Policy

Most of your data stays on your device. The only data we receive on our servers is the limited set described below. Stored only on your device — we never receive it, unless you enable Family Sharing (see below and Section 5): • All baby activity records (feeding times and amounts, sleep sessions, diaper changes, growth measurements, health events, daily notes, and custom entries) that you enter manually. • Photos and videos you add to Memories (see Section 3). • Your selected country and unit preferences. Data we receive on our servers: • A device identifier generated on your device, used to operate features tied to your device — family sync, feedback, and consent records. • Coarse device signals — your device's platform, app version, time zone, and language, together with first-seen and last-seen timestamps — used only to detect abuse. • Your device's IP address, processed transiently by our servers to apply rate limits and protect the service against abuse; it is not stored alongside your records. • The version of these terms you accepted, the timestamp of acceptance, and the app version and language at that time. • When you enable Family Sharing: the activity records and Memories you create — including any free-text notes and captions, and the photos and videos attached to a shared Memory — together with the device name you set, transmitted to our servers so they can be delivered to your other devices (see Section 5). • Any feedback you submit through the app, together with your device identifier, app version, and language.

• We do not collect your name, email address, phone number, or any other personal identifier unless you voluntarily include it in a note. • We do not collect precise or approximate location data. • We do not use third-party analytics or crash-reporting SDKs. • We do not use your baby's activity data or Memories to train AI models. • Unless you enable Family Sharing, we do not upload, access, or store the photos or videos you add to Memories. When Family Sharing is enabled, media attached to a shared Memory is transmitted to our servers only to relay it to your other devices, then deleted (see Sections 3 and 5).

The Memories feature lets you capture and keep photos and videos of your baby's milestones. By default, all media files you add to Memories are stored exclusively on your device's local storage. • If you do not use Family Sharing, we never upload, access, or transmit your Memories photos or videos to our servers or to any third party. • If you enable Family Sharing, the media attached to a Memory you create is uploaded over an encrypted (TLS) connection to our servers solely so it can be delivered to the other devices in your family group. It is stored only transiently: it is deleted once your family's devices have received it, and any media that is never received is deleted no later than when your family group is dissolved (see Section 5). In normal use — where at least one of your devices stays active — unreceived media is cleared within a short period. Media files are never included in our long-term sync snapshot (see Section 5). • Deleting a memory from the app permanently removes both the record and the associated media files from your device. It does not delete copies already delivered to other family members' devices. • We have no ability to recover media files deleted through the app or through device storage management. You are solely responsible for backing up media you wish to preserve. We recommend exporting important photos and videos to your device's photo library or a cloud backup service of your choice.

Activity records exist solely for your own reference and, when Family Sharing is enabled, to sync to your family's devices. We do not analyse, aggregate, or monetise your baby's activity data. Device identifiers and legal acceptance records are stored on our servers solely to operate the sync service and to maintain an audit record of consent as required by applicable law. Any feedback you submit is stored on our servers so we can respond to it and improve the app.

When you enable Family Sharing, the activity records and Memories you create are transmitted over encrypted (TLS) connections to our servers so they can be delivered to your other devices. This includes any free-text notes and captions you enter, and the photos and videos attached to a shared Memory. Only devices that share your family group code can access this data. The device name you set is shared with the other members of your family group so they can tell devices apart, and each member can see the other members' device names, along with when they joined and were last active. In the normal case, synced items are deleted from our servers after all devices in your family group have confirmed receipt. If one of your devices does not come online to confirm receipt within seven (7) days, the activity records and Memory details (such as captions) in that batch are folded into a durable snapshot so that a device joining later can still catch up. This snapshot contains activity records and Memory metadata — but not the photo or video files themselves. Your family group is dissolved — and everything we hold for it, including the snapshot and any media still on our servers, is permanently deleted — when the last member leaves the group, or after a prolonged period of inactivity (at least 90 days during which no member uses Family Sharing), whichever happens first. Until then, the snapshot is retained so that your devices can catch up. Photo and video files are deleted once your devices have received them; any that are never received are deleted at the latest when your family group is dissolved. Any member of a family group can view the shared records and Memories of every other member, and any member can remove any other member's device from the group. Choose the people you share a family group code with accordingly. We make reasonable efforts to protect synced data, but we do not guarantee that data will be available, intact, or recoverable at any time. You are responsible for maintaining your own local backups.

Local data remains on your device until you delete the app or clear its data. We have no ability to recover locally deleted data. When Family Sharing is enabled, synced activity records, Memory details, and media files are deleted from our servers after all family members have confirmed receipt. Activity records and Memory metadata that remain unconfirmed after seven (7) days are retained in a durable snapshot; media files are never kept in that snapshot. The snapshot, and any media still on our servers, are deleted when your family group is dissolved — when the last member leaves, or after a prolonged period of inactivity (at least 90 days during which no member uses Family Sharing), whichever comes first (see Section 5). Legal acceptance records (device ID, accepted versions, and timestamps) are retained for as long as required by applicable law. When retention is no longer required, records are deleted. Feedback you submit is retained so we can respond to it and improve the app.

Data in transit is protected by TLS encryption. We apply industry-standard practices to protect data at rest on our servers. No method of electronic transmission or storage is completely secure. We cannot guarantee the absolute security of data you transmit to us or data we hold, and we disclaim liability for unauthorised access, disclosure, alteration, or destruction of your data to the fullest extent permitted by applicable law. In the event of a data breach affecting data held on our servers, we will take reasonable steps to address it and will provide any notifications required by applicable law. We do not, however, guarantee any particular outcome, timeframe, or remedy.

LemonTree is a personal logging tool, not a healthcare service. We are not a healthcare provider, a "covered entity," or a "business associate" under the U.S. Health Insurance Portability and Accountability Act (HIPAA) or any comparable health-data law, and the information you record is not treated as protected health information or a medical record. Any health-related fields (such as temperature, medication, or symptom notes) are stored and handled exactly like any other activity record and receive no special medical-grade protection, certification, or regulatory treatment. Do not use LemonTree as a system of record for clinical or medical purposes.

Depending on your region, the limited data we hold on our servers (device identifiers, legal acceptance records, and transient sync traffic) may be processed and stored on infrastructure located in the United States or in mainland China. By using LemonTree, you acknowledge that your data may be transferred to, processed in, and stored in countries other than your own, which may have data-protection laws that differ from those of your jurisdiction. Where required by law, we rely on appropriate safeguards for such transfers.

LemonTree is designed to be used by adults to record data about their children. We do not knowingly collect personal information directly from children. The app is not directed at children under 13 (or the applicable age of digital consent in your jurisdiction) and requires users to confirm they are 18 or older. If you believe we have inadvertently collected information from a minor, please contact us and we will delete it promptly.

Depending on your country or region, you may have the right to access, correct, or request deletion of data we hold about your device identifier and legal acceptance records. Users in the European Economic Area have rights under the GDPR, including data portability. Users in mainland China have rights under the Personal Information Protection Law (PIPL). These rights apply only to data held on our servers. We have no access to data stored locally on your device, including Memories media files. To exercise your rights, please use the Send Feedback option in Settings. We will respond within 30 days.

If you are a resident of California or another U.S. state with a comprehensive privacy law, you may have additional rights, including the right to know, access, delete, and correct personal information we hold about you, and the right not to be discriminated against for exercising those rights. We do not "sell" your personal information and do not "share" it for cross-context behavioural advertising, as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA) and similar laws. We have not done so in the preceding twelve months. To exercise any applicable right, use the Send Feedback option in Settings.

We use third-party cloud storage providers to operate LemonTree's sync and legal-acceptance records. These providers operate under their own privacy policies and terms of service, which we encourage you to review. While we take reasonable steps to select providers that meet applicable legal standards, we cannot guarantee their practices and disclaim liability for how third-party providers handle data to the fullest extent permitted by applicable law.

We make no representation about the accuracy, completeness, or reliability of data stored in or transmitted through LemonTree. All records are entered manually by users, and we are not responsible for errors, omissions, or inaccuracies in user-entered data.

When we make material changes to this policy, we will increment the version number and prompt you to review the updated policy in the app. Continued use of the app after the effective date of a revised policy constitutes your acceptance of the changes.

For privacy-related questions or data requests, please use the Send Feedback option in Settings.