Privacy Policy

1. What data we process

• Account: email address, name, app language, password (stored only as a one-way bcrypt hash, never in plain text), whether you agreed to keeping recordings, and the sign-up date.
• Child profile: name (a nickname is fine), date of birth and, optionally, gender. This data is entered by the parent or guardian.
• Diary: feedings (method, amount in ml), sleep, diaper changes and notes, with their times.
• Cry analyses: time, duration and source (manual recording or Monitor mode); the result (whether crying was detected, confidence, the estimated probability of each reason); acoustic features computed from the sound (pitch, loudness, bursts of crying and pauses); and the diary data used for the estimate (minutes since the last feeding, since waking up and since the last diaper change).
• Your feedback: whether a result was right and what calmed the baby.
• Audio recordings — only with your consent: if the switch for storing recordings in Settings is on, the recording (WAV) and a numeric audio fingerprint computed from it (a YAMNet embedding) are kept on our server. If it is off, the recording is analysed in the server's memory and discarded — only the analysis result is saved.
• Technical logs: for each request the server logs the IP address, time, requested page address, response code and size. They are used only for security and troubleshooting.

2. What we do not collect

• Location, contacts, photos or advertising identifiers.
• We use no advertising, analytics, tracking or third-party AI services — neither in the app nor on the server.
• The microphone is used only while you record on the Analyze screen or while Monitor mode is on. In Monitor mode the phone measures loudness on the device itself and sends a short clip (about 8 seconds) to the server only after it hears a sustained loud sound.

3. Why we use the data

• To run the service: your account, children, diary, analyses, statistics and tips.
• To estimate why the baby is crying: the sound analysis is combined with the diary (for example, the time since the last feeding).
• To improve the model: your feedback and — only with your consent — your recordings are used to train our cry-reason model. Training data contains the recording, when it was made, the child's age in days, the analysis result and your feedback (the reason label), linked only by internal numeric IDs — not your name, your email or the child's name.
• To keep the service secure (for example, by limiting repeated sign-in attempts) and to fix errors.
• We do not sell your data and do not use it for advertising.

4. Where the data is processed

• All processing, including the AI analysis, runs on our own server in Uzbekistan. Cry detection uses Google's open YAMNet model and our own model, both running on that server; recordings are not sent to any external AI service.
• The connection between the app and the server is encrypted (HTTPS) and passes through Cloudflare's network. Cloudflare only delivers the traffic — we do not use it to store or analyse your data.
• If you installed the beta through Apple TestFlight, Apple processes some data (for example crash reports and feedback you send through TestFlight) under Apple's own privacy policy.

5. Who can access the data

• You, through your account.
• Authorised members of our team (administrators), for support, quality control and improving the model. Administrators can listen to recordings kept with your consent.
• We do not share data with third parties, except where required by the law of the Republic of Uzbekistan.

6. Children's data

CryBaby is meant for parents and caregivers aged 18 and over; children do not use the app themselves.

All data about a child (name, date of birth, gender, recordings of crying, diary) is entered by the parent or legal guardian, who agrees to this policy on the child's behalf. You can use a nickname instead of the child's real name.

7. Retention and deletion

• Data is kept until you delete it or your account.
• In the app you can delete a single analysis or diary entry, or a whole child profile (with all of its analyses, recordings and diary entries).
• Turning off the switch for storing recordings in Settings immediately deletes all your stored recordings and their audio fingerprints. Analysis results stay.
• Delete account (Settings → Delete account) immediately and permanently removes your account and everything linked to it from our server: children, diary, analyses, feedback, recordings and audio fingerprints.
• Models that were already trained contain only aggregated numeric parameters, not recordings or personal details, and are not deleted. If your recordings were included in a training data set exported by our team before you deleted them, write to us and we will delete them there as well.
• Technical logs are kept only as long as needed for security and troubleshooting.

8. Security

• Encrypted connection (HTTPS) between the app and the server.
• Passwords are stored only as bcrypt hashes.
• Your data can be accessed only with your personal sign-in token, and every request is checked.
• The administration panel is not reachable from the internet.
• Repeated sign-in attempts and excessive requests are limited.
• No system is perfectly secure, but we work to protect your data and fix problems promptly.

9. Your rights

In the app you can view and correct your data (your name and language, child profiles, diary), withdraw your consent to keeping recordings, and delete individual entries or your whole account.

For any other request about your personal data, including a copy of it, write to [support email not configured]. We process personal data in accordance with the Law of the Republic of Uzbekistan “On Personal Data”.

10. Medical disclaimer

CryBaby is not a medical device and does not diagnose. Its results are estimates that can be wrong and do not replace a doctor's advice.

If you are worried about your baby, contact a doctor. Seek medical help right away if the baby has a fever (in babies under 3 months, any temperature of 38 °C or higher), if the crying is unusual (very high-pitched, weak or non-stop), or if you notice breathing difficulties, refusal to feed, repeated vomiting, unusual sleepiness or a rash. In an emergency call 103.

11. Changes to this policy

We may update this policy. The date at the top of this page shows the current version. We will notify you by email about significant changes.

12. Contact

Operator: [operator name not configured]. Email: [support email not configured].