Privacy notice

The Infatot Baby & Parent Hub (“the hub”, app.infatot.com) is provided by Ockloo Ltd, trading as Infatot®, a company registered in Scotland (company number SC660051). Our registered address is 10 Wester Kippielaw Park, Easthouses, Dalkeith EH22 2GE, United Kingdom.

For the limited personal data described in this notice we are the data controller. For any question about privacy, or to use your rights, email hello@infatot.com.

Everything you enter is saved in your browser’s storage on the device you’re using. That includes your baby’s and your pregnancy profiles, feeds, sleep, nappies, health and medicine records, growth, milestones, photos, notes, wellbeing check-ins, reminders and settings.

This information is never sent to Infatot or to anyone else. Some of it is health information about you or your baby, and because it never leaves your device, we don’t collect, hold or process it. We can’t see it, recover it or delete it for you. It’s yours to control:

• Export, import or delete it at any time under Settings › Data & privacy.
• Clearing your browser’s site data for app.infatot.com removes it permanently.
• If you export a file, or use Share or Handoff to send a summary to someone, it goes only where you choose to send it.
• Reminders and notifications are scheduled by your own device. No notification server is involved.

Feed predictions, nap windows, insights and other suggestions are worked out on your device. We don’t use them to profile you, and no automated decision that affects you is made about you.

When your browser loads the hub, our web server automatically receives the technical details that every website receives: your IP address, the date and time, the page or file requested, your browser and device type, and the page you came from. We don’t link these details to anything you log in the hub, because we never receive that.

• Why: to deliver the site to you, keep it secure, prevent abuse and fix faults.
• Lawful basis: our legitimate interests in running a secure, reliable service (UK GDPR Article 6(1)(f)). The details are minimal, expected and short-lived, so we consider that this doesn’t override your interests.
• How long: access logs are deleted automatically after 30 days. Our server’s rolling backups may hold a copy for a short time longer before they are overwritten.

The hub sets no cookies for parents. It uses your browser’s storage only for things you’ve asked it to do:

• keeping the information you log and your settings (described above);
• remembering when you dismiss a shop suggestion, so it stays dismissed;
• keeping an offline copy of the app’s pages, so the hub works without a connection.

All of this is strictly necessary to provide the service you’re using, so the law doesn’t require a consent banner. You can clear it at any time in your browser’s settings. The only cookie the site ever sets is a sign-in cookie for Infatot team members who manage the app’s images. Parents never receive it.

• Shopify. Some product and article pictures load from Shopify’s image service (cdn.shopify.com). To deliver them, your browser connects to Shopify, which receives your IP address and browser details. Shopify handles that under its own privacy policy and may process it outside the UK under its own safeguards.
• The Infatot shop. Shop, product and article links take you to infatot.com. Anything you do there, including placing an order, is covered by the shop’s privacy policy.
• Social media. Instagram, Facebook and TikTok links open those platforms, which have their own privacy policies.
• Fonts. The hub’s fonts are served from our own server. No third-party font service is contacted.

We don’t sell personal data, and nothing is shared for advertising. The server logs described above are held for us by our hosting provider, Hetzner Online GmbH, whose servers are in Germany. Hetzner acts on our instructions as a processor. The UK recognises the European Economic Area as providing adequate protection for personal data. We would disclose log data to others only if the law requires it, for example in response to a valid request from the police or a court.

The hub is made for parents and parents-to-be, not for children to use. Information about your baby stays on your device, as described above.

Under UK data protection law you have the right to ask for a copy of personal data we hold about you, and to have it corrected or erased. You can also ask us to restrict how we use it, and you can object to our use of it based on legitimate interests. For what you log in the hub, you exercise these rights directly on your device, because we hold none of it.

To make a request about our server logs, email hello@infatot.com. It helps to include your IP address and the approximate time of your visit, because the logs hold nothing else that identifies you. We’ll reply within one month. Using your rights is free in almost all cases.

If you’re unhappy with how we’ve handled your information, please tell us first at hello@infatot.com. We’ll acknowledge your complaint within 30 days and let you know the outcome without undue delay.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator: ico.org.uk/make-a-complaint, or call 0303 123 1113.

If we change how the hub handles information, we’ll update this notice and the date at the top. If we ever start receiving anything you log, for example with an optional account or sync between devices, we’ll tell you in the hub first. It will never happen silently.