CubTrack Logo

Privacy Policy

Last updated: March 2026

1. Introduction

CubTrack is a baby and toddler tracking application that helps parents and carers log feeds, sleep, nappies, growth, milestones, temperature, medication, meals, photos, and more. This privacy policy explains how we collect, use, store, and protect your personal data when you use the CubTrack mobile app and website.

We are committed to protecting your privacy and processing your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

The data controller responsible for your personal data is:

3. What Data We Collect

We collect the following categories of personal data:

Account data

Your email address and display name, used to create and manage your CubTrack account.

Child data

The name, date of birth, and gender of children you add to the app. This information is provided by you as a parent or guardian.

Tracking data

All entries you log within the app, including feeds (breast, bottle, solids), sleep sessions, nappy changes, meals, temperature readings, medication doses, growth measurements (weight, height, head circumference), milestones, and any custom tracker entries.

Photos

Images you upload to the gallery feature, stored securely in cloud storage.

Device information

Device tokens required to deliver push notifications to your device. We do not collect device identifiers for tracking or advertising purposes.

Subscription and purchase data

Information related to your subscription status and in-app purchases, managed by our payment processor RevenueCat. We do not store your payment card details directly.

4. Lawful Basis for Processing

Under the UK GDPR, we rely on the following legal bases to process your personal data:

  • Performance of a contract (Article 6(1)(b)): We process your account data, child data, and tracking data to provide you with the baby tracking service you signed up for.
  • Legitimate interests (Article 6(1)(f)): We process limited data to maintain the security of the app, prevent fraud, and improve the service. Our legitimate interests do not override your rights and freedoms.
  • Consent (Article 6(1)(a)): We request your consent before sending optional push notifications. You can withdraw consent at any time through your device settings.

5. How We Use Your Data

We use your personal data to:

  • Provide and operate the CubTrack tracking features, including logging, viewing, and exporting your data.
  • Sync data across family members you have invited to share your timeline (partners, grandparents, carers).
  • Send you push notifications and local reminders (such as feed timers and medication reminders) when you have opted in.
  • Process and manage your subscription through RevenueCat.
  • Protect the security and integrity of the app using Firebase App Check.

6. Who We Share Data With

Family members you invite

When you invite a partner, grandparent, or carer to your family group, they will be able to view and contribute to the shared timeline. You control who has access and can remove members at any time.

Firebase / Google Cloud (data processor)

We use Firebase services provided by Google for authentication (Firebase Auth), data storage (Cloud Firestore), file storage (Firebase Storage), push notifications (Firebase Cloud Messaging), and API protection (Firebase App Check). Google acts as a data processor on our behalf.

RevenueCat (data processor)

We use RevenueCat to manage subscriptions and in-app purchases. RevenueCat processes your purchase data as a data processor on our behalf.

No third-party selling or advertising

We do not sell your personal data to any third party. We do not share data with advertising networks. We do not use third-party analytics or tracking SDKs.

7. Data About Children

CubTrack processes data about children on behalf of their parents or legal guardians. We do not knowingly collect personal data directly from children. All child data is entered and controlled by the parent or guardian who manages the account.

Parents and guardians are responsible for ensuring they have the right to provide information about any child they add to the app. If you believe data about a child has been submitted without proper authorisation, please contact us immediately.

8. Data Retention

We retain your personal data for as long as your account remains active and you continue to use the service. When you delete your account through the app, all associated data — including your account information, child profiles, all tracking entries, and uploaded photos — is permanently and irreversibly deleted (cascade delete).

We do not retain backup copies of your data after account deletion.

9. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right of access: You can request a copy of the personal data we hold about you.
  • Right to rectification: You can update or correct your data at any time within the app.
  • Right to erasure: You can delete your account and all associated data directly from within the app.
  • Right to restrict processing: You can request that we limit how we process your data in certain circumstances.
  • Right to data portability: You can export your tracking data as a PDF report from within the app.
  • Right to object: You can object to processing based on legitimate interests.
  • Right to lodge a complaint: If you are unsatisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, please contact us at support@oakfox.co.uk.

10. Data Security

We take appropriate technical and organisational measures to protect your personal data, including:

  • All data is encrypted in transit using TLS (Transport Layer Security).
  • Data is stored on Google Cloud infrastructure, which provides encryption at rest and robust physical security.
  • Firebase App Check is used to verify that requests to our backend originate from the genuine CubTrack app, protecting against unauthorised access.
  • Access to data within family groups is controlled by invite-only permissions that you manage.

11. International Data Transfers

Your data is stored on Google Cloud (Firebase) servers, which may be located outside the United Kingdom. Where data is transferred internationally, Google provides adequate safeguards in accordance with UK GDPR requirements, including the use of Standard Contractual Clauses (SCCs) and compliance with relevant adequacy decisions.

12. Cookies

The CubTrack mobile app does not use cookies. The CubTrack website may use strictly essential cookies required for the site to function correctly. We do not use cookies for analytics, advertising, or tracking purposes.

13. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you through the app or by email.

We encourage you to review this policy periodically to stay informed about how we protect your data.

14. Contact Us

If you have any questions about this privacy policy or how we handle your personal data, please contact us: