Privacy Policy — BabyTrack

Last updated: 15 May 2026 · Applies to BabyTrack v1.2.20 and later.

This policy applies specifically to the BabyTrack Garmin Connect IQ app. Other apps published by BIKINTULIS have their own policies — see the directory.

1. Who we are

BIKINTULIS is an independent developer of Garmin Connect IQ apps. For questions about this policy, use the contact form.

2. Summary in plain language

• BabyTrack does not ask for your name, email or any account credentials.
• By default everything is stored on the watch. Nothing leaves the watch.
• If you pair a second watch with a 6-digit household code (so two parents can share the same baby's data), BabyTrack starts syncing through a BIKINTULIS server. Until you pair, no traffic is sent.
• The only identifier the server ever sees is a random ID generated by your watch. It is not linked to you personally.

3. Permissions BabyTrack requests

BabyTrack does not request location (GPS), heart rate, sensor history, or any other permission.

4. Data stored locally on the watch

BabyTrack writes to Garmin's Application.Storage (a per-app sandbox accessible only to BabyTrack):

• A random user ID, generated on first launch.
• Your baby's birthday (only if you set one).
• Feed logs — timestamp, type (breast L/R, milk, formula, snack), and quantity in ml or duration.
• Sleep logs — timestamp, nap or night, duration, pause intervals.
• Diaper logs — timestamp, type (wet, dirty, mix, dry).
• Reminder thresholds and the night-pause window.
• Manual schedule overrides (bedtime, wake, nap duration), if you set any.
• Cached predictions returned by the server.

Local logs older than 7 days are pruned automatically.

5. Data sent to the BIKINTULIS server (only after pairing)

Data leaves the watch only after you enter a 6-digit household code (or claim a paired watch face). Until then, BabyTrack stays offline.

After pairing, BabyTrack sends the following over HTTPS to https://bikintulis.de/api/bt/*:

• The random user ID generated on your watch.
• Each new log (feed, sleep, diaper) with timestamp, type and quantity.
• Your baby's birthday timestamp (so the prediction engine can pick the right age band).
• Reminder thresholds and any manual schedule overrides (so the partner's watch and any paired watch face stay in sync).
• Active-session start/stop events (so a paired watch can show "currently sleeping" while a session is running).

The server returns the merged household data so both paired watches see the same picture.

6. What BabyTrack does NOT collect or send

• No name, email, address, phone, password.
• No GPS location. No heart rate. No fitness or activity data.
• No data from any other app on your watch.
• No advertising or analytics SDKs of any kind.

7. The household pairing code

Pairing works by entering a temporary 6-digit code shown by another watch. The code authorises your watch to join an existing household on the server. It is short-lived and is the only way to add a second device — no email invitation, no QR code with personal data, no contact-list lookup.

8. Garmin Connect & your Garmin account

BabyTrack runs inside Garmin's Connect IQ platform. Garmin's own collection and use of data (your Connect account, syncing activities to Garmin Connect, app installations, etc.) is governed by Garmin's policy at garmin.com/privacy. BIKINTULIS has no access to your Garmin account, activities, or anything synced to Garmin Connect.

9. The bikintulis.de website

Separate from the app, when you use the bikintulis.de website itself:

• If you leave a comment or review, your name, email, rating and comment text are stored. Your name, rating and comment are published publicly after moderation; your email is never published.
• If you use the contact form, your name, email, subject and message are stored privately and used to reply to you.
• Your IP address is stored only as a salted SHA-256 hash (rate-limiting / spam prevention). The raw IP is not retained.
• Standard web-server access logs are kept up to 30 days.
• No cookies, no third-party analytics, no advertising, no tracking pixels.

10. Legal basis (GDPR)

• Performance of a service — household sync; you opt in by entering a pairing code.
• Your consent — when you submit a comment or contact message on the website.
• Legitimate interest — IP hashes and server logs, used solely to keep the site secure and operational.

11. Data retention

• BabyTrack logs on your watch: kept for 7 days, pruned automatically.
• BabyTrack logs on the server: kept while at least one watch in the household is active. If no watch syncs for 90 days, the household and its logs are deleted.
• Website comments: retained while BabyTrack is listed on this site.
• Contact messages: retained as long as needed to handle your enquiry, then deleted.
• Server access logs: up to 30 days.
• App data on your Garmin device is removed when you uninstall the app.

12. Your rights

You have the right to:

• Ask what data is held about you (provide your watch-generated user ID — find it in BabyTrack → Settings → About).
• Ask for your household data to be deleted from the server.
• Ask for your data to be corrected.
• Withdraw consent at any time (leave the household to stop syncing; uninstall the app to clear local data).
• Object to processing that relies on legitimate interest.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, use the contact form. Requests are answered within 30 days.

13. Security

• All traffic between BabyTrack and the BIKINTULIS server is over HTTPS.
• The server stores data in a private database not exposed to the public internet.
• No payment data is ever handled by BIKINTULIS — purchases go through the Garmin Connect IQ store.

14. Children

BabyTrack logs data about a baby — that's its purpose — but it is designed for and used by the parent or caregiver. It does not target children as users and does not collect any personally identifying information about the child (no name, no photo, no contact info). The only child-related field stored is the birthday timestamp, used to pick the correct sleep-prediction age band; a rough date works fine.

15. Changes to this policy

This policy may be updated to reflect new BabyTrack features or legal requirements. The "Last updated" date at the top reflects the latest change. Continued use of BabyTrack after a change indicates acceptance of the updated policy.

16. Contact

Questions, requests or complaints about this policy: please use the contact form.