Privacy Policy — BabyTrack

Last updated: 17 May 2026 · Applies to BabyTrack v1.0.0 and later.

This policy applies specifically to the BabyTrack Garmin Connect IQ app. Other apps published by BIKINTULIS have their own policies — see the directory.

1. Who we are

BIKINTULIS is an independent developer of Garmin Connect IQ apps, based in Germany. For questions about this policy, use the contact form.

2. Summary in plain language

• BabyTrack does not ask for your name, email or any account credentials.
• Solo (unpaired) use — nothing leaves your watch. All logs stay in the app's sandboxed local storage.
• If you pair a second watch or a watch face (via a 6-character household code), BabyTrack syncs the baby's data through a BIKINTULIS server so both devices stay current. Your day-to-day logs are uploaded only once you're paired — a solo user who never opens the pairing screens makes no network calls at all.
• The only identifier the server ever sees is a 16-character random user ID generated by your watch. It is not linked to you personally.

3. Permissions BabyTrack requests

BabyTrack does not request location (GPS), heart rate, sensor history, microphone, or any other permission.

4. Data stored locally on the watch

BabyTrack writes the following to Garmin's Application.Storage (a per-app sandbox accessible only to BabyTrack):

• A 16-character random user ID, generated on first launch.
• Feed logs — timestamp, type (milk / formula / breast L / breast R / snack), and quantity in ml or duration.
• Sleep logs — timestamp, type (nap / night / other), duration, pause intervals.
• Diaper logs — timestamp, type (wet / dirty / mix).
• Weight and height entries with timestamp.
• Your baby's birthday (only if you set one).
• Reminder thresholds, the night-pause toggle, and manual schedule overrides (bedtime, wake, nap duration).
• Target nap count per day, if you set one.
• Paired-state flag for the household.

5. Data sent to the BIKINTULIS server

Your day-to-day data is uploaded only once you've paired a second device. (The pairing screens — showing or entering a code, or leaving a household — contact the server beforehand too, but they send only your watch's random ID, never any logs.) Once paired, BabyTrack sends the following over HTTPS to a secure endpoint on the BIKINTULIS server:

• The 16-character random user ID generated by your watch.
• Each new log (feed / sleep / diaper).
• Your baby's birthday timestamp (so the server can compute age-band predictions).
• Reminder thresholds and manual schedule overrides (so the partner's watch and the paired face stay in sync).
• Active-session start/stop events (so a paired watch can show "currently sleeping" while a session is running).
• Your licence state for this product — trial, active (monthly or full pass), or expired — tied to your random user ID, so the app knows whether to stay unlocked.

The server returns the merged household data so both paired devices see the same picture.

6. What BabyTrack does NOT collect or send

• No real name, email address, phone number, postal address, or any account credential.
• No GPS / location data, ever.
• No heart rate, SpO2, stress, or any other biometric data.
• No install location, IP geolocation, or device IMEI / MAC.
• No data from any other app on your watch.
• No advertising or analytics SDKs of any kind.

7. The household pairing code

Pairing works by entering a temporary 6-character code shown by another watch. The code authorises your watch to join an existing household on the server. The code is short-lived (10 minutes), and is the only way to add a second device — no email invitation, no QR code with personal data, no contact-list lookup.

8. Garmin Connect & your Garmin account

BabyTrack runs inside Garmin's Connect IQ platform. Garmin's own collection and use of data (your Connect account, syncing activities to Garmin Connect, app installations, etc.) is governed by Garmin's policy at garmin.com/privacy. BIKINTULIS has no access to your Garmin account, your activities, or anything synced to Garmin Connect.

9. The bikintulis.de website

Separate from the app, when you use the bikintulis.de website itself:

• If you leave a comment or review, your name, email, rating and comment text are stored. Your name, rating and comment are published publicly after moderation; your email is never published.
• If you use the contact form, your name, email, subject and message are stored privately and used to reply to you. If you attach a photo or video (optional, up to 20 MB), it is stored on the BIKINTULIS server alongside the message and only viewable by the site owner via an authenticated admin panel. The attachment is deleted when the message is deleted.
• Your IP address is stored only as a salted SHA-256 hash (rate-limiting / spam prevention). The raw IP is not retained.
• Standard web-server access logs are kept up to 30 days.
• No cookies, no third-party analytics, no advertising, no tracking pixels.

10. Legal basis (GDPR)

• Performance of a service — household sync; you opt in by entering a pairing code.
• Your consent — when you submit a comment or contact message on the website.
• Legitimate interest — IP hashes and server logs, used solely to keep the site secure and operational.

11. Data retention

• BabyTrack data on your watch: stored locally; removed when you uninstall the app.
• BabyTrack data on the server: kept while at least one watch in the household is active. If no watch syncs for 90 days, the household and its logs are deleted.
• Website comments: retained while BabyTrack is listed on this site.
• Contact messages: retained as long as needed to handle your enquiry, then deleted.
• Server access logs: up to 30 days.

12. Your rights

You have the right to:

• Ask what data is held about you (provide your watch-generated user ID — find it in BabyTrack → Extras → License).
• Ask for your household data to be deleted from the server.
• Ask for your data to be corrected.
• Withdraw consent at any time (leave the household to stop syncing; uninstall the app to clear local data).
• Object to processing that relies on legitimate interest.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, use the contact form. Requests are answered within 30 days.

13. Security

• All traffic between BabyTrack and the BIKINTULIS server is over HTTPS.
• The server stores data in a private database not exposed to the public internet.
• No payment data is ever handled by BIKINTULIS — purchases go through the Garmin Connect IQ store.

14. Children

BabyTrack logs data about a baby — that's its purpose — but it is designed for and used by the parent or caregiver. It does not target children as users and does not collect any personally identifying information about the child (no name, no photo, no contact info). The only child-related field stored is the birthday timestamp, used to pick the correct sleep-prediction age band — a rough date works fine.

15. Changes to this policy

This policy may be updated to reflect new BabyTrack features or legal requirements. The "Last updated" date at the top reflects the latest change. Continued use of BabyTrack after a change indicates acceptance of the updated policy.

16. Contact

Questions, requests or complaints about this policy: please use the contact form.