Privacy Policy
Effective date: March 6, 2026CribStack (“we”, “our”, or “the app”) is operated by DJUMP, MB. This Privacy Policy explains what we collect, how we use it, and the choices you have.
1. Information We Collect
| Data type | Purpose |
|---|---|
| Email address | Account creation, authentication, and waitlist updates |
| Display name | User profile shown inside the app |
| Baby profiles (name, birth date) | Core tracking functionality |
| Feeding, diaper, and sleep logs | Daily timeline and summaries |
| Push notification token | Feed and sleep reminders (opt-in only) |
| Device information | Anonymous analytics to improve the app |
2. Information We Do Not Collect
- We do not collect payment or credit card information. All subscription billing is handled by Apple (App Store) or Google (Google Play) through RevenueCat.
- We do not collect health data beyond what you manually enter. CribStack is not a medical device.
- We do not sell your data, and we do not run third-party ad networks inside the app.
3. How We Use Your Information
- To provide core app functionality (logging feeds, diapers, sleep; daily summaries and timelines).
- To authenticate your account and sync data across your devices and your co-parent’s devices.
- To send push notification reminders for feeding schedules (only if you opt in).
- To analyse aggregate usage so we can improve the app over time.
- To respond to support requests you send us.
4. Data Storage and Security
Your data is stored using Supabase with row-level security — only you (and the co-parents you invite) can read your own baby’s data. All transport is over HTTPS / TLS. We do not sell, rent, or trade your personal data with third parties.
5. Third-Party Services
- Supabase — authentication and database hosting.
- RevenueCat — subscription and payment orchestration.
- Resend — transactional email (waitlist confirmations, contact replies).
- Mixpanel — anonymous, aggregated usage analytics.
- Apple / Google — OAuth sign-in providers.
- Vercel — web hosting for this marketing site.
6. Your Rights
You may request to view, update, or delete your personal data at any time. Inside the app, you can delete your account directly under Settings; the request removes your data within 30 days. You can also write to start@djump.io and we will act on it.
7. Children’s Privacy
CribStack is designed for parents and caregivers tracking their babies’ activities. It is not intended for direct use by children under 13, and we do not knowingly collect personal data from children.
8. International Transfers
CribStack is operated from Lithuania (EU). If you use the app from outside the EU, your data may be processed in the EU and in countries where our sub-processors are based. We rely on standard contractual clauses where applicable.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes through the app or by updating the effective date above.
10. Contact
If you have questions about this Privacy Policy or your data, write to start@djump.io.