Privacy policy

Last updated 2 October 2026

Ivy keeps a baby’s diary for the people who care for that baby. This page says what is stored, who handles it, and how to have it deleted. It covers the Ivy app for iPhone, the web app and this site.

What Ivy stores

Everything below is entered by you or by a caregiver you invited. Ivy does not buy, scrape or infer data about you from anywhere else.

• Your account: the email address you sign in with and, when you use Sign in with Apple or Google, the name they pass on. Your password never reaches Ivy; sign-in is handled by Supabase Auth.
• The baby’s profile: name and, if you give it, date of birth. The caregivers you invite, with the display name each one chose.
• The diary: feeds, sleep, diapers, growth, appointments, notes and everything else you tell Ivy, each with who said it, when, and the conversation it came from.
• Reminders, and the push token of each phone that allowed notifications so they can ring there.
• Photos and screenshots you share, in a private bucket, with the caption and tags Ivy wrote for them.
• Voice memos as text: the recording is transcribed and then discarded; only the transcript is kept, in your conversation.
• Your conversations with Ivy, so it can pick up where you left off.
• Your time zone, so times read the way you said them.
• The cost of each answer against the family’s free $2 and credits, and a receipt for each credit pack: the store’s transaction id and the product. Card numbers never reach Ivy; Apple, Google and Stripe keep those.

AI processing

Ivy’s answers are written by AI models that other companies run. Before the first message the app asks your permission on a screen of its own: it lists what is sent and every company that receives it, and offers Allow and Don’t allow. Nothing is sent to a model until you tap Allow. Allowing once covers your account, including a second phone. You can withdraw it at any time under Settings → AI data sharing; Ivy then stops sending and asks again before your next message.

• What is sent: the messages you write, the photos and screenshots you share, the voice memos you record, the baby’s name, date of birth and the diary your messages become, and the display names of the caregivers in the conversation. Your email address, password and payment details are never sent.
• OpenRouter, Inc. (openrouter.ai) receives each message and passes it to the model, with data retention turned off.
• OpenAI reads photos, screenshots and longer messages (GPT-5.5) and transcribes voice memos (Whisper), through OpenRouter.
• Z.ai’s GLM model reads short messages, through OpenRouter. OpenRouter runs it at Z.ai or at another host it picks per message; Ivy only allows hosts that do not keep or collect the data.
• LangChain (LangSmith) runs Ivy’s assistant and stores your conversations with it, so Ivy can pick up where you left off.
• What it is used for: only to log, answer, remind and transcribe for your family. Not for advertising, not sold, and not used to train models.
• Each of these companies is bound by a written agreement to protect the data at least as well as this policy does, and to use it only to provide its service to Ivy.

Who else handles it

Ivy runs on a few services that process data on our behalf, each bound by its own data-processing terms to protect it at least as well as this policy does, and only for the purpose named here.

• Supabase: the database, sign-in and photo storage.
• LangSmith by LangChain: runs the assistant and stores your conversations with it.
• OpenRouter, OpenAI and the hosts of Z.ai’s GLM model: read a message, a picture or a voice memo for the moment it takes to answer or transcribe it, with data retention turned off.
• Expo: delivers push notifications to your phone.
• Cloudflare: serves the web app, this site and the small services that keep the plan in order.
• Apple and Stripe: take the payment for credit packs and send Ivy the receipt.

The people in your household

Every caregiver you invite sees the same diary, photos, reminders and answers, and Ivy says who logged what. Only invite people you would hand the paper diary to. Anyone can leave under Settings → Caregivers; what they logged stays with the baby.

Children

Ivy is for parents and other adults who care for a baby. The information about the baby is entered by those adults and belongs to them. Ivy has no accounts for children and does not knowingly collect anything from a child directly.

How long it is kept, and deleting it

Your data is kept for as long as your account exists. Remove a single entry or photo by saying so in the chat. To delete your account, open Settings → Account → Delete account in the app: it goes right away, together with everything you logged. If you set Ivy up for the baby, that takes the baby's whole record with it, for every caregiver; if you were invited, it takes your account and the photos you shared and leaves the baby's record with the person who set Ivy up. Your conversations with Ivy are deleted at the same time. You can also write to support@get-ivy.baby from the email you signed up with and we do it for you. Receipts for credit packs are kept as long as accounting law requires.

Security

Data travels over TLS and rests in a database where row-level security lets each caregiver read only their own baby. Model keys sit in a vault, never in the app. Invite links work once and expire after a week. No system is perfect; if you believe something is wrong, write to us and we will look at it first.

Your rights

You can see everything Ivy holds about your baby by asking it, correct anything in the chat, ask us for a copy, and have it all deleted. If you live in the EU, the UK, California or anywhere else with a data-protection law, these are your rights under it and you may also complain to your local authority. Write to support@get-ivy.baby for any of them.

Changes to this page

When this policy changes, the new version appears here with a new date at the top. If a change matters to how your data is used, we let you know in the app or by email before it applies.