Privacy

The short version

Latch is a client for a Baby Buddy server that you run. There is no Latch cloud, no Latch account, and no Latch-operated server holding anything about your child. Your data goes from the app to your instance and nowhere else.

Two things do leave the device, and both can be switched off: anonymous crash reports and anonymous usage analytics. They are described in full below. This website itself collects nothing.

Your baby's data

Feeds, sleep, nappy changes, pumping, tummy time, notes, names, times and photographs are held by your Baby Buddy instance. Latch reads and writes them over your network connection to that instance. None of it is copied to us, and we have no way to read it.

Your server address and API token are stored in the iOS Keychain, and are transmitted only to the server you entered them for. They are never sent to us, never included in a crash report, and never used for anything else.

Entries logged while your server is unreachable are queued on the device and sent when it can be reached again. That queue lives on your phone.

Because the data is on your server, this policy does not govern it. Your own Baby Buddy instance, and whoever hosts it, decides how it is stored, backed up and protected.

Crash reports and usage analytics

Latch reports crashes to Sentry and anonymous product usage to Aptabase. Both are on by default and both can be turned off independently.

Each channel has its own switch in Settings → Privacy in the app. Your choice is stored on the device; we are not told what you chose.

Crash reports (Sentry). Sent when the app crashes, so it can be fixed. Latch does not ship the SDK defaults:

• No IP address, cookies or user identifiers are attached (sendDefaultPii: false).
• No console or log capture - the most likely place a server address or token could ride along.
• No performance tracing. Crashes only.

Every report is scrubbed before it leaves the device. Because Latch talks only to your Baby Buddy instance, every network address in a report would otherwise be your private server, so:

• Server origins are replaced with [server]. The path is kept, the host is not.
• Token … and Bearer … authorisation strings, and ?token= and ?api_key= query parameters, are redacted.
• Any field whose name looks secret - authorisation, cookie, token, api key, password, secret - is blanked, whatever its value.

Usage analytics (Aptabase). Tells us which features are used, so effort goes where it is useful. There is no free-form event surface in the app: every event comes from a fixed allowlist, and its properties are enumerated values only - "an entry of type feed was logged", never a name, time, amount, URL or token.

• No personal data, no device identifiers, no cross-app identifiers.
• Sessions are anonymous and rotate.
• Nothing about your child, your server, or your entries is included.

This website

This site is static HTML. It sets no cookies, runs no analytics, embeds no third-party scripts, fonts, pixels or tag managers, and makes no requests to any other host. There is nothing here to consent to, which is why you were not asked.

Our host, Netlify, keeps standard web server logs of requests - including IP addresses - to deliver the site and defend it against abuse. We do not use those logs to build a profile of you, and we do not combine them with anything from the app.

Why we are allowed to do this

Crash reports and usage analytics are processed on the basis of our legitimate interest in keeping the app working and knowing which parts of it matter, balanced against the fact that neither channel carries anything that identifies you or your child. You can withdraw from either at any time in Settings → Privacy, without losing any functionality.

Because nothing we hold identifies you, we usually cannot locate "your" data in order to export or delete it. Turning a channel off stops the collection, which is the effective remedy. If you believe we hold something identifying you, write to us and we will look.

Children

Latch is for parents and carers, not for children. Information about a child stays on the Baby Buddy server that the adult using the app operates; none of it reaches us.

Who we are, and how to reach us

The data controller is Goldseam AI Consulting Ltd. (goldseam.ai).

For any question about this policy, or about data we might hold, write to support@latchbabybuddy.app.

If we change what is collected, this page changes first and the date above changes with it.