Bibi Jot 育嬰記
Privacy Policy
隱私權政策
Last updated 8 September 2026 · [email protected]
最近更新：2026 年 9 月 8 日 · [email protected]
Bibi Jot (“we”) is a baby care log for parents and caregivers. This policy describes what we collect, what we do not collect, and how you control it.
Bibi Jot is built local-first. Feeding, sleep, diaper, growth, and health notes you enter are stored on this device, encrypted at rest with AES-256-GCM. You can start without an account. If you sign in, we also keep an encrypted backup in our cloud so you can restore on a new phone.
What stays on your device
Baby profile (name, birth details), care events, reminders, inventory, settings, and exported reports. Baby photos you take stay on this device and are not uploaded.
A device encryption key is kept in the OS keychain on iPhone/Android, or in this browser’s storage on web. An optional app lock PIN only locks the screen. If you forget it, sign in to restore the encrypted cloud backup.
What we do not collect
We do not run advertising trackers, analytics SDKs, or crash reporters that upload baby logs. We do not sell, rent, or share your family’s records with data brokers.
Voice logging, when you use it, is processed by the browser or OS speech service you already use. Bibi Jot does not keep an audio recording.
Encrypted cloud backup and family sync
If you sign in with email (magic link), we upload an AES-256-GCM ciphertext of your log over HTTPS. Other users cannot read it. You can restore it on a new device with the same account.
Family sync uses a shared group key. Only members you invite can decrypt those events.
Sign-in is required for cloud backup, family sync, and restoring a paid Plus plan across devices. Logging itself still works without an account.
You can export a JSON copy and delete everything on this device from Me → Clear all data. Email us to delete a cloud copy.
Children’s privacy
Bibi Jot is for adults caring for a baby. The child is not the account holder. Do not let a child under 13 create or control an account. You are responsible for the information you enter about your baby.
Legal bases (EEA / UK)
Local logging: your consent and our legitimate interest in providing the tool you asked for. Optional sync or purchases: performance of a contract, and consent where required.
Your rights
Access and portability: use Export data. Erasure: use Clear all data, and email us if a cloud copy exists. Contact: [email protected]
育嬰記（「我們」）是給父母與照顧者使用的寶寶照護紀錄。本政策說明我們收集什麼、不收集什麼，以及你如何掌控。
育嬰記採本機優先。你輸入的餵養、睡眠、尿布、成長與健康筆記，儲存在這部裝置，並以 AES-256-GCM 加密保存。你可以先不用帳號。若登入，我們會再保存一份加密雲端備份，方便換機還原。
留在你裝置上的資料
寶寶資料（姓名、出生資訊）、照護事件、提醒、庫存、設定，以及你自行匯出的報告。你拍攝的寶寶照片留在這部裝置，不會上傳。
裝置加密金鑰存放在 iPhone / Android 的系統鑰匙圈，或網頁的瀏覽器儲存空間。可選 PIN 只鎖定螢幕。若忘記 PIN，登入即可還原加密雲端備份。
我們不收集的項目
我們不安裝廣告追蹤、分析 SDK，也不會把寶寶紀錄上傳到當機回報服務。我們不出賣、出租，也不把家庭紀錄交給資料仲介。
語音紀錄若你使用，由你裝置上既有的瀏覽器或系統語音服務處理。育嬰記不會保存錄音。
加密雲端備份與家庭同步
若你用 email 魔法連結登入，我們會把 AES-256-GCM 密文經 HTTPS 上傳。其他使用者讀不到。換新裝置用同一帳號即可還原。
家庭同步使用共用群組金鑰，只有你邀請的成員能解密。
雲端備份、家庭同步與付費 Plus 跨裝置還原需要登入。日常紀錄仍可不上帳號使用。
你可從「我的 → 清除所有資料」匯出 JSON 備份並刪除此裝置上的一切。若要刪除雲端副本請寄信給我們。
兒童隱私
育嬰記供照顧寶寶的成人使用。孩子不是帳號持有人。請勿讓 13 歲以下兒童建立或控制帳號。你須為替寶寶輸入的資訊負責。
法律依據（EEA / UK）
本機紀錄：你的同意，以及我們提供你所要求工具的正當利益。可選同步或購買：履行契約，以及在需要時取得同意。
你的權利
存取與可攜：使用匯出資料。刪除：使用清除所有資料；若雲端有副本請寄信給我們。聯絡：[email protected]