Privacy Policy

Last updated: September 5, 2026 · Version française

This policy explains what data My Baby League collects, why, and what you can require regarding it.

This is a translation of the French original. Should the two versions differ, the French version prevails.

1. Who is responsible

The data controller is Benoit Rossignol (BR MEDIA), sole trader, SIREN 789 477 726, 123 avenue Henri Ginoux, 92120 Montrouge, France.

For any question or request: hello@mybabyleague.com

2. What we collect, and why

Your sign-in identity. Sign in with Apple gives us a unique identifier and, depending on your choice, your email address — possibly a relay address provided by Apple. Used to recognise you from one session to the next. Legal basis: performance of the contract.

Your profile. Display first name, last name if you enter one, avatar colour, photo if you add one. Used to identify you to the other members of your leagues. The last name and the photo are optional; the last name is only shown, as an initial, when another member has the same first name. Legal basis: performance of the contract.

Your leagues. League name, the parents' first names, due date, location if entered, and once the baby is born the real values entered by the organiser. Used to run the game and work out the points. Legal basis: performance of the contract.

Your league banner. The organiser can pick an illustration supplied with the app, or upload their own photo. An uploaded photo is only visible to the members of the league: every display is authorised by our server, which checks that you belong to it. There is no public link, and leaving the league takes the files with it. An ultrasound scan is still more sensitive than a portrait, so only put there what you would be willing to share with the whole league. It is visible to all participants, who can report it, and the organiser can replace it or go back to an illustration at any time. Legal basis: performance of the contract.

Your predictions and your activity. The answers you give, your messages in the Coop, your reactions. Your predictions are hidden from other members until the bet in question is revealed — which happens when voting closes, or earlier if the organiser reveals that bet on its own. This confidentiality is enforced by the server, not only by the app. Legal basis: performance of the contract.

The photos and videos you post in the Coop. They are only visible to the members of your league: every display is authorised by our server, which checks that you belong to it. There is no public link, and leaving the league takes the files with it. An ultrasound scan or a photo of a newborn is still more sensitive than a message, so only put there what you would be willing to share with the whole league. You can delete your message at any time: the file is erased with it, and it also goes if you delete your account. Other members can report it. Legal basis: performance of the contract.

Your reports and blocks. Used for moderation and to enforce the people you have blocked. Legal basis: our legitimate interest in keeping the space healthy.

Your notifications. If you accept them, a device token provided by Apple, so we can tell you when a league moves. Legal basis: your consent, which you can withdraw at any time in the iOS settings.

Your feedback. If you use “Your opinion counts”, your message and the app version. Legal basis: our legitimate interest in improving the service.

Your usage statistics. Which screens are opened and which actions are taken — creating a league, voting, inviting — so we can understand where the app is confusing and fix it. These measurements are anonymous: no account identifier is attached to them, your IP address is not transmitted, and never the content of what you write: no predictions, no messages, no first names, no league names. They do not allow any individual's journey to be reconstructed, and they serve no advertising purpose. Legal basis: our legitimate interest in improving the service. You can object at any time from your profile, under “Privacy”.

Failures. When the app fails — a crash, or an operation the server refuses without the app being able to explain it — we receive the error type, its technical message, the call stack, the device model and the iOS version. The message is redacted before it is sent: identifiers and email addresses are replaced, and the detail PostgreSQL appends — the part that would copy out the row involved — is cut. These reports are attached to no account. Legal basis: our legitimate interest in keeping the service working. They stop along with the usage statistics, through the same switch.

Your purchases. The plan level attached to your account. Payments are processed by Apple: we receive neither your card number nor your banking details.

3. What we do not do

We do not sell or rent your data. We do not use it for advertising. The app contains no advertising tracker and no third-party social network, and does not follow you across other apps — which is why it does not ask you for iOS's tracking permission: what we measure does not fall under it. We build no behavioural profile, we do not record your screen, and we make no automated decisions about you.

4. Who hosts and processes your data

Supabase hosts the database and every file you upload — profile photo, league banner, Coop photos and videos — in its eu-west-3 (Paris, France) region. This data does not leave the European Union.

PostHog processes the anonymous usage statistics and the failure reports, on its European instance. None of this data leaves the European Union.

Apple handles authentication, notification delivery and payment processing, under its own terms.

We do not pass your data to any other third party, except where legally required.

5. How long we keep it

For as long as your account exists. When you delete it from the Profile tab, erasure is immediate and cascading: profile, predictions, messages, reactions, and the leagues you organise.

Two exceptions. The real birth results stay attached to the league that holds them — we only stop recording who entered them. Feedback sent through “Your opinion counts” is kept anonymously, detached from your account.

Usage statistics follow their own rule, since they are attached to no account: they are kept for thirteen months, then deleted. What we learn from them — aggregate figures, linked to nobody — may be kept beyond that.

Failure reports follow the same thirteen-month rule.

6. Your rights

You have the right of access, rectification, erasure, restriction, objection, and the right to data portability.

If our answer does not satisfy you, you can lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, 75007 Paris — www.cnil.fr. If you live elsewhere in the European Union, or in the United Kingdom, you may instead contact your own national supervisory authority.

7. The child's data

The app records information about a child before and after birth: date of birth, first name, weight, length.

This information is entered by the league organiser — in principle one of the parents — and is visible only to the members of the league they themselves invited. It is neither public, nor indexed, nor passed to third parties.

If you are a parent and want this information erased, write to us: we will delete it unconditionally.

8. Security

Exchanges with our servers are encrypted. Access to data and to files alike — photos, videos, banners — is partitioned by league at the database level itself: the server refuses to return a league's content to anyone who is not a member, and hides other people's predictions until the bet in question is revealed.

9. Changes

This policy may change. If a change is substantial, you will be told in the app.