Privacy Policy

Last updated: October 12, 2026 · Version française

This policy explains what data My Baby League collects, why, and what you can require regarding it.

This is a translation of the French original. Should the two versions differ, the French version prevails.

1. Who is responsible

The data controller is Benoit Rossignol (BR MEDIA), sole trader, SIREN 789 477 726, 123 avenue Henri Ginoux, 92120 Montrouge, France.

For any question or request: hello@mybabyleague.com

2. What we collect, and why

Your sign-in identity. On iPhone, Sign in with Apple gives us a unique identifier and, depending on your choice, your email address — possibly a relay address provided by Apple. On Android, signing in with Google gives us a unique identifier, your email address, your name and the link to your Google account photo: your first name pre-fills your profile, which you can edit, and the photo is not used. Used to recognise you from one session to the next. Legal basis: performance of the contract.

Your profile. Display first name, last name if you enter one, avatar colour, photo if you add one. Used to identify you to the other members of your leagues. The last name and the photo are optional; the last name is only shown, as an initial, when another member has the same first name. Legal basis: performance of the contract.

Your leagues. League name, the parents' first names, due date, location if entered, and once the baby is born the real values entered by the organiser. Used to run the game and work out the points. Legal basis: performance of the contract.

The organiser's note. If they write one, the text they address to their guests. Anyone who opens the invitation link can read it, even before signing in, and only while voting is open. Used to invite family and friends. Legal basis: performance of the contract.

The baby registry. If the organiser opens one: the gifts they list there — a title, a detail and a link if they add one — and, when a member says they will take care of one, the fact that this gift is taken. WHO reserved what is shown to nobody until the baby is born; afterwards the organiser alone sees the first names, so they can say thank you. This confidentiality is enforced by the server, not only by the app. The links lead to third-party sites, which we do not control and to which we pass nothing on. Legal basis: performance of the contract.

Your league banner. The organiser can pick an illustration supplied with the app, or upload their own photo. An uploaded photo is only visible to the members of the league: every display is authorised by our server, which checks that you belong to it. There is no public link, and leaving the league takes the files with it. An ultrasound scan is still more sensitive than a portrait, so only put there what you would be willing to share with the whole league. It is visible to all participants, who can report it, and the organiser can replace it or go back to an illustration at any time. Legal basis: performance of the contract.

Your predictions and your activity. The answers you give, your messages in the Coop, your reactions. Your predictions are hidden from other members until the bet in question is revealed — which happens when voting closes, or earlier if the organiser reveals that bet on its own. This confidentiality is enforced by the server, not only by the app. Legal basis: performance of the contract.

The photos and videos you post in the Coop. They are only visible to the members of your league: every display is authorised by our server, which checks that you belong to it. There is no public link, and leaving the league takes the files with it. An ultrasound scan or a photo of a newborn is still more sensitive than a message, so only put there what you would be willing to share with the whole league. You can delete your message at any time: the file is erased with it, and it also goes if you delete your account. Other members can report it. Legal basis: performance of the contract.

Your reports and blocks. Used for moderation and to enforce the people you have blocked. Legal basis: our legitimate interest in keeping the space healthy.

Your notifications. If you accept them, a device token provided by Apple on iPhone, or by Google (Firebase Cloud Messaging) on Android, so we can tell you when a league moves, together with an identifier specific to the app on that phone, used to replace an outdated token rather than pile it up. Legal basis: your consent, which you can withdraw at any time in your phone's settings.

Your feedback. If you use “Your opinion counts”, your message and the app version. Legal basis: our legitimate interest in improving the service.

Your usage statistics. Which screens are opened and which actions are taken — creating a league, voting, inviting — so we can understand where the app is confusing and fix it. These measurements are anonymous: no account identifier is attached to them, your IP address is only used to work out your country and is not kept, and never the content of what you write: no predictions, no messages, no first names, no league names. They do not allow any individual's journey to be reconstructed, and they serve no advertising purpose. Legal basis: our legitimate interest in improving the service. You can object at any time from your profile, under “Privacy”.

Failures. When the app fails — a crash, or an operation the server refuses without the app being able to explain it — we receive the error type, its technical message, the call stack, the device model and its system version (iOS or Android). The message is redacted before it is sent: identifiers and email addresses are replaced, and the detail PostgreSQL appends — the part that would copy out the row involved — is cut. These reports are attached to no account. Legal basis: our legitimate interest in keeping the service working. They stop along with the usage statistics, through the same switch.

Your purchases. The plan level attached to your account, and the reference of each purchase, which prevents it from being credited twice. Payments are processed by Apple on iPhone, and by Google Play on Android: we receive neither your card number nor your banking details. On Android, at the time of purchase, the app passes Google a non-reversible fingerprint of your account identifier, so that our server can check the purchase is yours. Legal basis: performance of the contract.

3. What we do not do

We do not sell or rent your data. We do not use it for advertising. The app contains no advertising tracker and no third-party social network, and does not follow you across other apps — which is why it does not ask you for iOS's tracking permission: what we measure does not fall under it. On Android, it does not use the advertising ID. We build no behavioural profile, we do not record your screen in the app — on the site, a visit is only recorded with your agreement (see section 9) —, and we make no automated decisions about you.

4. Who hosts and processes your data

Supabase hosts the database and every file you upload — profile photo, league banner, Coop photos and videos — in its eu-west-3 (Paris, France) region. This data does not leave the European Union.

PostHog processes the anonymous usage statistics, the failure reports and, if you have agreed to them, the recordings of your visits to the site, on its European instance. None of this data leaves the European Union, apart from simple alerts with no identifier — an install, a purchase, a waiting-list sign-up — that we receive in our internal messaging tool.

Apple handles, on iPhone, authentication, notification delivery and payment processing, under its own terms.

Google provides the same services on Android: signing in with Google, notification delivery through Firebase Cloud Messaging and payment processing through Google Play, under its own terms. These services may process data outside the European Union, under the EU–US Data Privacy Framework.

Google also receives the statistics of the website, if you have consented to it. That data may be processed outside the European Union, under the same framework. The app itself sends Google no statistics: on Android, it only passes on what signing in, notifications and payments require. See section 9.

Apart from these four, we do not pass your data to any third party, except where legally required.

5. How long we keep it

For as long as your account exists. When you delete it from the Profile tab, erasure is immediate and cascading: profile, predictions, messages, reactions, recorded purchases, notification tokens, and the leagues you organise. If you no longer have access to the app, you can request the deletion of your account: it is carried out within thirty days.

Two exceptions. The real birth results stay attached to the league that holds them — we only stop recording who entered them. Feedback sent through “Your opinion counts” is kept anonymously, detached from your account.

Usage statistics follow their own rule, since they are attached to no account: they are kept for thirteen months, then deleted. What we learn from them — aggregate figures, linked to nobody — may be kept beyond that.

Failure reports follow the same thirteen-month rule.

Recordings of visits to the site, when you have agreed to them, are kept for thirty days, then deleted.

6. Your rights

You have the right of access, rectification, erasure, restriction, objection, and the right to data portability.

If our answer does not satisfy you, you can lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, 75007 Paris — www.cnil.fr. If you live elsewhere in the European Union, or in the United Kingdom, you may instead contact your own national supervisory authority.

7. The child's data

The app records information about a child before and after birth: date of birth, first name, weight, length.

This information is entered by the league organiser — in principle one of the parents — and is visible only to the members of the league they themselves invited. It is neither public, nor indexed, nor passed to third parties.

If you are a parent and want this information erased, write to us: we will delete it unconditionally.

8. Security

Exchanges with our servers are encrypted. Access to data and to files alike — photos, videos, banners — is partitioned by league at the database level itself: the server refuses to return a league's content to anyone who is not a member, and hides other people's predictions until the bet in question is revealed.

9. The mybabyleague.com website

This policy covers the website too. It is separate from the app: coming here creates no account, and tells us nothing about what you do in the app.

The waiting list. The site offers anyone waiting for the app to leave an email address: before it came out on iPhone, and now while the Android version is on its way. It is used to tell you when it is out, then to send you news of us — rarely, and never on behalf of a third party. It is never sold, and never matched with an account. The addresses are kept at Supabase, in France, like everything else. Legal basis: your consent, given by ticking the box on the form. You can unsubscribe at any time: every message will tell you how, and you can write to us whenever you want.

Anonymous audience measurement. PostHog counts pages viewed and buttons clicked. No profile, no recording of your visit, and no following you across other sites. Your IP address is only used to work out your country, then it is discarded. That measurement falls under the consent exemption granted to audience measurement: it is on by default, and you can object to it below, in one click. Legal basis: our legitimate interest, within the limits of that exemption.

Google Analytics. It tells us how the site is found and read. It is not covered by the exemption above: it only starts after your explicit agreement, asked by the banner on your first visit. Until you accept, nothing is loaded and nothing is sent to Google — not even a cookieless measurement. You can change your mind at any time. Legal basis: your consent.

Recording visits. Only with your agreement, asked by the same banner, PostHog records your visit — pages, scrolling, clicks — to show us where the site gets in the way. What you type, such as your waiting-list address, is masked, and pages inviting you to a league are never recorded. Recordings are kept for thirty days. You can change your mind at any time, below. Legal basis: your consent.

What the site stores on your device. Your choices below, and the anonymous identifier that keeps the same visit from being counted twice. Nothing else: no advertising, no third-party social network, no share button that would track you. Your choices are kept for six months, after which you are asked again.

Your choices on this site

10. Changes

This policy may change. If a change is substantial, you will be told in the app.