Privacy policy

Last updated: 27 October 2026

Palna: Mother & Baby Care (“Palna”, “we”, “us”) is a baby-tracking app for parents and caregivers, published by Toolbox Services. This policy explains what information the app collects, why, who can see it, and how you can delete it. Contact: hello@palnacare.com.

1. Information we collect

Your account. Your email address and a password (stored only as a secure hash). If you use “Continue with Google”, we receive your email address, your name and a Google account ID from Google. If you use “Continue with Apple” on an iPhone, we receive an Apple account ID and your email address (or a private relay address, if you chose to hide your email), and your name the first time you sign in, if you choose to share it.

What you enter about your baby. The baby's name, date of birth, sex, birth measurements and the country they live in (for the right vaccine schedule and emergency numbers), and everything you log: feeds, pumping and stored milk, sleep, diapers, weight, length and head size, vaccinations, medicines and doses, symptoms and notes, illnesses and doctor's visits, foods tried and any reactions, and milestones. Some of this is health information, and we treat it that way: it is used only to run the app for you and your family.

Monthly photos. If you add a photo for a month of your baby's life, we store the picture (made smaller on your phone first) and its caption in a private storage area that only members of your family can open. The app opens the camera or your photo gallery only when you choose to add a photo, and uploads only the one photo you pick.

Family members. When you invite someone, we store the invite code, who created it and who used it, and which families each person belongs to.

On your phone only. Your language and appearance choices, which baby is selected, the reminders (vaccines, medicines, stored milk) and what the home-screen widget shows are kept on your phone and are not sent to us. Reminders and the widget are shown by your phone itself, not by our servers. If you add the widget, anyone who can see your home screen can see your baby's name and the times it shows.

Notifications. If you allow notifications, we store a push address for your phone (from Google's Firebase Cloud Messaging, or Apple's push service through it), the phone type, your app language, time zone and notification settings (which updates you want and your quiet hours). We use them only to tell you when a family member logs something. They are deleted when you sign out or delete your account.

Palna Pro purchases. If you subscribe to Palna Pro, Apple or Google takes the payment; we never see your card or bank details. Through RevenueCat (below) we receive which plan you bought, from which store, when it started and when it ends or renews, linked to your Palna account so your family gets Pro. We use this only to give you what you paid for and to answer questions about it.

Crash reports. If the app crashes or hits an unexpected error, it sends a report to Firebase Crashlytics (Google): the error and where in the app it happened, the app version, the phone model and system version, and a random ID for this installation of the app. Crash reports don't include your name, email, or anything you logged about your baby, and we use them only to find and fix problems. They are kept for 90 days.

We don't collect your location, contacts, other photos from your phone, or device advertising ID. When you tap an emergency number, the app only opens your phone's dialer.

2. How we use it

• To sign you in and send you sign-up codes by email.
• To store your entries, back them up, and sync them between your phones and your family members' phones.
• To show calculations in the app, such as growth percentiles, vaccine due dates and feeding patterns. These are worked out from your own data only.
• To send a notification to your family's phones when someone logs something, if they turned notifications on.
• To find and fix crashes and errors in the app.
• To answer you when you contact us.

3. Who can see it

Only you and the people you invite into your family can see your baby's data. Anyone in a family can see and add entries for that family's babies; the owner can remove members, and anyone can leave. Our access rules are enforced on the server for every request.

We don't share your data with anyone else, except the service providers below that run the app for us, or if required by law.

4. Service providers

• Supabase: database, photo storage and sign-in. Data is stored in Supabase's Mumbai, India region (AWS ap-south-1). supabase.com/privacy
• PowerSync (JourneyApps): keeps the copy on your phone in sync with the database, so the app works offline. powersync.com/legal/privacy-policy
• Resend: sends sign-up code emails. resend.com/legal/privacy-policy
• RevenueCat: records Palna Pro subscriptions bought through the App Store or Google Play. revenuecat.com/privacy
• Google Firebase: delivers notifications to your phone (Firebase Cloud Messaging) and collects crash reports (Firebase Crashlytics). firebase.google.com/support/privacy
• Google: only if you choose “Continue with Google”. policies.google.com/privacy
• Apple: only if you choose “Continue with Apple”. apple.com/legal/privacy

Data sent between the app and these services is encrypted in transit (HTTPS).

5. Keeping and deleting your data

We keep your data while your account exists, and keep encrypted backup copies of the database for up to 30 days to protect it against loss. Entries or babies you delete in the app disappear from every phone in your family straight away.

You can delete your account in the app: Settings → Account → Delete my account. This permanently deletes your login and every family that only you belong to, with all of its data. In families shared with others, the other members keep the babies and entries, and your name is removed from the entries you made. Full details are on the delete your account page. You can also email us to ask for a copy of your data, a correction, or deletion.

6. Children

Palna is used by parents and caregivers, not by children. The information about a baby is entered by their parent or caregiver, who controls it and can delete it at any time. You must be 18 or older (or the age of majority where you live) to create an account.

7. Medical information

The guidance in Palna (vaccine schedule, growth charts, feeding, solids and emergency advice) is general information from sources such as the WHO, the NHS, the CDC and Pakistan's EPI. It is not a diagnosis and does not replace a doctor. In an emergency, call Rescue 1122 or Edhi 115. See also our terms of use.

8. Changes to this policy

If we change this policy, we will update the date at the top, and tell you in the app if the change is significant.

9. Contact

Questions about this policy or your data: hello@palnacare.com.