Privacy Policy
Â
Effective date: 26 May 2026
Nolar Bear is a private baby-tracking app for families. This policy explains what information the app collects, how it is stored, and who can see it.
The short version: your data is used only to make the app work for your family. It is never sold, never used for advertising, and never shared with anyone outside your family group.
Who this policy covers
This policy applies to anyone who creates an account in Nolar Bear, including parents and invited caregivers. The app tracks information about infants and young children, but those children do not create accounts or interact with the app directly.
What we collect
We collect only what is necessary to run the app:
-
Account information — your email address and display name, used to create and identify your account.
-
Baby profile — your baby's name, date of birth, and biological sex (optional). This is used to calculate growth percentiles against WHO reference data.
-
Tracking events — feeding, diaper, sleep, pumping, medication, and tummy time records that you log. Each record includes the time, relevant details (e.g. feed volume, sleep duration), and which caregiver logged it.
-
Growth measurements — weight, height, and head circumference entries that you record.
-
Messages — notes and messages exchanged between caregivers on your family's message board.
-
Reminder preferences — your notification settings for tracker reminders.
How your data is stored
Nolar Bear is built on Firebase, a platform operated by Google. Your account credentials and app data are stored in Google's cloud infrastructure in accordance with Firebase's privacy terms. All data is encrypted in transit between your device and our servers, and encrypted at rest while stored on Google's infrastructure.
​
Message encryption. Messages on the Nolar Bear message board get an additional layer of protection: they are end-to-end encrypted using AES-256-GCM with keys derived via ECDH key exchange. This means message content is encrypted on your device before it is uploaded, and can only be decrypted by devices belonging to your family group. Even Firebase — and even we — cannot read your messages.
​
Other data — your baby's profile, tracking events, growth measurements, and reminder preferences — is not end-to-end encrypted. It benefits from the same encryption in transit and at rest described above, but it is technically accessible to us as the operator of the App's backend, the same way it would be for most apps that store data on a server. We describe how we handle that access below.
​
Encryption keys are stored in your device's iCloud Keychain and sync privately across your own devices via iCloud. They are never uploaded to our servers in an unprotected form.
Who can see your data
Access to your family's data is controlled by membership in your Nolar Bear family group:
-
Only caregivers you personally invite (by sharing an invite code) can join your family group.
-
All members of your family group can see tracking events, growth data, and messages.
-
No other Nolar Bear users, outside your family group, can access your data.
-
Message board content is end-to-end encrypted, so it cannot be read by us, by Firebase, or by anyone outside your family group — not even to investigate a support request.
-
Other data you track — your baby's profile, tracking events, growth measurements, and reminder preferences — is not end-to-end encrypted. It is encrypted in transit and at rest on our hosting provider's infrastructure (see below), but, as is standard for most apps that store data on a server, it is technically accessible to us as the operator of that infrastructure.
-
We do not review, use, or share this data for any purpose other than operating the App. We access it only when necessary to investigate a technical problem, maintain the security and reliability of the App, or comply with a legal obligation.
Third-party services
Nolar Bear uses the following third-party services to function:
-
Firebase Authentication (Google) — manages account sign-in and email verification.
-
Cloud Firestore (Google) — stores your tracking data and messages.
-
iCloud Keychain (Apple) — stores and syncs encryption keys across your devices.
We do not use any advertising networks, analytics platforms, or data brokers. We do not share your data with any other third parties.
Notifications
If you grant notification permission, Nolar Bear may send local notifications to remind you about feeding, sleep, or other tracking intervals you configure. These reminders are generated on-device using your own data and are not routed through any external service.
Children's privacy
Nolar Bear is designed to be used by adults (parents and caregivers). Children do not create accounts or submit data to the app. Information recorded about an infant or young child is entered by an adult caregiver and is governed by this policy.
Data retention and deletion
Your data is retained for as long as your account exists. You can delete your account and all associated data at any time by contacting us at the email address below. We will permanently delete your account and data within 30 days of receiving your request.
If you leave a family group, your access to that group's data ends immediately. Your own account remains until you choose to delete it.
Changes to this policy
If we make material changes to this policy, we will update the effective date above. Continued use of the app after a change constitutes acceptance of the updated policy.
Contact
f you have questions about this policy or want to request deletion of your data, please email us at support@nolarbear.com.