Privacy Policy

Effective date: 26 May 2026

Nolar Bear is a private baby-tracking app for families. This policy explains what information the app collects, how it is stored, and who can see it.

The short version: your data is used only to make the app work for your family. It is never sold, never used for advertising, and never shared with anyone outside your family group.

Who this policy covers

This policy applies to anyone who creates an account in Nolar Bear, including parents and invited caregivers. The app tracks information about infants and young children, but those children do not create accounts or interact with the app directly.

What we collect

We collect only what is necessary to run the app:

Account information — your email address and display name, used to create and identify your account.
Baby profile — your baby's name, date of birth, and biological sex (optional). This is used to calculate growth percentiles against WHO reference data.
Tracking events — feeding, diaper, sleep, pumping, medication, and tummy time records that you log. Each record includes the time, relevant details (e.g. feed volume, sleep duration), and which caregiver logged it.
Growth measurements — weight, height, and head circumference entries that you record.
Messages — notes and messages exchanged between caregivers on your family's message board.

Reminder preferences — your notification settings for tracker reminders.

How your data is stored

Nolar Bear is built on Firebase, a platform operated by Google. Your account credentials and app data are stored in Google's cloud infrastructure in accordance with Firebase's privacy terms.

Message encryption. Messages on the Nolar Bear message board are end-to-end encrypted using AES-256-GCM with keys derived via ECDH key exchange. This means message content is encrypted on your device before it is uploaded, and can only be decrypted by devices belonging to your family group. Even Firebase — and even we — cannot read your messages.

Encryption keys are stored in your device's iCloud Keychain and sync privately across your own devices via iCloud. They are never uploaded to our servers in an unprotected form.

Who can see your data

Access to your family's data is controlled by membership in your Nolar Bear family group:

Only caregivers you personally invite (by sharing an invite code) can join your family group.
All members of your family group can see tracking events, growth data, and messages.
No one outside your family group can access your data.
We do not access your data except to investigate a technical problem if you report one, and only with your permission.
We do not use any advertising networks, analytics platforms, or data brokers. We do not share your data with any other third parties.

Notifications

Children's privacy

If you grant notification permission, Nolar Bear may send local notifications to remind you about feeding, sleep, or other tracking intervals you configure. These reminders are generated on-device using your own data and are not routed through any external service.

Nolar Bear is designed to be used by adults (parents and caregivers). Children do not create accounts or submit data to the app. Information recorded about an infant or young child is entered by an adult caregiver and is governed by this policy.

Data retention and deletion

Your data is retained for as long as your account exists. You can delete your account and all associated data at any time by contacting us at the email address below. We will permanently delete your account and data within 30 days of receiving your request.

If you leave a family group, your access to that group's data ends immediately. Your own account remains until you choose to delete it.

Changes to this policy

If we make material changes to this policy, we will update the effective date above. Continued use of the app after a change constitutes acceptance of the updated policy.

Data retention and deletion

If you have questions about this policy or want to request deletion of your data, please email us at support@nolarbear.com.