Privacy policy

Baby Cards Smart Lock does not collect, store or transmit any personal data. Specifically, the app contains no analytics or telemetry SDK, no crash reporting service, no advertising identifier, no device fingerprinting, and no account system. It never asks for your name, your email, your child's age or date of birth, or any other personal detail.

It takes no photos, records no audio, reads no contacts, and requests no location. It has no camera, microphone, storage, contacts or location permission to do any of those things with.

All card artwork ships inside the app itself. Browsing the age groups, opening a topic and viewing cards work with no internet connection at all, and nothing about what you or your baby looked at is ever sent anywhere — that information does not leave the device and is not even recorded on it.

The network is used for exactly two things, both described below: processing a purchase through Google Play, and playing a rewarded ad when a grown-up explicitly asks for one. An install that never buys anything and never opens the offer makes no network call at all.

The app saves a small amount of data locally, in its own private storage on your phone. It never leaves the device by our doing, and it is deleted when you uninstall the app:

• Your settings — unlock corner, screen pinning, swipe while locked, chosen language, and the rest.
• Whether you have finished the first-run introduction.
• Which topics you have unlocked, and whether you own the full app.
• Enough state to restore the lock if the app is killed while locked, so a locked phone never wakes up unlocked.

If you have Android's own Auto Backup turned on for your device, Android may include this small settings file in the backup it stores in your Google account. That is a Google platform feature operating on your behalf, under your Google account settings — we receive nothing from it and cannot read it. You can turn it off in your device's backup settings.

Unlocking cards is a purchase processed entirely by Google Play Billing. Payment happens in Google's own interface: we never see, receive or store your card number, billing address or any other payment detail. What the app receives back is a confirmation that a purchase exists, which it stores locally so your cards stay unlocked.

Google processes that transaction under its own privacy policy, which you can read at policies.google.com/privacy.

There are no ads anywhere in the app by default. No banners, no interstitials, and nothing at all during a card session. The only advertising that can ever appear is a rewarded video that a grown-up deliberately chooses to watch in order to unlock one topic for free, from behind a parental gate. If nobody ever chooses it, the advertising SDK is never even started.

When one is requested, it is served by Google AdMob and is:

• tagged as child-directed under Google Play's Families policy and COPPA;
• capped at a G content rating — general audiences only;
• requested non-personalized, so it is not based on any profile of the viewer.

Beyond the tags, the app removes the advertising-identity permissions from its manifest entirely — Google Play services' AD_ID and the Android Privacy Sandbox's ad-id, Topics and Attribution permissions. The app therefore cannot read an advertising identifier or participate in interest-based targeting or conversion measurement, even accidentally.

Serving an ad necessarily involves Google receiving standard technical request data (such as an IP address and coarse device/app information) to deliver and count the video. That processing is Google's, under How Google uses information from sites or apps that use our services. You can avoid it completely by simply never requesting an ad.

This app is designed for families and is meant to be used by a parent together with a baby. It is built to comply with the United States Children's Online Privacy Protection Act (COPPA), the GDPR's protections for children (Article 8), and Google Play's Families policy.

Because the app collects no personal information from anyone, it collects none from children either — there is nothing to obtain parental consent for, and nothing to request deletion of. Both monetization surfaces (buying and watching an ad) sit behind a parental gate that a baby cannot pass, and neither is reachable at all while the smart lock is engaged.

The released app declares six permissions in total, and none of them are the sensitive kind: the Google Play billing permission, two network permissions (needed for a purchase or an ad), and three that the Google Play services runtime requires for itself. There is no camera, microphone, location, storage, contacts or advertising-id permission.

Screen pinning, which the smart lock can optionally use, is an Android feature you switch on inside the app; it needs no permission and gives the app no additional access to your device.

Most of the card artwork, and the spoken words that go with it, are generated with AI tools — and then gone over one at a time. Every picture is reviewed, retouched, cut out and colour-matched before it ships, every recording is checked, and anything that does not look or sound right is redone or dropped. That part is done by hand, on a computer, with ordinary image and audio tools rather than by a model — and some cards never see a generator at all: the mirrored halves of the newborn high-contrast pairs are made here, by swapping the two colours of a card that already exists.

None of it happens on your phone. Nothing is generated while you browse, the app contacts no AI service, and no AI is used to analyse you, your data, or anything you do in the app. There would be nothing of yours to read in any case: the app has no box to type into, no camera and no microphone. Every image and every clip is a finished file that was chosen and checked long before you installed it.

Everything above is about the Android app. This website itself is a handful of static pages: it sets no cookies, runs no analytics, embeds no social widgets, and has no forms, no accounts and no way to submit anything. The one thing it stores in your browser is which of its two languages you chose, using the language button in the header, so that the choice is not undone the next time you open the site. That preference is a single word, it stays in your browser, and it is never sent anywhere.

To offer you the right language the first time, the English pages also read the language setting your browser already publishes to every site it opens, and if it asks for Spanish they send you to the Spanish version of the same page. That happens entirely inside your browser — nothing about it is transmitted or recorded — and the language button undoes it for good. If you have already chosen a language, that choice is used and your browser's setting is not consulted at all.

The pages are served by a hosting provider (Cloudflare Pages) which, like any web host, processes standard technical request data such as your IP address and browser user agent in order to deliver the page and keep the service running. We do not receive that data, do not build any profile from it, and never combine it with anything from the app.

Data-protection law gives you rights of access, correction, deletion and portability over personal data held about you. We hold none, so in practice there is nothing to request: the only data the app produces is the local settings file described above, which is entirely under your control and is removed when you uninstall the app. Clearing the app's storage in Android settings resets it immediately.

For a purchase record, contact Google Play, which is the merchant of record for the transaction.

If the app's behavior ever changes in a way that affects this policy, this page is updated in the same release and the "last updated" date at the top moves with it. Material changes will also be noted in the app's Play Store release notes.

This app is made and published by an individual developer, Jaime Martin Soler. Questions about privacy, or about anything else, are welcome:

jaimemsdev@googlegroups.com

The app shows this same address on its Errors? Suggestions? page, and tapping it opens your own email app with a blank message addressed here — nothing is written for you, nothing is attached, and no information about your device or your use of the app is gathered to attach. What you send is what you typed.

An email you send is handled like any other email: it is read and answered by the developer and kept in that mailbox for as long as it is useful to have. It is not added to a mailing list, not used for marketing, not shared with anyone else and not combined with anything else — there is nothing else, because the app collects nothing. If you would rather not be identifiable, write from an address that does not name you; nothing in the app needs to know who you are.