Privacy Policy

Effective date: 30 June 2026 · Last updated: 8 October 2026

This Privacy Policy explains how diapr.ai (“we”, “us”, “our”), based in Whitby, Ontario, Canada, which operates the diapr.ai apps and website (together, the “Service”), handles personal information. It applies to the diapr.ai web app, iOS app, Android app, and the diapr.ai website. It also covers the information we handle about partners in our Founding Partner Program, and about people who take part in our promotions, such as the diapr gift wheel. It does not apply to third-party services we link to, which have their own policies.

In this policy, “you” means the adult account holder or caregiver who uses diapr.ai (and, where this policy describes our partner program, a partner in that program), and “child” means the infant or child whose care you record.

1. A note on whose data this is

diapr.ai is intended only for use by adults: parents, legal guardians, and authorized caregivers. It is not directed to children and is not intended for use by anyone under 18. The care information in the app is about a child but entered by you, the adult. The child is a subject of the data, not a user of the Service.

By using diapr.ai, you represent and warrant that you are the parent or legal guardian of, or otherwise have lawful authority to record and process the information of, the child(ren) whose data you enter, and that you have obtained any consent required under applicable law.

• We do not knowingly collect information directly from children.
• We do not build advertising or behavioral profiles of children, and we do not use children's information for advertising, tracking, or targeting.
• diapr.ai is an adult-directed service and is not a “child-directed” service under the U.S. Children's Online Privacy Protection Act (COPPA). If we learn we have inadvertently collected information directly from a child, we will delete it.
• Under Canada's federal privacy law (PIPEDA), a child's information is treated as sensitive and is processed on the basis of the consenting parent or guardian who holds the account, without child-directed profiling or tracking.

2. Information we collect

We collect the minimum necessary to run the features you actually use. Most of it never leaves your device.

Promotional offers. If we send you an offer card, we keep your first name and any short note shown on the card, and a one-way keyed hash of the handle, phone number or email address we sent it to (not the handle itself), so the same person doesn't get two cards. We delete the name, the note and the card image 90 days after the card is claimed or expires. When you claim an offer, we record which family claimed it. Gift links from Nora work differently: see Gift promotions below.

Just as important is what we do not collect:

• The apps show no ads and include no ad-network SDKs. They do include Google Analytics for Firebase for usage analytics (also used, with our website, for our own marketing); see section 11.
• No precise GPS or location collection.
• No biometric data. If you use your device's fingerprint/face unlock, that happens entirely on your device and we never receive it.
• No contact-list or browsing-history collection.

Gift promotions (gift links from Nora)

When Nora at diapr.ai sends you a personal gift link, for example for the diapr gift wheel, this is how we handle your information. The promotion's Official Rules also apply.

• Before you open the link. We keep the first name and social media handle Nora used, the platform, and the address of the public post the link was sent about, so the link can greet you by name. Unlike an offer card, a gift link keeps the handle itself, and the link's preview (its title and image) shows your name and handle and nothing else. We also keep a one-way keyed hash of the handle, so the same person isn't sent two links. Nora's outreach runs on Muse, which processes this information for us.
• What you enter. Your first name, your country, whether your baby is here yet with the due date or your baby's date of birth, and an email address, a mobile number or both. If you live in Canada, the skill-testing questions and whether you answered them correctly. Then your spin result and your prize code.
• Why we use it. To send your prize (one email and one text with your code, and one email when you claim), to run the promotion (one entry per person, the skill-testing question, and preventing abuse), and to keep a contact record of your entry in our CRM. If you tick a box to receive emails or text messages from diapr.ai, we record that choice with its time and wording, and we may send you diapr's own emails or texts. We send no marketing to anyone who didn't tick the box, and we don't use the due date or your baby's date of birth to choose or target any message.
• Who processes it. Google Cloud (our database and hosting); HighLevel (LeadConnector), our CRM and email and text-message provider, which keeps a contact record with your name, email address and/or mobile number, country, the due date or your baby's date of birth (as a date field and a month tag, for example the month your baby is due), the steps you reached, your prize, your marketing choices and short notes; and Stripe, when you claim. Each processes it on our instructions.
• Your browser. The gift page sets one functional cookie (Section 11), and keeps a keyed hash of your IP address briefly (about two days) to limit abuse. It loads no advertising tags, and it uses Google Analytics only if you accept analytics cookies, without ever sending Google your link, your name, your handle or anything you enter (Section 11).
• How long we keep it, and your choices. See Sections 7 and 8. Both marketing boxes are optional and unchecked; you can reply STOP to any text, and ask us at [email protected] to delete your entry and your contact record.

3. How we use information

We use information only to provide and protect the Service:

• To provide the app's core, on-device functionality (logging, timelines, patterns, reminders).
• To sync your data across your own devices, only if you turn sync on.
• To back up your Moment photos, only on a paid plan with backup enabled.
• To authenticate your account and provide subscriptions and billing.
• To run our partner program: to credit subscriptions made with a partner's code to the right partner, calculate and pay commissions, and prevent abuse.
• To run our promotions, such as the diapr gift wheel: to send your prize by email and text, keep one entry per person, and keep a contact record of your entry in our CRM, including the due date or baby's date of birth you give us. We send promotional emails or texts only to people who ticked a box to receive them (see Gift promotions and Text messages).
• To keep the Service secure, prevent fraud and abuse, and maintain reliability.
• To respond to your support requests.
• To comply with legal obligations.
• To improve the Service using aggregated or de-identified data only: information that no longer identifies you or your child.
• To power the optional AI features you turn on (the AI assistant, AI Insights, and engagement nudges), described in detail just below.

Three features are powered by AI and, when you use them, send data to our AI provider Anthropic (Section 5). Each is governed by an in-app consent you control:

• The AI assistant (Premium; on by default, opt-out): an in-app chat you can type or dictate to. It shows a one-time data-use disclosure before your first in-app conversation, and you can turn it off anytime in Settings. When you use it, we send your messages and the family and care data it needs to answer (your child's profile, recent care logs including your free-text notes, patterns, growth, and your plan tier and timezone) to Anthropic. Your conversation history stays on your device; diapr's servers do not store it. The assistant can suggest care-log entries as approval cards, but nothing is written to your log until you confirm it.
• AI Insights (paid; on by default, opt-out): a nightly analysis that sends your family's real care data (usage summaries, growth, and your own free-text notes) to Anthropic with your child's name removed and replaced by “your baby.” The resulting insight cards are saved in your cloud account and refreshed on each run. Turning this off in Settings stops the processing and deletes the stored cards.
• Engagement nudges: short reminder push-notifications. These send only privacy-minimized, derived signals to Anthropic: never your child's real name, and no exact counts, clock times, or measurements, just coarse cues such as an age range, part of day, and rounded time since the last activity, used to draft the reminder text.

Text messages

We text you only when you ask for it: the one text with your gift code when you enter a gift promotion with a mobile number, an invite to a family that a family member asked us to send you, and, only if you ticked the box to receive text messages from diapr.ai, our own texts. Message and data rates may apply, and how often we text varies. Reply HELP for help and STOP to opt out at any time. We never share or sell mobile numbers or text-message opt-in information with third parties or affiliates for their marketing or promotional purposes. Our text-message provider, HighLevel, processes them only to send our messages.

4. When data leaves your device: sharing and disclosure

Because diapr.ai is local-first, in the default configuration your care logs never leave your device. We share personal information only in these limited cases:

• Service providers (sub-processors) that run the optional cloud features, our promotions and our messages, listed in Section 5.
• AI processing: when you use an AI feature (Section 3), the data it needs is processed by our AI provider Anthropic acting as a service provider on our instructions; see Section 5.
• Apps you connect, at your direction: you can use OAuth to authorize an external AI app, ChatGPT (OpenAI) or Claude (Anthropic), to reach the same family-data tools as the in-app assistant, so it can read your family data and propose approval-gated actions. This is user-initiated, requires Premium and your assistant consent, and you approve it on a consent screen that shows the app, redirect, and scopes; you can revoke access at any time. Once your data reaches a connected app it is handled under that app's own privacy policy, not ours. OpenAI, in particular, is a third party you choose to connect, not a diapr.ai sub-processor.
• The partner whose code you used: if you subscribe with a partner's code, that partner can see limited information about your subscription in their partner dashboard, such as your email address (which may be partly masked), your subscription status, and the commissions it earns them. Partners must keep this information confidential and use it only for the partner program. They never see your care logs, Moments, or your child's information.
• Legal and safety disclosures: to comply with a valid legal request, enforce our terms, or protect the rights, property, or safety of any person, as required or permitted by law. Where we are legally able to, we will make reasonable efforts to notify you.
• Business transfers: if we are involved in a merger, acquisition, or sale of assets, information may transfer to the successor, which will be bound by a policy at least as protective as this one. We will notify you of any such change.

Beyond the cases above and the consent-gated marketing-website advertising described in Section 11, we do not otherwise share your information. No ad network or data broker ever receives your care data or your child's information.

5. Service providers (sub-processors)

We rely on a small number of trusted providers to run optional cloud features, billing, our partner program, our promotions and our messages. Each is bound by a data-processing agreement to process data only on our instructions, keep it confidential, apply appropriate security, and report incidents.

• Google Firebase Authentication: sign-in; receives your email and user ID.
• Google Cloud Firestore: optional sync of your care logs across your own devices.
• Google Cloud Storage: optional Moment photo backup (paid plans); private and content-addressed, accessed only through short-lived signed links.
• Anthropic (Claude), United States, powers the optional AI assistant, AI Insights, and engagement nudges. Data is sent only when you use those features, and our API key is held server-side only. Anthropic is contractually prohibited from using your data to train its models and retains it only briefly for misuse and abuse monitoring.
• Stripe: subscription billing; processes your payment details under its own privacy policy. We hold only a customer ID and your plan tier; if you subscribe with a partner's code, Stripe also shares your email and payment amounts with FirstPromoter (below).
• FirstPromoter: runs our partner (affiliate) program. It receives partner account details (such as name, email, and payout and tax information) and, for families who subscribe with a partner's code, their email address, Stripe customer ID, and subscription and payment amounts from Stripe, so that we can credit the right partner and calculate commissions. It never receives care logs, Moments, or your child's information.
• PayPal: pays partner commissions. It receives a partner's PayPal email and payout amounts and processes them under its own privacy policy. It never receives information about the families a partner referred.
• HighLevel (LeadConnector), United States: our CRM and our email and text-message provider. It keeps the contact records of people who enter our gift promotions (see Gift promotions) or ask for beta access through the form on our website, sends the gift email and text, and sends text-message invites to join a family. It never receives your care logs or Moments.
• Mailgun, United States: sends the email invites to join a family.
• Muse: the platform Nora's outreach runs on, with its own service providers. It processes the first name, social media handle and public post used to send a gift link.
• Apple Sign-In and Google Sign-In: authentication providers that receive minimal identifiers when you choose them.
• The Apple App Store and Google Play: process purchases you make through the app stores under their own terms.

6. Health-related and sensitive data

Some of what you record (feeding, medications, temperature, growth, notes, and photos) may be considered health-related or sensitive under laws such as Canada's PIPEDA (and Quebec's Law 25), the EU/UK GDPR, and the California Consumer Privacy Act (as amended). So may a due date (it can show a pregnancy) or a baby's date of birth that you give us in a gift promotion. We treat it with heightened care:

• Care data you record in the app is never sold, never shared with advertisers, and never used for profiling.
• Care data leaves your device only if you enable sync or backup, and only to the providers named in Section 5.
• Gift promotions. If you enter one, the due date or your baby's date of birth leaves your device: it is stored with your entry in Google Cloud (Firestore) and in our CRM, HighLevel, as a date field and a month tag. We use it only to run the promotion and keep the contact record. It is never used to target messages or ads, and never sold or shared with advertisers.
• Consumer health data. Our Consumer Health Data Privacy Policy explains how we handle consumer health data under Washington's My Health My Data Act and similar laws, and how to use your rights over it.
• It reaches our AI provider only when you turn on an AI feature and consent to it (Section 3), never for advertising or profiling.
• Voice dictation is not biometric. If you speak to the assistant, your device's own speech recognizer (Apple on iOS, Google on Android) converts the audio to text; this is transient dictation, not a voiceprint, and we neither create nor store any biometric identifier from your voice. diapr's servers never receive the audio, but because the recognizer is the platform's, the audio may be processed by Apple or Google under their own privacy policies. Only the resulting text, and only if you send it, reaches our AI provider.

7. Data retention and deletion

• Local device data: stays on your device, under your control, until you delete it or uninstall the app. Because we cannot see device-only data, we cannot delete it for you. Remove it in the app or by uninstalling.
• Synced care data: retained while your account is active and deleted within 30 days of account deletion or a deletion request.
• Moment photo backups: deleted within 30 days of a deletion request or account closure. You can export your data first.
• Account (Firebase Authentication): deleted when you delete your account, on Google's operational timelines.
• Billing records: retained by Stripe and by us as required for tax, accounting, and legal purposes for the period required by applicable law.
• AI assistant conversations: stored only on your device; diapr's servers do not keep your chat history. Clearing the conversation in the app removes it.
• AI Insight cards: saved in your cloud account, overwritten on each run, and deleted when you opt out of AI Insights.
• Connected-app access: the OAuth tokens for any external app you authorize are stored only in hashed form and are revocable by you at any time (access tokens are short-lived; refresh tokens last up to 30 days unless revoked sooner).
• Referral records: your referral code, the referrer/referee family IDs, and redemption records are kept while needed to grant and track rewards.
• Partner program records: partner accounts, codes, and referral and commission records are kept while the partner relationship and any continuing commissions last, and afterwards as required for tax, accounting, and legal purposes.
• Gift promotions: the name, handle and public post used to send a gift link, your entry details (first name, email address, mobile number, due date or baby's date of birth, and the skill-testing questions) and the link's preview image are deleted from our database 90 days after the link's last day if it is never used to spin, or 90 days after the prize is claimed or its claim window ends. We keep what shows the promotion was run fairly: the platform, your country, the date of each step, the prize, and your marketing choices with their time and wording.
• One entry per person: one-way keyed hashes of the email address, mobile number and browser used for a spin are kept indefinitely, so the same person can't enter twice. They don't contain the email address or number itself.
• Our CRM (HighLevel): the contact record of a gift promotion entry, with its tags, the date field and notes, is kept until you ask us to delete it.
• De-identified or aggregated data: may be kept indefinitely, as it no longer identifies you.

8. Your rights and choices

Depending on where you live, you may have rights under Canada's PIPEDA (and Quebec's Law 25), the GDPR/UK GDPR, the CCPA/CPRA, and similar laws, including the right to:

• Access or receive a copy of your data, and port it (you can export your data in a common format from the app);
• Correct inaccurate data;
• Delete your data (“right to be forgotten” / erasure);
• Restrict or object to certain processing, and withdraw consent for optional features at any time by turning them off;
• Opt out of the “sale” or “sharing” of personal information: we do not sell your data, and the only advertising-related sharing is the consent-gated Meta Pixel on our marketing website (Section 11), which stays off unless you accept cookies and which you can turn off again as described there; we honor valid opt-out requests;
• Not be discriminated or retaliated against for exercising your rights;
• Lodge a complaint with your local data protection authority.

To exercise these rights, use the in-app export and delete controls, or email us at [email protected]. We will respond within the timeframes required by applicable law. If you are in Canada and are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

Gift promotions. To see, correct or delete a gift promotion entry, including its contact record in our CRM, email [email protected] with the email address or mobile number you used. To stop marketing, reply STOP to a text, or reply to one of our emails or write to [email protected]. If you live in Washington, Nevada or Connecticut, our Consumer Health Data Privacy Policy describes your extra rights over consumer health data, including how to appeal.

You also control the optional AI and connected-app features directly:

• AI assistant: turn it on or off, and withdraw your consent, in the app's Settings.
• AI Insights: opt out in Settings. This stops the nightly processing and deletes the stored insight cards.
• Connected apps: review and revoke any external app you have authorized at any time, which immediately ends its access.
• Microphone: voice dictation runs only while you are dictating; you can grant or revoke microphone permission in your device settings at any time.

9. Security

We protect cloud data with encryption in transit (TLS 1.2 or higher) and encryption at rest (AES-256, as provided by Google Cloud), access controls and least-privilege practices, and short-lived signed links for photos.

10. International data transfers

We are based in Canada, and our optional cloud features are provided by Google (Firebase / Google Cloud) and Stripe, (for AI features) by Anthropic in the United States, (for our partner program) by FirstPromoter and, for partner payouts, PayPal, and (for our promotions and messages) by HighLevel, Mailgun and Muse, whose infrastructure may process data in the United States or other countries. Where personal data is transferred internationally, we rely on appropriate safeguards (such as Standard Contractual Clauses for users in the EU/UK, and comparable contractual protections and accountability measures required under Canada's PIPEDA) in each case as required by applicable law.

If you authorize an external AI app (ChatGPT by OpenAI, or Claude by Anthropic), that app processes your data in the United States or elsewhere under its own privacy policy and safeguards, which are outside our control.

11. Local storage, cookies, analytics and advertising

The apps use your device's local storage (such as the browser's local storage) to make the local-first model work. This is functional, not tracking.

The gift page. A gift link's page (on gift.diapr.ai or offer.diapr.ai) sets one functional cookie, __Host-gift, once you enter your details. It holds a random value that keeps your gift tied to the browser you entered from, so only you see your code there. It lasts 90 days, we store only a keyed hash of it, and it is never used for analytics or advertising. The gift page and the offer card page load no advertising tags. They use Google Analytics, described below, only if you accept analytics cookies.

We use Google Analytics (Google Analytics for Firebase in the diapr.ai iOS and Android apps, and Google Analytics on the diapr.ai marketing website and on the gift and offer card pages) to understand aggregate, non-personal usage, such as how features and pages are used and how many people visit. This processes usage data (for example, a truncated IP address, device and app/browser type, screens or pages viewed, and a resettable app-instance identifier) on Google's infrastructure acting as our processor. We never include your care logs, Moments, or your child's information in this analytics. On the gift and offer card pages, Google receives only a generic page address and title, never your link, your name, your handle or anything you type into the page.

Advertising. Our Google Analytics keeps all advertising signals (ad storage, ad user data, ad personalization) disabled, in the apps and on the website alike, so GA is never used for ads. The apps additionally show no ads, include no ad-network SDKs, and do not collect the Android Advertising ID or Apple's IDFA at all (they are built without advertising-identifier support), and we never use your in-app activity for remarketing or cross-context behavioral advertising. On the marketing website only, and only if you accept advertising cookies, we use the Meta (Facebook) Pixel to measure how well our ads perform and to reach people who have visited diapr.ai; when loaded it sets cookies and sends Meta your visit (such as the page viewed, browser and device type, and a pseudonymous identifier) as an independent controller under Meta's Privacy Policy. It never receives your care logs, Moments, or your child's information, none of which exist on the website. If you decline, the Pixel never loads.

Your choices. On the website, analytics and advertising cookies default to declined; the site works fully without them, and (where applicable) we honor recognized opt-out signals such as Global Privacy Control. Your choice is saved in your browser and in a diapr_consent cookie that diapr.ai and its subdomains share, so you are asked once. You can change it at any time by clearing the site data (cookies) for diapr.ai, and you can manage ad personalization in your Meta ad preferences. In the apps, analytics carries only coarse, non-identifying usage signals; if you'd like to object to analytics processing, contact us at [email protected] and we will honor it. You can also review Google's Privacy Policy for how Google handles data it processes for us.

12. Changes to this policy

We may update this policy from time to time. We will post the new version here with an updated date, and for material changes to how we handle your data we will give notice by email or in-app at least 30 days before the change takes effect, and obtain fresh consent where the law requires it. If you continue to use the Service after a change takes effect, you accept the updated policy; otherwise you may stop using the Service and delete your account.

13. How to contact us

diapr.ai
31 Baldwin St N, Whitby, Ontario L1M0A7, Canada
Privacy: [email protected]
General support: [email protected]

This policy is provided in good faith and describes our current practices. It is not legal advice. We recommend keeping your app updated so the features described here match what you see.