Privacy Policy
Last updated: 30 July 2026
Awubi (“we”, “our”, “us”) is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, and your rights over it. Please read it carefully before using our app or website.
1. Who we are
Awubi is a postpartum care application designed to help parents track their baby's feeding, sleep, nappies, medications, and growth. Our service is operated from the United Kingdom.
The data controller responsible for your personal data is Spread Labs Ltd (trading as Awubi), a company registered in Great Britain under company number 13507760, with its registered office at 71-75 Shelton Street, London, Covent Garden, England, WC2H 9JQ.
For privacy enquiries, or to reach our data protection contact, email privacy@awubi.com.
2. Data we collect
Account information
When you create an account we collect your name and email address via our authentication provider, Kinde. We do not store passwords ourselves.
Child and health data
To provide tracking features, you may choose to enter information about your child including:
- Name, date of birth, and biological sex
- Birth weight, height, and head circumference
- Gestational age and feeding method
- Medical notes
- Ongoing activity logs: feeding sessions, sleep periods, nappy changes, medication schedules and doses, and growth measurements
This data is sensitive. We only use it to operate the service for you and do not sell or share it for advertising.
Photos
If you attach a photo to a nappy record, the image is stored in a private Cloudflare R2 bucket that is not publicly readable. Photos are served to you only through short-lived, signed links. They are linked to your account and deleted when you delete the associated record or your account.
Device and notification tokens
If you enable push notifications, we store an Expo push token associated with your device and caregiver profile to deliver activity reminders. You can revoke this at any time by disabling notifications in your device settings or within the app.
Usage analytics
We use PostHog to understand how people use Awubi: page views, feature interactions, and session counts. If you are signed in, events are linked to your account ID (not your name or email). This is pseudonymised personal data rather than anonymised data, because it can be associated back to your account. We use the EU-hosted PostHog instance, and no analytics data is collected in development builds.
On our website, analytics rely on cookies and similar browser-storage technologies. These are not strictly necessary, so we only load them after you give consent through our cookie banner. You can decline, and change your choice at any time, without losing access to the site. In the mobile app, analytics are enabled by default under our legitimate interest in improving the product; you can object by emailing us.
Error reports
We use Sentry to capture crash reports and application errors. These may include device type, OS version, and a stack trace. We do not intentionally include personal data in error reports.
AI chat
If you use the AI chat feature, we transmit a limited set of your child's information to OpenAI on your behalf in order to generate a personalised response. The information transmitted includes your child's profile details (such as their age, sex, and birth information), recent activity logs (such as feeding sessions, sleep periods, nappy changes, and growth measurements), and the messages you type into the chat.
This data constitutes special-category health data under UK GDPR Article 9. We rely on your explicit consent (Article 9(2)(a)) as the legal basis for this processing. We request that consent within the app before any data is transmitted. You may decline and continue using all other features. You can withdraw consent at any time, and as easily as you gave it, using the AI data-sharing toggle in the app's settings; this immediately prevents further transmissions. You can also email privacy@awubi.com if you prefer.
These requests are routed through the Vercel AI Gateway, which acts as an authorised sub-processor and passes them to OpenAI. We have enabled Zero Data Retention across this path: neither the Vercel AI Gateway nor OpenAI stores your child's data after a response is generated, and it cannot be used to train any model.
Waitlist emails
If you submit your email address on our landing page, we store it solely to notify you when the app is available. We will not send marketing email without your explicit consent.
3. How we use your data
Much of what you log about your child (medical notes, growth, and feeding, sleep and nappy records) is health information, which is special-category data under UK GDPR Article 9. For that data we rely on your explicit consent, which we ask for when you set up your account, in addition to the contractual basis for running the service. The table below sets out each purpose and its legal basis.
4. Third-party services
We share data with the following processors only to the extent necessary to provide the service:
Each of these providers processes data only on our instructions and under a written data processing agreement. We do not sell your data to any third party.
International data transfers
Some of these providers process data outside the United Kingdom, including in the United States. Wherever your data leaves the UK, we make sure an appropriate safeguard recognised under UK GDPR is in place, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or a UK adequacy decision covering the destination country. You can ask us for more detail about the safeguards for a specific provider by emailing privacy@awubi.com.
5. Data retention
We retain your account and child data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are required to retain it by law. Residual copies may persist in encrypted backups for a short period after deletion before those backups are cycled out, after which they are permanently overwritten.
We keep product-analytics events only as long as we need them to understand usage trends, and no longer than 24 months, after which they are deleted or aggregated. You can ask us to delete analytics data linked to your account at any time.
AI chat data is subject to Zero Data Retention: OpenAI does not store your child's data after generating a response. Your in-app chat history is retained on our servers for as long as your account is active and is deleted when you delete your account.
6. Your rights
Under UK GDPR and, where applicable, EU GDPR, you have the right to:
- Access: request a copy of the personal data we hold about you.
- Rectification: ask us to correct inaccurate data.
- Erasure: ask us to delete your data (“right to be forgotten”).
- Restriction: ask us to limit how we use your data while a complaint is resolved.
- Portability: receive your data in a structured, machine-readable format.
- Object: object to processing based on legitimate interest.
- Withdraw consent: where we rely on consent, you can withdraw it at any time without affecting prior processing.
To exercise any of these rights, email privacy@awubi.com. We will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).
7. Children's data
Awubi is used by adults (parents and caregivers) to log data about infants and children. We do not knowingly collect data directly from children. If you believe a child has directly submitted personal data to us, please contact us and we will delete it promptly.
8. Security
We use industry-standard measures to protect your data including encrypted connections (TLS), access controls, and regular dependency updates. No system is completely secure; if you believe your account has been compromised, contact us immediately.
9. Changes to this policy
We may update this policy from time to time. We will notify you of material changes by email or via an in-app notice. Continued use of the service after changes take effect constitutes acceptance of the updated policy. Where a change materially affects processing that relies on your consent (such as AI chat or the health data we hold about your child), we will ask you to give fresh consent rather than relying on your continued use.
10. Contact
For any privacy-related questions or requests, please email privacy@awubi.com.