Hidje

Last updated

Privacy policy

Hidje is a free app that parents use to keep track of how their baby is doing: feeds, diapers, sleep, medication, growth, photos and more. Some of this is health data about your child. This page sets out exactly what we store, why, where, for how long, and what your rights are.

1. Who is responsible

Hidje is built and run by one person, not a company:

Pim Bos, Harderwijk, the Netherlands Email: privacy@hidje.app

Pim is the data controller under the General Data Protection Regulation (GDPR). In this policy, "we" means Pim as the operator of Hidje.

2. What we store

About you as a parent

Data Why
Email address Signing in, confirming your account, resetting your password
Password Signing in. We only store a hashed version, never the password itself
Display name Showing who logged something ("given by …")
Time of consent Proof that you gave consent (see section 3)
Your device's push subscription (technical address and keys) and notification preferences Sending notifications, only if you turn them on

About your child

  • Profile: name, date of birth, gestational age at birth, birth weight, and settings such as the feeding schedule and the prescribed ml/kg/day.
  • Logs: feeds (bottle and tube, amounts, hunger), diapers (colour, consistency, temperature), sleep and where your baby slept, mood and restlessness, spit-up, medication (name, dose, times, given or skipped), growth (weight, length, head circumference) and notes, including questions for the doctor, physiotherapist or child health clinic.
  • Photos and sound recordings you take or choose in the app.
  • Milestones, development (ticked-off Van Wiechen items) and hospital follow-up appointments (dates and results you enter yourself).

For every log entry we store who created it and when.

About family viewers

Family members (grandparents, for example) can follow along with a family code, without an email address. We create an anonymous account for them and store the name they choose and when they last looked (so parents can see this).

Viewers only see the album: milestones, photos, sounds and weigh-ins that parents have not marked as private, plus the child's name, date of birth and gestational age. They cannot see feeds, diapers, sleep, medication, notes or development.

What we don't do

  • No advertising.
  • No analytics or tracking services in the app (no Google Analytics, no crash reporting such as Sentry, no advertising IDs). Our hosting provider Vercel keeps technical statistics such as request counts and errors. These are not linked to you as a person and we only use them to find faults.
  • We don't sell data or give it to anyone for their own purposes.
  • We don't use your data to train AI models or for research.
  • We don't ask for your location, contacts or phone number.

3. Why we are allowed to do this (legal basis)

  • Your child's health data (everything under "About your child", including photos and recordings) is special category data. We only process it with your explicit consent as a parent or legal guardian (Article 9(2)(a) and Article 6(1)(a) GDPR). You give this consent when you sign up, and we record when.
  • Your account (email, password, name, notifications) is processed because it is needed to provide the app to you (Article 6(1)(b) GDPR).
  • Technical logs (see section 5) are kept for security and troubleshooting. This is a legitimate interest (Article 6(1)(f) GDPR).

You can withdraw your consent at any time by deleting your account (see section 7). Hidje cannot work without this consent, because tracking this data is the whole point of the app. Withdrawing consent does not affect anything that was done lawfully before.

Hidje does not make decisions about you or your child. Cards such as "Worth noting" and "Hunger around feeds" show patterns in what you entered yourself. They have no legal effect and are not a medical judgement.

4. Who can see the data

  • Your family: all parents in the same family see everything logged in that family. Viewers only see what is described in section 2. You decide who gets the codes.
  • We, as the operator, have technical access to the database. We do not look at families' data unless you ask us to (for example to fix a problem) or the law requires it.
  • Service providers (processors) that run the app for us. They may only use the data on our behalf:
Service What they do Where
Supabase Database, sign-in, storage of photos and sounds, sending account emails, sending notifications Data stored in the EU (Frankfurt, Germany)
Vercel Hosting the website and app files. Vercel sees your IP address and which pages are requested, but your logs do not pass through Vercel Global network; Vercel Inc. is based in the US

In addition:

  • Notifications go through your browser's push service. For Chrome on Android, that is Google (Firebase Cloud Messaging). The content of each notification is encrypted and can only be read on your device; Google sees that a notification is going to your device, not what it says.
  • Google Play delivers the Android app. What Google processes when you download and install it is covered by Google's own privacy policy. The Android app runs in Chrome, which is also covered by Google's privacy policy.
  • GitHub stores Hidje's source code. No user data is stored there.

We only share data with others if the law requires it, for example under a court order.

5. Transfers outside the EU

Your logs, photos and sounds are stored in the EU. Some technical data may leave the EU:

  • Vercel processes IP addresses and requests on a global network.
  • Google's push service delivers notifications worldwide (encrypted, see section 4).
  • Supabase and Vercel are US companies. Their staff or subcontractors may access systems from outside the EU for maintenance and support.

These transfers are covered by the European Commission's Standard Contractual Clauses (SCCs), which are part of these services' data processing agreements.

6. How long we keep data

  • For as long as your account exists. We don't delete anything automatically.
  • You can delete your account in the app (More → Account). Then:
    • If you are the last parent in the family, we immediately delete the whole family: child profile, all logs, medication, photos, sounds, codes and viewers.
    • If another parent is still in the family, we delete your account, name and notification subscriptions. The child profile and logs remain available to the other parent, without your name attached.
  • Backups. Supabase makes backups of the database. Deleted data can remain in those backups for up to 7 days; after that it is gone everywhere. We make no other backups of user data.
  • Technical logs (IP address, time, requested address) are kept briefly by Supabase and Vercel, a matter of days, for security and troubleshooting.
  • Viewers who leave or are removed by a parent lose access immediately. Their name is deleted when the family is deleted, or earlier on request.
  • Emails you send us are kept until your question is dealt with, and then for at most one year.

7. Your rights

Right How
Access and portability In the app: More → Download backup gives you a ZIP with all your data (JSON) plus all photos and sounds. You can also export a CSV from Patterns
Correction You can edit every log entry and the child profile in the app
Erasure Individual entries in the app; everything via More → Delete account
Withdraw consent By deleting your account
Restriction, objection and other requests Email privacy@hidje.app

If you email a request, please send it from your account's email address so we know it is you. We reply within one month.

Complaints: please tell us first so we can try to fix it. You always have the right to complain to a data protection authority: in the Netherlands the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or the authority in the EU country where you live.

8. Security

  • All connections are encrypted (HTTPS/TLS).
  • Each family is walled off in the database: you can only read or change your own family's data. Viewers have separate, more limited access.
  • Photos and sounds are kept in private storage. The app loads them through links that stop working after 10 minutes.
  • Storage is in the EU and encrypted at rest by Supabase.
  • Passwords are only stored hashed.
  • The app sends security headers that, among other things, stop Hidje from being embedded in other websites.

What you can do: use a strong password that you don't use anywhere else, share the family code only with the other parent and the viewer code only with people who may follow along. Notifications can show your child's name and, for example, a medicine name on your lock screen; if you don't want that, turn on "hide sensitive content" in Android or switch notifications off.

If something does go wrong and data could reach unauthorised people, we will report it to the Autoriteit Persoonsgegevens and to you, as the law requires.

9. Cookies and storage on your device

Hidje does not use tracking or advertising cookies. On your device, the app only stores what it needs to work:

  • your sign-in session;
  • a copy of your family's data and a queue of changes, so the app also works offline;
  • preferences such as theme, the period chosen in Patterns, and when you last opened the app.

When you sign out, the copy of your family's data is removed from the device. This functional storage does not require consent.

10. Age

A Hidje account is for adults aged 18 and over. The app is not meant to be used by children. You enter the data about your child as a parent or legal guardian.

You enter any data about other people yourself, such as the names of care providers in a note. Keep that to what you need.

11. Changes

If we change this policy, we update the date at the top. For significant changes, such as a new service provider or a new purpose, we will tell you in the app beforehand. If a change requires new consent, we will ask for it again.

The Dutch version of this policy is the original. If the two differ, the Dutch version applies.