Lullog keeps your baby's log on your phone. Nothing leaves the device unless you turn on sharing. There are no accounts, no ads, no analytics, no tracking, and no third-party SDKs.
What the app stores on your phone
Your baby's name and date of birth (both optional; you can use "Baby").
The entries you log: feeds (breast side, duration, bottle or pumped amount), sleep times, diaper changes, and any note you type.
Your settings, such as feeding style and whether you completed onboarding.
This data is stored in the app's own container on your iPhone and is included in your normal iPhone backups. It is not written to iCloud by the app, and the app does not use HealthKit.
Sharing with caregivers (optional, off by default)
Lullog can create a private web link so a partner, grandparent, or sitter can see and add entries from any browser without installing anything. This only happens after you tap Connect to sync in Settings → Share with caregivers. Until then the app makes no network requests at all.
When sharing is on:
Your baby's name, date of birth, feeding style, and the log entries are sent to and stored on our relay server, hosted on Cloudflare Workers and Cloudflare D1.
Access is controlled by random, unguessable link tokens. Anyone who has a link can see the log; a link you set to "Can view and log" can also add entries. There are no accounts or passwords.
The server keeps a per-device identifier (a random ID from your iPhone, or the link token for web caregivers) on each entry so devices can merge changes. It stores no email, phone number, or payment data.
You can revoke any link at any time. Stop sharing revokes every link and stops all network traffic; your log stays on your phone.
The relay stores only what is needed to show the log to the people you invited. We do not read, sell, or use it for anything else.
Purchases
Lullog Lifetime is a one-time purchase handled entirely by Apple through the App Store. We never see your payment details. Apple's privacy policy applies to the transaction.
Deleting your data
On your phone: Settings → Delete all data removes every entry, your baby's details, and all settings. Deleting the app does the same.
On the relay: Settings → Share with caregivers → Stop sharing → Stop sharing and delete from server permanently deletes the shared copy of your log, every link, and your baby's details from our server, immediately. Settings → Delete all data does the same before erasing your phone. If you no longer have the app, email us with the share link and we will delete it within 30 days.
Children
Lullog is used by parents and caregivers, not by children. The log describes an infant, but the app collects no information from the infant and no information that identifies the child beyond the name you choose to enter.
Changes
If a future version collects anything beyond what is described here, this page will be updated before that version ships, and the App Privacy details on the App Store will match it.