Privacy Policy

Last updated: October 20, 2026

This is a translation. If there is any discrepancy, the Spanish version prevails.

1. Who is responsible

Gotita is developed by Jaime Gutiérrez Martín, a private individual resident in Spain (“we”). For any privacy matter, write to us at hello@gotita.app.

When a nursery uses Gotita to log what it does with the children, the nursery is the controller of the data it keeps in its account, and we process that data on its behalf, as a processor, under the terms for nurseries (see sections 4 and 5).

2. Using Gotita without an account

You can use Gotita without creating an account. In that case, the data you log (feeds, diapers, sleep, measurements, medicines, meals and your baby's details) is stored only on your iPhone, in its widgets and, if you have one, on your Apple Watch. It isn't sent to our servers and we have no access to it. If you delete the app, it's deleted.

The iCloud backups you make of your iPhone may include this data; Apple manages them under its own privacy policy.

3. What data we process if you create an account

Account data

• An internal user identifier.
• Your email and, if you give it, your name. If you sign in with Apple and choose to hide your email, we receive an Apple relay address.
• If you create the account with an email, your password is stored encrypted by Google Firebase; we can't see it.
• If you sign in with Google, Google also shares your profile photo with us. Gotita doesn't use it and removes it from your account when you sign in.
• The name you appear under to the people you share a baby with.

Your baby's data

• Name, date of birth, whether they're a girl or a boy if you say so (only for the growth charts) and, if they were born preterm, their weeks of gestation (to work out their corrected age).
• What you log: bottle feeds and breastfeeding, pumping, diapers, sleep, weight, length and head circumference, vitamin D and medicines, vaccines, tummy time, meals, foods tried and possible reactions, and any notes you write.
• Who logged or changed each entry, when you share the baby with other people.
• Who joined your baby with one of your codes, and when (section 4).
• The text of memories (first times and any you add). Memories photos aren't uploaded to our servers: they stay on your iPhone (and in your Photos app, if you save a copy to your camera roll).
• The nursery's daily note and alerts, the note you write from home, and who has seen them (section 4).
• The photos the nursery sends you, if you allow it, and that permission (section 4).

Phone notifications

To send you notifications from another phone (the nursery's daily note, an urgent alert, the note from home, someone asking to join your baby, or someone who joined with your code), we store a notification identifier for your iPhone (the Firebase Cloud Messaging token), your iPhone's language so we can write the notification in your language, and which notifications you have turned on. It's only stored if you allow notifications.

Codes to join

When you use a code to join a baby, the app checks it on our server, which counts each account's failed attempts for one day to stop anyone guessing codes. That count doesn't store the codes you typed.

Gotita+ and Gotita Centers purchases

Purchases are processed by Apple; we don't receive your payment details. To know whether you have Gotita+ or which plan a nursery has, we use RevenueCat, which receives an identifier (anonymous or, if you have an account, your Gotita user identifier), the purchases made and technical data such as the store country and device model. Through Apple, RevenueCat also receives an Apple Ads attribution value that says whether you came to Gotita from an App Store ad and from which campaign. It isn't cross-app tracking, it doesn't identify your device to advertisers and it doesn't need your tracking permission. RevenueCat doesn't receive your baby's data.

4. Nurseries, caregivers, daily note and photos

Sharing with your partner or family

With a family code, your partner or a relative joins your baby and can see and log everything. If someone joins with your code, we let you know and for 7 days you can remove their access from Settings with one tap. Whoever joins with a code is recorded on the baby, with who gave the code and the date; that record is kept with the baby and deleted with it.

Sharing with a caregiver

You can give a caregiver code to the nursery, a nanny or a grandparent. Nobody becomes a caregiver without using your code. A caregiver:

• Logs feeds, diapers, sleep, meals, tummy time and medicines, and can only change their own entries.
• Sees what you log at home only if you allow it, and only for today and yesterday.
• Sees the baby's profile (name, date of birth, weight, sex and whether premature; the app uses it to work out the milk goal) and the name you appear under. Doesn't see the weight and length history, vaccines or memories.

You can remove a caregiver whenever you want from the app, and they stop seeing your baby straight away. For 7 days you can add them back without a code; after that, they'll need a new one. What they logged stays on your baby, marked with their name. The note that you removed them, with the date, is kept with the baby and deleted with it.

If the nursery registers your child

A nursery can create a child with their name and date of birth before the family arrives, and give you a code to move them to your account. When you use it, the first of the two parents becomes the baby's owner, the second joins as family and the nursery stays on as a caregiver. If you already had the baby in Gotita, you can merge the two: what the nursery logged moves to your baby.

What the nursery keeps

For its daily work, the nursery keeps in its account:

• A copy of what it logs for each child.
• The child's details: their name, their group or room, since when they've been coming and, if they leave, the reason.
• The groups or rooms it organizes the children into.
• Which days each child came and which days they had a note.

That data is the nursery's own records: the nursery decides on and manages it, as controller, and only the nursery sees it. The nursery never keeps what you logged, your notes from home or the photos.

When the child is no longer at the nursery (you remove the nursery, the nursery removes the child, or the baby is deleted for good), the nursery keeps its copy, the child's details and the days they came until the nursery decides to delete them from the app or deletes its account. How long it keeps them is up to the nursery, according to its obligations. If you want it to delete what it logged about your child, ask the nursery (section 9).

The daily note

The nursery can write a note about your child each day: how they've been, some text, alerts (“Needs diapers”, “Has a fever”) and, if it wants, an urgent alert to the family. You can write a note from home for the nursery (“Someone else is picking up”, “Bringing medicine”). Each note records who wrote it, when, and who on the other side has seen it. The family and the baby's caregivers can see them, and they're stored with the rest of your baby's data.

Nursery photos

• Only a nursery account can take them, and only if a family member of the child has given permission in the app. You can remove the permission whenever you want: your child's photos are deleted from our servers straight away.
• Two photos a day per child at most. They're stored in Firebase Storage (Google, in Madrid), without location or camera data, and only the baby's members can see them. There are no public links.
• They delete themselves after 10 days. If you want to keep one, you can save it to your iPhone from the app; that copy is yours and doesn't reach us.
• If a photo doesn't seem appropriate, you can report it from the app: it's deleted and an email opens so you can send us its identifier (not the photo) for us to review.

Another relative asking to join

If the nursery gives another relative a code to ask to join your baby, that person doesn't get in until you accept. You receive their name and the nursery's, and you can accept or decline.

Dictation

You can dictate the note instead of typing it. Your voice is turned into text by Apple's speech recognition, on the iPhone itself when the language allows it and otherwise on Apple's servers, under Apple's privacy policy. Gotita doesn't keep the audio: only the text left in the note.

5. What we use it for and on what legal basis

When a nursery uses Gotita, it's the nursery that decides why it processes the data of the children it logs and on what legal basis, and we process that data only on its instructions, under the terms for nurseries.

We don't make automated decisions that affect you or build profiles. We don't use your data for advertising or to train artificial intelligence models.

6. Who we share it with

Only with the providers we need for Gotita to work, who act as processors under contract:

• Google (Firebase): sign-in (Firebase Authentication), database (Cloud Firestore), nursery photos (Firebase Storage), server functions that check codes, send notifications and delete data when due (Cloud Functions), notification delivery (Firebase Cloud Messaging) and Firebase App Check, which checks that whoever connects to our servers is the real Gotita app and not another program. The database, photos and functions are in the europe-southwest1 region (Madrid, Spain).
• RevenueCat, Inc. (USA): managing Gotita+ and Gotita Centers subscriptions.
• Apple: Sign in with Apple, App Store payments, notification delivery (Apple Push Notification service), dictation and App Attest (the App Check verification), under its own privacy policy.

In addition, when you share a baby with someone using a code:

• Your partner or a relative can see and log all of that baby's data, and see your name.
• A caregiver or the nursery can see and log what's described in section 4.

Notifications that reach your phone (for example, “Emma ate everything · Los Pinos School”) include the child's name and part of the note, and go through Google and Apple to reach your iPhone.

We don't sell your data or hand it over to third parties, except where required by law.

7. Transfers outside the EU

Some providers may process data outside the European Economic Area (for example, Firebase Authentication, Firebase Cloud Messaging or RevenueCat, in the USA). In those cases, transfers are covered by the EU-U.S. Data Privacy Framework and/or the standard contractual clauses approved by the European Commission.

8. How long we keep it

• For as long as you have the account, except as set out below.
• Nursery photos: 10 days from when they're taken, or sooner if you delete them or remove the permission.
• Deleting a baby (Settings): if you created it, it goes to the trash for 30 days in case it was a mistake, and you can recover it during that time. After that it's deleted for good, with everything logged, the notes and the photos, for whoever shares it too. The nursery's own copy, if there is one, follows section 4. If someone else shared the baby with you, you just leave it.
• Deleting the account (Settings › Delete account): it's deleted straight away, without the trash: your account, the babies you created (including those in the trash) with all their data, the invitation codes you created, the notification identifiers of your iPhones and, if you're a nursery, everything it keeps in its account. From babies others shared with you, you just leave; what you logged in them stays on that baby, marked with your name. A nursery's own copy follows section 4. When you delete it, you can choose to keep a copy on your iPhone; that copy doesn't reach us.
• What a nursery or caregiver keeps in its account (copy of what it logged, child details, attendance and groups): until it deletes it from the app or deletes its account (section 4).
• Failed attempts with codes: one day.
• Invitation codes: they expire after 48 hours (family and caregiver), 7 days (another relative) or 30 days (the nursery's code for the family).
• Reported photos: the email with the identifier, for as long as needed to review it.
• Purchase data: for as long as the law requires.

9. Your rights

You can ask for access to your data, correct it, delete it, restrict or object to its processing, receive it in a portable format and withdraw your consent at any time. You can exercise many of these rights directly in the app: edit or delete entries, download your data as CSV, remove a caregiver, remove the photo permission, delete a baby or delete the account. For anything else, write to us at hello@gotita.app.

If you don't want us to use the Apple Ads attribution value, write to us at hello@gotita.app: we'll stop taking it into account and ask RevenueCat to delete it from your record.

If your child goes to a nursery, you can also ask the nursery itself for the data it keeps in its account (section 4).

If you think we haven't handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es).

10. Children

Gotita is designed to be used by mothers, fathers, caregivers and nurseries, always adults. You enter the baby's data as their legal representative or with their authorization. At a nursery, the nursery enters it with the family's authorization. Gotita isn't aimed at anyone under 14.

11. Security

Data travels encrypted (HTTPS/TLS) and is stored encrypted on Google's servers. Access rules stop anyone who isn't a member of a baby from reading or writing its data; a caregiver can only read what they're allowed to, and only the baby's members can see the photos. Codes to join are checked on our server, with a limit on attempts. Firebase App Check also rejects connections that don't come from the Gotita app: to check, your iPhone asks Apple for a certificate that the app is genuine, without any data about you or your baby.

12. Other iPhone features

• Reminders (feeds, medicines, allergens, naps, the daily note, weekly summary): they're scheduled on your iPhone and don't go through our servers. Notifications that come from another phone are explained in sections 3 and 6.
• Siri and Shortcuts: voice commands are processed by Apple under its privacy policy.
• Apple Watch, widgets and Live Activities: they talk to your iPhone directly and don't go through our servers.
• PDF report and CSV downloads: they're created on your iPhone. Only the people you choose to share them with receive them.

13. This website

gotita.app doesn't use tracking cookies or analytics tools; it only remembers your language if you pick one in the selector. It loads its fonts from its own server. It's hosted on Firebase Hosting (Google), which logs technical data such as the IP address to serve the page and protect it against abuse.

14. Changes

If we change this policy, we'll update the date at the top and, if the change is important, we'll let you know in the app.

This policy is written in Spanish and translated into other languages. If there are any differences, the Spanish version prevails.