1. Who we are
Hushelo is operated by Gamalabs (OPC) Pvt Ltd, registered at Plot no 527, Ground Floor, Phase 1, TNGO Colony, Gachibowli, Hyderabad, Telangana - 500032, India (“Hushelo”, “we”, “us”). For everything in this policy, we are the data controller of the information you provide.
You can reach us at hello@hushelo.com. For account-specific privacy requests, see Your rights below.
2. What we collect
We collect only what we need to run Hushelo. We have grouped it below by what it is and where it comes from.
2.1 Your account
When you sign up and use your account, we store:
- Your email address and your name.
- A bcrypt hash of your password, never the password itself. If you sign in with Apple or Google instead, we receive your email address and name from them to create your account. If you choose Apple’s “Hide My Email”, we only ever see the relay address Apple gives us.
- Your locale, timezone, and unit preference (metric or imperial).
- Your country code (ISO format), which we use to show the right currency for plans and the right vaccine schedule for your baby. We take it from your device settings and you can change it in Settings. We do not collect your location.
- Your notification preferences, in-app onboarding state, and any preferences you adjust in Settings.
- Your referral code and any promo or referral codes you redeem.
- The list of devices you sign in on (platform, model, OS version, app version, last active time) so you can manage active sessions and so we can enforce a maximum-device limit.
- A record of when you accepted our Terms and this Privacy Policy, including the IP address at the time of acceptance and the app version, so we have an auditable record that consent was given.
2.2 Your baby’s data
This is the heart of the app. You enter it; we hold it on your behalf so it follows you across devices and caregivers. Much of it is health information, and we treat it that way.
- Profile: name, date of birth, gender (optional), blood type (optional), birth weight, birth length, avatar photo, sibling group, birth order, free-text notes.
- Daily entries: feeds (breast or bottle, side, volume, switches), diapers (type, rash), sleep, pumping, baths, tummy time, temperature readings, mood notes, free-text notes, photo entries.
- Growth: weight, length, head circumference, percentiles, chart type (WHO or Fenton for preemies).
- Milestones: what was achieved, when, photos and notes.
- Vaccines: doses given, the provider you saw, batch number, site of injection, any reactions you logged, notes.
- Medication courses: medication name, dose, frequency, route, prescribing provider, reason, notes and any photos you attach.
- Medical records: type of visit (checkup, illness, lab, admission, prescription), diagnoses, symptoms, follow-up dates, links to the doctor or hospital contact, and the prescriptions inside a record (medicine name, dose, frequency, duration, notes).
- Medical documents: files you attach to a medical record or a prescription, such as PDFs of lab reports or discharge summaries and photos of prescriptions. Medical records are a Premium feature. These files are uploaded to our private storage and shared with the members of your family, the same as the rest of the record. We keep the file, its name, size, type and a checksum we use to detect duplicate uploads. A file you add while offline stays on your phone and uploads when you are back online.
- Milk stash: pump times, volumes, storage location, expiry, consumption.
- Photos and videos: the media you upload for your baby, plus the smaller WebP versions we generate for fast loading.
- Reminders and timers: the schedules you create, what they remind you about, and any timer you have running.
2.3 Your own health data
The app has an optional “Mom matters” section where you can log your own water intake, meals (with calories, protein, carbs, fat, fiber, and a mood note if you add one), and supplements. This is treated with the same care as your baby’s data.
2.4 Your family and the people you add
Some of what you enter is about other people. Please only add people who are comfortable having their details stored on your behalf.
- Family members: who belongs to your family and their role (admin, caregiver, or viewer). When you invite someone, we store the invite code and the email address or phone number you typed for them. If you enter an email address, we email the invite code to that person on your behalf (through Elastic Email), with your name but not your baby’s name. Otherwise you share the code however you like.
- Care team contacts: when you add a pediatrician, OB-GYN, lactation consultant, or any other contact, we store their name, specialty, phone, WhatsApp number, email, address, latitude/longitude, and any notes you wrote. These are shared with the caregivers in your family. The call, message, and WhatsApp buttons simply open your phone’s own apps; Hushelo does not send anything on your behalf.
Hushelo never reads your phone’s address book. Every contact in the app is one you typed in.
2.5 Support requests
If you contact us from inside the app or by email, we keep your message, our replies, the app version you were using, and any feature requests or votes you submit, so we can help you and follow up.
2.6 Technical information we collect automatically
- Server logs: every API request is logged with the path, method, response status, IP address (first hop of
X-Forwarded-Foror the connection’s socket address), and user-agent string. We use these to debug and to identify abuse. - Crash and error reports: when the app, our server, or our admin tool hits an error or crashes, a report is sent to our crash-reporting provider, Sentry. A report contains the error and stack trace, the device model, operating system and app version, and technical breadcrumbs about what the app was doing just before the error (for example, which screen was open or which request failed). Reports are sent automatically from the released app. We configure Sentry not to attach your name, email, or account to a report, and we strip cookies, session tokens, and authorization headers before anything is sent. We do not use Sentry for performance tracking or session replay.
- Push tokens: if you allow notifications, we store the push token Apple or Google issues for your device so we can deliver them.
- Sync logs: a record of each cross-device sync (when, how many items, how long it took, the device that initiated it).
- Edit history: when you edit an entry, we store the change (a diff and a snapshot) so you and any other caregivers can see who changed what.
- Notification log: for every email or push notification we attempt to send, we record the channel, the template, the variables we filled in, and whether it succeeded.
- Password reset attempts: if you request a reset, we record the IP address it was requested from along with the (hashed) reset token, so we can detect abuse.
2.7 In-app purchases
If you subscribe to a paid plan, the purchase happens through Apple’s App Store or Google Play. We never see your card or bank details. We do store the receipt or purchase token that Apple or Google gives us, plus the plan, price, currency and dates, so we can confirm your subscription is active and keep the accounting records the law requires.
3. How we use your data
We use your data to:
- Run the features you can see in the app. Everything in section 2 is there because something in the app needs it.
- Send transactional emails and push notifications, for example your email verification code, a password reset link, an account deletion confirmation, or reminders you’ve scheduled. We don’t use these channels for marketing.
- Sync your data between your devices and your family caregivers’ devices.
- Detect and respond to abuse (e.g. brute-force login attempts) using rate limits and server logs.
- Confirm and manage your subscription if you have one.
- Find and fix crashes and bugs, using the server logs and crash reports described in section 2.6.
We do not use third-party analytics, advertising SDKs, or tracking pixels, and we do not track you across other apps or websites. We do not sell your data, and we never will. We do not share it with advertisers. We do not profile you for advertising purposes.
3.1 Our legal bases
Where data-protection laws such as the GDPR or India’s Digital Personal Data Protection Act apply, we rely on:
- Our contract with you, to provide the account and features you signed up for.
- Your explicit consent, for the health information you choose to record about your baby and yourself. You can withdraw it at any time by deleting those records or your account.
- Our legitimate interests, to keep the service secure and to find and fix crashes. We keep this to the minimum described above.
- Legal obligations, for example keeping purchase records for tax and accounting.
5. Where your data lives
Your data is stored in three places.
- On your device, in a local SQLite database managed by Hushelo. Hushelo does not add its own encryption to this database; it is protected by the operating system’s app sandbox and on-device encryption (iOS Data Protection and Android File-Based Encryption), so keep a passcode on your phone. This is the “local-first” copy: the app works offline and reads from here. Medical documents you add, or open on a phone, are kept here too, so they open without a connection.
- On our server, in a MariaDB database that holds the authoritative copy of your data. This is what other family members’ devices sync from.
- On Bunny.net’s storage, for the photos, videos and medical documents you upload (only if you upload them). Medical documents sit in a private area that is never publicly listed: the app fetches each one through a signed link that stops working after 15 minutes, and only after our server has checked you belong to the family.
Our server is hosted in a single region. The exact region is available on request; email hello@hushelo.com.
6. How long we keep it
We keep your data for as long as you have an account with us. When you delete your account, we follow the steps in section 7.3 below. Specific retention rules:
- Account, baby, and health data, medical documents, photos, and videos are kept until you delete them or your account. When you remove a medical document, or the record or prescription it belongs to, we delete the file from storage straight away. After an account deletion request they are permanently deleted at the end of the 30-day grace period (see section 7.3 for families shared with others).
- Entries you delete inside the app disappear from every device, but we keep the deleted record and its edit history on our server so the deletion can reach your other devices. They are permanently removed with your account. If you want a specific deleted entry erased sooner, email us and we will do it.
- Edit history, sync logs, notification log, and support requests are kept while your account exists and are deleted with it.
- Invites, including the email address or phone number you typed, are kept until your family is deleted or you leave it.
- Refresh tokens expire after 30 days (or sooner if you sign out). Access tokens live for 15 minutes.
- Server request logs are kept only as long as we need them for debugging and security investigations.
- Crash reports are deleted automatically by Sentry, within 90 days at most.
- Data exports you request are available to download for 7 days, then deleted.
- Purchase records are kept in a form that no longer identifies you, for as long as tax and accounting laws require, even after account deletion.
7. Your rights
You have the right to access, correct, export, or delete your data. We do not require you to provide a reason and we do not charge for these requests.
7.1 Access and correction
You can see and edit every piece of data you’ve entered inside the app. For data we hold that the app doesn’t show you, like server logs, email us and we’ll respond within 30 days.
7.2 Export
You can request a copy of your data from Settings → Export Data in the app, or by emailing hello@hushelo.com. We prepare a JSON file containing the data we hold about you and your family’s records, and you download it from the same screen. Photos, videos and medical documents are listed in the file with their details and a download link; the links stop working after a limited time, so save the files you want soon after downloading the export. The download is available for 7 days. You can make one export request every 24 hours.
7.3 Deletion
You can delete your account from Settings → Account → Delete account in the app. If you no longer have the app, see hushelo.com/delete-account. When you delete your account:
- We sign you out of every device immediately. If you signed up with Apple, we also revoke Hushelo’s access to your Apple ID.
- A 30-day grace period starts. During it you can change your mind: sign back in and tap “Cancel deletion”. Signing in on its own does not cancel the deletion. We do this to protect you from accidental or coerced deletions.
- After 30 days we permanently delete your account and personal details. For every family where you are the only member, we also delete everything in it: babies, entries, growth, milestones, vaccines, medications, medical records and the documents attached to them, care team contacts, photos, and videos, including the stored files.
- For a family you share with other members, we remove you from it, and the family’s records stay with the other members so they can carry on. Export your data first if you want a copy.
- Purchase records we’re legally required to keep remain in a form that no longer identifies you, for as long as the law requires.
Signing out or uninstalling the app removes the copy on that phone, including any medical documents saved on it. A medical document that has not finished uploading exists only on that phone, so the app warns you before you sign out.
7.4 Other rights under EU/UK and Indian law
If you’re in the EU, UK, India, or another jurisdiction with equivalent law, you also have the right to restrict processing, object to processing, withdraw consent (where consent is the basis we rely on), nominate someone to exercise your rights if you are unable to, and lodge a complaint with your local supervisory authority or the Data Protection Board of India. Email us first if anything is unclear and we’ll try to resolve it directly.
8. Security
How we keep your data safe:
- Transport uses TLS (HTTPS) for every connection to our server.
- Passwords are hashed with bcrypt at cost factor 12. We never store them in plain text and we cannot recover one for you.
- Session tokens use PASETO v3 (a modern, authenticated cryptographic token format), kept in HttpOnly cookies the app’s code cannot read.
- Mutating requests require a separate CSRF token (double-submit pattern).
- Login is rate-limited per email address and per device network.
- Family access is checked on every request, so only members of a family can read its data.
- Medical documents are kept in private storage and handed out only as signed links that expire after 15 minutes. We check every upload is a real PDF or image and reject anything over 20 MB.
- Biometric app lock (Face ID, Touch ID, or your Android equivalent) is available in Settings and re-locks after 30 seconds in the background.
- Backend webhooks from Apple and Google are cryptographically verified before being trusted.
- Staff access goes through a separate admin login with role-based access control, two-factor authentication, and an audit log of every change.
Your data is not end-to-end encrypted. Our servers need to read it to sync it between your family’s devices, and authorised staff can access it when needed to provide support or keep the service running.
No system is 100% safe. If we ever suspect that your data has been accessed by someone who shouldn’t have, we will tell you directly and report the incident to the relevant authorities within the legally required timeframe.
10. Children's data and parental responsibility
Hushelo is designed for adults (parents, legal guardians, and the caregivers they invite) to record information about a baby or young child. It is not directed at children, and children cannot create accounts. By creating an account you confirm you are an adult and that you have the legal right to record information about each baby you add.
The baby’s data sits inside your family. Only the people you invite into your family can see it. We do not create advertising profiles, behavioural models, or any kind of predictive analytics from baby data, and we never share it for marketing. Baby data includes health information (feeds, sleep, temperature, medications, vaccines, growth, diagnoses); we handle it with the same care as your own health data.
When the child you are recording reaches an age at which they can make their own decisions about their data, you can export everything (section 7.2) and hand it over, or delete it (section 7.3).
If you believe a child’s data is in Hushelo without the right consent, please email us at hello@hushelo.com and we will remove it within 30 days.
11. International transfers
Our server is hosted in a single region. If you use Hushelo from a different country, your data is transferred to that region for processing.
The service providers listed in section 4 each operate from their own jurisdictions: Apple and Google operate globally; Bunny.net is headquartered in Slovenia; Elastic Email in Estonia; Sentry stores crash reports in the United States. Each transfer of personal data outside your home jurisdiction is covered by appropriate safeguards (Standard Contractual Clauses or equivalent).
12. Changes to this policy
When we change this policy in a way that affects your privacy, we’ll update the “Last updated” date at the top of this page and let you know either inside the app or by email. Continued use of Hushelo after a meaningful change constitutes your acceptance of the updated policy. If you don’t accept it, you can export your data and close your account as described in section 7.
13. Contact us
For anything related to this policy, your data, or your account:
- Email: hello@hushelo.com
- From inside the app: Settings → Help & Support
- Legal entity: Gamalabs (OPC) Pvt Ltd
- Registered address: Plot no 527, Ground Floor, Phase 1, TNGO Colony, Gachibowli, Hyderabad, Telangana - 500032, India
We try to respond to every privacy request within 7 days and to fulfil it within 30 days, as required by most data-protection laws.