Privacy Policy

1. Who we are

Sidelight: Baby Feed Timer ("Sidelight", "the app") is made by BORING APPS SRL, a company based in Romania ("we", "us"). Under the GDPR we would be the "controller" of any personal data we receive. As this policy explains, the only data we receive is the purchase record described in section 5, and only if you buy Sidelight Plus.

Contact: hello@boring-apps.dev.

This policy covers the Sidelight app for iPhone, its widgets, its Live Activity and its Siri and Shortcuts actions.

2. What stays on your iPhone

The app saves these things only on your iPhone:

Your log	Feeds (start and end time, the side or sides, pauses, bottle or pump amounts), sleep, diapers and any notes you add. Saved as a file inside the app, in a container shared with Sidelight's own widgets and Live Activity on the same iPhone.
Your baby's details	If you choose to enter them: a name and a birth date. Optional. They stay on the iPhone.
Settings	Units (ml or oz), the reminder time, night mode, whether you own Plus, and a counter so the app asks for a rating rarely.

None of this is sent to us or to anyone else. Sidelight doesn't sync to iCloud and doesn't read or write the Health app.

Device backups

If you back up your iPhone to iCloud or to a computer, iOS can include Sidelight's data in that backup, like other app data, so a restored iPhone keeps your log. That backup is made by iOS, on your instruction, under your Apple Account. We can't read it.

3. When you export or share

You can export your log as a CSV file (free) or, with Sidelight Plus, create a PDF report for your pediatrician. The app prepares the file on your iPhone and hands it to the iOS share sheet. You choose where it goes, for example an email to your pediatrician. We never receive a copy. Once you send it, the app or person you sent it to handles it under their own terms.

If you tap Contact Support, your own Mail app opens with our address and a subject line that holds only the app's name and version. You decide what to write and whether to send it.

4. Notifications

Sidelight uses local notifications only: a "Still feeding?" reminder if a feed runs longer than the time you set and, with Sidelight Plus, an optional feed-due reminder. The app schedules them on your iPhone. They are not sent through any server, and there are no push notifications. iOS asks for your permission, and you can turn notifications off at any time in iOS Settings. Live Activities also run locally on your iPhone.

5. Purchases and RevenueCat

The timers, the log and the history are free. Sidelight Plus is a one-time in-app purchase.

Purchases go through Apple's App Store. Apple runs the payment and tells the app that you own Plus. We never see your name, your Apple Account or your payment details. Apple's handling of purchases is covered by Apple's Privacy Policy.

The app includes the RevenueCat SDK, which we use to record purchases for our revenue statistics. The app contacts RevenueCat only when you buy Sidelight Plus. The SDK is set up at the moment of purchase. If you never buy Plus, the app never contacts RevenueCat and RevenueCat receives nothing from you. Restore Purchases goes through Apple (StoreKit), not RevenueCat.

When you buy Plus, RevenueCat (RevenueCat, Inc., USA) receives:

• the purchase transaction: which product you bought and the transaction details Apple provides,
• an anonymous app user ID that RevenueCat generates on your iPhone (it is not your name, email or Apple Account),
• the IDFV (Identifier for Vendors), a device identifier Apple gives to apps from the same developer. It is not the advertising identifier (IDFA),
• your IP address,
• the app version, the device type and your locale and App Store storefront.

We use this to count sales and to confirm that a purchase is valid. We do not use it for advertising, we do not link it to your log (RevenueCat never receives your log) and we do not sell it. See RevenueCat's Privacy Policy for how it handles data.

International transfer

RevenueCat, Inc. (USA) processes this data for us as a processor under its Data Processing Addendum, which relies on the EU-US Data Privacy Framework and/or Standard Contractual Clauses.

Crash reports from Apple

If you chose to share analytics with app developers in iOS Settings (Privacy & Security → Analytics & Improvements), Apple may send us anonymous crash reports, which help us fix bugs. They don't identify you and don't contain your log. You can turn this off in the same place.

6. What the app never does

• No account. There is nothing to sign up for or log in to.
• No servers of ours. We don't run a server that receives your log. The app's only connections are to Apple's App Store and, only if you buy Plus, to RevenueCat for the purchase (section 5).
• No analytics and no advertising code: no analytics tools, no crash-reporting services, no ad SDKs, no attribution tools. RevenueCat is used only to record a Plus purchase.
• No ads of any kind.
• No tracking. The app doesn't use the advertising identifier (IDFA) and never asks for permission to track.
• No iCloud sync and no Health app access.
• No location, contacts, photos, camera or microphone.

7. Your baby's data and the law

Feeding, sleep and diaper records are information about your child's health and daily life. Under the GDPR (Article 9), health data gets extra protection. Sidelight keeps your log entirely on your iPhone, under your control. Because the app sends your log to no one, we don't process it, don't hold it on any server and can't see it.

The only personal data we receive is the purchase record in section 5, and only if you buy Plus: the transaction, an anonymous ID and the technical data listed there, held by RevenueCat on our behalf. Our legal basis is our legitimate interest in knowing our sales and in checking that purchases are valid, and our legal obligation to keep accounting records.

Sidelight is meant for parents and caregivers. It isn't directed at children, and we receive no data about your child.

8. How long data is kept

• On your iPhone: until you delete it, or delete the app.
• Purchase records at RevenueCat: RevenueCat keeps purchase records while the app is offered and for as long as accounting law requires us to keep transaction records (up to 10 years in Romania).
• Email to us: only as long as we need it to help you.

9. What you can do

• Delete an entry: swipe it in History and tap Delete.
• Delete your log and your baby's details: Settings → Delete all data in the app deletes your log and your baby's details (name and birth date). App preferences such as units stay. Deleting the app removes everything on the iPhone. If you reinstall, Plus can be restored from your Apple Account.
• Export your log: Settings → Export CSV.
• Refunds: purchases are handled by Apple. Ask for a refund at reportaproblem.apple.com.
• Use your rights: depending on where you live, you may have the right to access, correct or delete personal data, to restrict or object to its use, and to data portability. We hold no data from your log. For the purchase record (which exists only if you bought Plus), write to hello@boring-apps.dev and we'll reply within one month. Because the record is tied to an anonymous ID rather than to you, we may ask for a purchase receipt so we can find it.
• Complain to a regulator: you can contact your data protection authority. In Romania that's the ANSPDCP (dataprotection.ro). In the UK it's the ICO (ico.org.uk). We'd like the chance to help first.

10. Security

Your log is protected by your iPhone's own security, including its passcode and data protection. The app's connections to Apple and RevenueCat use encrypted connections.

11. Not medical advice

Sidelight is a timer and log for your own records. It is not a medical device and gives no medical advice or feeding recommendations. Talk to your pediatrician, midwife or lactation consultant about feeding and sleep, and call your doctor or emergency number if you are worried about your baby.

12. Changes to this policy

If we change this policy, we'll update the date at the top. We won't start collecting your log, add analytics, add ads or add iCloud sync without first updating this policy and the App Store privacy details.

13. Contact

Questions about privacy? Email hello@boring-apps.dev. A person reads every email.

BORING APPS SRL, Romania · hello@boring-apps.dev