Privacy policy

Last updated

15 November 2026

Kora Baby is a private record of your child’s days. This page explains, in plain words, what it stores, where that lives, who can reach it, and how to take it back or erase it.

The short version

Kora stores what you log about your baby, including health information and photos, on a private database run by our hosting provider. You can invite family, and anyone you invite sees everything about that baby. No other person does: the companies that run the service for us process it to do that (listed below), and Kora’s operator can reach it only where support, security or the law requires.

There is no advertising in Kora, no analytics, and no tracking across other apps or websites. Your data is never sold, and Kora never takes a payment itself. The only companies involved are the hosting provider that runs the app for us, whoever you chose to sign in with, the email service that sends your confirmation and password-reset emails, Apple’s App Store for anything you choose to buy, Apple’s notification service when a lock-screen card is started or ended from another phone or a nap or bedtime reminder is sent, and — only when Kora shows you the weather — Apple’s weather service, Apple’s maps search and your phone’s own location service. Your child’s record is not a product we sell, rent, or share.

What Kora stores

Everything below is stored because you entered it. Alongside it, the server keeps a few records it makes itself: your account, your phones’ notification addresses, a purchase record if you buy premium, and the hosting provider’s technical request logs (see Where it is stored).

· Your baby’s profile — name, date of birth, sex if you chose to enter it, and a profile photo if you added one.

· Sleep — naps, bedtimes, morning wake-ups and night wakings, with times and durations. Each sleep entry also records the time-zone offset your phone was on, so history shows the clock you were actually reading. That offset is a rough indication of what part of the world you were in.

· Feeds — nursing sessions with side and minutes, and bottles with amount and type.

· Pumping — sessions and amounts. This is the mother’s own body data, not the baby’s.

· Diapers — wet, dirty, mixed or dry, with the time, and a photo if you took one.

· Growth — weight, length and head circumference, with the date measured.

· Health — body temperature, where it was measured, vomiting and spit-up, symptoms such as rash, cough, congestion or diarrhea, and medicines with the name and amount exactly as you typed them.

· Solids and food — which foods were introduced, whether your baby liked them, whether there was a reaction, your notes, and a photo if you added one.

· Meal plans, recipes and activity plans — your weekly plans, your own saved recipes, your favorites, and the activities you planned.

· Milestones — the title, your note, the date, and a photo if you added one, including milestones you named yourself that have not happened yet.

· Activities — which activities you marked as done and when, and any activity you wrote yourself, in your own words.

· Visits — the date and time, your note, and which kind of visit it is.

· Notes — free text you write, including notes written for a specific visit, and a photo if you added one.

· Shopping list — items, categories, quantities and what you have ticked off. The list belongs to the household, so everyone in the family sees the same one.

· Which daily facts you have read — so the same one is not shown to you twice. It is a mark on you, the reader, not on your baby.

· Your family — who is a member of this baby, whether they are an owner or a caregiver, and the relationship label each person chose, such as Mama, Papa, Grandma or Nanny.

· Who logged it — nearly every entry carries the family member who made it, and the server checks that it is really them rather than taking the app’s word for it. A live timer also carries that person’s relationship label, so the other phone can say whose timer is running. The record shows who did what.

· Invitations — the invite code, the role and relationship it carries, who created it, when it expires and whether it was used.

· Wrong invite codes — when a code typed to join a family is not a live one, the server notes your account and the moment, so that nobody can guess codes for long. Nothing else about the attempt is kept, and notes a day old are cleared the next time anyone types a code.

· Live timers — while a nap or nursing timer is running, a short-lived record so the other parent’s phone can see it.

· Nap and bedtime reminders — once your phone is connected to Kora’s server for them: the address Apple gives your phone, tied to your account, and each planned reminder — its words, its time and the baby it is for — until two days after it was due.

· Lock-screen cards — so a nap or a night started on one phone can appear on the other’s lock screen, the server keeps an address Apple gives your phone for these cards, and one for each card that is showing. It is tied to your account and to that baby. It can start, change or end a card and nothing else.

· Your account — your email address, and either a password stored in hashed form by our hosting provider or the fact that you sign in with Apple or with Google, plus the ordinary account timestamps.

· What Apple or Google pass on — Apple passes on your email address, or the private one it makes if you chose to hide yours, and its own identifier for your account; Kora does not ask Apple for your name. Google passes on your email address and, as it does by default, the name and profile picture of your Google account. Those two sit with your sign-in at our hosting provider. Kora neither shows nor uses them.

· A complimentary mark — a few accounts, our own and our testers’, are marked on the server as complimentary, with a short note of why. If yours is one, that mark is stored against your account. It cannot be set from the app, and no other account can see it.

· A founding seat — if your family is one of the first hundred to join, the server keeps which seat it holds, from 1 to 100, the day it was given, and which account was handed it — so one account cannot collect seats. A seat belongs to the family, not to one parent; the family’s part goes when the family’s record is deleted, and the account’s part when that account is. The server also keeps one number that is about no family at all: how many seats have been given.

· Recommending Kora — once recommending is open: if your family asks for a code to give to friends, the server keeps that code against your family. If a family joins with a code, it keeps which family recommended it, when, and how far it has got — joined, paid, a free month owed, or cancelled — with the dates. It never keeps an amount or anything about a purchase, and nothing about your baby. It goes when the family’s record is deleted.

Health information

Some of what Kora holds is health information about your child, and we would rather say so than dress it up. Temperature and where it was taken, medicines and their doses, vomiting, symptoms, allergic reactions to food, weight, length and head circumference, visits and visit notes, and photos of rashes or diapers — all of that is stored in your baby’s record and is visible to every family member you invite.

Kora is a place to keep notes and show them to your own doctor. It is not a medical device and it does not give medical advice.

Photos

Photos live in one private storage area, reachable only by members of that baby’s family. Kora stores six kinds: diaper photos, health and rash photos, food-reaction and meal photos, milestone photos, a photo on a note, and your baby’s profile picture.

Photos are never posted publicly, and Kora never links to them from anywhere outside the app. When a screen shows you one, the app asks the server for a link that works for one hour and then stops working. Nothing longer-lived is ever made. Your export contains the photos themselves, as files, and no links to them.

The photo storage accepts images only, up to 10 MB each.

Location and weather

Kora uses your location for one thing, the weather, and only while Kora is open: on the Weather screen, and — once you have allowed it there — for the Heads up card on Home, which looks up the forecast when Home opens, at most once every fifteen minutes. Home never asks for your location; it only uses a yes you already gave on the Weather screen.

Your location goes to Apple, rounded to about a kilometre, for two things: Apple’s weather service, for the forecast; and your iPhone’s own operating-system geocoder, Apple’s, to turn it into a place name to show you. Both receive the rounded place and, as with any internet request, your IP address. Kora sends nothing about your baby with either: no name, no birth date, no logs, no account, no identifier of any kind. If you search for a city by name instead, the letters you type go to Apple’s maps search.

What leaves your phone is a place rounded to about a kilometre, not your exact position — the forecast and the place name are both asked for with that rounded place. The cities you save — their names and where they are — are kept on your phone only.

The last forecast for each place is kept on your phone as well — weather numbers and, for where you are, the town’s name; no position — so Kora has something to show before it asks again.

When you sign out or delete your account, Kora removes the cities you saved, these forecasts, your weather-alert choices and any weather alert still waiting to ring.

What stays on your phone

Some things never leave your device: your chosen theme and appearance, your unit preferences, your Home screen layout and which quick-log buttons you keep, saved weather cities, your reminder settings and quiet hours, small flags that remember what you have already seen, and the prediction-accuracy record.

Reminders you named yourself — a medicine, a vitamin — are kept on your phone for your account. With you signed out, or with another account signed in, they are neither shown nor rung, and they are there again when you sign back in.

Two things are worth naming plainly. Logs you make while offline are queued on your phone and sent to the server as soon as it can reach it. And if you start setting Kora up before creating an account, that draft — your baby’s name, birth date, sex, photo, your own name and relationship — is saved on your phone first, then becomes real records when you finish signing up.

Your phone also remembers the address Apple gave it for the nap and bedtime reminders, so it can tell when that address changes.

Kora also keeps a copy of what it last showed you on your phone, so it can open without a signal and so the Home-screen widget and a lock-screen card have something to show. Signing out removes that copy, the widget’s numbers, every pending reminder and every card on the lock screen.

Why Kora stores it

Only to run the app for you: to show your history, to work out the age-typical sleep guidance, to build the growth and health summaries you can hand to a doctor, to keep every family member’s screen in step, and to let you export or delete everything.

There is no secondary use. Your data is not used to train anything, to build a profile of you, or to sell to anyone.

Where it is stored

Kora runs on Supabase, a hosting provider that supplies the database, the file storage, and the sign-in system. Everything described above is stored there.

Kora’s project at Supabase is hosted in Zurich, Switzerland (region eu-central-2), so everything described above is stored in Switzerland.

The server also holds a few on/off switches of our own — whether invitations to recommend Kora are open, whether payment is asked for. They are the same for everyone, and they hold nothing about you or your baby.

Access is enforced on the server, per family, not just hidden in the app. A request for a baby you are not a member of is refused by the database itself.

Confirmation and password-reset emails are sent for us by Resend, an email delivery service in the European Union. It receives your email address and the message itself, and nothing about your baby.

Our hosting provider, like any server, records ordinary technical request logs such as IP address and timestamps. That is theirs, not something Kora instruments or reads. They are kept for about 7 days.

Who can see it

You, and everyone you invite to that baby. Beyond them, only the service providers below process it to run Kora, and Kora’s operator can reach it only where support, security or the law requires.

· An owner — you, and any co-parent you promote — can do everything: log, edit, delete entries, invite others, and edit the baby’s profile.

· A caregiver — a grandparent, a nanny, a sibling — can read, add, edit and delete every entry, including health entries, notes and photos. A caregiver cannot invite anyone or edit the profile.

There is no partial sharing. Inviting someone gives them the whole record, symptom photos and medicines included.

Joining a family also shows your account email address to the other members of that family, and shows theirs to you.

Invite codes expire after seven days, only one code can be live per relationship at a time, and a baby can have at most ten pending invitations. You can revoke a code that has not been used.

What Kora never does

· No advertising. No ad network, no ad identifier, no IDFA, no ad profile.

· No analytics or tracking. There is no analytics tool, no crash reporter, no telemetry, and no usage or event logging. Kora reads no advertising identifier and builds no device fingerprint. It does not track you across apps or websites.

· Never sold, never used for advertising. Your data is not sold, rented, brokered, or handed to anyone for their own purposes. Apart from the hosting provider, the email service that sends your sign-in emails, Apple’s own weather, maps, location, notification and app-store services, and whichever sign-in provider you chose, no company receives anything from Kora.

Reminders

Kora’s reminders work, and every one of them is worked out by your own phone from data already on it. All but two are also kept and rung by your phone alone: no server sends them, and their content never leaves your device.

Every reminder is off until you switch it on, each one can be switched off again in Settings, and you can set quiet hours. Reminders you write yourself — a medicine, a vitamin, anything you name — are kept with the rest of your settings, on that phone only. They arrive silently, because a baby is asleep somewhere near this phone.

The nap and bedtime reminders are the exception, and for a reason: a reminder kept on one phone cannot be cancelled from another, so it could ring after the other parent had already put your baby down. Once your phone is connected to Kora’s server for them, your phone still works each one out and then hands it over: the reminder’s words — your baby’s name is in them — the minute it should ring, and which baby it is for. At that minute the server checks whether that sleep has already been logged, on any phone. If it has, nothing is sent. If not, the reminder is sent to your phone through Apple’s notification service, which therefore sees those words. Until your phone is connected, these two are rung by the phone like the rest.

For this the server keeps an address Apple gives your phone, tied to your account. It is removed when you sign out or delete your account, and a planned reminder is deleted two days after its minute, whether it was sent or not.

The other thing that reaches your phone from outside is a lock-screen card — the next section.

Lock-screen cards

While a nap, a night or a nursing timer is running, Kora can show it as a card on your lock screen. A card you start yourself is made by your own phone.

So that the other parent’s phone can show the same sleep — and so yours stops counting when they log the wake-up — the server keeps an address Apple gives your phone for these cards. When someone in the family starts, changes or ends a sleep, our hosting provider sends Apple’s notification service that address together with what the card shows: your baby’s name, Kora’s own identifier for that baby, whether it is a nap or the night, and the times it counts from. Apple delivers it to the phone. Nothing else about your baby travels with it.

The address for a card is deleted when the card ends. The address for starting a card is deleted when you sign out, leave that baby’s family or delete your account. If you sign out with no signal the server cannot be told, so a card that reaches a logged-out phone is closed by the phone as it arrives.

You can switch these cards off for Kora in your iPhone’s Settings, under Live Activities.

Payments

Kora never takes a payment itself and never sees a card. Anything you pay for in Kora goes through Apple’s In-App Purchase: Apple is the seller, Apple takes the payment, and your card details never reach Kora or our hosting provider.

What is for sale, and its price, is shown in the app by Apple at the moment you would buy, and you are charged only when you confirm it with Apple.

Kora reads from Apple, on your phone, whether a purchase is active, so that it can show you what you have. It never learns how you paid.

If you buy premium, Kora’s server keeps a record of it from Apple, so that the other parent in your family has premium too: Apple’s number for the purchase, your account, whether it is the monthly or the yearly one, whether it was a test purchase, when it ends, any grace period Apple gives when a payment fails, and the day it was refunded or withdrawn, if it was. Never the price, how you paid, or your card. The record goes when your account is deleted.

How long it is kept

Kora keeps your baby’s record until you delete it. Nothing expires on its own, because a baby’s history is the point of the app.

A few things are shorter-lived by design. Invite codes expire after seven days, a link to a photo lasts one hour, and the address for a lock-screen card is deleted when the card ends. A live timer record is deleted as soon as the timer is ended or discarded; if a phone loses connection at that moment the record can linger, and the next time the app runs it is cleared.

Getting a copy of everything

Settings has an Export data option. It builds one archive — a zip — on your phone and hands it to the iOS share sheet. Nothing is uploaded to do it; your photos are fetched to your phone for it and go no further unless you send the archive somewhere yourself.

Inside is a single data file, readable without Kora, and it covers every table that belongs to your baby: feeds, pumping, sleep, diapers, solids and meals, growth, health events, temperatures, milestones and the ones you named yourself, notes, activities and the ones you wrote yourself, visits, diaper stock, the shopping list, meal plans, activity plans, your recipes and favorites, and who has access. Beside it is a part about your own account: whether it is complimentary, your App Store purchases as Kora’s server keeps them, and the phones Kora can send a notification to.

The export is a copy of your records for you to keep. It is not the only way to ask what Kora holds about you: for anything it does not contain, write to the address at the end of this page and we will answer.

A few things are deliberately left out, and each one says why inside the file rather than being quietly missing: a timer that is running right now, your join codes (anyone holding the file could otherwise use one), which reminders each phone rings, the addresses for lock-screen cards, which daily facts you have read, and two things that are about your family rather than your baby — a code for recommending Kora, and who joined on whose recommendation. If the server refuses a table, the file names it — so a short export can never pass as a complete one.

Your photos are in the export, as image files in a folder beside the data file — every picture in your baby’s folder, the profile picture included. If a picture could not be fetched, the data file names it and says why, and the export is marked incomplete rather than passing as whole.

The archive is as private as what is in it, and once you save or send it, it is yours to look after. Kora removes its own copy from your phone when you leave the Export page.

Kora can also build a health report for a doctor’s visit. It is assembled on your phone from your own data, handed to the share sheet or the printer, and nothing is uploaded to produce it.

Deleting everything

Settings has a Delete account option. You type DELETE to confirm, and then:

· For any baby where you are the only owner, every photo is removed from storage first, then the baby and all of its records — sleep, feeds, health, notes, everything — are permanently deleted.

· For any baby with another owner, or where you are only a caregiver, the baby’s record stays with the rest of the family. Only your membership is removed.

· Your account itself is then deleted.

· If you sign in with Apple, Apple asks you to confirm once more, and once your account is gone Kora asks Apple to withdraw its Sign in with Apple. If Apple cannot be reached your account is still deleted, and you can remove Kora yourself in your iPhone’s Settings, under Sign in with Apple.

· On your phone, Kora clears its caches, any pending unsent entries, and its per-baby records. A small amount stays until you delete the app: your theme and unit choices, reminder settings, a few “you have seen this” flags, and — if you started setting Kora up but never finished — the unfinished draft containing the name and birthday you typed.

If you are the only owner of a baby you have shared with others, deleting your account deletes that baby’s data for everyone in that family, including caregivers. The app warns you of this before you confirm.

This is the only way to erase a baby’s record: there is no delete-this-baby anywhere in the app.

Deleting acts only for your own signed-in account. It deletes a baby that only you own — and with it that baby’s record for every member you invited — and keeps a baby that has another owner, for them.

Two small remainders we would rather disclose than hide: invitations you created for a baby that survives keep existing with your name removed, and your user identifier can remain attached to an entry you created in a family that continues without you.

You can also leave a family without deleting your account. If you do, that baby’s local data is removed from your phone.

Your child’s data

The person this app is about cannot consent, and we treat that seriously.

Kora holds a detailed, dated record of a named infant: their body, their feeding, their sleep, their illnesses and medicines, their milestones, and photographs of them including their face. Accounts are for adults only. You, as the baby’s parent, decide that this record exists and who can see it — and the adults you invite can add to it too, health entries included, and their notes may mention other adults. The owners decide who stays.

Kora has no account for a child, shows a child nothing, and markets nothing to a child. We never contact your child. The record exists to be useful to you and to your doctor, and to be deleted the moment you want it gone.

If you are an owner and someone should not have access, you can remove them in Family. If you believe a child’s data is here without a parent’s consent, write to the address below.

Your choices and rights

· See what Kora holds about your baby, in the app or by exporting it; ask us at the address below for anything else it holds about you; and correct anything by editing the entry.

· Delete any single entry, any photo, or your entire account — see Deleting everything above.

· Remove a family member’s access, if you are an owner.

· Turn off location by denying Kora location access, which affects only the weather — the Weather screen and Home’s Heads up card.

· Turn off every reminder, or all of them at once, in Settings.

· Turn off lock-screen cards for Kora in your iPhone’s Settings.

Depending on where you live, you may have further rights in law, including the right to object to processing or to complain to a data protection authority.

Kora is run from Switzerland, so Switzerland’s data protection law (the Federal Act on Data Protection) applies. You can complain to the Swiss Federal Data Protection and Information Commissioner.

If you live in the European Union, the EU’s General Data Protection Regulation (GDPR) applies as well, and you can also complain to the data protection authority where you live.

Changes to this policy

If what Kora does with your data changes, this page changes with it, and the date at the top is updated. If a change is significant — a new kind of data, a new company involved, anything that would surprise you — you will be told inside the app before it takes effect, not quietly.

Getting in touch

For anything at all — a question, a correction, a deletion request, or a concern about your child’s data — write to:

support@korababy.app

Marysol Longo, Postfach, 8600 Dübendorf 1, Switzerland, is responsible for this data.

We will reply as quickly as we can.