Privacy policy — Breastmilk Stock

Last updated: November 2, 2026

This privacy policy applies to the mobile app "Breastmilk Stock" (Google Play and App Store name "Breastmilk Stock: Pump & Stash", package name com.appkickstarter.breastmilkstock), called "the App" below.

The App is developed and published by Louis Duboscq, an independent developer (developer name on Google Play: "Louis Duboscq"; website: appkickstarter.com). Louis Duboscq is the data controller for the data described in this policy.

Contact: hey@appkickstarter.com

1. Summary

2. Data stored only on your device

The following data is stored in the App's local database on your phone. Unless you turn on the cloud backup (section 3 g), it never leaves your device, we cannot access it, and it is not backed up to our servers:

• Your milk containers: volume, pumping date and time, storage place (fridge, freezer, daycare), use-by date, labels, and what was drunk or thrown away.
• Your storage rules (fridge, freezer and thawed durations), which you choose yourself.
• Your daycare and care schedule, feeding rhythm and the first names you give to your children, if any.
• Your settings, alerts and trophies.

Images you create in the Share feature are generated on your phone. They are only saved to your photos or shared when you choose to do so, through the sharing app you pick.

Deleting the App deletes all of this data from your phone (and only from your phone: a cloud backup, if you made one, stays until you delete it, see section 6).

3. Data that leaves your device

a) Adding containers by voice (AI) — only when you use it

Speech is turned into text on your phone; the audio is never sent. When you dictate new containers (for example "three bags of 90 ml from this morning in the freezer"), that text and today's date are sent to a server function of ours hosted with Supabase (Supabase, Inc.), which asks an AI service (OpenAI) to turn it into containers. Nothing else from your stock is sent, and the text is not stored by us: we only count requests per installation, with an anonymous identifier, to prevent abuse. Avoid saying information you would not want to send. Dictating stock movements (drunk, thrown away, taken to daycare) is understood on your phone and sends nothing.

b) Purchases — when Premium is offered

Subscriptions and purchases are processed by Google Play or the App Store; we never see your payment details. To check your Premium status, the App uses RevenueCat (RevenueCat, Inc.), which receives an anonymous app user ID and your purchase history (product, dates, renewal status). Purpose: unlocking Premium and restoring purchases. If you installed the App from an Apple Ads advertisement (App Store search ads), RevenueCat also receives from Apple which ad campaign and keyword led to the install (Apple's standard attribution data, iOS only). No advertising identifier is used and nothing is used to track you across other companies' apps or websites. Purpose: measuring our own ads. On Android, if you installed the App from one of our ad links (for example an ad on Reddit), the App reads once, from Google Play, the campaign name we wrote in that link (for example "reddit / rd_and_us_core / a2"; "google-play / organic" when there was no ad link) and sends it to RevenueCat and with the usage statistics below. It is a label of our own link, not an identifier: no advertising identifier is used and nothing is sent back to the ad network. It follows the usage statistics switch (Settings > What is sent): when they are off, the App does not read it. Purpose: measuring our own ads.

c) Ideas & bugs board — only what you post

If you post or vote on the Ideas & bugs board, the App sends the text you write, your votes, an anonymous random device identifier, the App version, your platform and language, and your email address only if you choose to enter it (it is never shown publicly and only used to reply to you). Requests can be shown to other users of the App. They are stored with Supabase (Supabase, Inc.), and their text may be translated into other languages by an AI service (OpenAI) so other users can read them: a server function of ours, hosted with Supabase, reads the request, has it translated and keeps the translation on the board. Do not include personal or health information in your posts.

d) Cancellation survey — only what you answer

If you cancel your subscription from inside the App, you can tell us why. The reason you pick, the optional comment you write, the App, your platform, store and language are stored anonymously with Supabase to improve the App.

e) Usage statistics — anonymous, on by default, you can turn them off

Usage statistics and crash reports are on by default, without a question at launch: you can turn them off at any time in Settings > What is sent. If you said no in an earlier version of the App, that choice is kept. Unless you turn them off, the App sends to PostHog (PostHog Inc., EU cloud, servers in the European Union): the steps you go through (for example the welcome video watched, the Premium screen viewed or closed and the plan chosen, "milk added" with fridge or freezer, the ad campaign of the install on Android as described in b) — never a volume, a date, a note or anything about your baby), when the App is opened or put in the background, a random identifier created on your phone (replaced after 13 months at most), the App version, your phone model and operating system, language and time zone, the type of network (Wi-Fi or mobile, and the carrier name). PostHog also works out your country from your internet address when the statistics arrive; only the country is kept, not the address, region or city. There is no account, no profile and no screen recording, and this data is not linked to your name or email. Purpose: understanding which features and screens help, to improve the App. Retention: up to 1 year.

We do not use any advertising SDK, we do not track you across apps or websites, and we do not sell or share personal data with data brokers or advertisers.

f) Crash reports — on by default, you can turn them off

As for usage statistics (see e) above), you can turn crash reports off at any time in Settings > What is sent. Unless you turn them off, the App sends anonymous technical data to Sentry (Functional Software, Inc., sentry.io), our crash reporting provider: the error and where it happened, phone model, operating system and App version, the screens used just before the problem (their names only, never their content), how fast the App starts, and when it opens and closes. It never includes your stock, volumes, dates, notes, places or your baby's name. Purpose: finding and fixing bugs. Retention: up to 90 days.

g) Cloud backup and account — only if you turn it on

The backup is optional and off by default. If you turn it on (Settings > Backup), you create an account with your email address: we email you a 6-digit code to sign in, there is no password. The App then sends, after each change and when it starts: your containers (volume, dates, storage place, use-by date, notes, numbers), what was drunk or thrown away and by which child, the first names of your children, your storage rules, alert, daycare and care schedule settings, your trophies and date formats, and the kind of device ("Android" or "iPhone"). It never sends your baby's age, your location or your contacts. This data and your email address are stored with Supabase (Supabase, Inc.), our hosting provider, linked to your account; only you can read your backup (each account can only read and write its own backup, also when calling the server directly). Purpose: restoring your data on a new phone, after reinstalling the App, or from iPhone to Android. We do not use it for anything else and never share it. You can delete your backup and your account at any time (section 6). While you share your stock with your partner (h) below), automatic backups pause: the shared stock is kept with Supabase instead.

h) Sharing your stock with your partner — only if you turn it on

Partner access is optional and off by default. If you invite your partner, or join with the invitation code they share with you (Settings > Partner access), both of you sign in with an email address (see g) above) and the App sends, after each change: your containers (volume, dates, storage place, use-by date, notes, numbers), what was drunk or thrown away and by which child, the first names of your children, and your storage rules, care schedule and daycare settings. This data is stored with Supabase (Supabase, Inc.), and the other member of your household can see and change it from their own phone; your partner also sees the email address you signed in with. Nobody else can read it (each account can only read the households it belongs to, also when calling the server directly). The invitation code works once and for 48 hours. Your unit, alert and display settings stay on each phone. To check one shared subscription for both phones, RevenueCat receives the household's random identifier instead of the one of your installation (see b) above). Purpose: one stock for two parents. Stop sharing at any time (Settings > Partner access > Leave the household, or remove your partner): each phone keeps its copy of the stock; when the last member leaves, the household and all its data are deleted from our servers.

4. Device permissions

• Microphone and speech recognition: to dictate containers and stock movements. The audio stays on your phone (see section 3 a for the text of new containers).
• Photos: to save the images you create in the Share feature, when you ask.
• Notifications: for the use-by and daycare alerts you turn on. Alerts are scheduled on your phone; no data is sent.
• Internet: only for the cases in section 3.

5. Legal bases (GDPR)

• Data stored on your device: not processed by us.
• Adding containers by voice: your request (you start the dictation).
• Purchases: performance of the contract (your subscription).
• Cloud backup and account: performance of the service you ask for when you turn it on, and your explicit consent for the health-related data it contains (the milk your baby drank).
• Sharing with your partner: performance of the service you ask for when you invite or join, and your explicit consent for the health-related data it contains.
• Ideas & bugs board, cancellation survey: your consent when you choose to send them, and our legitimate interest in improving the App.
• Crash reports: our legitimate interest in finding and fixing bugs (Article 6(1)(f) GDPR). You can object at any time by turning them off in the App.
• Usage statistics: anonymous measurement of how the App is used, limited to what is needed to improve it, which the French data protection authority allows without prior consent (CNIL guidelines on audience measurement: anonymous statistics for this App only, no profile, identifier replaced after 13 months at most, kept up to 1 year); legal basis: our legitimate interest in improving the App (Article 6(1)(f) GDPR). You can object at any time by turning them off in the App.

Data sent to our providers may be processed outside the European Union (in particular in the United States), under the safeguards those providers offer (such as Standard Contractual Clauses).

6. Retention and your rights

Data on your device stays there until you delete it or the App. Dictated text is not kept by us after it is turned into containers. Crash reports are kept up to 90 days, usage statistics up to 1 year. Board posts and survey answers are kept as long as the board or the App exists, unless you ask us to delete them. Your cloud backup and your account are kept until you delete them; only the latest backup is kept (each new one replaces the previous one). A shared stock is kept as long as the household has a member; it is deleted when the last member leaves.

Deleting your backup and your account: in the App, Settings > Backup > Delete my backup. This deletes your backup and your account (email address) from our servers right away; the data on your phone stays. If you no longer have the App, follow https://appkickstarter.com/apps/breastmilk-stock/delete-account.html or write to hey@appkickstarter.com from the email address of your account: we delete them within 30 days. Signing out (Settings > Backup > Sign out) only stops the backups on that phone.

You can ask to access, correct or delete the data described in section 3 (for example your board posts or the email you gave), or object to its processing, by writing to hey@appkickstarter.com. Without an account we only have anonymous identifiers, so tell us the text of your post or the email you used so we can find it; with a backup account, write from its email address. You can also complain to your data protection authority (in France: the CNIL).

7. Children

The App is used by parents. It is not directed to children and we do not knowingly collect data from children. The App never asks for your baby's age.

8. Not a medical app

The App is a stock tracking tool. It does not give storage durations, quantities or medical advice: you choose your own storage rules. Always follow the guidance of your healthcare professional and your daycare.

9. Changes to this policy

We may update this policy, for example when the App starts sending something new. The date at the top shows the latest version, and important changes are announced in the App.

10. Contact

Louis Duboscq — Breastmilk Stock
Email: hey@appkickstarter.com