1. About this policy
This policy applies to consumer health data that WaveWorks processes through the Oh My Baby app, as defined by the Washington My Health My Data Act and similar state laws. It adds to the Oh My Baby Privacy Policy, which covers all other information. This policy takes effect on November 1, 2026.
WaveWorks treats every record the app sends to its server as consumer health data. That includes temperature, hospital and vaccine visits, stool color and texture, height, weight, head circumference, and also feeds, diapers, sleep, baths, solids, pumping, milestones and notes.
Records stay on your phone unless you turn on caregiver sharing or cloud backup. If you use neither, WaveWorks does not collect consumer health data.
2. Consumer health data we collect
| Category | Examples | When |
|---|---|---|
| Baby profile | Name, birthday, due date, name type, sex | Caregiver sharing or cloud backup is on |
| Care records | Feeds, diapers, sleep, baths, solids, pumping, milestones, solid food ingredients, notes | Caregiver sharing or cloud backup is on |
| Health-related records | Temperature, hospital and vaccine visits, stool color and texture, height, weight, head circumference | Caregiver sharing or cloud backup is on |
| Deletion marks | Record ID, deletion time, the anonymous ID of the device that deleted it | A shared or backed-up record is deleted |
To refresh the home-screen widget after another caregiver adds a record, the server sends a silent push message through Google Firebase Cloud Messaging to the devices in the family. The message carries only the widget's summary values (times and amounts of the last feed, sleep, diaper and bath, and today's totals) and the baby ID, never notes, photos or the baby's name. The device slot and its push token are deleted when the device leaves the family, ends sharing, or the family is closed.
The app does not send baby photos, app settings or ad consent to the server, and the ad, analytics and crash services do not receive any of these records.
3. Why we collect it and how we use it
- Showing the same baby and records on each caregiver's phone in your family.
- Restoring your records on a new phone or another device signed in to the same account.
- Deleting records that you delete, and stopping a deleted record from coming back on another phone.
We use consumer health data only for these purposes. We do not use it for ads, profiling or research.
4. Where we get it
- From you, when you enter records in the app.
- From the other caregivers you invite to your family, when they enter records.
5. Consent
Before caregiver sharing or cloud backup starts, the app asks for consent on a separate screen. For caregiver sharing, saving your baby's records on the server (collection) and showing them to the caregivers in your family (sharing) are separate checkboxes. Cloud backup only saves the records to your own account, so its consent screen has the collection checkbox only. No checkbox is pre-checked. The caregiver who creates the family, for sharing or for a new backup, also confirms being the baby's parent or legal guardian. The app keeps a record of the scopes you agreed to, the time and the wording version.
You can withdraw consent at any time with "Stop sharing" in Settings, or "Unlink and delete" under Settings > Backup. After you withdraw, the features on your phone keep working.
6. Who we share it with
| Recipient | Category of data | Why |
|---|---|---|
| Caregivers you invite to your family | All categories above | Caregiver sharing, which you choose to turn on |
| Google LLC (Firebase Authentication, Cloud Firestore, Cloud Functions, Cloud Logging, Firebase Cloud Messaging), as our processor | All categories above | Storing and syncing the records in the Seoul region, running the server functions, sending the silent widget update messages |
WaveWorks has no affiliates. We do not share consumer health data with any other third party. RevenueCat, AdMob, Firebase Analytics and Crashlytics do not receive these records.
7. We do not sell consumer health data
WaveWorks does not sell consumer health data and does not use it for ads.
8. Your rights
You have the right to:
- confirm whether we collect, share or sell your consumer health data, and see that data and the list of third parties and affiliates we share it with;
- withdraw your consent;
- have your consumer health data deleted, including from our processor.
In the app, "Unlink and delete" and "Delete account" delete your backup copy and account from the server right away. "Stop sharing" removes your phone from the family. The records you added stay for the other caregivers, and when the last caregiver stops sharing, the app deletes the family's records from the server. If you are still sharing, "Unlink and delete" also leaves the family records for the other caregivers. You can also email hongp0508@gmail.com. For a cloud backup account, write from the email address of the account you signed in with. If you only used caregiver sharing, tell us the baby's name and birthday and roughly when you started sharing so that we can find the family.
We usually reply within 10 days, as our Privacy Policy says. Under Washington law the limit is 45 days from receiving your request. If we need more time, we tell you within those 45 days, and we may take 45 more days when that is reasonably necessary. Deleted data stays in the recovery copy of our database for up to 7 days and is used only to recover from an operating error.
9. Appeals
If we refuse your request, we tell you why and how to appeal. To appeal, reply to that email with "Appeal" in the subject. We answer within 45 days and tell you what we did and why. If we deny your appeal, you can contact the Washington State Attorney General (https://www.atg.wa.gov/file-complaint) or the attorney general where you live.
10. Contact
| Item | Details |
|---|---|
| Company | WaveWorks |
| Privacy contact | Paul Hong |
| hongp0508@gmail.com |