Fraya Privacy Policy

Version 1.0. Effective October 23, 2026.

This policy explains what information Fraya collects, where it is kept, who can see it, and what you can do about it. Fraya is offered in the United States. If you use it from somewhere else, your data is still handled as described here.

1. Who we are

Fraya is made by Fraya LLC, an Illinois limited liability company. You can reach us at support@fraya.app.

This policy covers the Fraya app and the website at fraya.app and baby.fraya.app, including the page that completes sign-in links.

You must be 18 or over to create a Fraya account.

2. What we collect

Fraya is a tracking app. Most of what it holds is what you and your family type or tap into it. Some of that is health information about your baby, and some is health information about you. We treat all of it as sensitive.

About you

• Account. Your email address, your password (we never see it in plain text; our sign-in provider stores it in hashed form), and an account ID.
• Name. The name you give at sign-up or in your profile. If you give none, we use the part of your email before the @ sign.
• Sign-in provider. If you sign in with Google, we receive your Google account email and basic profile. If you sign in with Apple, we receive your email (or an Apple relay address if you hide your email); the name Apple offers on first sign-in is not read or stored, so your display name is the part of your email before the @ sign unless you set one. We use only the email and the name you set.
• Your relationship to the baby. The label you choose, such as mom, dad, grandparent or nanny.
• Your own feeding entries. Breastfeeding sessions (side and duration) and pumping sessions (amount, duration, side and pump type). This is health information about you.
• Subscription status. Whether your family has Premium, which plan, which store, and when the period ends. We do not receive your card details; the app store you bought through handles payment.
• Support emails. If you email us, we receive what you send plus the app version and the time the app last synced. Nothing from your log is attached.

About your baby

• Profile. Name, date of birth, sex, and a profile photo if you add one.
• Feeds. Bottle volumes, duration, milk type (breast, formula, mixed, donor or other) and any note on the milk.
• Sleep. Start and end times, naps and night sleep.
• Diapers. Type, wet and dirty amounts, stool color and consistency, blowouts and diaper rash.
• Solids. Foods tried, including allergens, whether there was a reaction, how severe it was, and any notes on the reaction. Custom foods you add, with an optional photo.
• Play and Care. Tummy time and other activities, with duration and activity type.
• Milestones. Which developmental milestones you mark as reached, not yet or skipped, with any notes.
• Memories. Photos and notes you save, with a title and description.
• Free-text notes on feeds, sleep, pumping, play and solids.
• Who logged what. Every entry records which caregiver made it.

Much of this is health information about your child. Free-text notes and reaction notes are not private to you: they sync to our cloud database and to every caregiver in your family, like every other entry.

Technical data

• Install ID. A random ID the app makes on your device. It is sent with each sync so we can tell devices apart. We log it; we do not store it with your records.
• Crash reports. If the app crashes, a report goes to our crash-reporting service with the error, the app version, your device model and operating system, and a short trail of what the app did just before the crash. That trail can include web addresses that contain your family, baby and entry IDs. It does not include what you write in your entries.
• Usage telemetry. The app records the network calls it makes (address, method, result and timing, but never the body of a request), page-load performance, errors, and whether you open or rate a Help article. The telemetry service also records an anonymous session ID, your device type, operating system, browser engine, screen size, and your IP address, which it uses to estimate your approximate location (country and city) and then masks by default. That approximate location is kept with the telemetry for 30 days.
• Server logs. Our servers log request IDs, your account ID, your family ID, baby and entry IDs, the install ID, and errors. Email addresses in server logs are masked. Your baby's name and invitation codes are not logged.
• Sign-in records. Our sign-in provider keeps its own log of sign-ins, which can include your IP address and device details.

If you join the waitlist

Before Fraya is in the App Store, fraya.app lets you leave your email address to hear when it launches. If you do, we collect that email address and the time you joined. We do not ask for a name or anything about your baby, and no account is made. Like any website you send a form to, Loops also receives your IP address and browser details when the form is sent. The address goes to Loops, the service that sends our launch email (section 5). It is not linked to a Fraya account, even if you later sign up with the same address. Every email we send you has an unsubscribe link, and you can also ask us to remove you (section 13).

What we do not collect: your precise location (the app never asks for it, and location data is stripped from photos), your contacts, an advertising identifier, your time zone, or push-notification tokens. Reminders are scheduled on your device and never leave it. Your preferences (units, background, entry modes) stay on your device.

3. Where your data lives

• On your device. The whole log is kept in a database file on your phone. Device backups (such as iCloud or computer backups) normally include it, so your backups may contain your Fraya data. Photos you have viewed are also cached on the device.
• In our cloud database. A copy of the log syncs to our database, which runs on Microsoft Azure in the Central US region of the United States.
• Photos. Baby profile photos, memory photos and custom-food photos are stored in Supabase Storage in the United States (Amazon Web Services, US East region).
• Sign-in records. Your email, hashed password, name and Google or Apple identity are held by Supabase Auth in the United States (Amazon Web Services, US East region).
• Waitlist. If you joined the waitlist, your email address is held by Loops in the United States.

The family is the sharing unit. Everything about a baby belongs to a family, and everyone in that family can see it. You can belong to more than one family.

4. Why we use your data

We use your data to run Fraya and for nothing else:

• Providing the service. Storing your log, syncing it between your devices and your family, showing summaries and insights, making the doctor report PDF, signing you in, and sending sign-in and password-reset emails.
• Running subscriptions. Checking with the app store and our subscription service whether your family has Premium, and turning features on or off.
• Keeping the app working. Crash reports and usage telemetry so we can find and fix faults.
• Security. Checking family membership on every request, limiting sync rates, and keeping short-lived server logs.
• Legal obligations. Responding to lawful requests and keeping records the law requires.
• The launch email. If you joined the waitlist, telling you when Fraya is in the App Store.

Insights, Today's Progress and reminders are worked out on your device from your own baby's entries. They never compare your baby with other babies.

We do not sell your data. We do not use it for advertising.

5. Who we share with

Service providers

These companies process data on our behalf so Fraya can work. Each is bound by a written agreement to protect your data to at least the standard described in this policy and to use it only to provide its service to us.

Other caregivers in your family

When you are in a family, every other member can see:

• every baby in the family and every entry, photo, note and milestone, including everything logged before they joined;
• your name, your email address, your relationship label, and when you joined;
• pending invitations, including the invited person's email and the invitation code;
• whether the family has Premium.

People you send a report to

The doctor report PDF contains your baby's name, date of birth, entries, notes and, if you choose, caregiver names. It is made on your device. When you share it, it goes wherever you send it, and we have no control over it after that.

No one else

We do not share your data with anyone else. We do not email invitations: when you invite a caregiver, the app gives you a code to pass on yourself. Our sign-in provider sends sign-up codes and password-reset emails on our behalf. We would disclose data if the law required it, and we would tell you first unless the law prevented that.

6. Caregiver sharing

• Only the family owner can invite or remove caregivers. Inviting needs Premium.
• An invitation is a 6-character code that expires after 7 days and can be used once. Anyone who is signed in to Fraya and enters a valid code can join, whatever email they use. Before joining, they see the owner's name and each baby's name and date of birth. Share codes carefully.
• Once in, a caregiver sees everything in section 5. Any member, not just the owner, can add, edit and delete any entry, whoever logged it. Only the owner can delete a baby.
• The owner can remove a caregiver. From then on, that person's device cannot reach the family's data on our servers, and the family disappears from their app the next time it checks with our servers. The copy already on their phone is not erased remotely and stays there until they remove the app.
• After removal, we keep the removed caregiver's name and email on the membership record, and entries they logged stay in the log. The doctor report shows them as "Another caregiver".
• There is currently no way to leave a family while keeping your account, or to transfer ownership. Email us if you need either.
• A caregiver can delete their own account at any time (section 8). That removes their login, their membership and their name and email from the family. The entries they logged stay in the family's log.

7. How long we keep data

• Your log. For as long as your family exists, or until you delete it.
• Entries you delete. They are hidden on every device and in the cloud, but kept as deletion markers that still contain the entry's content. The markers are kept until the family is deleted.
• Invitation records. 7 days, then removed automatically, whether accepted, revoked or expired.
• Subscription webhook records. 90 days.
• Server logs and usage telemetry. 30 days.
• Crash reports. Up to 90 days.
• Sign-in records. Until you delete your account.
• Waitlist addresses. Until you unsubscribe, or until we close the waitlist after launch, whichever comes first.
• Subscription record at RevenueCat. Kept by RevenueCat under your account ID. It is not deleted with your account; email us and we will ask RevenueCat to delete it.
• Cloud backups. No longer than 30 days.
• On your device. The database file and cached photos stay on your device until you delete your account or delete the app. Signing out does not remove them.

8. Your choices and rights

Your health information, and stopping

Fraya records health information about your baby and you because that is the service you ask for when you create an account and add a baby: a log that you and the caregivers in your family can see. We use the service providers in section 5 to run it. You can stop at any time. Delete a baby's log, or delete your account (below). Or email us at support@fraya.app to withdraw your consent; because the log is the service, we will then delete your account and the data in it as described below, and confirm when it is done.

Delete your account

Go to Profile, scroll to the bottom, tap Delete account and type DELETE to confirm. You need an internet connection. Deletion is immediate and cannot be undone.

• If you own a family, deleting your account permanently deletes every family you own, for every caregiver in it: every baby, entry, photo and memory, including what the caregivers logged themselves. Their copies stop syncing and the family disappears from their app. What is already stored on their phones is not erased remotely.
• If you are a caregiver in someone else's family, deleting your account removes your login and your membership. Your name, email and relationship are removed from the family; the entries you logged, and photos you added to that family, stay in its log.
• Photos you uploaded that no longer belong to any family are removed.
• A bare record of each deleted family, containing no personal data, is kept so that another device cannot re-create the family.
• The log is wiped from the device you delete from. If you used Fraya on other devices, delete the app there too.
• If you signed in with Apple, that authorization is revoked.
• Deleting your account does not cancel an active subscription. Manage that in your app store's subscription settings.
• Some things are not removed straight away. Our subscription provider keeps its record of your purchases under an account ID. Server logs and crash reports that mention your account ID expire on the periods in section 7. Backups are not edited; they expire on the period in section 7, and in any case your data is gone from them within six months of your request.

Delete a baby

The family owner can delete a baby. The baby and every entry for them are hidden on every device in the family and cannot be restored. The baby's profile photo and memory photos are removed from storage from the deleting device where it can reach the internet. The baby's milestone records are removed from the device you delete from, but today they stay in our cloud database, and on other caregivers' devices, until the family is deleted.

Delete a photo

Deleting a memory removes its photo from storage and then hides the entry. If your device is offline at the time, the entry is hidden but the photo file may remain in storage.

Get a copy of your data

You can create a doctor report PDF from Profile at any time. It covers one baby for a chosen range of days (longer ranges need Premium). There is no full data export in the app today. For a complete copy of the data we hold about you and your family, email support@fraya.app from the address on your account and we will discuss what we can provide.

Access, correction and deletion for everyone

Whichever state you live in, you can ask us to confirm what data we hold about you, to correct it, to delete it, or to tell you who we have shared it with. Email support@fraya.app from the address on your account. We will verify that the request comes from you, and reply within 45 days. If we need longer, we will tell you within those 45 days and take no more than 45 days more. Requests are free up to twice a year. If we refuse a request, we will tell you why and how to appeal.

Washington and Nevada residents

Our separate Consumer Health Data Privacy Policy at fraya.app/privacy/health describes your rights over consumer health data, including how to appeal and how to contact your state Attorney General.

Connecticut residents

You have the rights listed under "Access, correction and deletion for everyone" and the right to receive your data in a portable form. If we refuse a request, you can appeal by emailing support@fraya.app with "Appeal" in the subject line; we will answer in writing within 60 days, and if we deny the appeal we will tell you how to contact the Connecticut Attorney General. If you ask for a portable copy, we will send the data we hold about you in a machine-readable format. We do not sell personal data and do not use it for targeted advertising, so there is nothing to opt out of.

Other states

We do not sell personal data, do not use it for targeted advertising, and do not profile you. The rights above are offered to everyone, so there is nothing state-specific you need to do.

9. Children

Fraya is for adults aged 18 and over. It holds information about children because their parents and caregivers choose to record it. We do not knowingly let anyone under 18 create an account. If you believe a child has created one, email us and we will remove it.

10. Security

• Connections between the app and our servers use HTTPS.
• Photos are kept in a private storage bucket. The app reads them through links that work for one hour.
• Location data and other hidden metadata are stripped from photos on your device before upload.
• Our servers check that you are a member of the family on every request before returning or changing anything.

Fraya does not add its own encryption to the log on your device or to photos; it relies on your device's protections and on the default protections of our cloud providers. No system is completely secure, and we cannot promise that yours will never be breached.

11. If there is a breach

If a breach affects your data, we will tell you and the regulators the law requires. Under the US Federal Trade Commission's Health Breach Notification Rule, we will notify affected people without unreasonable delay and no later than 60 days after we discover the breach. State breach-notification laws may require faster notice; we will follow the shortest period that applies to you.

12. Changes to this policy

We may update this policy. If the change is material, we will tell you in the app before it takes effect and, where the law requires, ask for your consent again before using your data in a new way. The version and effective date at the top show which version you are reading. Earlier versions are available on request.

13. Contact

Fraya LLC support@fraya.app