MesBebes Privacy Policy

Effective date: October 4, 2026
Last updated: October 4, 2026

This Privacy Policy explains how Studios Anawim Inc. ("Studios Anawim," "MesBebes," "we," "us," or "our") collects, uses, discloses, retains, and protects personal information when you use mesbebes.app, the MesBebes progressive web application, and related services (collectively, the "Service").

MesBebes allows parents and other responsible adults to record information about a baby's care, growth, and memories, as well as certain information about a parent's wellbeing. Much of this information is sensitive. We are committed to handling it carefully and in accordance with applicable law.

1. Privacy Officer

Unless responsibility has been delegated in writing to another person, the person exercising the highest authority within Studios Anawim Inc. acts as the person in charge of the protection of personal information.

Privacy Officer
Studios Anawim Inc.
2000 rue Remembrance, Apt. 404
Montreal, Quebec H8S 0C9
Canada
contact@mesbebes.app

You may contact the Privacy Officer to exercise your rights, ask a question, or make a privacy complaint.

2. Scope and intended users

The Service is intended for people who have reached the age of majority where they live. It is not directed to children or teenagers seeking to create their own accounts.

A baby may be the subject of information entered into the Service but cannot be an account holder. A person who creates a baby profile represents that they are the baby's parent, legal guardian, or another person authorized to provide and manage that information.

This Policy applies to users in Canada and the United States. Where the Service is made available elsewhere, mandatory rights under local law continue to apply.

3. Information we collect

3.1 Account and authentication information

We may collect:

• your name, email address, language, country, and time zone;
• your password in a protected form managed by our authentication provider;
• identifiers associated with Google or Apple sign-in;
• account creation, login, and other account administration information.

We do not request a profile picture.

3.2 Baby information

Depending on the features you use, you may provide:

• name, photograph, date of birth, sex or gender, and gestational age;
• weight, height, and head circumference;
• breastfeeding, bottle feeds, quantities, sleep, diapers, urine, and bowel movements;
• reflux, spit-up, hiccups, symptoms, medications, medical notes, and other care events;
• milestones, activities, challenges, and free-text journal entries.

3.3 Parent information

You may provide information about:

• mood and energy;
• pumping;
• medicines, vitamins, and supplements;
• blood pressure;
• pregnancy, postpartum, health, and wellbeing;
• free-text notes.

3.4 Content and communications

We collect content you choose to enter into the Service, including journal entries and notes. The journal currently accepts text only.

If you contact us, we may keep your message, email address, materials you voluntarily provide, and information needed to respond, process feedback, or diagnose an issue.

3.5 Technical and usage information

When you use the Service, we or our providers may automatically collect:

• IP address and approximate information inferred from it;
• device type, browser, operating system, and application version;
• technical identifiers, server logs, and security events;
• pages and features used, interactions, dates, and approximate session duration;
• errors, diagnostics, crash reports, and performance data;
• notification tokens if that feature is enabled.

MesBebes does not currently request access to precise location, contacts, calendar, microphone, Bluetooth, HealthKit, Health Connect, or wearable devices. If a future feature requires new access, we will provide notice and request required permissions before enabling it.

3.6 Payments and subscriptions

Payments are processed by RevenueCat and Stripe. We receive transaction and subscription information such as subscription status, plan, amount, currency, billing dates, a transaction identifier, and limited billing information. Studios Anawim does not receive or store your complete payment card number.

3.7 Sources

Most information is entered manually by you. We may also receive limited information from Google or Apple when you use their sign-in service and from RevenueCat and Stripe to administer purchases and subscriptions.

4. Sensitive information and consent

Information about health, wellbeing, medicines, blood pressure, growth, a baby's care routines, and medical notes may be sensitive.

Where express consent is required by law, MesBebes presents a clear and separate request before you provide that information. You may decline, but the relevant features will not be available. You may withdraw consent for future processing by stopping use of the feature, deleting the information, or contacting us. Withdrawal does not invalidate processing already lawfully completed and may prevent us from providing some or all of the Service.

You must provide information about another person only if you are authorized to do so.

5. How we use information

We use personal information as necessary to:

• create, authenticate, secure, and administer accounts;
• provide, synchronize, and personalize the Service;
• display requested histories, summaries, charts, and journals;
• create and download PDF reports;
• manage trials, subscriptions, promotions, payments, and access rights;
• send account confirmations, password resets, and other transactional communications;
• provide support, respond to requests, and resolve issues;
• measure use, diagnose errors, and improve reliability, security, and features;
• create aggregated statistics or de-identified information for internal research and product development as permitted by law;
• prevent fraud, abuse, unauthorized access, and security incidents;
• comply with legal obligations, enforce agreements, and establish, exercise, or defend legal rights.

We do not use user information to train artificial intelligence models. We do not currently use artificial intelligence to analyze journals, health information, photos, or care data.

6. Cookies, local storage, and analytics

The website and application may use cookies, local storage, and similar technologies to:

• maintain sessions and security;
• remember preferences;
• cache content and improve performance;
• understand general Service use and diagnose issues through Lovable analytics tools.

We do not use these technologies for targeted advertising. Where required by law, non-essential technologies are activated only after consent. You may change or withdraw choices through available privacy controls and browser settings. Blocking essential technologies may prevent the Service from working properly.

7. Communications and marketing

We may send communications necessary to operate the Service, such as account confirmations, security alerts, receipts, and password resets.

We send promotional messages only when we have the required consent. If marketing email is introduced, it may be delivered through Resend or a comparable provider. Each promotional email will include an unsubscribe method. Withdrawing marketing consent does not prevent strictly transactional communications.

8. When we disclose information

We do not sell or rent personal information. We do not disclose it to data brokers or advertisers, and we do not use it for targeted advertising.

We may disclose information to the following categories of providers:

Providers may use information only to provide their services, subject to their contracts and applicable law.

We may also disclose information:

• when required by law, court order, or valid legal process;
• to protect the rights, safety, or property of a user, child, Studios Anawim, or the public;
• to investigate fraud, abuse, or a security incident;
• in connection with restructuring, financing, merger, acquisition, or asset sale, subject to confidentiality safeguards and legal requirements;
• with your permission or at your direction.

MesBebes does not send your information directly to a doctor. When you generate and share a PDF, you choose the recipient and are responsible for verifying its contents before sharing.

9. Processing outside Quebec and Canada

MesBebes uses a Supabase region located in the United States. Other providers, including RevenueCat, Stripe, Lovable, Google, and Apple, may process information in the United States or other countries where they or their subprocessors operate.

The laws in those locations may permit lawful access by public authorities. Before entrusting personal information to a provider outside Quebec, Studios Anawim assesses privacy factors as required by law and puts appropriate contractual, technical, and organizational safeguards in place.

10. Retention and deletion

We retain information only as long as necessary for the purposes described in this Policy, unless a longer period is required or permitted by law.

In general:

• account, baby, parent, and journal data is retained while the account is active;
• a verified account deletion request is completed within no more than 30 days;
• residual copies in encrypted backups may remain for up to 30 additional days and will not be returned to production except to restore the system after a disaster;
• transaction and tax records may be retained for the period required by law;
• support requests, security logs, analytics, and diagnostics are retained for a period proportionate to their purpose and then deleted or anonymized in accordance with law.

We may retain a limited record where necessary to comply with law, prevent fraud, resolve a dispute, or establish, exercise, or defend legal rights.

You may delete an individual baby profile without deleting your account. Once sharing is available, removing a caregiver will end that person's access, subject to copies they may previously have lawfully exported.

11. Security

We use safeguards appropriate to the sensitivity of the information, including encryption in transit, encryption at rest provided by our hosting services, Supabase row-level security policies, and restricted access controls.

No transmission or storage method is perfectly secure. You should use a unique password, protect your devices, sign out of shared devices, and promptly report unauthorized use.

If a privacy incident creates a risk of serious harm or triggers another legal duty, we will take reasonable steps to reduce the risk and notify affected individuals and authorities as required by law.

12. Your choices and rights

Depending on where you live, you may have the right to:

• know what information we hold and how we use it;
• access information and receive a copy;
• correct inaccurate or incomplete information;
• request portability of certain information in a structured, commonly used technological format;
• withdraw consent for future processing;
• request deletion of information or an account;
• object to or request restriction of certain processing;
• opt out of sale, sharing for cross-context behavioural advertising, or targeted advertising. MesBebes does not engage in these activities;
• complain to a competent regulator and not be discriminated against for exercising a right.

You can edit or delete much of your information within the Service. PDF export remains available when an account has restricted access. For another request, email contact@mesbebes.app.

We may verify your identity and authority before responding. Where permitted, an authorized agent may submit a request for you. We will respond within the period required by law and explain any applicable restriction.

13. Children's information

The Service is not directed to minors, and we do not knowingly collect information directly from them. Information about a baby is provided and managed by an authorized adult.

If we learn that a minor created an account without valid authorization, we may suspend the account and delete information in accordance with law. Contact us if you believe an account was created improperly or someone provided information about a child without authority.

14. Third-party links and services

The Service may link to websites or services operated by others. Their practices are governed by their own policies. Review them before providing information.

15. Changes to this Policy

We may update this Policy to reflect changes to the Service, our practices, or law. We will post the updated version and its effective date. If a change is material, we will provide additional notice where required and obtain renewed consent where required.

16. Contact and complaints

For questions, requests, or complaints:

Privacy Officer
Studios Anawim Inc.
2000 rue Remembrance, Apt. 404
Montreal, Quebec H8S 0C9
Canada
contact@mesbebes.app

We will consider your request fairly. You may also contact the Commission d'accès à l'information du Québec, the Office of the Privacy Commissioner of Canada, or the competent authority where you live.