Privacy Policy
Last updated: October 2026
Caasi is a baby tracking app published by Rayane Mehabli (contact: contact@caasi.app). It's built for one family: your data belongs to your family, not to us.
What we collect
- Account: your email address, through Sign in with Apple or Google, only to identify you.
- Family data: what you enter (your child's first name and date of birth, bottles, nursing sessions, pumping, sleep, diaper changes, measurements, milk stash, reminders, as well as meals, their foods and amounts, allergens and any reactions you note). This data concerns your child's health: it's used only to run the app, with your explicit consent.
- Crash reports: when the app crashes or hits an error, a technical report goes to Sentry: phone model, iOS and app versions, the place in the code at fault, the last screens visited. It contains neither your email, nor your child's first name, nor anything you log. It's used only to fix defects in the app.
- Anonymous usage stats: the app counts, anonymously, the screens visited, the sign-up steps completed, the errors encountered and feature usage (an entry was made, a recap was opened), never their content. These events go to PostHog, attached to a random identifier belonging to the app, renewed at least every 13 months, never to your account, with no IP address and no location. They're used only to produce statistics showing where the app gets stuck. You can turn them down at any time in Settings.
- Aggregate statistics: from family data we compute totals with no identifier at all (families signed up or active per day, entries by type and by hour, families still active week after week, features used, declared feeding method, baby's age at sign-up by bracket, subscriptions) to follow how the app evolves. Only these totals are consulted in PostHog.
What we do NOT do
- No advertising, no tracking from one app to another.
- No selling or sharing of data with third parties.
- Never the content of your log in a measurement tool.
- No comparison against medical norms.
Our processors
They process data on our behalf only, under contract:
- Supabase (European Union): hosting and syncing of family data.
- Apple and Google: signing in to your account.
- RevenueCat: purchases and subscription, with your account identifier, never family data. This purchase data is also analyzed in PostHog to follow subscriptions.
- Sentry (European Union): crash reports.
- PostHog (European Union): anonymous usage stats, aggregate statistics and subscription tracking.
Where your data lives
On your phone (local database) and on our servers hosted by Supabase in the European Union, so the two parents stay in sync. Only the members of your family can reach it.
Your rights (GDPR)
- Export: Settings → "Export our data" (JSON file).
- Deletion: Settings → "Delete my account" erases your data from our servers, immediately and permanently.
- Usage stats: Settings → Account & data → "Usage stats" turns them off (or back on) at any time.
- For anything else: contact@caasi.app. You can also lodge a complaint with your national data protection authority if you believe your rights haven't been respected. The publisher being established in France, the authority in charge is the CNIL.
How long we keep it
Your data is kept as long as your account exists, and deleted as soon as the account or the family is deleted. Crash reports and usage stats, both anonymous, erase themselves after a year at most.