Data handling

Your baby's data is yours.

Plain-language explanation of what we collect, what we don't, and why. Xoul is a personal organizer for your household — not a medical device and not a covered entity under HIPAA. Full legal text: Privacy Policy.

Our principles

Four commitments about data

Minimal collection

We collect only what Xoul needs to work: your household log entries, your account email, and anonymous usage analytics. We don't collect location, contacts, or browsing behavior.

No ad targeting

We run no ads. We don't share your data with ad networks or data brokers. We don't profile you for behavioral targeting. We charge a subscription because that's how we make money — not data.

No selling

We don't sell personal data — including infant feeding and sleep logs — to any third party. No exceptions. This isn't just a policy statement; it's why we chose the subscription model.

Local-first sync design

Log entries are stored on your device and synced to our servers only for multi-caregiver sharing. We designed the data model to minimize what needs to travel over the network.

Transparency

What we collect and why

Data typeWhy we collect itRetention
Household log entries (feeds, sleep, diapers, notes) Core product function — shared log across caregivers Until you delete, or 90 days after account deletion
Account email address Authentication and password reset Until account deletion
Baby name and age range Personalize sleep window estimates for age Until account deletion
Anonymous usage analytics Understand which features are used, improve the product 90 days aggregated, then deleted
Subscription status Determine which tier features to enable Until account deletion

Explicit non-practices

What we don't do with your data

No ads

We run no advertising on the website or in the app. Your log data is never passed to ad networks.

No data sale

We don't sell personal data. Not to data brokers, not to research aggregators, not to anyone.

No HIPAA claims

Xoul is a personal organizer, not a covered entity under HIPAA. We don't claim HIPAA compliance because we cannot — and false compliance claims would be worse than saying nothing.

Full legal text

Need the formal version?

This page is plain-language. The complete legal Privacy Policy governs your rights.

Read the Privacy Policy