Effective date: October 3, 2026
Bullet Baby is built around a simple rule: your information stays on your device. The app has no accounts, no sign-in, no analytics, no advertising, and no trackers of any kind.
None. Everything you enter in Bullet Baby — including your due date and your progress through the app — is stored on your device. It is never transmitted to us or to anyone else. Like any app on your phone, its data may be included in your device's own backup (Google Drive on Android, iCloud on iPhone); that backup belongs to you, is governed by Google's or Apple's terms, and never reaches us. If you delete the app, its data is removed from the device; a copy may remain in your own backup until that backup is replaced.
The one-time in-app purchase is processed entirely by Apple (App Store) or Google (Google Play) under their own privacy policies. We never receive your name, email address, or payment details.
Gift codes bought on this website are paid for through Stripe, our payment processor. You type your email address and card details into Stripe's checkout page, not ours, and Stripe handles them under its own privacy policy. Stripe also sends your receipt.
Your gift code appears on the thank-you page after checkout and in that receipt. To show it there, the thank-you page asks our gift server for the code using the checkout's reference number; the server sees nothing else beyond standard connection metadata, which we do not log or use to identify anyone. To put the code on your receipt, our gift server receives the email address you typed at checkout from Stripe and hands it straight back to Stripe as the receipt address. It never stores or logs that address.
What our gift server keeps about a gift is Stripe's reference numbers for the payment and the checkout, an irreversibly hashed form of the code, when it was bought, redeemed and last checked, which kind of phone (iPhone or Android) redeemed it, and whether the payment was refunded or disputed. It never keeps your email address, your name, your card details, or anything about the person you gave the code to. Stripe keeps its own record of the payment, including the receipt.
If you reach the site through a partner's link, the partner's nickname is attached to your purchase so we can pay them a commission. It says nothing about you, and it is the only thing that link adds.
The app makes two small network requests, and neither carries personal information or any device or account identifier.
The first is the trial clock. The 7-day trial counts its days on a trusted clock, not the phone's alone: at launch, and when the app returns to the foreground, it asks a time service what time it is — our own server first, or Cloudflare's public trace endpoint if ours does not answer. Nothing about you is sent or stored. If the request fails, the app keeps counting from the last time it confirmed.
The second is the optional gift feature. If you redeem a gift code, the app periodically confirms the gift is still valid with our server. That check sends no personal information and no device or account identifiers — the server sees only an anonymous, irreversibly hashed gift code and standard connection metadata, which we do not log or use to identify anyone.
While Bullet Baby is in beta testing (Google Play's testing program and Apple's TestFlight), the beta build also sends us anonymous usage counts and error reports so we can fix problems before release: the counts say which tools were opened or used, and how many times, by the hour; the error reports say what went wrong, with the app's own technical trace. Each report carries the phone's platform, the app's version and build number, the operating system version, and a random token the app makes up fresh each time it is opened and never saves, so two uses of the app cannot be tied together. It never carries anything you typed, your due date, names, how long anything lasted, or any identifier for you, your account, or your phone; email addresses and long numbers are blanked out of error traces before they are sent. This information is kept for 90 days and then deleted. Beta builds say so on the app's About screen. Release builds from the App Store or Google Play do not send any of it.
Weekly reminders are scheduled locally on your device. No notification data is sent to any server.
Bullet Baby is intended for adults (expectant parents). It does not knowingly collect information from anyone, children included — because it does not collect information at all.
Bullet Baby's content is educational and entertainment material for expectant parents. It is not medical advice. Always consult a qualified healthcare provider with questions about pregnancy.
If we ever change how the app handles data, we will update this page and the effective date above before the change takes effect.
Questions? Email support@bulletbaby.com.