Privacy Policy

Wren is made by Night Owl Software Studios ("we").

The short version

Wren is a baby tracker that keeps its record on your phone. There is no account. We don't run ads, analytics, crash reporting or tracking of any kind, and we don't sell or share anything about you or your child. While you use Wren on its own, the app makes no network requests to us at all. If you turn on sharing with other phones (Wren Household), your updates and photos travel between your phones through our relay, locked so that only your phones can open them, and the relay deletes them once they're delivered.

What Wren keeps on your phone

Everything you enter stays in Wren's own storage on your phone:

• your child's name, birth date, and sex (asked only so the growth curves are the right ones);
• what you log: feeds, bottles and formula brands, pumping, solids and foods, sleep, diapers and potty training, weight, length and head size, temperatures, symptoms (and any symptom names you add), illnesses, medicines and supplements, vaccines, pediatrician visits and your questions, the skills checklist, notes;
• your child's allergies and conditions, with your notes and any words you add to their lists;
• your child's pediatrician and clinic, as you enter them: names, phone numbers, the clinic's address and its hours;
• Moments: the titles, captions and photos you keep;
• the names you give the people you share with, each caregiver's own name and photo if they set one, and your settings.

If you use Wren on an Apple Watch or a Wear OS watch, the watch keeps a small copy of today (the last feed, a running timer) for its face and quick logs. An import reads only the file you choose, on your phone.

A photo you keep is stored as your phone handed it to Wren, which can include where it was taken, so your own export is complete. Wren reads the time it was taken from the photo, on your phone, to date the moment. Wren shows the photo to you and to your other phones without the location, and anything you share from Wren leaves without it.

We can't see any of this. It isn't on our servers, and your phone's own backup (iCloud, Google) leaves Wren out, so it doesn't land in a cloud you didn't choose.

What leaves your phone, and when

Nothing leaves unless you send it:

• Export everything: one file with every entry, and every photo as your phone gave it to Wren (so a photo's location comes too), saved or shared where you choose. Anyone who has the file can read it.
• Wren's backup: one file, locked with 8 words only you have, saved in a folder you choose. If that folder is one your phone keeps in a cloud service (Google Drive, iCloud Drive), that service's own terms apply to the file it holds; it can't open it without your 8 words.
• Sharing a moment, a calendar entry or the PDF for the pediatrician: handed to the app you pick, at the moment you pick it.
• Calling or finding the clinic: a call hands the number to your phone app, and "open in maps" hands the clinic's address to your maps app, only when you tap them.
• A source's "read it": on an allergy or condition, "read it" opens its source's page in your phone's browser. Wren itself fetches nothing.
• The diagnostic report: shown to you in full first. It describes how Wren is set up and counts entries, but never says what they are (no names, birthdays, notes or photos). It leaves only if you send it: Email it to Wren opens your own mail app with the report filled in, and nothing goes until you press send there; or share it anywhere else you choose.

When you share with other phones (Wren Household)

Sharing is off until you add someone in Caregivers or join someone else's Wren. When it's on, your phones send each other their updates and photos through Wren's relay, run for us by Cloudflare. Everything is end-to-end encrypted with a key only your phones hold.

The relay deletes each update once every phone has it, each photo once every phone it went to has it, and anything still undelivered after 30 days. The hosting platform's own encrypted copies expire within 30 days. A phone that stays silent for 30 days is dropped from the household.

What the relay sees:

• your phones' internet addresses, and when they connect;
• a scrambled household number, each phone's public key, how many phones there are, and when each was last seen, to the hour;
• roughly how big each update is, and how big an invitation or a first copy of the records is;
• how many photos go between your phones, how big each is, and when;
• until when the household is paid for.

What the relay never sees: names, entries, notes or photos; the key that locks them, or the household number itself; who your caregivers are; any email, phone number or account. We keep no logs of what passes through, and no accounts.

Removing a phone, or leaving the household, stops sharing with it. Each phone keeps what it already has.

Purchases

Wren Household is sold through the App Store or Google Play, which handle payment under their own privacy policies. We never see your card or payment details. The store keeps a scrambled household number with the purchase, so it unlocks only your household. While a phone checks its purchase, Wren's purchase check, run for us on Cloudflare and Fly.io, sees the purchase reference, the store's answer and the phone's internet address, and keeps none of them.

When you write to us

If you email us, or send us the diagnostic report, we receive your email address, what you write and the report. We use them only to answer you and fix what went wrong, never share or sell them, and delete them once your question is settled, and no later than 90 days after your last message. Your email provider carries the message under its own terms.

What we never do

No ads. No analytics. No crash reports. No trackers or advertising identifiers. No third-party SDKs that collect data. No selling, renting or trading of data. Reminders and notes from Wren are only the ones you turn on, and lock screens show your child's name, or only the first letter if you turn that on in Settings.

Permissions Wren asks for

• Notifications: for the reminders you turn on, and timers on your lock screen.
• Camera: only to scan the code on the other phone when you add it to your household.
• Photos: Wren uses your phone's photo picker, so it gets only the photos you pick and doesn't read your library. On an iPhone it asks to add to your photo library only for Save to Photos, which keeps the photos from your other phones there while it is on.
• Your phone's lock (Face ID, Touch ID or the passcode on an iPhone; your fingerprint, face or screen lock on Android): to show your backup's 8 words again, and to turn the backup back on with them.

Wren doesn't ask for your location, contacts or microphone.

Your child's data

Wren is made for parents and caregivers, who are adults. It isn't directed at children, and children aren't meant to use it. The records about a child are entered by their parent or caregiver and stay on that person's phones. We don't receive them, so we hold nothing about your child.

Your choices and rights

Because your records stay on your phones, you control them there:

• see and copy everything with Export everything;
• delete everything with Delete everything, which removes the log, the photos and every file Wren made from that phone (in a household, that phone also leaves; the other phones keep their copy);
• stop sharing by removing a phone or leaving the household.

Depending on where you live (for example the Philippines' Data Privacy Act, the EU and UK GDPR, or California's CCPA), you have rights to access, correct and delete personal data, and to object to its use. We hold no records about you beyond the relay data listed above and any email you send us, and that data is deleted on the schedules above. If you have a question or a request, write to nossteam@nossdev.com and we'll answer within 30 days.

Security

Shared updates and photos are end-to-end encrypted (XChaCha20-Poly1305, with keys only your phones hold). Invitations to join a household are single use and expire after 10 minutes. On your phone, Wren's records sit in the app's own protected storage, and your phone's backup leaves them out.

Changes

If this policy changes, we'll update it here with a new effective date, and say so in the app's release notes. A change that lets anything new leave your phone would come with a notice in the app first.

Contact

Night Owl Software Studios, nossteam@nossdev.com. The support page answers the common questions.