The short version
Latchly stores your data in your private iCloud account via CloudKit. If you turn on Partner Mode, the activity log you choose to share also goes through Firebase so two devices can sync. We can't read it, we don't sell it, and we don't use analytics to follow you around.
What we collect
Latchly is a local-first app. Almost everything you log — feeds, pumps, diapers, weights, moods, notes — lives on your device and in your iCloud account. We don't have copies on our servers.
The small amount of information that does reach us falls into three buckets:
1. Partner sharing data
If you use Partner Mode, the entries you and your partner log (feeds, diapers, sleeps, weights, baby profile, photos attached to logs) are stored in a Firebase Firestore database so both devices can see them in real time. You sign in anonymously — no email, no name, no Google account. The pair is identified by a random 6-character code you share once.
If you never use Partner Mode, none of your data leaves your device or your iCloud.
2. Subscription status
Your App Store subscription receipt is validated through Apple. We never see your payment details — Apple handles all of that. We receive only a yes/no signal about whether your trial or plan is active.
3. Crash reports
If the app crashes, Apple's built-in crash reporter may send us an anonymous stack trace via App Store Connect, only if you opted in to share diagnostics with developers in your iOS Settings. We use this to fix bugs.
Where your data lives
Your personal logs live in two places, depending on whether you've turned on Partner Mode:
- Your private iCloud. Apple's CloudKit syncs the database across your own devices. Even Apple's engineers can't read your CloudKit private database.
- Firebase Firestore (only if you use Partner Mode). The activity data both devices share — feeds, diapers, sleeps, weights, baby profile, photos attached to logs, and your mom-side mood / hydration / cycle / medication entries stay off Firebase entirely. Firebase data is encrypted in transit (TLS) and at rest by Google's infrastructure.
On your device, the local database is encrypted with the iOS Data Protection API and is only readable while your device is unlocked.
We — the Latchly team — do not operate servers that hold your data. Apple holds your CloudKit data; Google holds the Firebase data on our behalf as a processor. If you delete the app and sign out of iCloud, your iCloud data is gone. If you leave Partner Mode, your half of the Firebase data is deleted too.
Sharing & partner mode
Partner Mode lets one other person (usually a co-parent, grandparent, or night nanny) see a live feed status and the logs you both create. You generate a 6-character invite code in Settings → Partner; the other person types it in once. From then on, the two devices sync activity in real time through Firebase Firestore.
- Mom-side data — mood, hydration, cycle, medications, private notes — stays local. Only the activity log (feeds, diapers, sleep, weight, milk stash, baby profile, photos on logs) is shared.
- You can leave Partner Mode from either device at any time in Settings → Partner. Leaving stops the sync immediately.
- Invite codes expire after 48 hours if unused.
- No email, name, or Google account is required to use Partner Mode. Devices sign in anonymously via Firebase Auth and are identified only by a random ID.
Analytics and tracking
Latchly uses no third-party analytics. No Mixpanel, no Amplitude, no Google Analytics, no Facebook SDK, no attribution pixels.
We use Apple's on-device App Store Connect analytics to see aggregate numbers like "how many people opened the app this week," but those reports never contain data that could identify you.
Subprocessors
We try to keep the list short:
- Apple — CloudKit storage for your iCloud data, App Store billing, crash reports. Governed by Apple's privacy policy.
- Google (Firebase) — Firestore database + Anonymous Auth used only when you enable Partner Mode. Holds the activity log shared between the two paired devices. Governed by Firebase's privacy terms. We do not use Google Analytics, Crashlytics, or any other Firebase product.
- RevenueCat — handles App Store subscription receipt validation on our behalf. Sees a subscription status, not your feeding data.
- Cloudflare — hosts
latchly.appandblog.latchly.app(the pages you're reading now). Standard web logs only; no user accounts live here. - Fastmail — the inbox behind hello@latchly.app. If you email us, your email lives there until we archive it.
That's the entire list. If we ever add anyone, we'll update this page and note it in our release notes.
Your rights
Wherever you live, you have the right to:
- Access your data — it's already on your device, always. You can also export a CSV from Settings → Export.
- Correct it — edit or delete any entry at any time.
- Delete everything — Settings → Account → Delete all data wipes the local database, the CloudKit copy, and (if you're in Partner Mode) your share of the Firebase data.
- Portability — the CSV export is yours to take anywhere.
If you are in the EU, UK, or California, you have the additional rights granted by the GDPR, UK GDPR, and CCPA respectively. To exercise any of them, email privacy@latchly.app.
Children
Latchly is intended for adults caring for infants. The app is not designed for, and is not marketed to, children under 13. We do not knowingly collect data from children.
Changes & contact
If we materially change how we handle data, we will update this page, note the date above, and surface a notice inside the app before the change takes effect.
Questions?
Email a real human at privacy@latchly.app. We usually reply within 48 hours.