1. Who we are
Sprout is a baby care tracking app developed and operated by Veloryn Labs Ltd, a company registered in England and Wales. When this policy refers to "Sprout", "we", "us", or "our", it means Veloryn Labs Ltd.
Our contact email is hello@velorynlabs.co.uk.
2. What data we collect
We collect only the data needed to provide the Sprout service:
Account data
- Email address (used to create and identify your account)
- Encrypted password (we never store your password in plain text)
Baby profile data
- Baby's first name, date of birth, and sex
- Whether the baby was premature
- Day sleep window and nap count (for predictions)
Tracking logs
- Sleep sessions (start time, end time, nap or night sleep)
- Nursing sessions (start/end time, duration per side)
- Bottle feeds (time, amount, milk type)
- Solid food logs (time, food items)
- Nappy changes (time, type)
App preferences
- Time format preference (12h or 24h)
- Unit preference (metric or imperial)
- Notification preference
Usage and technical data
- App version and device operating system (for crash diagnostics)
- We do not use advertising trackers or sell your data to third parties
3. Why we collect it (legal basis)
Under UK GDPR, we process your data under the following legal bases:
- Contract performance — to provide the Sprout app and sync your data across devices
- Legitimate interests — to fix bugs and improve app reliability using anonymised crash data
- Consent — for optional features such as push notifications (you can withdraw at any time)
- Legal obligation — to retain subscription and billing records where required
4. How we store and protect your data
Your data is stored securely using Supabase, a cloud database platform. Data is encrypted in transit (TLS) and at rest (AES-256). Supabase is ISO 27001 certified and GDPR-compliant.
Baby tracking data is stored in the EU/UK region and is never transferred to countries outside the UK/EEA without appropriate safeguards.
Access to your data is restricted to authenticated sessions only — neither Veloryn Labs staff nor third parties can access your tracking logs without your permission.
5. Subscriptions and payments
Sprout Plus and Premium subscriptions are processed through Google Play (Android) or the Apple App Store (iOS). We do not collect or store your payment card details — all billing is handled by Google or Apple.
We use RevenueCat to verify subscription status. RevenueCat receives an anonymised user identifier and your subscription entitlement — it does not receive your email address or tracking logs.
6. AI assistant (Sprout Premium)
The Ask Sprout AI feature sends a summary of your baby's recent logs to the Claude API (operated by Anthropic) to generate a response. This data is transmitted securely and is subject to Anthropic's API data processing terms.
Anthropic does not use data submitted via their API to train their models. Your tracking data is not retained by Anthropic beyond the scope of generating a single response.
AI chat history is stored in your Sprout account and deleted when you delete your account.
7. Children's data
Sprout stores data about babies (sleep times, feeds, etc.) but the account holder is always the parent or guardian. We do not knowingly collect personal data directly from children. The baby profile fields (name, date of birth) are provided by the parent and are used solely to personalise the app experience.
8. Your rights under UK GDPR
You have the right to:
- Access — request a copy of all personal data we hold about you
- Rectification — correct inaccurate data
- Erasure — request deletion of your account and all data ("right to be forgotten")
- Restriction — ask us to stop processing your data in certain circumstances
- Portability — receive your data in a machine-readable format (use CSV export in Settings)
- Objection — object to processing based on legitimate interests
- Withdraw consent — for any processing based on consent (e.g. notifications)
To exercise any of these rights, email hello@velorynlabs.co.uk. We will respond within 30 days.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
9. Data retention
We retain your data for as long as your account is active. If you delete your account, all personal data and tracking logs are permanently deleted within 30 days. Anonymised, aggregated statistics (with no connection to your identity) may be retained for product analytics.
10. Cookies and tracking
The Sprout mobile app does not use cookies. The Sprout website (sprout.velorynlabs.co.uk) uses no advertising cookies or third-party tracking scripts. We use no analytics tools that identify individual visitors.
11. Changes to this policy
If we make significant changes to this policy, we will notify you via the app or by email before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.
12. Contact
For any privacy-related questions or requests, contact us at:
Veloryn Labs Ltd
hello@velorynlabs.co.uk
Registered in England and Wales