FinBaby is operated by FinSmart Holdings ("FinBaby", "we", "us"). For any privacy question, request, or concern, contact our founder directly at admin@finsmartsa.co.za. Until FinSmart Holdings formally appoints a dedicated Information Officer under South Africa's POPIA, this contact serves that role.
All of the above is entered voluntarily by you or another caregiver in your family's care circle. We do not collect this information from your child directly, and FinBaby is not directed at or intended for use by children.
We keep minimal operational data needed to run the service securely — for example, session tokens used to keep you signed in. We do not use third-party advertising trackers, and FinBaby carries no ads.
We do not use your family's data for advertising, and we do not sell, rent, or otherwise disclose it to data brokers or third parties for their own marketing purposes.
Only the caregivers who are members of your specific family "care circle" — the people you've explicitly invited via your family's invite code — can see your baby's logs and activity. There is no public, "discoverable", or cross-family visibility of any kind. Removing a caregiver from your care circle (a feature planned for a future release) will end their access.
FinBaby's data is stored using Cloudflare's database infrastructure (D1) and associated Cloudflare services. Cloudflare acts as our infrastructure processor; it does not use your data for its own purposes. If we introduce additional service providers (for example, a transactional email provider for sign-in codes), they are bound to use your data only to provide that specific service to us.
We retain your family's data for as long as your account is active. You can request deletion of your account and all associated family data at any time by emailing admin@finsmartsa.co.za. Where a family has multiple caregivers, we will confirm the request is coming from a legitimate member of that care circle before deleting shared family data.
Depending on where you live, you may have some or all of the following rights over your personal information:
FinSmart Holdings processes personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA). You have the right to lodge a complaint with the Information Regulator of South Africa if you believe your information has been mishandled.
If you are located in the European Economic Area or United Kingdom, you have equivalent rights under the GDPR / UK GDPR, including the right to lodge a complaint with your local supervisory authority.
FinBaby is intended for use by adult parents and caregivers to track information about their children — it is not intended to be used directly by children, and we do not knowingly collect information directly from children. Account holders must be adults capable of entering into these terms.
We use industry-standard measures — including encrypted connections (HTTPS), hashed/tokenized session credentials, and passwordless one-time-code authentication (so there is no password to be stolen or reused) — to protect your information. No system is 100% secure, and we cannot guarantee absolute security, but we take reasonable steps appropriate to the sensitivity of family data.
FinBaby is available to families worldwide. By using FinBaby, you understand that your information may be processed on servers located outside your own country, including in jurisdictions with different data protection laws than your own.
We may update this policy as FinBaby grows. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify caregivers in-app.
Questions, requests, or concerns about your privacy: admin@finsmartsa.co.za.