Last updated September 30, 2026
The short version
Sprout works without an account and keeps your baby’s information on your device. If you choose to sign in, the same records are also stored in your Sprout account so you can back them up and use another phone. There is no analytics, no advertising, and no data is sold or shared.
What Sprout stores
Your baby’s name, birthday and (optional) due date, the milestones you confirm (with the date you confirmed them), the safety notes you mark as read, your journal entries, and your language and settings.
Without an account this lives only on your device: in your browser’s storage on the web, or in the app’s storage on your phone. Deleting the app, clearing site data, or using Settings › Delete all data removes it.
If you sign in
Signing in is optional. You can sign in with Apple, with Google, with an email address and a password, or with a link sent to your email. Sprout receives only your email address and a random account ID; it never sees your Apple or Google password, contacts, or anything else held by them. If you use Sign in with Apple and choose Hide My Email, Sprout only ever sees Apple’s relay address.
With an account, the records listed above are stored in Sprout’s database, hosted by Supabase in the United States (AWS us-east-1), encrypted in transit and at rest, and readable only by you through your signed-in session. Sprout staff do not read your records except to fix a problem you report.
Signing out keeps the copy on your phone and stops mirroring. Settings › Delete account removes the account and every record stored in it within minutes; that cannot be undone.
Backups
Settings › Export a backup creates a file containing the data above. You choose where it goes. Restoring a backup replaces the data on the device.
Reminders
In the iOS app, monthly and weekly reminders are scheduled on your phone; their content never leaves the device.
The iOS app can also receive occasional notes from Sprout (Settings › Notes from Sprout, on by default and delivered quietly until you allow alerts). For that, Apple gives the app a push token, which Sprout stores on its server with your language, time zone and, if you are signed in, your account. Nothing about your baby is sent. It is deleted when you turn Notes from Sprout off, when Apple reports the token is no longer valid, or when you delete your account.
In the web app, if you turn on notifications, your browser issues a push subscription (an endpoint URL and encryption keys). Sprout stores it on its server together with your language, time zone and your baby’s name and birthday, so that the Sunday-morning note fits your baby’s month. It is deleted when you turn notifications off, when the subscription expires, or when you delete your account.
Service providers
Vercel hosts the website and its server functions. Supabase hosts account sign-in and the account database. Apple and Google each provide sign-in when you choose it. Each processes data only to provide that service.
External links
Source links open pages run by the CDC, AAP, WHO, Zero to Three, NAEYC, CPSC and Pathways.org. Those sites have their own privacy practices.
Children
Sprout is a tool for parents and caregivers. It does not knowingly collect information from children.
Contact
Questions about privacy: minjae.m.lee@gmail.com.