Privacy Policy
Lillamoon tracks a baby’s sleep and shares it with the people who care for them. This page says what happens to that information. It’s written for parents, and it describes what the app really does.
The short version: your baby’s sleep is kept in your own iCloud account. There are no Lillamoon accounts, we keep none of your baby’s sleep, nothing is sold, and nothing tracks you.
Who is responsible
Lillamoon is made by Jimmy Callin, an individual developer in Sweden, who is the controller for the little the app’s own service handles. Write to support@lillamoon.com about anything on this page.
What you enter
You enter a baby’s name, a colour and an outfit for their moon, and when they fell asleep and woke up. The app also knows the name on your Apple Account, so the people around a baby can see who’s who.
Where it’s kept
- On your devices. The app keeps a copy so it works with no network.
- In your iCloud account. Sleeps sync through Apple’s iCloud, in the account of whoever added the baby. People you invite can read and change that baby’s data through iCloud. We can’t see any of it. Apple’s privacy policy covers iCloud.
There is no Lillamoon account and no Lillamoon server holding your baby’s sleep.
The small service we do run
When a baby falls asleep, an iPhone can’t wake a partner’s phone by itself. Apple requires a push for that, so a small service of ours (the “relay”, on Cloudflare) sends one. If nobody else is looking after a baby with you, it still receives this information, but it has no one to send it to. This is everything it handles:
| What | Why | How long it’s kept |
|---|---|---|
| Push tokens: Apple’s addresses for your device and for a running Live Activity, stored encrypted | To reach that device | A device’s tokens: until you leave the baby or sign out of iCloud, or 90 days after the device was last active. A Live Activity’s: until the sleep ends, or about two days at most |
| A random ID for this install of the app, and a scrambled form of your iCloud user ID that can’t be turned back | To tell devices apart, and not to alert you about your own taps | As long as the device’s tokens |
| The date the device was last active | To clean up abandoned devices | The day only, not the time. As long as the device’s tokens |
| A code for each sleep and each message, with the date | To send each push once | The day only, not the time. About two days |
| A scrambled code standing for the baby | To group the devices of the people around a baby | With the rows above |
| The baby’s name and colour, and when the sleep began | To put them in the push | Not kept: passed on to Apple and dropped |
| Your iCloud user ID itself, a code and not your name or email | To scramble it | Not kept |
The key to the stored tokens comes from a secret that only your devices and those of the people you invited hold. We don’t store it, so the stored records can’t be read on their own. The service does see tokens for a moment while sending, because Apple needs them to deliver a push.
Cloudflare can keep deleted records in its backups for up to 30 days. Like any web service, Cloudflare sees the internet address of a request to deliver it. We don’t store those addresses.
The relay never receives your name, your email, or your baby’s sleep history. It does see the moment a baby falls asleep or wakes, because that’s when it sends a push.
Why we’re allowed to
- Sending pushes to the people you share a baby with is what you ask for when you use the app, so it’s needed to give you the service (GDPR Article 6(1)(b)).
- Keeping the relay safe and tidy, by limiting how often it can be called and removing old records, is in our legitimate interest and yours (Article 6(1)(f)).
Who else is involved
- Apple delivers pushes and keeps iCloud, under Apple’s privacy policy.
- Cloudflare runs the relay for us, under its data processing agreement. It handles data in many countries, including the United States, under the EU–US Data Privacy Framework and the EU’s standard contractual clauses.
Nobody else receives anything.
What your device shows and hears
Widgets, controls, Live Activities and notifications can show your baby’s name and whether they’re asleep, including on the Lock Screen. You choose which of these to add. Baby names are given to the system on your device so Siri can recognise them; requests you make through Siri are handled under Apple’s Siri terms.
What we don’t do
- We don’t sell or share your data.
- We don’t track you. There’s no advertising, analytics or tracking code in the app, and this website has none either: no cookies and no scripts.
- We don’t use your data to train anything.
- We give no medical advice. Trends compare your baby only with their own past.
If the app crashes, Apple can send us a crash report, but only if you chose to share analytics with developers in your device’s settings. It holds no names or sleep times.
Your control
- Take it with you. Export All Data gives you everything as a plain file.
- Remove someone. Taking a person off a baby stops their access, and their devices can no longer use the relay for that baby.
- Delete it. Deleting a baby you added removes their data from your iCloud account. Leaving a shared baby removes it from your devices, and it stays with the others. Either way your devices come off the relay for that baby, as they do when you sign out of iCloud. You can also remove the app’s data in your iCloud settings.
- Stop the relay. Deleting the app stops it. Its records then expire as above.
Your rights
You have the right to see the data about you, to have it corrected or erased, to restrict or object to how it’s used, and to take it with you. The quickest way to do any of this is in the app, as above, because almost all of it is in your own iCloud.
For the relay, write to support@lillamoon.com. Its records are sealed under a key only your devices hold, so we can’t find them from your name or email. We’ll tell you what we can do, and leaving the baby in the app always removes them.
You can also complain to the Swedish data protection authority, Integritetsskyddsmyndigheten (IMY), or the authority where you live.
Children
Lillamoon is for adults caring for a child. Information about a child is entered by those adults, who decide who else sees it.
Changes
If this changes, this page changes with it, and the date below moves.
Last updated: 3 November 2026.