How privacy works

The short version

Paige is built so that the people running it (that’s me) can’t read what you write. There are no accounts and no passwords. When you log a feed or a nappy, it’s encrypted on your phone before it goes anywhere, with a key that only your household has. We help your devices stay in sync, but we only ever see scrambled data we can’t open.

This isn’t a marketing line. It’s how the app is built, and the rest of this page explains it plainly.

No accounts, no sign up

You don’t make an account, give an email, or set a password. When you set Paige up, it creates a household for you and gives you a set of recovery words. Those words are the key to your data. Keep them somewhere safe, like you would a spare key. They’re how you get back in on a new phone, and how someone joins your household.

Because there’s no account, there’s no profile, no name-and-email list, nothing to leak or sell.

What stays on your device, and what we hold

What you write, the details of each feed, nappy and sleep, the weights, the milestones, your notes and your baby’s name, is encrypted on your device first. We hold only the encrypted version so it can sync between the phones in your household. We can’t turn it back into anything readable, because we don’t have your household’s key.

A few things do travel in the clear, because a server-side feature needs them: the type of each entry and when it happened (so we can send you a feed reminder while the app is closed), and the state of a running timer (so it syncs between phones). We can see that a feed happened at 2pm, but not a word you wrote about it. The how the encryption works page lists all of this in full, and shows you how to check it yourself.

End-to-end encryption, in plain words

End-to-end means the locking and unlocking both happen on your devices, not ours. Your household shares one key. A feed you log gets locked with it before it leaves your phone, travels to us locked, and is only unlocked again on another phone in your household. We’re the courier, not a reader. We never see the key.

Your household

When you add whoever’s helping out, they join your household and share the same encryption key, so they can see the same log. You can see who’s in your household, and you’re in control of who you invite. We don’t add anyone, and we can’t see inside.

What we don’t do

• No advertising, and no ad trackers.
• No selling or sharing your data. There’s nothing readable to sell, and we wouldn’t anyway.
• No third-party analytics. The website counts visits with our own cookieless analytics, explained just below.
• No emails to a list you didn’t ask to be on.

Cookies and what’s on your device

Cookies are small bits of data a site keeps in your browser. Here’s the whole of it for Paige, split by domain, since the website and the app are separate.

The website you’re reading sets no cookies at all. The app sets one, called paige_session. It keeps you signed in to your household on that device, so you’re not setting things up again every time you open it. Other sites can’t read it, it lasts about 30 days, and the app can’t run without it. There are no advertising or tracking cookies, because we don’t advertise or track.

The app also keeps a few things on your device itself: your light or dark preference, a couple of settings, your household’s encryption keys, and a copy of your log so it still works when you’re offline. That stays on your phone. We don’t hold a readable copy of any of it.

Because the one cookie we use is needed to run the app, and we don’t track you, there’s no cookie banner to click through. The rules only ask for that when a site uses cookies for things like advertising or analytics, and we don’t.

The typeface is served from our own site, not a font service, so simply opening these pages doesn’t hand your visit to anyone else. The one exception is by your own choice: if you decide to pay what you can, the checkout is handled by our payment provider (Paddle), and their secure checkout loads only at that point. If you never open it, it never loads.

Website analytics

This website, the pages you’re reading now, counts visits so we can see which bits people find useful and whether anything’s broken. We run that counting ourselves, on our own server, so nothing is handed to an outside analytics company.

It’s cookieless and keeps no personal data. It notes things like which page you looked at and roughly where you came from, say a link from a parenting forum, and nothing that identifies you or follows you to other sites.

The app is separate. It counts nothing and sends nothing, the same as the rest of this page describes.

Your data is yours

You can export everything you’ve logged at any time, and you can delete it. If you delete your household, the encrypted data tied to it goes too. It’s yours to take with you or to remove whenever you like.

Children’s data

Paige is used by parents and carers to keep notes about their own baby. That information belongs to your household, is encrypted the same way as everything else, and is never used for anything beyond showing it back to you.

If this ever changes

If anything here changes, we’ll update this page and the date at the top. The principle won’t move: what you write stays yours.

Get in touch

Questions about any of this are welcome. Email [email protected] and a real person will reply.