Care-chart Photo Processing

Updated November 4, 2026. Read with the Privacy Policy. Each feature uses its own in-app consent controls; viewing this page is not consent.

If you actively save or edit a baby's photo avatar in an online family after the sharing notice, only the final circular crop is re-encoded as a JPEG of at most 512 × 512 pixels and 256 KiB. The original filename, album identifier, EXIF/GPS metadata and pixels outside the crop are not uploaded. Old local avatars are not automatically migrated. Avatars do not have a public image URL and are not sent to AI.

Photos attached to notes or health observations remain local; each record supports up to three processed attachments of at most 2 MiB each. They are re-encoded with source metadata removed, and may be included in a user-created JSON backup. These attachments are not automatically uploaded to family storage or AI.

Care-chart photo recognition is a separate optional function. After you review and explicitly confirm each submission, processed and masked images, text recognized from those images, and a reference date/time zone are sent through the app's authenticated service to DeepSeek. The input may still contain sensitive information; masking is not a guarantee of anonymity. Recognition produces drafts for review, not automatic records. Processed images and incomplete drafts are temporarily stored on the device; they become unavailable 24 hours after the batch was created and are cleared when the app next performs cleanup. You may clear them earlier. The app service does not persist photo or recognition content. DeepSeek uses disk context caching, generally cleared hours to days after disuse; this is not a maximum for all logs and backups. We do not have a specific guarantee covering all training use, retention, locations or deletion of each request. See the photo processing notice.

Voice input is optional and only runs when on-device recognition is supported. Raw audio is neither saved nor uploaded. Editable transcription is sent for draft generation only after you actively request it; cancelling does not send it. Keyboard input remains available if on-device recognition is unavailable.

Location is used, with permission, for Apple weather and city/area lookup. Notifications, alarms and Live Activities provide care reminders and timer displays. System photo and file pickers handle the items you select. Denying optional permissions does not prevent unrelated manual logging. Apple system services, photo-library originals and operating-system backups follow your Apple settings and their own terms.

Contact and withdrawal

Contact harnzh@outlook.com for data requests. Withdraw AI or web-search consent in Data & Privacy. Photo consent applies to that submission only. Withdrawal cannot recall information already sent. Provider processing and local deletion have separate limits.