Privacy policy
Last updated 21 October 2026
Blundi is an app for keeping track of a baby’s sleep, feeds and care. This policy explains what we collect, why, who helps us, and what you can do about it. It covers the Blundi app and the website blundi.app.
The short version
- Your logs are saved on your phone first, and Blundi works without internet.
- With an account, a backup of your logs is kept on our server in the EU.
- Some logs, like temperature and medicine, are health information. We only use them with your consent, and you can delete everything at any time.
- We don’t sell data, we don’t show ads based on you, and your logs are never used for advertising.
- Ask Blundi, our AI assistant, is optional.
1. Who we are
Blundi is made by Sebastian Mandelid, Nye Sædalsveien 136, 5099 Bergen, Norway, who is responsible for your data. Questions: support@blundi.app.
2. What we collect
- Your children: a name or nickname, and date of birth.
- Logs: sleep, feeds, diapers, pumping, solids, medicine, temperature, growth, notes, and days you mark (for example sick or teething).
- Account: your email address and, if you share, the name your partner sees (for example “Mamma”).
- Ask Blundi: your questions and what’s needed to answer them (section 5).
- Purchases: which plan you have, and how many extra questions you bought and have left (with the purchase’s order ID). The app store (Google Play or the App Store) handles payment; we never see your card.
- Technical data: random IDs for your phone, the app version, IP address and error information, used to run Blundi and stop abuse, and a record of which consents you gave and when.
- Free trial: only if you ask for it, a one-way fingerprint of an ID your phone gives Blundi, kept for 18 months so the trial can only be used once. On iPhone, the ID is a random one Blundi makes and keeps in the phone’s Keychain. It never leaves the phone, isn’t synced to iCloud, and usually stays there if the app is deleted.
- Error reports and usage statistics: only if you turn this on. Error reports: what went wrong and where in the app, the phone model, system version and app version. Usage statistics: which screens you open and which features you use (for example starting a sleep, adding a feed or opening Trends), which kinds of entries you add, which settings you change, the types of errors, and with them the app version, the system version, the app’s language, your plan, whether you share, the number of children and the shown child’s age as a range (for example 4–6 months). They carry the date but not the time of day, and a random ID for this installation that you can reset in Settings and that isn’t linked to your phone, account or household. Medicine, temperature, growth and marked days are only counted as weekly totals for everyone together. Never what you log (times, amounts, notes, medicine, temperatures), what you write, or your child’s name.
- The waitlist on blundi.app: only if you sign up. Your email address, which phone you have, the language of the page, where you came from (for example Instagram), when you signed up and confirmed, your place in the queue and whether you got one of the pioneer places. Nothing about your child.
- What you send us: feedback, reports on AI answers, and emails. With feedback, if you leave them ticked, technical details about your phone and the app (model, system version, app version, plan, sync status and the types of recent errors); if you tick the box, the shown child’s last 7 days of entries without names, birth date, notes, medicine or food; and an email address if you want a reply.
We don’t collect your location, contacts, photos, advertising ID or anything about other apps on your phone. The camera is only used to scan a partner’s invite code; no picture is saved or sent. On Android the scanner is Google’s ML Kit, which runs on your phone; when it’s used, it sends Google technical information (phone model, Android version, the app’s name and version, a random ID for the installation and how the scan went), never the picture or the code. The website blundi.app uses no cookies, analytics or ads. Its waitlist form sends what you type only to us.
3. Why we use it, and our legal basis
- Running Blundi for you (logging, overviews, nap windows, reminders, reports, backup, sharing, and help when something isn’t working): our agreement with you. For health information, your explicit consent, which you give in the app.
- Ask Blundi: a separate consent, which you can turn off in Settings.
- News by email: only if you tick the box. You can unsubscribe at any time.
- The waitlist: your consent, which you give when you sign up and confirm your address in the email we send.
- The free trial check, and error reports and usage statistics: your consent, given with their own boxes. For the trial, we then keep the fingerprint because we have a legitimate interest in the trial not being restarted.
- Security, stopping abuse and fixing errors: our legitimate interest in keeping Blundi safe and working.
- Purchases and bookkeeping: our agreement with you, and the Bookkeeping Act.
What you must agree to, and what is optional. To use Blundi you need to give the health information consent, and everyone in a household needs an account (an email address), so the backup works from day one and we can reach each of you. Without them you can still look around with example data. Everything else is optional: Ask Blundi, the free trial check, error reports and usage statistics, news by email, and “Help improve Ask Blundi”. Saying no to one of them only turns off that one thing.
We only use your logs for anything else, such as improving Blundi for everyone or research, if you turn on a separate option in the app. It is off until you do. A change to this policy never does that on its own. One such option is in Settings today, “Help improve Ask Blundi”: with it on, we may later keep your questions and Blundi’s answers, without your child’s name, in the EU for up to 12 months to improve the answers. Nothing is collected for it yet; before we start, we update this page.
4. Your child’s information and your consent
You give consent on your child’s behalf, as a parent or someone with parental responsibility. A partner who joins your household gives the same consent on their own phone. A nickname is fine. You can withdraw your consent at any time by deleting your data in the app; your logs are then deleted.
5. Ask Blundi (AI chat)
Ask Blundi is an AI assistant, not a person or a health professional. When you ask something, the app sends your question, the earlier messages in that chat, your child’s first name and age, a summary of the past week and the last two days of logs (including notes, temperature and medicine), so the answer fits your child. It also sends temperature, medicine and days you marked (for example sick or teething) from the past week, the latest growth measurement, the app’s own estimate of the next nap and bedtime, the time, and your plan and the app’s language. If you have more than one child and tick “Ask about both children” (or all of them), the same is sent for each child. Before anything is sent, the app checks for signs of an emergency and shows emergency numbers if needed.
The answers are written by Claude, an AI model from Anthropic. Your questions go through Opper (Opper Technology AB, Sweden), whose service runs at Amazon Web Services in Stockholm, to Claude at Amazon Web Services (Amazon Bedrock) in the EU. Neither keeps your question or the answer once it is written: Opper only keeps technical details about the request, such as when it was made, the model and its length. Your questions stay in the EU/EEA. We may change model or provider as Blundi develops; we update this page when we do, and tell you first if your questions would then be processed outside the EU/EEA.
We don’t keep your questions; your conversations are saved on your phone. If you report an answer, we keep the question, the answer and your reason for 90 days, without your child’s name (removed by the app, and again on our server), and without your phone’s ID. The AI providers don’t use your questions to train their models. AI answers can be wrong and are not medical advice.
6. Who helps us
A few service providers process data for us, only on our instructions and under their data processing terms:
- Servers, database and email delivery: Cloudflare, with data stored in the EU.
- Ask Blundi: Opper (Sweden), which passes your questions to Claude from Anthropic, run by Amazon Web Services in the EU (section 5). Our agreement with Opper covers health information.
- Error reports: Sentry, with data stored in the EU (Germany), only if you turn them on.
- App updates: Expo (USA). When the app opens, it asks Expo’s servers whether a fix for the app is ready, and downloads it if so. The request has the app’s version, the update it is running, Android or iOS, a random ID for the installation and your IP address; never your logs or anything about your child.
- Purchases: Google Play or the App Store (Apple), and RevenueCat. RevenueCat gets your purchases with the random ID for your phone, so we can check them; no health information.
- Building and fixing Blundi: AI tools from Anthropic (Claude) and OpenAI (ChatGPT). They get made-up example data. Only if an error can’t be fixed without real data do we use their business plans, where they work for us under a data processing agreement and don’t train on the data, and we share only what the fix needs.
- Our email inbox: Proton, in Switzerland.
On Android, the invite-code scanner is Google’s ML Kit. Google uses the technical information it sends (section 2) to keep ML Kit working and improve it, under Google’s own privacy policy.
We don’t sell data or give it to advertisers or data brokers. We only share it when the law requires it. If Blundi is ever taken over by another company, we tell you first. Your data only moves with it if the new owner keeps this policy, and you can delete it before that happens.
7. Data outside the EU/EEA
Your logs are stored in the EU. Some of our providers are US companies (development tools, purchases, error reports, app updates, email delivery and the code scanner). When data leaves the EU/EEA, it is protected by the EU’s standard contractual clauses or another approved safeguard. Ask Blundi questions stay in the EU/EEA (section 5). Ask us if you want the details.
8. How long we keep it
- On your phone: until you delete it, or delete the app. When you delete an entry, only the fact that it was deleted is left after a week.
- On our server: as long as you have an account or share. A deleted entry is emptied about a week after you delete it, an unanswered question about two versions of an entry after 30 days, a phone unused for 18 months is removed, and backups expire within 30 days.
- Your email address: until you delete the account. An account with no household that no phone is signed in to is deleted 30 days after its last sign-in, and one no phone is signed in to after 18 months without a sign-in.
- The waitlist: an address that isn’t confirmed is deleted after 7 days. A confirmed address is deleted when you take yourself off the list, with the link on the confirmation page or in our emails.
- Reported AI answers and error reports 90 days, usage statistics 13 months, feedback one year (with the reply address you gave; logs you attach to it 30 days), extra questions you bought until they expire (12 months; after you delete your data only the order ID and how many are left, so a restore can’t count a purchase twice), emails to us up to two years, accounting records as long as the law requires (up to five years), technical logs up to 30 days.
- Counters that stop abuse and keep the free limits (with a random phone ID, a one-way fingerprint of your email address for sign-in codes, and the IP address for 2 days): 2 to 60 days. A list of what you’ve asked us to delete, with IDs only, for 40 days, so a restore from our backup can’t bring it back.
9. Security
Everything is sent encrypted, data on our server is encrypted and kept in the EU, and passwords don’t exist: you sign in with a code, and secrets are stored only as fingerprints. We never log your logs or questions. On your phone the logs are protected by the phone itself, so use a screen lock. They aren’t in your phone’s backups (with Google, in iCloud or on a computer). The sleep and feed timers show your child’s name in a notification, which can be visible on your lock screen; your phone’s settings can hide notification content. If a breach is likely to put you at risk, we tell Datatilsynet within 72 hours and you as soon as we can.
10. Your rights
You can ask for a copy of your data, also in a format you can take elsewhere: each child’s logs can be exported as a CSV file in Settings, and we send you the rest if you ask. You can correct it and delete it, restrict or object to how we use it, and withdraw consent at any time: Ask Blundi, “Help improve Ask Blundi”, error reports and usage statistics (where you can also delete the statistics already sent) and news in Settings, and the health information consent by deleting your data (section 4). How to delete is on the page Delete your data and account. For anything else, email support@blundi.app and we reply within a month. You can also complain to Datatilsynet, the Norwegian Data Protection Authority.
11. Ads
Blundi shows no ads based on you and uses no ad networks. We may now and then tell you about something we’ve tested or a partnership, clearly labelled as advertising and the same for everyone. It never uses your data.
12. Children
Blundi is for adults who care for a child: you must be 18 or older. Children shouldn’t use Blundi themselves.
13. Changes
We update this page and the date at the top. If a change matters to you, we tell you before it takes effect, in the app or by email. If we want to use your data for something new, we ask first. Earlier versions are available if you ask us.