Privacy policy

Last updated: October 11, 2026

Orion Baby (“Orion”) is a baby tracker for parents and caregivers. It records feeds, pumping, bottles, sleep, diapers and baths, and keeps them in sync between everyone caring for a child. Because it holds information about your baby, we keep what it collects to a minimum and never sell it. This page explains what Orion stores, who can see it, and what you can ask us to do with it.

Who we are

Orion Baby is made by Mod Studio in Michigan, USA. We decide how the information described here is used (in data protection terms, we are the controller). Questions or requests: hello@orionbaby.com.

What Orion collects

Almost everything Orion stores is something you or another caregiver on your account types into the app, or that is needed to run your account. The last item is collected automatically, and only if you turn it on.

• Account: your email address and password. The password is handled by Google's Firebase Authentication and we never see it in readable form. If you sign in with Google instead, Google shares your name, email address and profile picture with Orion's sign-in system; we use only your email address, and we never see your Google password. You may also enter a display name and your role (for example parent or grandparent) and pick a color, which other caregivers on the same child see.
• Phone number (optional): if you turn on two-step sign-in, we keep your mobile number so we can text you a code each time you sign in. The texts are sent through Google's Firebase Authentication. We don't use the number for anything else, and turning two-step sign-in off removes it.
• Child profile: your child's name, sex or "prefer not to say", birth date, due date and whether it's a multiple birth. If you don't give a sex of girl or boy, you can also choose which growth chart (girls or boys) Orion compares your child with. Use a nickname or initial if you'd rather not enter a full name.
• Logs: the events you record, their times, amounts and other details, and any notes you add. The built-in log types are feeds, bottles, pumped milk, sleep, diapers and baths, plus optional ones you can switch on: solids, tummy time, medication, temperature, symptoms and growth (weight, length and head circumference). Some of these, such as medication, temperature, symptoms, growth and pumping, are health information about your child or you.
• Growth: each weight, length and head circumference you enter, and the date. Any of the three can be left blank. If you enter a birth weight, length or head circumference in your child's profile, it is saved as a growth log on the birth date. Orion compares a measurement with the World Health Organization's Child Growth Standards, which are stored in the app, and works out the percentile (and the body mass index, BMI, from a weight and a length) on your phone. Nothing is sent anywhere to do this. Growth logs are kept, synced, exported and deleted like your other logs, and people who see only a child's daily totals don't see them. Your choice of kilograms or pounds and ounces, and centimetres or inches, is part of your settings (below).
• Milestones: if you use Milestones, your answers to the checklists from CDC's “Learn the Signs. Act Early.” (the checklists are stored in the app): which item, Yes, Not sure or Not yet, the day, and any note you add, and any “firsts” you write yourself (a title, a day and a note). They are kept on the child's record and sync like logs: the caregivers who can see the child's logs see them, and people who see only a child's daily totals don't. If you print the doctor report, it includes the items marked Not sure or Not yet on your child's current checklist, made on your phone. These are health information about your child, and they are exported and deleted with the child's other data.
• Medicines: if you use the medication log, the list of medicines you add for a child: the name, the usual dose and unit, the time between doses and the most doses in a day that you or your doctor set, and any note you type (for example “with food”). Orion uses these only to warn you, and the other caregivers on that child, when a dose would be given too soon after another. It never suggests a dose. Caregivers who can see the child's logs see the list; people who see only a child's daily totals don't. These are health information, like the medication logs themselves.
• Bottles: if you weigh bottles, the feeding bottles you add for a child (a name you choose, and optionally its brand, its type, how much it holds and what it weighs empty), kept on that child's record so the caregivers on that child can choose them, and the weights you enter on a bottle log. Orion uses them only to work out how much milk was in a bottle and how much was drunk. People who see only a child's daily totals don't get the list. Your weight unit and your own milk density are part of your settings (below).
• Night shifts: if you say who is on duty tonight, Orion keeps who it is and the start and end times, with the last few finished shifts, on the child's record, so caregivers on that child see them and the “while you were off” summary can be worked out. Being taken off a child, or turned into a viewer, ends your duty; the finished shifts stay with the child, like the logs you wrote.
• Spot tags: if you set up spot tags, each one's name, what it does (for example log a diaper), which child it is for, the medicine it opens if any, and a 6-digit code, kept on that child's record so the caregivers on that child can use it. The link on a sticker or card holds only the code, never a name, date or amount.
• Questions for the doctor: if you use the doctor report, the questions and notes you type for a visit, kept on that child's record so the caregivers on that child can add to them and see them. They are health information you choose to write down. The report itself is made on your phone from your logs; Orion doesn't send it anywhere. It leaves the phone only if you share or print the PDF yourself.
• Custom logs: if the built-in types don't cover everything you want to track, you can set up your own custom log type, and whatever you record with it is stored the same way as other logs. People use it for things like vitamin D drops, nail trims, teething, screen-free time or a nebulizer treatment. Because you decide what goes in a custom log, please only record what you're comfortable keeping in Orion.
• Milk stash: the bags and bottles of breast milk or formula you keep track of: amounts, where they're stored, when they were pumped or made and their use-by dates, what was used or thrown away, and the 6-digit code on each label, with the list of codes handed out to your account. The QR code on a label holds only that code, never a name, date or amount.
• Invites: when you invite a caregiver we store a one-time invite code that stops working after 7 days, with your first name and the child's first name so the invite page can say who invited them. The invite is deleted a week after it expires.
• Orion Plus (if you subscribe or are given it): Orion Plus is a yearly subscription with a free first week, billed and renewed by Google Play, which takes the payment; we never see your card or other payment details, and you cancel in Google Play. We keep the subscription's order number, start time and the time it runs to, and its purchase token, linked to your account. The token lets our servers ask Google Play whether the subscription is still paid, so Orion Plus unlocks for you, renews with the subscription, can be restored, and is taken back when the subscription ends or is refunded. If we give you Orion Plus for free, we keep a short note of why. Whether you have it is visible to the people you share a child with, because it covers them too.
• Settings: your app preferences (units, theme, which trackers show and in what order, how the app looks and behaves, your alert choices, your milk-stash and label choices, and so on). They are kept on your device and also saved to your account, so that when you reinstall Orion or sign in on a new phone it starts the way you left it instead of asking you to set everything up again. They hold no information about your baby. A few choices stay on the phone only and are never saved to your account: your reminders, your label printers, which baby the phone is showing, your lock-screen choices, crash reports on or off, and which versions of the terms and this policy you agreed to (the separate record of your agreement is described below).
• Label printers: a label printer you set up (a name you give it, its model, how it connects and its Bluetooth or network address, the tape or labels in it, and how it prints: design, copies, cutting) is kept on your device and also on the record of a child you share, so the other caregivers and viewers on that child can set up the same printer on their phones in one tap. Each phone still connects to the printer itself. Anyone who can log for that child can stop sharing it; it then stays only on the phones that set it up. Viewers' printers stay on their phone. People who see only a child's daily totals don't get it.
• Label printing: a short log of your recent prints (the time, which printer and tape, and whether it worked, never a bag, a child or what a label said) and any label designs you add from P-touch Editor, kept on your device. Orion reads only the design file you choose. None of this is sent to us, and printing works without the internet.
• Your agreement: which versions of the terms of use and this policy you agreed to, kept on your device. Once you have an account, Orion also sends a short record of it to our servers: the two versions, the date and time (from our clock), that you confirmed you are 18 or older, the version of Orion, and a fingerprint of your email address (a one-way hash, not the address itself, so we can match a record to you if we ever need to). It holds nothing about your baby or your logs. It is the one thing we keep after you delete your account: see How long we keep it.
• Push token: when you're signed in, your phone's push token from Google's Firebase Cloud Messaging, with a random id for the phone, so that when another caregiver logs something Orion can wake your phone to sync. The message it sends holds no information about your baby: only which child changed and that something did. Orion then decides on your phone what, if anything, to show. The token is removed when you sign out, delete your data or account, or if the phone hasn't opened Orion for 60 days.
• Crash reports (optional, off unless you turn them on): if Orion crashes, the error, the app version, your phone model and Android version, and a random install ID that lets us group reports from the same phone. They come from Google's Firebase Crashlytics. They never include your child's details or the contents of your logs.

Orion needs a few permissions on your phone, and works without them: notifications (running timers and reminders), exact alarms (so reminders go off on time), NFC (only to write a spot tag's link onto a sticker you hold to the phone), nearby devices (only to find a Bluetooth label printer when you set one up) and the camera (only to scan the code on a milk label; nothing it sees is saved or sent). None of these send information to us.

Orion's widgets and Quick log screen show recent logs from your phone on your home screen and, if you allow it, your lock screen, where they say “Baby” and show times only unless you turn names on in Settings. They read your phone's own copy and send nothing.

You can turn crash reports on or off at any time in Settings, then Account and sync. Orion works the same without them.

Health information and your agreement

Some of what you log is health information about your baby or you. When you set up Orion you confirm you're 18 or older, agree to the terms of use and this policy, and agree that we store it, and share it with the caregivers you invite, in order to run the app for you. We use it for nothing else. You can take this back at any time by deleting the logs, or your account, which also stops us holding the data (see below). If you do, parts of Orion can no longer work for you.

How it's stored and shared

• On your phone first. Orion works offline. Your data lives in a database on your device and is uploaded when you're online. Orion is excluded from Android's backup, so a copy isn't saved to your Google account or moved to a new phone that way; sign in on the new phone and your logs sync back.
• The web app. At app.orionbaby.com you can use Orion in a browser with the same account. There your data is kept in that browser's own storage (a database and your settings), and is uploaded the same way. Signing out of the web app sends what is waiting to your account and then clears everything Orion kept in that browser, so use Sign out on a computer that isn't yours. Closing the tab or window does not sign you out. The web app has no crash reports, reminders or push messages. When it starts, it loads Google's Firebase code from Google's servers (www.gstatic.com), and Google sign-in, two-step texts and App Check can load Google's reCAPTCHA; all of that is Google, and none of it carries information about your baby.
• In the cloud. To sync between caregivers, data is stored with Google Firebase (Authentication, Cloud Firestore, Cloud Functions, Cloud Messaging and App Check) on Google Cloud. App Check asks Google Play to confirm that the app calling our servers is the real, unmodified Orion, so scripts can't pretend to be it (in a browser, Google reCAPTCHA Enterprise does the same job for the web app); the request goes to Google and carries no information about your baby. If you turn crash reports on, they go to Firebase Crashlytics. Google processes it for us under its Firebase privacy terms. It is encrypted in transit and at rest, and access rules limit each child's data to the people on that child.
• Other caregivers. Anyone you invite to a child can see that child's profile and logs, and the name and role you gave, unless an owner gives them totals only: then they see daily totals (such as hours of sleep and number of feeds), worked out on our servers, and never the logs or notes themselves. Only invite people you trust. Owners can change what someone can see, or remove them, at any time in the app. If you enter someone else's details, such as a co-parent's name, you confirm you're allowed to; they can ask us to remove them.
• Invite links. Anyone who has an unexpired invite link can see the inviter's first name and the child's first name on the invite page until it is used or expires, so share it only with the person you mean to invite.
• Google Play. If you install through an invite link, Google Play passes the invite code to Orion once, on first launch, using its install referrer. If you buy Orion Plus, Google Play processes the payment under Google's terms, and Orion's servers ask Google Play to confirm the purchase.
• We don't sell your data, don't use it for advertising and don't share it except with Google as our hosting provider, or if the law requires it.

Like any online service, Google's infrastructure also sees technical data such as IP address and device type when the app connects.

This website has no ads, analytics or tracking cookies. If you sign in at orionbaby.com/account, your browser keeps you signed in only until you close the tab.

Where your data goes

Orion's servers are run by Google, and Orion's functions run in the United States, so your data is processed, and may be stored, there. If you use Orion from the EU, UK or another country, that means your data is transferred to the United States. Google relies on standard contractual clauses and the EU–US Data Privacy Framework for these transfers.

Why we use your information

If you are in the EU or UK, the legal basis for each use is:

Children

Orion is for adults caring for a child. It is not meant to be used by children, and you confirm you are 18 or older when you set it up, and the terms of use require it; we don't knowingly create accounts for anyone under 18. The information about your child is entered by you as their parent or guardian, and you control it.

Not medical advice

Orion is a logging tool. It does not give medical advice, and its figures (such as milk storage times) are general guidance, not a substitute for your pediatrician.

Your choices and rights

• Edit or delete any log in the app. To delete other data and keep your account, see orionbaby.com/delete-account. If you're an owner of a child, you can change what each person on it can see and do, or remove them, in the app (Settings, then Account and sync, then People). Anyone can leave a child there too. Or email hello@orionbaby.com.
• Delete your account and data in the app (Settings, then Account and sync, then Delete account in the Danger zone) or on the website at orionbaby.com/account. Details of what is and isn't deleted are on orionbaby.com/delete-account. Data on a child shared with other caregivers stays for them unless every owner deletes their account or asks us to remove it. The one thing kept after you delete your account is the record that you agreed to the terms, for three years (see How long we keep it).
• Get a copy of your data. In the app, go to Settings, then Account and sync, then Your data, where there are two buttons. All data (JSON) saves everything on your phone (or, in the web app, in that browser) as one file you can keep or send to another service. Logs spreadsheet (CSV) saves every log, one row each, to open in Excel, Numbers or Sheets. Both are files made on your device and saved or shared by you; nothing is sent to us. You can also email hello@orionbaby.com from the address on your account and we'll send one.
• Your rights. Wherever you live, you can ask us to access, correct, delete or export your data. If you are in the EU, UK, California or another place with a privacy law, you can also ask us to restrict or object to processing, and to withdraw consent (this doesn't undo what we did before). We don't sell or share personal information as California law defines those terms, don't use it for targeted advertising, and make no automated decisions with legal or similar effects. We won't treat you worse for using any of these rights.
• How to ask. Email hello@orionbaby.com from the address on your account (this is how we check it's you). We reply within 30 days, or tell you why we need longer, which the law allows (up to 45 days in California). Someone acting for you can ask, with your written permission. If we say no, you can reply to appeal, and if you're still not satisfied you can complain to your local data protection authority or, in the US, your state attorney general.

The categories we collect

For California and other US state laws, in the last 12 months we collected these categories, all from you or the caregivers on your account, and used them only to run Orion:

We don't sell or share any of it, and we use sensitive information only to provide Orion.

How long we keep it

When you delete your account we remove your personal data from our systems and from your phone, as described on orionbaby.com/delete-account, except the record of your agreement to the terms, kept for three years as the table says. You can ask us for a copy of that record at hello@orionbaby.com.

Changes

If this policy or the terms of use change, we update the date above and keep older versions on request. When they change in a way that matters, Orion tells you the next time you open it. Questions any time: hello@orionbaby.com.