Skip to main content
Back to home

Privacy Policy

Last updated: October 31, 2026 · Version 2026-10-31

In short

This policy explains what information the Care by Talia app for iPhone, Apple Watch and widgets collects, why, who it is shared with, how long it is kept and what your rights are. Where the app asks you for information, it also shows a short notice that links here.

  • We collect information about the parent's and the child's health, because that is what the app is for. It is sensitive information and we treat it that way.
  • Information about your children is visible to the people you invite to your household, according to their role. Your chats with Talia and your personal records stay private to you.
  • Chat and the Journey screen's tailored guidance send information from your account to an AI provider, but only after you allow it, and withdrawing stops it.
  • We do not sell information, show ads or track you across other apps.
  • You can export your information and delete your account in the app.

1. Who is responsible for your information

The database controller is the operator of Care by Talia, an exempt dealer (osek patur) registered in Israel, described in section 1 of the Terms of Service (“we”).

The operator's full registered name, dealer number and postal address will be published here before the app is offered to the public.

A monitored address for support and privacy requests is being set up and will be published here before the app is offered to the public.

2. What information we collect

  • Account and sign-in: email address, password (stored hashed by the authentication provider), internal user ID, sign-in method (email, Apple or Google), app language, the versions of the Terms and Privacy Policy you accepted and when, and your AI permission decisions and when you made them. From you, and from Apple or Google if you sign in with them; Apple may give us a private relay address.
  • Parent profile: name, role (mom, dad, partner, caregiver or other), time zone, the country whose guidance you chose, and display and notification preferences.
  • Child profile: name, date of birth or due date, born or expected, sex, feeding type, first child or not, weeks of pregnancy at birth, support goals, the details to remember saved in the profile including medical notes (for example allergies, prematurity, hospital stays or clinician instructions), and a profile photo. From you, household members, and Talia when you ask it in chat to save a detail.
  • Child care records: feeds, pumping, sleep, diapers, solids, growth, milestones, activities, medicines, temperature, symptoms, vaccinations, appointments, questions for the doctor, medicine schedules and notes; who recorded them and when; and up to 4 photos per record. From you, household members, Apple Watch and widgets, and Talia when you ask it in chat to log something.
  • Parent's personal records: hydration, sleep, symptoms, medicines, appointments, postpartum recovery (including bleeding, pain and energy), mood and private notes. From you only.
  • Chats with Talia: your messages, Talia's answers, the sources shown, actions taken such as a saved record, and “helpful” or “not helpful” ratings.
  • Household: members, roles and permissions, invitations (only a hash of the link is stored), ownership transfers and a log of management actions.
  • Subscription: Apple product ID, transaction IDs, entitlement state, renewal and expiry dates, data from Apple's server notifications, and the internal identifier the app gives Apple with a purchase. We do not receive your payment details.
  • Notifications and devices: the device's push token, notification settings and quiet hours, the history of notifications sent, and Apple Watch connections (the name you gave the watch and a hash of its token).
  • Feedback and support: the type of feedback and the text you wrote (up to 2,000 characters), language, platform and app version; what you write to us; and a technical diagnostics bundle if you choose to send one, which contains no names, notes, photos or chats.
  • Technical and security: request time, route, error type, device and browser information, and IP address in hosting logs. The database keeps only a hash of it, to limit request rates.
  • Insights: which insights Talia offered about your child's records, when, and any answer you gave about them.

Country you provide: We store the country you choose for guidance in your profile. During emergency help in chat, the country used, including one you state in the conversation, and the emergency calling country selected on the device can also be saved with that conversation. What we do not collect: precise or automatically detected location, contacts, HealthKit data, advertising identifiers, voice recordings (dictation runs on the device only, section 7) or library photos you did not choose.

3. Do you have to give us this information?

There is no legal obligation to give us information; it depends on your choice and consent. If you don't:

  • No email or Apple or Google sign-in: you cannot open an account.
  • No date of birth or due date: we cannot tailor information to the child's stage.
  • No AI permission: AI-generated answers and tailored Journey guidance are off. Emergency guidance, your private journal, last-feed lookup and other fixed conversation or record actions stay available. Everything outside these AI features keeps working.
  • Medical notes, photos and some records are optional; the related features simply do without them.

4. Why we use information

  • Providing the service: the account, profiles, records, summaries, export, and syncing between devices, household members, Apple Watch and widgets. Based on our agreement with you and your consent.
  • Sharing within the household: showing information to members according to their role. Based on your consent when you invite someone, and theirs when they join.
  • AI answers in chat, knowledge-card search and Journey: section 5. Sending information to the provider is based on your separate AI permission.
  • Notifications and reminders: reminders you set, summaries and, if you turn them on, activity updates. Based on your notification permission and settings.
  • Subscription: verifying purchases with Apple and managing the household's access. Based on our agreement.
  • Support: answering your requests and fixing problems.
  • Improving the knowledge cards: when chat finds no knowledge card for a question, we keep the question, with names removed and without a link to your account, together with an age band and the reason, to decide which cards to write. Because these rows are not linked to an account, we cannot find or delete one on request, and a retention period for them has not been set yet.
  • Improving the product: answer ratings and feedback you send. No analytics provider is connected.
  • Security and preventing abuse: limiting request rates, logs and troubleshooting.
  • Legal compliance: accounting, responding to authorities and defending claims.

What we don't do: we don't sell information; we don't use it for advertising, third-party marketing or marketing profiles; we don't track you across other apps or websites; and we don't make automated decisions that have legal or similarly significant effects on you.

5. Talia, AI and what is sent to the AI provider

Who you are talking to. Talia is a computer system. Answers that use AI are generated by a language model from OpenAI, acting for us as a service provider. Some conversation and record actions use fixed rules without that provider.

When information is sent. Only after you allow it, on the AI screen in chat or in Settings under “Talia and AI”. Your permission covers every sending of personal information to the AI provider: AI answers in chat, the knowledge-card search behind them (for a Hebrew question, sometimes also translating it for that search), and the Journey screen's tailored search. You can withdraw at any time in Settings. From then on nothing new is sent through any of these: AI answers and tailored Journey guidance stop, while fixed conversation and record actions remain available. We keep a record of each decision and when you made it.

What is sent when a message reaches the model. Emergency guidance, simple greetings or thanks, private-journal saves and continuations, simple parent-feeling replies, missing bottle-amount questions and last-feed lookup are handled without contacting the provider. Other answers may need AI permission. When a message reaches the model, we send:

  • your message and the earlier messages of your conversation about this child, up to 20 messages in all;
  • your name and role, your local time and time zone, and the country whose guidance you chose;
  • your child's name, date of birth or due date, age and stage, weeks of pregnancy at birth, feeding type, whether this is your first child, your support goals, and the details to remember saved in the profile, including medical notes;
  • the child's care records from the last 72 hours (up to 30, with any notes written on them) and a summary of the records from the last 30 days, including records other household members added;
  • your own postpartum recovery records from the last 14 days (up to 5, for example bleeding, pain, energy and mood), if you logged any;
  • excerpts from knowledge cards found relevant;
  • the text of your question, to search the knowledge cards, and for a Hebrew question sometimes also to translate it for that search.

Not attached: your account email address, photos, payment details (which we don't hold), and other household members' private records and chats. But free text is sent as written: anything you type in a message, in a note on a record or in a detail to remember goes to the provider as you wrote it, including any contact or payment details you write there.

Journey. To tailor the Journey screen, a search query with the child's date of birth or due date, current timing and stage, without a name, is sent to OpenAI's search (embedding) service. A Journey card opened from a notification about a specific card is found without the provider. Even without a name this is personal information sent from an identified account, so it is covered by your AI permission.

What Talia can do with your information. If you ask, Talia can save a new record or a detail to remember in the child's profile. Each such action is shown in the chat, and you can edit or delete it.

What the provider does with it. Requests that generate chat answers or translate a question are sent with an instruction not to store them for later use (store: false); search (embedding) requests have no such setting. Whether OpenAI keeps requests for a limited time to monitor abuse, whether they may be used to train models, and where they are processed depend on our agreement with OpenAI, which has not yet been confirmed. This section will say so once it is.

Where answers come from. Some answers are based on knowledge cards we wrote or edited from public sources, which have had no clinical review. Where no card exists, Talia may give general information and says so, except on five sensitive topics where it refers you to a professional. Emergencies get a fixed message without the model.

If you don't allow it. Chat does not generate AI answers, and the Journey screen does not search with the provider. Emergency guidance, your private journal, last-feed lookup and other fixed conversation or record actions keep working, along with tracking, sharing, reminders and export.

6. Who information is shared with

Your household members, according to the role you gave them:

  • They see: the children's profiles (including photo, date of birth and medical notes), the children's records (including temperature, symptoms, medicines and vaccinations) and the photos attached to them, members' names and roles, and the management log.
  • They don't see: your chats with Talia, your recovery, mood and personal health records, or notes you marked private.
  • They can export: any member can export the children's shared records.
  • They may be told: if they turned on activity updates, that a record was added, with the fact and a count but not the content.

Service providers acting for us:

  • Supabase: authentication, database, file and photo storage, and sync.
  • Vercel: server hosting and operational logs.
  • OpenAI: chat answers, knowledge-card search and Journey search, only with your AI permission (section 5).
  • Resend: sending account and service email, where it is configured.
  • Apple: Sign in with Apple, in-app purchase, subscription verification and push notifications (APNs).
  • Google: Sign in with Google, if you choose it.

Where each provider processes information, and the data-processing terms with each of them, are still being confirmed and will be stated here.

Apple receives, to verify purchases, an internal user identifier linked to the purchase. If you signed in with Apple, the app can ask Apple to disconnect Talia when you delete your account.

As required by law. We will disclose information if a court order or the law requires it, and will tell you where we are allowed to.

Transfer of the service. If the service moves to another operator, information moves with it only if it stays protected under this policy, and we will tell you.

Professionals. We do not pass information to doctors or institutions. If you want to share, export a file and give it to them yourself.

7. Notifications, lock screen, Apple Watch, widgets and data on the device

Lock screen. By default notifications are generic and do not show your child's name. If you choose detailed notifications, the child's name appears. Words you wrote never appear in a notification.

Widgets, Live Activities and Apple Watch show the child's name, active timers and who started them, and quick logging actions, but not chats, medical information or the parent's personal records. When the device is locked, sensitive details are hidden according to iOS settings. The Watch connects to our server with a token limited to one child, which you can revoke in Settings.

Dictation. Speech recognition runs on the device only. Audio is not stored or sent to us or to any provider. Only the resulting text appears in the chat box, and you decide whether to send it; then it is handled like any message (section 5).

Camera and photos. The camera opens only when you choose to take a photo. Choosing from your library uses the iOS picker, and we receive only the photo you chose. Before upload, the photo is re-encoded on the device, which removes location and camera data (EXIF).

Data kept on the device. So the app works offline, the device keeps records waiting to sync, the child's emergency details (name, date of birth, medical notes, weight and recent foods) and display preferences. Signing out removes the emergency details and cached data; records waiting to sync stay so they can sync after you sign in again. Deleting your account clears them as well.

8. Transfers outside Israel

Our service providers process information outside Israel. The countries involved, and the basis for each transfer under the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001, are still being confirmed with each provider and will be stated here.

9. How long information is kept, and deletion

  • Account, profile, records, chats and photos: while the account is active, until you delete them or the account.
  • Consent and AI permission records: while the account is active; they are deleted with it.
  • Technical receipts that prevent duplicate actions, and ownership-transfer and household-deletion receipts: designed to expire after 30 days; automatic removal is not yet scheduled.
  • Notification history, the household management log and feedback: while the account or household exists; a shorter period has not been set yet.
  • Questions without a knowledge card: not linked to an account; a retention period has not been set yet (section 4).
  • Provider server and security logs, and provider backups: according to each provider's settings, which are still being confirmed.
  • Apple's transaction records: kept by Apple under its own policy.

Account deletion. In Settings, under Delete account. Deleted: the account, profile, chats, personal records, consent and AI permission records, feedback, settings, notifications and Apple Watch connections, and records waiting to sync on that device. If you are the only member of your household, the children, all their records and their photos are deleted too.

Shared household. If there are other members, the children's profiles, their shared records and the photos attached to them stay for those members, ownership passes to another member, and records you added are no longer linked to you.

Deleting a record, a photo or a household. Deleting a record removes it from the database and removes its photos from storage, unless another record still shows them. Removing a photo from a record removes it the same way. Deleting a household removes its children, records and photos. If removal from storage does not complete, the file stays in private storage, no longer shown in the app; there is no automatic retry yet.

Backups and provider copies. Deletion from the active database happens immediately. Copies in provider backups and logs are removed on the providers' own cycles, which are still being confirmed, unless the law requires keeping them.

Deletion does not cancel your subscription. Cancel it separately with Apple.

10. Your rights

Access. You are entitled to see the information about you (section 13 of the Privacy Protection Law, 5741-1981). The quickest way is to export it from Settings, as JSON or CSV. You can also ask us.

Correction and deletion. If information is incorrect, incomplete, unclear or out of date, you can correct it in the app, or ask us to correct or delete it (section 14 of the Law). For a record another household member added, ask them or the owner; if that does not resolve it, contact us.

Withdrawing consent. AI permission: in Settings, under “Talia and AI”; withdrawing stops AI-generated chat answers, the knowledge-card search and the Journey search with the provider. Fixed local actions described in section 5 remain available. Notifications: in iOS or in the app's settings. Sharing: by leaving the household, or by the owner removing you. The Terms and this policy: by deleting your account. Withdrawal does not affect what was lawfully done before it.

How to contact us. Use the contact details in section 1. We may ask you to verify your identity, and if we refuse a request we will explain why.

Complaints. You can complain to the Privacy Protection Authority at the Ministry of Justice.

A parent who is not the account holder can contact us about information on their child. We act according to the law, the parents' agreement or a decision of a competent authority.

11. Security

We protect information by, among other things, enforcing access in the database by account, household and role; encrypting communication in transit; storing invitation links and Watch tokens only as hashes; keeping service credentials on the server; keeping photos in private storage and removing location data before upload; and keeping free text out of technical telemetry and automatic error-reporting pipelines. Separately, we keep questions not covered by a knowledge card, with known parent and child names removed, to plan new cards; this limited filtering does not remove every identifying detail. We also use feedback you choose to send to improve the product (section 4). No online service is perfectly secure. If a security incident affects you, we will act as the law requires, including notifying the authority and you where required.

12. Children

The app is for adults aged 18 or over; children do not use it themselves. Information about children is given and controlled by their parents or by people the parents authorised. If we learn that a minor opened an account without a parent's consent, we will close it.

13. Cookies and tracking

The app uses only essential cookies and local storage, for sign-in, security, the integrity of the consent steps and your preferences. There is no advertising, no cross-app tracking and no advertising identifier. No analytics provider is connected; if we connect one, we will update this policy and ask for consent first.

14. Changes to this policy

We will update this policy when the service or the law changes. When a new version comes into force, the app shows it and asks you to accept it before you continue, while Settings stays available. A change that expands the use of sensitive information or sends information to a new recipient applies only after you consent.

15. Contact

A monitored address for support and privacy requests is being set up and will be published here before the app is offered to the public.

16. Services offered separately on the public website

  • Public-site services: contact details and booking information for in-home support, plus email and purchase/delivery information for the separately offered Digital Newborn Guide.
  • Payhip and its payment processors: checkout and delivery for the Digital Newborn Guide offered on the public website, not inside the iOS app.
  • Isracard: payment processing where used for separately contracted public-site services.
Privacy Policy — Care by Talia