Burp

Last updated: November 2, 2026

Privacy Policy

Burp is a baby log that parents share. To do that, we store what you log about your baby and sync it with the people you invite. This page explains what we collect, why, who receives it, and how you stay in control.

Your log is never sold. Nothing in your log goes to advertisers.

Some entries, such as medicine, growth or diapers, can reveal information about your child's health. We treat the whole log as sensitive data and use it only to run Burp for you and your household.

1. Who is responsible for your data

The data controller is NL APPS, Société par actions simplifiée unipersonnelle (SASU) with a share capital of 1 000 €, registered under SIREN 933 511 206 with the Paris Trade and Companies Register, whose registered office is at 14 rue Bausset, 75015 Paris, France.

For any question about this policy or your personal data, write to nahel@nl-apps.com.

2. What we collect

Account

You can start using Burp without an account: we then create an anonymous account identifier with Firebase Authentication. To keep your log safe and to invite someone, you save it with Sign in with Apple, Google, or an email address and password. We then receive your email address (or the relay address Apple gives us if you hide yours) and the first name you enter.

Your baby's log

  • About your baby: first name, date of birth, sex if you give it, and your unit preferences.
  • Entries: bottles (amount, type of milk), nursing (side, times), pumping (side, amount, storage), diapers, sleep, solids (food, reaction), medicine (name, dose), growth (weight, length, head size) and free notes, with their times.
  • For each entry, who logged it and when.
  • Your household: its name, the first names and roles (parent, sitter, grandparent) of its members, and pending invites, including the first name you may type for the person you invite.

Sentences, voice and questions

If you turn on AI logging, the sentences you type or dictate. If you use Ask Burp, your questions. Section 5 explains what happens to them.

Imported history

If you import your history from another app, the file you pick is read on your phone. Only the entries found in it are sent to our servers and added to your log.

Subscription

Your subscription status and the purchase identifiers sent by RevenueCat. We never see your card number: Apple or Google collects the payment.

Settings

Your notification preferences and quiet hours, your time zone, your language, your AI settings, and the push notification tokens of your devices.

Technical and usage data

Device model, operating system, app version, language, crash reports, app usage events (for example which screens are opened and which features are used), session recordings of the app screens (section 6), the messages you send us through Help and feedback, and attribution identifiers. On iPhone, the advertising identifier is only read if you allow it through App Tracking Transparency.

3. Why we use it, and on what legal basis

  • Create your account, store and sync your log with your householdPerformance of the contract, GDPR Article 6(1)(b). For entries that reveal health information about your child: your explicit consent, Article 9(2)(a), which you give by recording them and can withdraw at any time by deleting them or your account.
  • Turn your sentences into entries and answer Ask Burp questionsYour consent, Article 6(1)(a), given when you turn on AI logging. You can turn it off at any time in Settings, AI and data.
  • Notify the other members of your household of new entriesPerformance of the contract, Article 6(1)(b), according to the settings each member chooses.
  • Manage your subscription and keep accounting recordsContract and legal obligation, Article 6(1)(b) and 6(1)(c).
  • Measure usage, fix crashes and improve the appOur legitimate interest in a reliable product, Article 6(1)(f).
  • Measure which ads bring new usersYour consent, Article 6(1)(a). On iPhone, through App Tracking Transparency.
  • Prevent abuse and keep the service secureOur legitimate interest in protecting the service, Article 6(1)(f).
  • Answer your support requestsOur legitimate interest in helping our users, Article 6(1)(f).

4. Sharing with your household

Burp is built to be shared. Everyone who joins your household sees the whole log of its babies, can add and edit entries, and sees who logged each entry. Depending on their settings, members get a notification when someone else logs, for example "Dad logged a bottle, 4 oz".

An invite is a link (getburp.app/join/...) or a 6 character code. It works once and expires after 7 days. Share it only with people you trust. Parents can remove a member at any time.

When a member leaves or deletes their account, the entries they logged stay in the shared log with their first name, so the rest of the household keeps a complete history.

5. How AI and voice logging work

AI logging is off until you turn it on. Without it, you log with buttons, and nothing you type is sent to an AI service.

Voice

When you hold the microphone, your speech is turned into text by your phone's speech recognition service (Apple on iPhone, Google or your phone's maker on Android). Depending on your device and settings, that service may process the audio on the phone or on its own servers, under its own privacy terms. Burp never receives or stores the audio, only the resulting text.

Sentences

Your sentence is sent to our servers and then to Anthropic's Claude model, together with your current local time, time zone offset and app language. Claude returns the entries it understood, which the app shows to you and saves to your log. We do not store the sentence itself in our database. When the AI service cannot be reached, simple sentences may be understood directly on your phone.

Ask Burp (Premium)

Your question, and up to three of your previous questions in the conversation, are sent to Claude so it can understand what you are asking. The numbers are then computed by our own code from your log, not by the AI. To phrase the answer, Claude receives only the facts needed for it, such as a time, an amount, a duration, a food or medicine name, your baby's first name, or the first name of the person who logged an entry. Your full log is never sent. If a question contains emergency words, Burp shows a fixed message pointing to your pediatrician or emergency services and sends nothing to the AI.

What Anthropic does with it

Anthropic processes this data on our behalf. Under its commercial terms it does not use it to train its models, and it keeps it only for a limited period under its own retention policy. Answers describe your log and are not medical advice.

6. Who receives data

We never sell your personal data. We share it only with the members of your household (section 4) and with the providers below, who process it on our behalf.

  • Google Firebase (Authentication, Cloud Firestore, Cloud Functions, Cloud Messaging, Remote Config, Crashlytics, Google Analytics for Firebase, Hosting)Sign in, database, servers, notifications, remote settings, crash reports, usage measurement. European Union and United States.
  • AnthropicUnderstanding sentences and Ask Burp questions (section 5). United States.
  • RevenueCatSubscription management. Your subscription is attached to your household identifier. United States.
  • PostHogProduct analytics and session recordings of the app screens, to understand how the app is used and fix problems. Recordings show the screens as you see them, which can include log entries and the sentences you type; password, email, name and feedback fields are masked. Your email address, first name and household identifier are attached to your analytics profile. European Union.
  • AppsFlyerInstall attribution: which ad or link brought a new user. Receives device and attribution identifiers (the advertising identifier only with your permission on iPhone), your account identifier, the install, and subscription events relayed by RevenueCat. It never receives the content of your log. Israel and United States.
  • Apple and GoogleApp stores, payments, Sign in with Apple and Google, speech recognition on your phone. Under their own terms.

We may also disclose data when the law requires it, for example in response to a valid request from a judicial authority.

7. Where data is stored, and transfers outside the EU

Your log is stored in Cloud Firestore in a European Union multi-region (eur3). Our server functions run in the us-central1 region, in the United States, so data they process, such as an entry being written or a sentence being understood, transits through the United States. Anthropic, RevenueCat, and part of Google's and AppsFlyer's services are in the United States.

These transfers are governed by the European Commission's Standard Contractual Clauses and, where the recipient is certified, by the EU to US Data Privacy Framework. AppsFlyer is also established in Israel, which benefits from an adequacy decision of the European Commission. You can get a copy of these safeguards by writing to nahel@nl-apps.com.

8. How long we keep data

  • Account and log: as long as your account and your household exist. An entry you delete disappears from the app right away; it is kept marked as deleted so that every phone in the household stays in sync, and it is erased for good when the household is deleted.
  • Sentences: not stored in our database. Server logs keep technical details (such as length and language), not the sentence.
  • Usage analytics, session recordings and crash reports: for a limited period, at most 14 months.
  • Invites: until they are used or the household is deleted. They stop working after 7 days.
  • Subscription and accounting records: for the period required by law, up to 10 years under the French Commercial Code.

9. Your rights

Under the GDPR, you can access your data, correct it, erase it, restrict or object to its processing, receive it in a portable format, and withdraw your consent at any time. You can export your whole log yourself as a CSV file in Settings, Export all data, and delete your account in the app (section 10).

For any other request, write to nahel@nl-apps.com. We reply within one month. You can also lodge a complaint with the CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or at www.cnil.fr, or with the data protection authority of your country.

10. Deleting your account

You can delete your account from the app, without contacting us: Settings, then Delete my account, then confirm.

  • If you are the only member of your household, the household, its whole log and its pending invites are deleted.
  • If other people share your household, you leave it and they keep the shared log, including the entries you logged, shown with your first name.
  • In both cases, your profile, your settings, your AI usage counters and your sign in account are deleted immediately.
  • If you are the only parent of a household that still has a sitter or a grandparent, remove them or make one of them a parent first.

Data already held by our analytics, crash reporting, attribution and subscription providers is not linked to your log and is deleted at the end of their retention period. To have it erased sooner, write to us. Subscription and accounting records are kept for the legal period.

Deleting your account does not cancel your subscription. It is billed by Apple or Google: cancel it in your store settings, as explained in our Terms.

If you cannot open the app, write to nahel@nl-apps.com from the email address of your account and we will delete it for you.

11. On your phone

Burp keeps a copy of your log on your phone so it works offline and syncs when you are back online. Home screen widgets keep a short summary of recent entries on the phone. Medicine reminders are scheduled on the phone. Burp asks for permissions only when a feature needs them: microphone and speech recognition for voice logging, notifications, file access when you import, and on iPhone, tracking for ad measurement. You can refuse or withdraw each one in your phone's settings.

12. Security

Traffic between the app and our servers is encrypted with TLS, and data is encrypted at rest on Google Cloud. Database rules let only the members of a household read its log, and the app can never change its own access rights or subscription status. Access to production systems is limited to the people who need it.

13. Children

Burp is meant for adults: parents and the people who help them care for a baby. You must be at least 18 years old to create an account. The app is not directed at children, and we do not knowingly collect personal data from children under 13 as users. The information about your baby is provided by you, as the parent or caregiver, to keep your own log. If you think a child has created an account, write to us and we will delete it.

14. If you live in the United States

We do not sell your personal information, and nothing in your log is shared for advertising. On iPhone, if you allow tracking, attribution identifiers are used to measure our own ads, which some state laws may call "sharing". You can refuse in the App Tracking Transparency prompt or in Settings, Privacy and Security, Tracking, or ask us to opt you out at nahel@nl-apps.com. Depending on your state, you may have rights to know, access, correct, delete and port your data; we answer these requests as described in section 9 and do not treat you differently for using them.

15. This website

The help and legal pages of getburp.app set no cookies and run no analytics. If we add audience measurement to the site, we will describe it here first.

16. Changes to this policy

We may update this policy when the service or the law changes. The date at the top shows the version in force. If a change materially affects your rights, we will tell you in the app before it takes effect.

17. Contact

NL APPS, 14 rue Bausset, 75015 Paris, France
Email: nahel@nl-apps.com