At a glance
- Hosted in Zurich, Switzerland (Google Cloud europe-west6).
- No ads, no third-party trackers, nothing sold.
- Free data export on every tier, and self-serve account deletion in the app.
- An AI assistant only ever sees your Home with your explicit, per-Home consent — which you can revoke.
Privacy at lindly
You're trusting us with infant health data, shared among the people who care for your child. Here's how we treat it — in plain language.
The operator of this service, and the data controller for your personal data, are named on our contact & imprint page.
Where your data lives
Every server that stores or processes your family's data runs in Switzerland — specifically Google Cloud's Zurich region (europe-west6). That includes your account and sign-in data, the shared timeline of events, and any files — they all sit in the same Zurich-hosted database and storage.
Hosting physically in Zurich is an engineering fact we can state plainly. The precise legal wording about Swiss data-protection requirements is part of the formal policy still under legal review.
What leaves Switzerland — and what doesn't
A few services can't be Swiss-pinned. We keep that list short and honest, and in every case your logged health data stays in Switzerland:
Push notifications
When push notifications ship, they'll be delivered through a global Google service (Firebase Cloud Messaging), which isn't regionally pinned. It only ever carries notification metadata — a device token and a short message — never the content of a health event.
Payments
Subscriptions are handled by Stripe (web) and Apple / Google Play (in-app). Your card details never touch our servers at all; only the transaction metadata those processors need flows through their own infrastructure.
AI assistants you connect
If you choose to connect an AI assistant to your Home, whichever provider you pick processes the data you share on their own infrastructure, outside our control. This is entirely opt-in, and you decide which Home and what scope you grant.
No ads, no tracking
We make money from subscriptions — not from advertising, and never by selling your data. There are no third-party ad SDKs or trackers in the app. Your child's data is not a product.
Your rights over your data
- Export, free, any time. Download your complete history as CSV or JSON — on every tier, including Free. Data portability is your right, so it's never paywalled.
- Erasure that means it. Delete your account and your personal data is hard-deleted, not just hidden from view. There is deliberately no “delete Home” button, so no caregiver can erase another’s records — a shared Home’s data is removed once its last member leaves.
- Only what's needed. We don't collect fields “just in case.” A kid's real name isn't required beyond what the app shows you.
The pre-launch waitlist
While lindly is pre-launch, you can leave your email to be notified when it goes live. If you do:
- Only your email address. That's the only personal data the waitlist stores — no name, no tracking.
- Used for one thing. To email you about the launch — nothing else, no marketing drip.
- Stored in Switzerland. In the same Zurich-hosted database (europe-west6) as everything else — the waitlist honors the same residency promise.
- Unsubscribe in one click. Every waitlist email carries a one-click unsubscribe link that removes you immediately.
About children's data
The children tracked in lindly can't consent for themselves — their data is processed on the authority of their parents or legal guardians. We treat infant health and children's data as special-category personal data and handle it with extra care. The exact legal framing of this is part of the policy under review.
Questions
The full, legally-reviewed privacy policy will be published before launch. Until then, this draft reflects our genuine intent and the decisions already made about how lindly handles data.