Privacy Policy
CREATIVE VLU SOLUTIONS SRL · Effective date: April 9, 2026
1. Who We Are
Pebby is a shared-care baby tracking app developed and operated by CREATIVE VLU SOLUTIONS SRL, a company incorporated under Romanian law.
When this policy says “Pebby”, “we”, “us”, or “our”, it refers to CREATIVE VLU SOLUTIONS SRL. For any privacy-related questions, reach us at contact@marius.host.
2. What This Policy Covers
This Privacy Policy explains what personal data we collect when you use the Pebby mobile app and website (marius.host), why we collect it, how we use and protect it, and what rights you have under the EU General Data Protection Regulation (GDPR).
Pebby is intended for use by adults (18 years and older). We do not knowingly collect personal data from children. Baby tracking data (feeding logs, sleep logs, diaper logs) is entered by you as a caregiver — it is associated with your account, not with your baby’s identity.
3. Data We Collect
Account information
When you register, we collect your name, email address, and a hashed password. You may also optionally provide a profile photo and baby name for display purposes.
When you register, we collect your name, email address, and a hashed password. You may also optionally provide a profile photo and baby name for display purposes.
Tracking data
The core purpose of Pebby is logging baby care events. This includes feeding sessions (type, duration, amount), sleep sessions (start, end, notes), and diaper changes. You enter this data yourself; we store it to display it to you and your co-caregivers.
The core purpose of Pebby is logging baby care events. This includes feeding sessions (type, duration, amount), sleep sessions (start, end, notes), and diaper changes. You enter this data yourself; we store it to display it to you and your co-caregivers.
Shared-care group data
If you invite other caregivers (e.g., a partner, grandparent, nanny), their name and email address become visible within your shared group, and tracking data you enter is visible to all group members. You control who is in your group at all times.
If you invite other caregivers (e.g., a partner, grandparent, nanny), their name and email address become visible within your shared group, and tracking data you enter is visible to all group members. You control who is in your group at all times.
Payment and billing information
Pebby is a paid subscription service. Payments are processed by Stripe and subscription management is handled by Adapty. We do not store your card number, CVV, or full payment details — these are handled entirely by our payment processors. We do store subscription status, plan type, and billing history.
Pebby is a paid subscription service. Payments are processed by Stripe and subscription management is handled by Adapty. We do not store your card number, CVV, or full payment details — these are handled entirely by our payment processors. We do store subscription status, plan type, and billing history.
Device and push notification data
To send you alerts and reminders (e.g., feeding time notifications), we collect your push notification token. We also collect basic device information such as device type, operating system version, and app version for technical support and compatibility.
To send you alerts and reminders (e.g., feeding time notifications), we collect your push notification token. We also collect basic device information such as device type, operating system version, and app version for technical support and compatibility.
Usage and analytics data
We use Firebase Analytics (Google) to understand how users interact with the app — which features are used, session length, and similar aggregate usage patterns. We use Firebase Crashlytics to automatically detect and report app crashes, which helps us fix bugs. These tools may collect device identifiers, IP addresses, and event data.
We use Firebase Analytics (Google) to understand how users interact with the app — which features are used, session length, and similar aggregate usage patterns. We use Firebase Crashlytics to automatically detect and report app crashes, which helps us fix bugs. These tools may collect device identifiers, IP addresses, and event data.
Marketing and attribution data
We use the Facebook SDK to measure the effectiveness of our advertising campaigns. This SDK may report app install events and in-app events (such as subscription purchases) to Meta Platforms. This helps us understand which ads lead to app installs and paid subscriptions.
We use the Facebook SDK to measure the effectiveness of our advertising campaigns. This SDK may report app install events and in-app events (such as subscription purchases) to Meta Platforms. This helps us understand which ads lead to app installs and paid subscriptions.
4. How We Use Your Data
- Provide the service — store and sync your tracking logs, display them to you and your caregiving group in real time.
- Account management — create and authenticate your account, manage your subscription.
- Process payments — initiate and manage billing via Stripe and Adapty.
- Send notifications — deliver reminders and handover summaries via push notifications.
- Improve the app — use aggregated analytics to identify popular features, detect crashes, and fix bugs.
- Measure marketing — attribute app installs and purchases to advertising campaigns via the Facebook SDK.
- Comply with legal obligations — retain records as required by applicable law.
5. Legal Basis for Processing (GDPR)
- Performance of a contract (Art. 6(1)(b)) — processing your account data, tracking logs, and payment information is necessary to provide the subscription service you signed up for.
- Legitimate interests (Art. 6(1)(f)) — using Firebase Analytics and Crashlytics to maintain app quality and security. Our interest in running a stable, bug-free service is balanced against minimal privacy impact of aggregated, technical data.
- Consent (Art. 6(1)(a)) — use of the Facebook SDK for marketing attribution. You can withdraw this consent at any time via the privacy settings in the app.
- Legal obligation (Art. 6(1)(c)) — retaining financial records as required by Romanian and EU law.
6. Shared-Care Feature and Data Visibility
When you invite someone to your Pebby caregiving group, they will be able to see all tracking data in the shared profile, as well as your display name. You are responsible for only inviting people you trust. You can remove any caregiver from your group at any time from within the app, immediately revoking their access.
7. Third-Party Processors
Stripe
Payment processing. Data transferred to Stripe Inc. (USA), safeguarded by Standard Contractual Clauses. Privacy policy: stripe.com/privacy
Payment processing. Data transferred to Stripe Inc. (USA), safeguarded by Standard Contractual Clauses. Privacy policy: stripe.com/privacy
Adapty
Subscription management and in-app purchase infrastructure. Processes subscription status and transaction history.
Subscription management and in-app purchase infrastructure. Processes subscription status and transaction history.
Google Firebase
Analytics (usage patterns) and Crashlytics (crash reports). Data may be processed in the USA by Google LLC, covered by Standard Contractual Clauses. Policy: firebase.google.com/support/privacy
Analytics (usage patterns) and Crashlytics (crash reports). Data may be processed in the USA by Google LLC, covered by Standard Contractual Clauses. Policy: firebase.google.com/support/privacy
Meta Platforms (Facebook SDK)
App install and event attribution for advertising measurement. Data may be transferred to Meta Platforms Inc. (USA) under Standard Contractual Clauses. Policy: facebook.com/privacy/policy
App install and event attribution for advertising measurement. Data may be transferred to Meta Platforms Inc. (USA) under Standard Contractual Clauses. Policy: facebook.com/privacy/policy
We do not sell your personal data to any third party.
8. International Data Transfers
Some of our third-party processors are based outside the European Economic Area (EEA), primarily in the United States. Where this is the case, we ensure appropriate safeguards are in place — specifically, Standard Contractual Clauses (SCCs) approved by the European Commission — to protect your personal data in accordance with GDPR requirements.
9. Data Retention
We retain your account and tracking data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain certain records (e.g., financial transaction records, which we may keep for up to 7 years under Romanian accounting law).
Anonymised, aggregated analytics data that cannot be linked back to you may be retained indefinitely.
10. Your Rights Under GDPR
As an EU resident, you have the following rights regarding your personal data:
Right of accessRequest a copy of all personal data we hold about you.
Right to rectificationAsk us to correct inaccurate or incomplete data.
Right to erasureRequest deletion of your data (“right to be forgotten”).
Right to portabilityReceive your data in a structured, machine-readable format.
Right to restrictionAsk us to limit how we process your data in certain circumstances.
Right to objectObject to processing based on legitimate interests.
To exercise any of these rights, email us at contact@marius.host. We will respond within 30 days. You also have the right to withdraw consent for marketing/Facebook SDK processing at any time via the app’s privacy settings, without affecting the lawfulness of prior processing.
11. Security
We take the security of your data seriously. All data is transmitted over encrypted connections (TLS/HTTPS). Data is stored with access controls limiting who within our organisation can view it. Payment data is never stored on our servers — it is tokenised and handled entirely by Stripe.
No system is 100% secure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by GDPR.
12. Children’s Privacy
Pebby is designed for and marketed to adults (18+). We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, please contact us at contact@marius.host and we will promptly delete the account.
Baby tracking data (e.g., feeding and sleep logs) is entered by adult caregivers and is associated with the adult’s account, not with the baby as an identified individual.
13. Changes to This Policy
We may update this Privacy Policy from time to time. For material changes, we will notify you at least 30 days in advance by email or via an in-app notice. The “Effective date” at the top of this page will always reflect the most recent version. Continued use of Pebby after changes take effect constitutes your acceptance of the updated policy.
14. Contact Us & Supervisory Authority
For any privacy-related questions, requests, or complaints:
CREATIVE VLU SOLUTIONS SRL
contact@marius.host
CREATIVE VLU SOLUTIONS SRL
contact@marius.host
If you are not satisfied with our response, you have the right to lodge a complaint with the Romanian data protection supervisory authority:
ANSPDCP — Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
www.dataprotection.ro
www.dataprotection.ro