Lactis is built so that we can't see your data — not so that we promise not to look. Hypnox runs no servers for your data. Everything lives on your devices and in your iCloud.
The short version
- Everything you log stays on your devices and, if you turn on sync, in your own iCloud.
- Lactis has no accounts, no sign-up, and no Hypnox servers that receive your data.
- There are no analytics, advertising, or tracking SDKs in the app. Its App Store privacy label is "Data Not Collected."
- You can export or permanently delete your data at any time, without asking us.
What the app stores, and where
Lactis records what you enter: feeds, sleep, diapers, pumping, tummy time, supplements, medications, measurements, notes, and your baby's profile. All of it is stored on your device in Apple's encrypted storage.
If you enable iCloud sync, that data is also stored in a private database inside your iCloud account, using Apple's CloudKit. That database belongs to your Apple Account — Hypnox cannot read it, query it, or access it. Turning sync off keeps everything on-device only.
Sync and encryption
Your data is encrypted in transit and at rest. With iCloud Advanced Data Protection turned on — for you and your caregivers — it's end-to-end encrypted.
You can enable Advanced Data Protection in Settings → your name → iCloud → Advanced Data Protection. If you share with caregivers, each caregiver needs it enabled as well.
Caregiver sharing
Sharing a baby's log uses Apple's CloudKit sharing: each caregiver joins with their own Apple Account, and the data moves directly between your iCloud and theirs. Hypnox is not in that path. You can see who has access and revoke any caregiver at any time from the app; revoking removes their access to future data.
Invite and handoff links are built so the sensitive part of the link never reaches any server — including ours. See "This website" below.
HealthKit
If you connect Apple Health, Lactis only writes the records you choose into the Health app on your device. It does not read your Health data, and nothing HealthKit-related ever leaves your device through Lactis. You can disconnect at any time in Settings → Health → Data Access & Devices.
What we never collect
- No analytics, crash-reporting, advertising, or attribution SDKs.
- No location, contacts, photos access beyond what you explicitly attach, microphone, or Bluetooth scanning.
- No account, email address, or phone number — there is nothing to sign up for.
- No sale or sharing of personal information, ever. We don't have it to sell.
If you email us (for support or anything else), we receive what you send — that's ordinary email, handled under this policy and kept only as long as needed to help you.
Your controls
- Export — your full history, from the app, any time.
- Import — bring an export back onto a new device.
- Delete — removing data in the app removes it from your device and, if sync is on, from your iCloud database. Deleting the app's iCloud data entirely is also available in iOS Settings → your name → iCloud → Manage Account Storage.
Because your data never reaches Hypnox, deletion doesn't require contacting us — there is no copy on our side to ask about.
Children's privacy
Lactis is made for parents and caregivers — adults — to record information about their own children. The app is not directed at children, and we do not knowingly collect personal information from children. The information you record about your baby stays under your control, on your devices and in your iCloud, as described above. It is never transmitted to Hypnox.
Your regional privacy rights
Privacy laws such as the GDPR (Europe) and CCPA/CPRA (California) give you rights over personal data that companies hold about you. Lactis's architecture means Hypnox does not hold your personal data — so the rights to access, correct, export, and delete are all exercised directly in the app, instantly, without a request to us. If you believe we hold any personal information about you (for example, from an email exchange), contact [email protected] and we will honor access and deletion requests.
This website
lactis.app sets no cookies and runs no analytics or tracking. Our web server is configured without access logs, so visits to these pages are not recorded by us.
Caregiver invite and handoff links open pages on this site as a fallback when the app isn't installed. The sensitive part of those links rides in the URL fragment, which your browser never sends to any server — and those pages run no analytics and never transmit, log, or store it.
If we ever add website analytics, it will be cookieless, anonymous, and aggregate-only — never personal data — and this policy will be updated first.
Changes to this policy
If we change this policy, we'll update the effective date above and, for meaningful changes, say so in the app's release notes. The architecture commitment — no Hypnox servers for your data — is the product; a change to that would be a different product, not a quiet policy edit.
Contact
Privacy questions: [email protected]
Hypnox Technologies LLC
8 The Green #15131
Dover, DE 19901, United States