Privacy Policy

Effective and last updated: 7 August 2026

This policy explains how Wular Ltd ("Wular", "we", "us" or "our") handles information when an adult parent or caregiver uses the Dodo Track mobile app, website, API, widgets, Apple Watch features, Siri Shortcuts or Amazon Alexa skill (together, the "Service"). Dodo Track is intended for adults. It is not intended for children to operate independently.

1. Information we process

What we process depends on the features you choose to use.

2. Where information comes from

• From you: information you enter, upload, select or send, including information entered while using a guest account.
• From another caregiver: records added to a baby profile shared with you, invitations, and actions by other approved caregivers.
• From sign-in providers: Apple, Google and Firebase may provide an account identifier and, where authorised, email address, name or profile information.
• From app stores and RevenueCat: product, transaction, entitlement, platform and refund information.
• From the device and integrations: device settings, push token, locale, time zone, Siri/App Intent parameters, Alexa skill requests, and routine technical records.

3. Why we use information

Some care records may constitute special-category health data under UK or EEA law. Where that law applies, Wular relies on explicit consent in addition to the ordinary basis above. Only an adult with the authority to provide the information and consent to its processing should add it. You can withdraw consent by deleting the relevant records or account and by contacting us. Withdrawal does not affect processing already carried out lawfully, but it may prevent us from continuing to provide features that require those records.

4. Family sharing

A baby owner can invite adult caregivers. Approved caregivers can see the shared baby profile and its records, including care information and memories, and may add records of their own. Other approved caregivers can see who logged an activity. Owners control invitations and caregiver access, but information already seen or separately saved by another person cannot be recalled by Wular. Invite only people you trust and remove access when it is no longer needed.

5. Photos, memories and Google AI

• Before a new photo is stored, Dodo normalises it and removes EXIF, IPTC and XMP metadata, including embedded location metadata. The date you choose for the memory may still be stored as part of the record.
• Original and generated images are stored privately in Cloudflare R2. Dodo normally displays them through expiring, signed links rather than permanent public links.
• If you request an AI caption suggestion, age, milestone, memory type and any note or context supplied for the suggestion are sent to Google Gemini.
• If you select an AI keepsake, the selected photo is sent to Google Gemini. It may first be analysed to check that it is a usable baby photo and to describe limited scene characteristics, then processed again to generate the chosen keepsake.
• AI output may be inaccurate or unexpected. AI analysis is used only to provide the requested creative feature; it is not used to identify the child, diagnose health, or make a legal or similarly significant decision.

You can use Dodo without creating an AI keepsake. A manual photo memory is stored without sending the photo to Google AI for keepsake generation, although separately requesting AI caption suggestions sends the text context described above.

6. Voice and Apple companion features

Amazon Alexa

When you enable and link the Dodo Track Alexa skill, Amazon processes your spoken request under Amazon's own terms and privacy policy. The Dodo skill receives a structured Alexa request containing an Alexa user identifier, the interpreted intent and slot values, which can include a baby name or care activity. Wular stores the link between that Alexa identifier and your Dodo account, plus link and last-use timestamps. The Dodo backend does not receive the raw Alexa audio through the skill request. Disconnecting Alexa removes the stored account link; deleting your account removes Alexa links and pairing-code records held by Wular.

Apple, Siri, widgets and Watch

Apple processes Siri speech and makes resolved App Intent parameters available to the Dodo extension. The extension sends the selected baby identifier, activity identifier and requested action or query to Wular's API; Wular does not receive the raw Siri audio through this integration. Dodo uses Apple's protected App Group and Keychain mechanisms to share selected configuration and authentication material with its own widgets, intents and Watch components on your device. Apple may also process sign-in, App Store purchase and push-notification information under Apple's own terms and privacy policy.

7. Service providers and disclosures

We do not sell personal information, serve third-party advertising, or use Dodo data to track you across unrelated companies' apps or websites. We disclose information only as needed to provide the Service, follow your instructions, protect users, or comply with law.

We may also disclose information when required by law, court order or a competent authority; to investigate fraud, abuse or a threat to safety; or as part of a corporate transaction, subject to appropriate confidentiality and data-protection safeguards.

8. International transfers

Wular and its providers may process information outside your country, including in the United Kingdom, European Economic Area and United States. Where UK or EEA transfer rules apply, a restricted transfer must be covered by an applicable lawful mechanism. Depending on the provider and destination, that may be an adequacy decision, the UK International Data Transfer Addendum or Agreement, or European Commission Standard Contractual Clauses, together with supplementary safeguards where required. Providers may use their own transfer mechanisms for information they process as independent controllers. Contact us to ask about the safeguard applicable to a particular transfer.

9. Retention and deletion

• Account and Dodo records: kept while the account is active and as needed to provide the Service. Individual activities, measurements and memories can be deleted in the app where that feature is available.
• Photos and keepsakes: kept until the associated memory, owned baby or account is deleted, unless deletion must be retried because storage is temporarily unavailable.
• Invites, device tokens, preferences and companion links: kept while needed for the feature or until the relevant access, device, link or account is removed.
• Purchase records: Wular's copy is kept with the account and as needed for entitlement, refund, fraud and legal obligations. Apple, Google and RevenueCat retain their own records under their policies and legal duties.
• Support, security and operational records: kept only as long as reasonably needed to answer the request, diagnose problems, secure the Service, comply with law or establish and defend claims.

Deleting a Dodo account removes the user's Wular profile, owned baby profiles and their records, records created by that user on shared babies, private memory media, caregiver access, device tokens, notification preferences, Alexa links and Wular's purchase mapping. Some shared custom configuration may be transferred to the baby owner so that the remaining family's records continue to work. The app also asks Firebase to delete the sign-in identity. If provider re-authentication or manual verification is required, contact us. Provider records, legal records and disaster-recovery copies may take longer to expire and are not available through the live Service while pending deletion.

10. Security

We use measures designed to protect information, including encrypted network transport, authenticated API access, per-baby access checks, protected on-device credential storage for Apple companion features, private media storage, expiring media links, upload validation and removal of embedded photo metadata. No service can guarantee absolute security. Please protect access to your device and account and tell us promptly if you believe an account or invitation has been compromised.

11. Your choices and rights

Depending on where you live, you may have rights to:

• access personal information and obtain a copy;
• correct inaccurate or incomplete information;
• delete information or the account;
• restrict or object to certain processing;
• receive information you provided in a portable format;
• withdraw consent at any time; and
• complain to a data-protection authority. In the UK, this is the Information Commissioner's Office (ICO).

You can manage records, caregivers, notifications, Alexa and account deletion in Settings. You can export Dodo records from the app. To exercise a right or ask a privacy question, email contact@wular.us. We may need to verify the request and your authority over a child's or shared family's information. Rights are subject to lawful exceptions.

12. Children

Dodo is an adult caregiver tool and does not offer child-operated accounts. An adult who adds a child's information must have parental responsibility, appropriate permission, or another lawful basis to do so. Do not add information about a child if you lack that authority. If you believe a child has used Dodo directly or information was added without authority, contact us so we can investigate and remove it where appropriate.

13. Website and cookies

The public Dodo website is a static informational site and does not currently set advertising or analytics cookies. Basic hosting and security logs may still be generated when the site is requested. If this changes, we will update this policy and provide any consent controls required by law.

14. Changes to this policy

We may update this policy when the Service, providers or law changes. We will post the revised policy here, change the date above and provide additional notice in the app when a change materially affects how we use information or where consent is required.

15. Contact