Idea Baby Daycare

Privacy Policy

Last updated October 17, 2026

The short version

We collect what we need to run IBD: your account, the ideas and work you add, and basic technical data that keeps the Service working.
Private ideas stay private. Only you, and the collaborators you invite, can see them.
We don’t sell your personal information, we don’t show ads, and we don’t use advertising trackers.
Card payments are handled by Apple, Google, or Stripe. We never see your full card number.
You can delete your account at any time.

1. Who we are

Idea Baby Daycare (“IBD”) is operated by MECHBLOCKS, CORP (“we,” “us”). This policy explains what information we collect when you use the IBD apps and ideababydaycare.com (the “Service”), how we use it, and the choices you have. It works alongside our Terms of Service.

2. What we collect

Your account

Sign-in details. What we receive depends on how you sign in:
- Apple: an account identifier, plus your name and email if you choose to share them. The email may be a private relay address.
- Google or GitHub: your account identifier, name, email, and profile picture.
- Email code: your email address.
Profile. Your display name, handle, and anything you add to your public page, such as a bio, photo, or links.

What you create

Ideas you capture, and the receipts that record when you captured them.
Room work: notes, plans, documents, files, photos, and anything else you add to a Room.
Your activity in Community: comments, hearts, ratings, follows, reports, and blocks.

Membership and payments

Your plan, its status and dates, and where you bought it (App Store, Google Play, or the website).
When you buy on the website, Stripe collects your card details, and the billing ZIP code or address it needs to calculate tax. RevenueCat manages the membership record. We receive your membership status, not your card number.
Gift codes you redeem.

Services you choose to connect

Webhooks and agents: the addresses and access you set up, stored securely. Access credentials are encrypted.

Technical and usage information

Device: a push-notification token if you allow notifications, plus your app version and device type.
Errors: crash and error reports, which may include your user ID and device details.
How you found IBD: campaign details, and the page you first arrived on.
How you use IBD: for example, which ideas appear in your feed, so we can keep the feed useful.
Server logs: IP addresses and request details, which we use for security and rate limiting.

Cookies

The website uses one essential cookie to keep you signed in. Pages that invite you into someone’s Room also set a one-day cookie holding a random number, so a visit is counted once however often you reload; it isn’t linked to your account and isn’t used anywhere else. Our public pages (the homepage, product and pricing pages, help pages, Terms and Privacy, and public ideas and pages) use Google Analytics, loaded through Google Tag Manager, to count visits and see which pages people find useful; it sets its own cookies, such as _ga. It doesn’t run in your signed-in workspace or on private links. We don’t use advertising cookies. Some pages embed YouTube videos in YouTube’s privacy-enhanced mode, and YouTube’s policies apply when you play one.

3. How we use it

To run the Service: sign you in, save and show your work, share it with the people you choose, and keep IBD working in both the app and the browser.
To provide features you ask for, such as AI assists, receipts, notifications, email reminders, and connected services.
To handle memberships, trials, gift codes, and billing questions.
To keep IBD safe: preventing abuse and fraud, moderating reported content, and securing accounts.
To understand what’s working and fix what isn’t. We use our own records for this, plus Google Analytics on our public pages.
To contact you about your account, your membership, or important changes.
To meet our legal obligations, such as tax records.

4. Who can see your information

You. Private ideas and Rooms are visible only to you.
Collaborators you invite. They can see the Room you invite them to, and your display name.
Everyone, for what you publish. Published ideas, shared links, and your public page, along with your display name and profile, can be seen by anyone who has access to them, including people without an account. Public ideas and pages that have some substance or community activity can also appear in search engines such as Google.
Age of Robots channels. If you choose to share a published idea there, the idea and your display name are shared.
Game Room pages you switch on. A Game Room’s owner can make one machine’s leaderboard public, or open the Room as an arcade with a “Play here” page. A public leaderboard shows scores with names as the owner chose (initials unless they pick otherwise). An arcade page shows the place’s name and the names of its machines; if the venue also switches on its arcade leaderboards, the page shows top scores across the Rooms that play there, with names as the venue chose (initials unless they pick otherwise), and a Room’s owner can keep their Room off those boards. Never photos. Switching any of these off hides it.
Public receipt summaries. Each day we publish a cryptographic summary of that day’s receipts on GitHub. It contains only hashes and a count, never your content or identity.

5. Service providers

We use trusted providers to run IBD. They process information for us under their own privacy and security commitments. We share only what each one needs.

Provider	What it does for IBD	What it receives
Railway	Hosts our servers	Everything the Service processes, in transit
Neon	Database	Account, content, and activity data
Tigris	File storage	Files, photos, and images you upload
Cloudflare	Network, security, and encrypted backups	Web traffic, and encrypted backup copies
OpenAI	AI assists and automated safety checks	The content involved in each request. It is not used to train OpenAI’s models.
Postmark	Email (sign-in codes, reminders, notices)	Your email address and the message
Expo	Push notifications and app updates	Push token and notification text
Google Analytics and Tag Manager	Visit statistics for our public pages	Pages visited, the referring site, device and browser details, approximate location from your IP address, and a cookie ID. Not your account or your private work.
Sentry	Error monitoring	Error details, user ID, and device information
RevenueCat	Manages memberships across stores and the web	Your IBD user ID, membership and purchase details, and email for web receipts
Stripe	Web payments and sales tax	Card details, billing ZIP code or address, and email
Apple and Google	Sign-in, and in-app purchases	What you share with them when you sign in or buy
GitHub	Sign-in, and receipt summaries	Sign-in details, and daily hashes
Pabbly	Posting to Age of Robots channels, when you choose to	The published idea and your display name
Gravatar and DiceBear	Profile pictures	A hashed email, if you choose Gravatar, or a random seed
Unsplash	Optional cover photos for a Room	Your search words, sent by our server. A chosen photo is shown from Unsplash’s servers, so whoever views that Room or its public page fetches the image from Unsplash, which sees their IP address.
Open Library (Internet Archive)	Finding book covers and details in a Book Room	The title and author of a book you look up, sent by our server. The cover is copied into your Room, so viewers never contact Open Library.
Wikidata (Wikimedia Foundation)	Filling in film details in a Movie Room	The title, director and year of a film you look up, sent by our server. Nothing about you.
Google favicon service	The small icon on the website link of a public page	The web address of the website listed on that page. Our server makes the request; visitors’ browsers don’t.

We may also share information if the law requires it, to protect people’s safety or our rights, or as part of a merger or sale of IBD. If IBD is sold, this policy continues to apply to your information. We don’t sell or rent your personal information, and we don’t share it for advertising.

6. How long we keep it

While your account is open: we keep your information for as long as you have an account.
When you delete your account: your account, your ideas, your profile, and your Community activity are removed from the Service. What you contributed to other people’s Rooms stays there, marked “Former member,” so their shared work isn’t broken. Anything you wrote inside those contributions, such as a name in a story, isn’t automatically removed.
Game Room tournaments you join without an account: the name and initials you type stay with that tournament’s results, and a score photo stays with the score. An email you add is used only for that tournament’s alerts and results, and we remove it 30 days after the tournament ends. If the organizer deletes the tournament, its link stops working at once and your name, email and photos are removed within 30 days.
Backups: encrypted backup copies are kept for a limited time for disaster recovery, and they’re not accessible through the Service.
Payment and tax records: we keep these for as long as the law requires, even after you delete your account.

7. Your choices and rights

See and edit: you can view and change your profile and your work in the app or on the website at any time.
Get a copy: email us to request a copy of your information.
Delete: delete your account in the app’s Settings, or ask us to delete it.
Control sharing: keep ideas private, choose who to invite to a Room, and disconnect connected services or revoke agent access at any time.
Notifications: turn off push notifications in your device settings.

Depending on where you live (for example, California, other U.S. states, the UK, or the EU), you may have further rights, such as correcting your information, restricting how it’s used, moving it to another service, or objecting to how it’s used. Email us to use any of these rights. We’ll respond within the time the law requires, and we won’t treat you differently for using them. Where the law requires a legal basis, we rely on providing the Service you asked for, our legitimate interest in running and protecting IBD, your consent (which you can withdraw), and our legal obligations.

8. Children

IBD isn’t for children under 13, and we don’t knowingly collect information from them. If you believe a child under 13 has an account, email us and we’ll delete it. Teens aged 13 to 17 need a parent or guardian’s permission to buy a membership.

9. Security

We use encryption in transit, encrypted storage for access credentials and backups, signed sessions, rate limiting, and access controls on every account-specific request. No system is perfectly secure, but if we learn of a breach that affects you, we’ll tell you as the law requires.

10. Where your information is stored

IBD is run from the United States, and your information is stored and processed there. If you use IBD from somewhere else, your information is transferred to the U.S.

11. Changes to this policy

We’ll update this policy as IBD changes. When we make a material change, we’ll tell you in the app or by email, and we’ll update the date at the top.

12. Contact

Questions or requests about your privacy:
MECHBLOCKS, CORP
[email protected]