joey.
a private family baby tracker

Your baby's routine is nobody else's business.

Joey logs feeds, sleeps, nappies, pumps and growth, and shares them between the family's phones within seconds. Every entry is encrypted before it leaves the phone — the server that carries it can't read a word. Neither can we.

No accounts. No subscription. No analytics. How that actually works ↓

What it does

Built by parents who got tired of the apps they were paying for.

Joey started because the tracker we liked kept breastfeeding and bottles in separate reports, and didn't run on the grandparents' Android phones. So we fixed both, then kept going.

One feeding story
Breast minutes and bottle mL in a single daily view — not two reports you reconcile at 3am. Joey suggests the next side, keeps every mid-feed switch, and asks for the volume when the bottle ends.
Log from the lock screen
Running timers live in the Dynamic Island with actual buttons — Switch, Stop, Move to bottle, Awake. A whole pump session can happen without unlocking the phone. When one parent stops a timer, it disappears from the other parent's lock screen within seconds.
Both parents, both platforms
The same app and the same interactive home-screen widgets on iPhone and Android. Nobody in the family is on the wrong side of an ecosystem.
Growth on real curves
WHO centile charts, 3rd through 97th, from the actual LMS reference data, birth to 24 months. Included, not paywalled.
Charts you can read half-asleep
A seven-day pattern chart, daily totals, and a tap into any day's 24-hour strip. Joey shows you the pattern and trusts you to draw your own conclusions.
In plain Australian
Nappies, breastfeeds, millilitres, degrees Celsius. Written in en-AU throughout, because "diaper" was starting to grate.

Privacy, structurally

The server stores blobs it cannot open.

Every entry is encrypted on your phone with AES-256-GCM before it syncs. The encryption key is generated on the first parent's phone and never sent to the server — it travels only sealed to a specific device, approved in person. What the server stores is ciphertext.

This isn't a privacy policy that could change with the next funding round. It's arithmetic. We couldn't read your data if we were subpoenaed, breached, or acquired — the server never has the key.

"A deliberately dumb, end-to-end-encrypted sync log."

— how the server describes itself, in its own source code. It cannot tell a nappy from a milestone.

What the server can see

  • that a family exists, and when it was created
  • a hash of the family's access token
  • random row IDs and timestamps on encrypted rows
  • blob sizes and connecting IP addresses, like any web server

What it can never see

  • your baby's name
  • any feed, sleep, nappy, medication or note
  • times, sides, volumes, temperatures
  • who anyone in the family is — no names, no emails, no device identifiers

We list both columns because honesty about the left one is what makes the right one credible.

No accounts, anywhere

Nobody signs up for anything. A new phone joins by showing a QR code to a parent, in person, who scans and approves it. Grandparents don't want another password, and a private family app has no business running an identity database — so there isn't one.

Removing a phone actually removes it

Take a device out of the family and the encryption key and the server token rotate. The removed phone can't read anything new and can't write anything, ever again. Every entry is also signed by the phone that wrote it, inside the encrypted blob — forged entries are dropped and logged.

The honest trade-off

End-to-end encryption cuts both ways. There is no "forgot password" — the server can't reset what it can't read. At setup, Joey generates a printable recovery document; keep it somewhere real. We think a tracker this intimate should fail closed.

Who's behind it

Built the way we build for hospitals.

ISO/IEC
27001
certified

Joey is developed by MedApp Pty Ltd, an Australian health-technology company whose software runs inside hospitals — an environment where information security is audited, not assumed. MedApp is certified to ISO/IEC 27001, the international standard for information security management systems.

Joey is a much smaller thing than a hospital platform, but it's built under the same roof and the same discipline: minimise what's collected, encrypt what's kept, and design so that trust doesn't depend on anyone's good behaviour — including ours.

$0 No subscription, no ads, no premium tier holding the growth charts hostage. The sync server fits comfortably inside a free hosting tier, and we intend to keep it that way.