Joey logs feeds, sleeps, nappies, pumps and growth, and shares them between the family's phones within seconds. Every entry is encrypted before it leaves the phone — the server that carries it can't read a word. Neither can we.
No accounts. No subscription. No analytics. How that actually works ↓
What it does
Joey started because the tracker we liked kept breastfeeding and bottles in separate reports, and didn't run on the grandparents' Android phones. So we fixed both, then kept going.
Privacy, structurally
Every entry is encrypted on your phone with AES-256-GCM before it syncs. The encryption key is generated on the first parent's phone and never sent to the server — it travels only sealed to a specific device, approved in person. What the server stores is ciphertext.
This isn't a privacy policy that could change with the next funding round. It's arithmetic. We couldn't read your data if we were subpoenaed, breached, or acquired — the server never has the key.
"A deliberately dumb, end-to-end-encrypted sync log."
— how the server describes itself, in its own source code. It cannot tell a nappy from a milestone.
We list both columns because honesty about the left one is what makes the right one credible.
Nobody signs up for anything. A new phone joins by showing a QR code to a parent, in person, who scans and approves it. Grandparents don't want another password, and a private family app has no business running an identity database — so there isn't one.
Take a device out of the family and the encryption key and the server token rotate. The removed phone can't read anything new and can't write anything, ever again. Every entry is also signed by the phone that wrote it, inside the encrypted blob — forged entries are dropped and logged.
End-to-end encryption cuts both ways. There is no "forgot password" — the server can't reset what it can't read. At setup, Joey generates a printable recovery document; keep it somewhere real. We think a tracker this intimate should fail closed.
Who's behind it
Joey is developed by MedApp Pty Ltd, an Australian health-technology company whose software runs inside hospitals — an environment where information security is audited, not assumed. MedApp is certified to ISO/IEC 27001, the international standard for information security management systems.
Joey is a much smaller thing than a hospital platform, but it's built under the same roof and the same discipline: minimise what's collected, encrypt what's kept, and design so that trust doesn't depend on anyone's good behaviour — including ours.
$0 No subscription, no ads, no premium tier holding the growth charts hostage. The sync server fits comfortably inside a free hosting tier, and we intend to keep it that way.