Joey is the baby tracker we built for our own family. It logs feeds, sleeps, nappies, pumps and growth, and keeps both parents' phones in step. Everything is encrypted before it leaves the phone, so we can't read your data. We built it that way on purpose.
There's no account to create and no advertising in the app. See how the privacy works ↓

What it does
We built Joey because the apps we tried made simple things hard. Logging a feed or a nappy should take one tap from the home screen, and you should be able to read the whole day at a glance. You should also know where your baby's data goes, and none of those apps could tell us. So we sorted out privacy first: everything is encrypted on the phone and nobody needs an account. Then we made Joey work on iPhone and Android, because plenty of families have one of each, and kept the phones in sync. It's made by MedApps, an Australian company that writes software for hospitals, and it gets the same care.
See it



Widgets
Each widget is a set of real buttons on the home screen. You can start a breastfeed on either side, switch sides, log a nappy, or start and stop a sleep or a pump without opening the app. Joey queues every tap before it handles it, so a press is never lost, even when the phone is slow.


Privacy, structurally
Every entry is encrypted on your phone with AES-256-GCM before it syncs. The encryption key is generated on the first parent's phone and never sent to the server. It only travels sealed to a phone you approve in person. What the server stores is ciphertext: encrypted blobs it cannot open.
This doesn't rely on a privacy policy that could change later. The server never has the key, so we couldn't read your data even if someone forced us to.

"A deliberately dumb, end-to-end-encrypted sync log."
How the server describes itself in its own source code. It can't tell a nappy from a milestone.
We show you what the server can see as well, so you can judge the rest for yourself.
Nobody signs up for anything. A new phone joins by showing a QR code to a parent, who scans and approves it in person. Grandparents don't want another password, and a family app has no need to keep a list of its users, so Joey doesn't have one.
When you remove a phone from the family, the encryption key and the server token both change. After that, the removed phone can't read or add anything. Every entry is also signed by the phone that wrote it, and Joey throws away any entry that fails the check.
There's no "forgot password", because the server can't reset a key it never had. When you set up, Joey makes a recovery document for you to print. Keep it somewhere safe. It's the way back in if every phone in the family is lost.
Who's behind it
Joey is developed by MedApps Pty Ltd, an Australian health-technology company whose software runs inside hospitals, where information security is independently audited. MedApps is certified to ISO/IEC 27001:2022, the international standard for information security management systems, for the design, development, operation and support of its Med App platform (certificate AMER36931).
Joey is much smaller than a hospital platform, but the same team builds it with the same care. We collect as little as we can, and we designed Joey so your privacy doesn't depend on trusting us.
$0 Free while we get it right. There are no ads, and the growth charts will never be paywalled. If we ever charge for something, families already using Joey will hear about it from us first.
A note on numbers: we do keep our own usage counts, on our own server. We count how many families and phones there are and which days each phone synced. Each count is tied to a random device ID rather than a person, and kept for six months. That is all of Joey's analytics. Nothing goes to Google, Firebase Analytics or anyone else, and the app has no advertising or tracking code.