joey.
a private family baby tracker

Your baby's routine is nobody else's business.

Joey is the baby tracker we built for our own family. It logs feeds, sleeps, nappies, pumps and growth, keeps every phone in the family in step, and encrypts everything before it leaves the phone. We can't read your data, and we built it that way on purpose.

No accounts. No ads. No trackers. How that actually works ↓

What it does

Why we built it

We started Joey because we thought there was a better way to do this. Logging a feed or a nappy should be one tap from the home screen, not a form. The day should be readable at a glance, without adding anything up. And you should get a straight answer about where your baby's data goes, which none of the apps we tried could give. Your family's data belongs to your family, so we settled the privacy question first: everything is encrypted on the phone, there are no accounts, and the server stores nothing it can read. Then we made it work on iPhone and Android, because families don't all buy the same phone, and made the phones stay in sync. It's written in Australian English, nappies and all. And it's built by MedApps, an Australian company that writes software for hospitals, so it's looked after properly rather than being someone's weekend project.

One feeding story
Breast minutes and bottle mL in a single daily view — not two reports you reconcile at 3am. Joey suggests the next side, keeps every mid-feed switch, and asks for the volume when the bottle ends.
Log from the lock screen
Running timers live in the Dynamic Island with actual buttons — Switch, Stop, Move to bottle, Awake. A whole pump session can happen without unlocking the phone. When one parent stops a timer, it disappears from the other parent's lock screen within seconds.
Both parents, both platforms
The same app and the same interactive home-screen widgets on iPhone and Android. Nobody in the family is on the wrong side of an ecosystem.
Growth on real curves
WHO centile charts, 3rd through 97th, from the actual LMS reference data, birth to 24 months. Included, not paywalled.
Charts you can read half-asleep
A seven-day pattern chart, daily totals, and a tap into any day's 24-hour strip. Joey shows you the pattern and trusts you to draw your own conclusions.
In plain Australian
Nappies, breastfeeds, millilitres, degrees Celsius. Written in en-AU throughout, because "diaper" was starting to grate.

See it

The whole day at a glance, from either parent's phone.

Joey home screen with a bottle feed timer running above the day's feeds, sleeps and nappies
Home, mid-bottle — the timer started with one tap.
iPhone lock screen with a Joey pump timer running as a Live Activity
A pump session, run without unlocking the phone.
WHO growth centile chart in Joey, weight plotted against the reference curves
WHO centiles, 3rd to 97th, birth to 24 months.

Widgets

Twelve widgets, so the app rarely needs opening.

Real buttons on the home screen, not shortcuts into the app — each one a tile with its word on it: start a breastfeed on the left or right, switch sides mid-feed, log a nappy in one tap, start and stop sleeps and pumps. Every tap is queued before it's processed, so a widget press is never lost — even if the phone is having a moment.

iOS (6): Feeding · Sleep · Nappy · Pump · Recent activity · Joey control
Android (6): the same set, control widget included
Plus lock-screen widgets and Live Activity buttons in the Dynamic Island.

iPhone home screen with the Joey Recent activity widget (pump, nappy and breastfeed, each with how long ago) beside the Feeding widget with its Left, Right and Bottle tiles
iPhone: Recent activity and Feeding, side by side.
Android home screen with the Joey control widget: a rail of Feeding, Nappy, Sleep and Pump tiles showing when each last happened, and Left, Right and Bottle buttons
Android: the control widget, with when everything last happened.

Privacy, structurally

The server stores blobs it cannot open.

Every entry is encrypted on your phone with AES-256-GCM before it syncs. The encryption key is generated on the first parent's phone and never sent to the server — it travels only sealed to a specific device, approved in person. What the server stores is ciphertext.

This isn't a privacy policy that could change with the next funding round. It's arithmetic. We couldn't read your data if we were subpoenaed, breached, or acquired — the server never has the key.

Joey home screen in dark mode
Built for 3am — dark, quiet, nothing to sign into.

"A deliberately dumb, end-to-end-encrypted sync log."

— how the server describes itself, in its own source code. It cannot tell a nappy from a milestone.

What the server can see

  • that a family exists, and when it was created
  • a hash of the family's access token
  • random row IDs and timestamps on encrypted rows
  • blob sizes and connecting IP addresses, like any web server

What it can never see

  • your baby's name
  • any feed, sleep, nappy, medication or note
  • times, sides, volumes, temperatures
  • who anyone in the family is — no names, no emails, no accounts

We list both columns because honesty about the left one is what makes the right one credible.

No accounts, anywhere

Nobody signs up for anything. A new phone joins by showing a QR code to a parent, in person, who scans and approves it. Grandparents don't want another password, and a private family app has no business running an identity database — so there isn't one.

Removing a phone actually removes it

Take a device out of the family and the encryption key and the server token rotate. The removed phone can't read anything new and can't write anything, ever again. Every entry is also signed by the phone that wrote it, inside the encrypted blob — forged entries are dropped and logged.

The honest trade-off

End-to-end encryption cuts both ways. There is no "forgot password" — the server can't reset what it can't read. At setup, Joey generates a printable recovery document; keep it somewhere real. We think a tracker this intimate should fail closed.

Who's behind it

Built the way we build for hospitals.

ISO/IEC
27001:2022
certified

Joey is developed by MedApps Pty Ltd, an Australian health-technology company whose software runs inside hospitals — an environment where information security is audited, not assumed. MedApps is certified to ISO/IEC 27001:2022, the international standard for information security management systems, for the design, development, operation and support of its Med App platform (certificate AMER36931).

Joey is a much smaller thing than a hospital platform, but it's built under the same roof and the same discipline: minimise what's collected, encrypt what's kept, and design so that trust doesn't depend on anyone's good behaviour — including ours.

$0 Free while we get it right. No ads, no accounts, and the growth charts are never held hostage. If we ever charge for something, the families already using Joey will hear it from us first.

One honest note on numbers: we do keep our own usage counts, on our own server. How many families and phones exist, and which days each phone synced, tied to a random device id rather than a person, kept for six months. That is the whole of Joey's analytics. Nothing goes to Google, Firebase Analytics or anyone else, and there is no advertising or tracking code in the app.