Joey is the baby tracker we built for our own family. It logs feeds, sleeps, nappies, pumps and growth, keeps every phone in the family in step, and encrypts everything before it leaves the phone. We can't read your data, and we built it that way on purpose.
No accounts. No ads. No trackers. How that actually works ↓
What it does
We started Joey because we thought there was a better way to do this. Logging a feed or a nappy should be one tap from the home screen, not a form. The day should be readable at a glance, without adding anything up. And you should get a straight answer about where your baby's data goes, which none of the apps we tried could give. Your family's data belongs to your family, so we settled the privacy question first: everything is encrypted on the phone, there are no accounts, and the server stores nothing it can read. Then we made it work on iPhone and Android, because families don't all buy the same phone, and made the phones stay in sync. It's written in Australian English, nappies and all. And it's built by MedApps, an Australian company that writes software for hospitals, so it's looked after properly rather than being someone's weekend project.
See it
Widgets
Real buttons on the home screen, not shortcuts into the app — each one a tile with its word on it: start a breastfeed on the left or right, switch sides mid-feed, log a nappy in one tap, start and stop sleeps and pumps. Every tap is queued before it's processed, so a widget press is never lost — even if the phone is having a moment.
Privacy, structurally
Every entry is encrypted on your phone with AES-256-GCM before it syncs. The encryption key is generated on the first parent's phone and never sent to the server — it travels only sealed to a specific device, approved in person. What the server stores is ciphertext.
This isn't a privacy policy that could change with the next funding round. It's arithmetic. We couldn't read your data if we were subpoenaed, breached, or acquired — the server never has the key.
"A deliberately dumb, end-to-end-encrypted sync log."
— how the server describes itself, in its own source code. It cannot tell a nappy from a milestone.
We list both columns because honesty about the left one is what makes the right one credible.
Nobody signs up for anything. A new phone joins by showing a QR code to a parent, in person, who scans and approves it. Grandparents don't want another password, and a private family app has no business running an identity database — so there isn't one.
Take a device out of the family and the encryption key and the server token rotate. The removed phone can't read anything new and can't write anything, ever again. Every entry is also signed by the phone that wrote it, inside the encrypted blob — forged entries are dropped and logged.
End-to-end encryption cuts both ways. There is no "forgot password" — the server can't reset what it can't read. At setup, Joey generates a printable recovery document; keep it somewhere real. We think a tracker this intimate should fail closed.
Who's behind it
Joey is developed by MedApps Pty Ltd, an Australian health-technology company whose software runs inside hospitals — an environment where information security is audited, not assumed. MedApps is certified to ISO/IEC 27001:2022, the international standard for information security management systems, for the design, development, operation and support of its Med App platform (certificate AMER36931).
Joey is a much smaller thing than a hospital platform, but it's built under the same roof and the same discipline: minimise what's collected, encrypt what's kept, and design so that trust doesn't depend on anyone's good behaviour — including ours.
$0 Free while we get it right. No ads, no accounts, and the growth charts are never held hostage. If we ever charge for something, the families already using Joey will hear it from us first.
One honest note on numbers: we do keep our own usage counts, on our own server. How many families and phones exist, and which days each phone synced, tied to a random device id rather than a person, kept for six months. That is the whole of Joey's analytics. Nothing goes to Google, Firebase Analytics or anyone else, and there is no advertising or tracking code in the app.