Privacy Policy

Updated: October 11, 2026

In short: your data lives on our own server, there are no third-party analytics or ad SDKs, and nothing is sold or handed to advertisers. The one exception is the Nana assistant: it processes an anonymised diary, and only you can switch it on.

What we store

Your account. Name, language, units and preferences. Telegram is linked only if you choose to, and only to invite a second adult — that adds a Telegram id and avatar.

App details. Platform, app version and the store it was installed from, as of your latest visit. We use them to handle support requests and to know which builds are still in use.

Your baby's records — everything you enter yourself: feedings, sleep, diapers, pumping and the milk stash, weight, height and head circumference, teeth, milestones, temperature, medicines and symptoms, solids, vaccinations, doctor visits, notes and photos.

Photos are stored on our server and visible only to members of your space.

Purchases and subscription. The status of Family+ and Nana+ and how long the subscription runs. We learn about a purchase from the receipt Apple sends or from a notification of the website's payment provider (Paddle or lava.top). When paying with a Russian card on the website you enter an email: lava.top receives it for the receipt and subscription emails, and we keep it to link the payment to your account. The free week, gifts from the developer, promotions and the free Family+ connection we record ourselves: Apple knows nothing about them.

Sign-in email. If you link an email in settings, we keep the address so we can send you a code to sign in on a new phone. Before linking we send a six-digit code to the address, so we know the email is yours. We send no emails to it other than codes. The address is deleted together with the account; you can change it in settings.

Diary without an account

The app can be used without an account: the records live in the phone's own storage and we know nothing about them. There is a price for that — the system may clear such storage when the device runs out of space, and the diary then disappears without a trace. So the app keeps a copy of the diary in its own file, and on iPhone you can also turn on a copy with us in settings: it is then sent to our server once a day and kept there encrypted. Unless you turn it on, it is not sent. On Android nothing is sent to our server: the copy is kept in a file of the app and goes into the Google backup if it is turned on on the phone.

The copy does not create an account for you: it is identified by a pair of random keys held by your phone and is not linked to a name, an email or Telegram. The encryption key is ours, so technically we are able to read the copy; we do not do that and we pass it to no one. The upload is turned on in settings next to the line about on-device storage and can be switched off at any time — the copy already uploaded is then deleted from the server. It is also deleted when you move the diary to the cloud or erase it on the phone.

What we don't do

We run no behavioural analytics. The app has no third-party analytics or ad SDKs; the only third-party libraries deliver notifications, talk to the watch and show the stores' own rating dialogs. Usage counters are kept only as daily totals that are not tied to a person or a device: how many times a day the app was opened, a payment screen was shown, Buy was tapped, a baby was added, how many installs came back a day, a week or a month later, which store they came from, how many times the server turned a request down, why and in which app version, and which errors happened in the app itself: the error text with numbers and email addresses removed, the place in the code and the version. They contain no identifier, no address and nothing from the diary, so a number cannot be linked to you. The date of the first launch, used to count "came back a week later", stays on the phone. We do not sell your data, hand it to advertisers or use it for profiling.

If you found the app through an Apple ad on the App Store, on first launch the iPhone issues a one-time token, and our server uses it to ask Apple which ad campaign and keyword the install came from. The server adds one to that campaign's daily counter, and on a purchase to the same campaign's purchase counter. The token is not stored, no tracking permission is needed, and the counter cannot be linked to you.

Request log

Separately from the counters, the server keeps a technical request log: time, IP address, request path, response code and duration, platform, app version and the store the app was installed from. A request path may contain internal ids of a baby or a record, or an invitation or transfer code. The log holds no email addresses, names, diary content, photos, sign-in tokens or phone model.

We need it to look into failures and support requests: it shows whether a request reached the server and what the server answered. We look at it only for that; it is not used for advertising or profiling. Log entries are erased within 30 days and are not included in backups.

Weather

We show the weather on the home screen only if you turn it on. The app then takes the phone's approximate location and, still on the phone, coarsens it to a cell of about 10 km. These coordinates go to our server, which asks the Norwegian weather service MET Norway on its own behalf: your IP address is not passed to it. We do not store the coordinates; rounded, they appear in the request log and are erased with it. You can turn the weather off in settings.

Shared access

A second adult joins by invitation code. They see the records in your space, each of you signs in separately, and you can see who recorded what. Access can be revoked at any time.

Nana assistant

Nana answers questions about your diary: how long the baby slept, when the last medicine was given, how weight changed, how much formula goes per day. On your request ("log 4 oz") it makes a diary entry — a feed, a sleep, a diaper — and an Undo button appears under the reply. It is a separate feature, off by default: until you switch it on yourself on the introduction screen, nothing described below happens.

What is sent. Your question, a few previous turns of the conversation and an anonymised snapshot of the diary: the child's age and sex, the enabled features, the entries on sleep, feeds, diapers, weight and height, health, solids, vaccinations, visits, milestones, teeth and mood for the last 90 days. If you added your own clothes in What to wear, their type and size go too, never their photos; if weather is on, so does today's clothing pick: temperature, precipitation and wind, without the place. Children's names are replaced with placeholders and put back on your phone.

What is never sent. Names, notes, diary photos, the parent's own mood, the members of your space.

A photo with your question. You may attach a photo to a question — a formula label, a page of the medical record, a rash on a cheek. It is sent together with the question to the same language model on the same terms: only for the duration of the answer. Such a photo does not go into the diary and is not kept by us — not on the server, not on the phone once the screen is closed. Attaching it is your choice each time; Nana still never takes photos from the diary.

How it is processed. Our server builds the snapshot; the answer is produced by a language model that receives it only for the duration of the answer. Under the processing terms the data is not used to train models and is not kept after the answer. The model may run on infrastructure outside our server, including outside your country.

What we keep. The server stores neither the question nor the answer. On the phone the conversation stays while it lasts — no longer than an hour after the last message, so it survives the app being sent to the background — and is then erased; signing out erases it at once. The server keeps only the fact of a call: the time, the access level, the conversation id and the names of the tools used (a record, a chart, a search) — no content — to count the conversation limit and to see what gets used.

Voice. Your speech is recognised on the device itself, by system means — the recording never leaves the phone. Nana's answer is read aloud by a speech synthesis service through our server: it receives only the text of the answer, without the question or diary data, and does not keep it. If the service is unavailable, the device's own voice reads the answer.

Switching off. Settings, “Features”, “Nana assistant” — a switched-off toggle blocks sending on the server, not just the button.

Voice assistants

You can keep the diary by voice through a smart speaker with Alice or Alexa. It is a separate feature, and it stays off until you connect a speaker yourself. If you never connect one, nothing described below happens.

What is sent. The assistant reads out what you asked for: the baby's name, the time and amount of the last feed, when the baby fell asleep and woke up. We pass those values to the assistant's service so that it can say them. What comes back is the text of what you said to the speaker, and an entry in the diary is made from it. Photos, notes, weight, height and health data are never sent.

Who receives it. Alice is made by Yandex, Alexa by Amazon. We do not build these assistants and do not run their servers. Recording your voice and recognising speech happens entirely on their side: the audio never reaches us, only the text does. What they do with the voice and the text is covered by their own privacy policies, not by this one.

Consent and withdrawal. Before the linking code is issued, the app shows a separate screen with this same list and asks for your permission. You can withdraw it in the same place: settings, "Smart speakers", "Disconnect the speaker" — the link is deleted and the assistant stops receiving entries.

Deleting your data

You can delete your account inside the app: settings, "Delete account". Records and photos go with it. If a second parent shares the family, the space and its history pass to them.

How long we keep your data

For as long as the space is in use — indefinitely. If no member of a space has signed in for 24 months, we send a warning through the channels we have (a notification, a linked Telegram) and remind you to export your records from the app. If another 3 months pass with no sign-in after the warning, the space's accounts and data, including photos, are deleted. Any sign-in resets the clock.

Children

The app is used by parents. The records are about a child, but the child is not a user, and we do not collect data directly from children.

Medical note

This is a diary of observations, not a medical app. Vaccination timing, exemptions and any health question are the doctor's call.

Contact

Questions and data deletion — contact@apexs.tech, Telegram https://t.me/MyBabyApexsBot, or the feedback form in the app's settings.