Privacy Policy

“First Year: Baby Diary” (“Первый год: дневник малыша”) for Android and iPhone · version of 28 October 2026 · Русская версия

If the Russian and English versions differ, the Russian version prevails.

1. Who we are

The app is developed and distributed by Emil Ilgamovich Fatullaev (self-employed, Russia) (the “developer”). Privacy questions: fadupishme@yandex.ru.

2. What you enter and where it is stored

You enter information about your child and their care yourself: name, sex, date of birth, gestational age at birth, weight, length and other measurements, feedings, pumping and stored breast milk, sleep, diapers, walks, baths, solid foods, teething, vaccinations, medicines, doctor visits, illness entries (temperature, symptoms, what was given), notes, milestones, a shopping list and the look of the drawn baby. Some of this information concerns the child's health.

• This data is stored in your phone's memory, in the app's database.
• The developer does not receive it: the app has no server of its own, no analytics and no usage statistics.
• The sleep forecast (optional, “More → Sleep forecast”) is calculated on the phone from the diary entries — sleep, feedings and the child's age. Neither the entries nor the forecast are sent anywhere.
• If system backup is turned on on your phone (Android backup to your Google account, or iPhone backup to iCloud / a computer), the diary database may be included in that backup. It is kept in your account under Google's or Apple's terms; the developer has no access to it.
• You can delete the data by deleting the app (on Android also with “Clear data” in the settings). A baby profile with all its entries is deleted via “Baby and feeding → Delete baby profile”.

2a. Child's documents

In “More → Documents” you can save numbers and photos of your child's documents (e.g. birth certificate, insurance), test results and discharge papers. They are stored only on your phone, in the app's private folder:

• they are encrypted (AES-256) with a key created in the phone's secure storage (Android Keystore, Keychain on iPhone) that never leaves the phone — other apps cannot read them;
• they are not sent to the developer or other family members and are not included in sync, the app's backup or the cloud (Google Drive or Yandex Disk);
• on Android they are excluded from automatic backup to Google's cloud; on iPhone they may be included in the phone's backup only in encrypted form — the key is not copied to the backup, so they cannot be read from it;
• they leave the phone only when you tap “Send” yourself or choose to attach them to the pediatrician summary;
• they are deleted together with the app or with the document's “Delete” button.

2b. Photos for collages

In “More → Collage” you can make a collage of your child's photos (“First year”, “Firsts”, “Month”, “Heads”).

• You pick the photos yourself from the gallery. The app keeps reduced copies only on your phone, in the app's private folder; on Android this folder is excluded from automatic backup to Google's cloud. Photos are not sent to the developer and are not part of the diary sync.
• For the “Heads” template the child is cut out of the photo right on the phone: on Android with Google ML Kit (the model is installed by Google Play services), on iPhone with the built-in iOS Vision framework; the photos are not sent anywhere for this.
• A finished collage leaves the phone only when you tap “Share” and choose where to send it.
• They are deleted with “Remove photo” on a cell or together with the app.

3. Family sync (optional)

To let parents and relatives see a shared diary, you can turn on sync. Then:

• Each member chooses where to keep their own file: on Google Drive or on Yandex Disk. Members of one family may use different clouds.
• Google: you sign in to your Google account and allow the app to access only the files it created itself (the drive.file scope). Other files on your Drive are not visible to the app.
• Yandex: you sign in with Yandex ID and allow the app to access only its own folder on Yandex Disk (“Apps/Первый год: дневник малыша”, the cloud_api:disk.app_folder scope). The rest of your Disk, your mail and profile data are neither visible nor requested. The access token is stored only on the phone, encrypted with a key from secure storage (Android Keystore / Keychain).
• The app creates a file “Первый год — синхронизация” in your cloud with your entries. Before upload the entries are encrypted (AES-256-GCM) with the family key. The file also contains (encrypted as well) the list of family members: the names or roles you entered (“Mom”, “Grandma Olga”), who the family administrator is and who has view-only access.
• The key is passed only via a QR code, an invitation code or link between your family's phones and is never sent to the developer, Google or Yandex. In an invitation link the code comes after the “#” sign — this part of the address is not sent to the app's website when the link is opened.
• The file is shared “by link” so that your family's phones can download it without signing in. Without the key its content cannot be read.
• If a family member deletes a baby profile, the other phones are notified and can delete it too or keep it (then the baby with all entries returns to the shared diary).
• You can move your file to the other cloud (“More → Family → Move to…”): rights and entries stay the same, and the old file keeps updating for a while so the family learns the new address.
• The file is stored by Google or Yandex under your account terms (Google Privacy Policy, Yandex Privacy Policy). You can delete it in your Disk/Drive and leave the family in the app (“More → Family”).

3a. Cloud backup (optional)

If you turn on “Daily backup to the cloud”, once a day the app saves the whole diary to a file “Первый год — резервная копия” on your Google Drive or Yandex Disk (your choice). This file is not shared by link — only you can see it in your account, and you can restore the diary from it on a new phone. If you are in a family, this copy also holds your family place with the family key, so a new phone rejoins in one tap. The backup file you share yourself (Telegram, email) never contains the family key. The developer has no access to it. You can turn the backup off in “More → Backup” and delete the file in your Drive/Disk.

3b. Google API disclosure

“First Year: Baby Diary” requests access to the Google Drive API only within the https://www.googleapis.com/auth/drive.file scope. This access is used solely to create and update the app's own encrypted sync and backup files on the user's personal Google Drive.

• The app does not request access to any other files, photos or documents on your Google Drive.
• User data is not transferred to third parties, sold, or used for ad targeting or for training artificial intelligence (AI) models.
• The use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3c. Yandex Disk access

Signing in with Yandex ID is used only to work with the app's own folder on your Yandex Disk (the cloud_api:disk.app_folder scope): to create and update the encrypted sync file there, share it by link with your family's phones and save the backup. The app does not request your name, email, phone or other Yandex account data. The data is not transferred to the developer or third parties, sold, or used for advertising. You can revoke access in your Yandex account settings (“Logins and devices”).

4. Advertising

The app is free and shows a Yandex Advertising Network banner (Yandex Mobile Ads SDK). To show and count ads, the SDK may receive technical data: device model and OS version, IP address, language, ad impressions and clicks, and the device advertising identifier. The SDK includes Yandex's AppMetrica analytics service, which counts ad impressions and clicks. Your diary entries are never passed to advertising or analytics. This data is processed by Yandex LLC under its privacy policy.

• Android: you can turn off ad personalization in the phone settings (“Google → Ads” or “Privacy → Ads”).
• iPhone: the app asks once for tracking permission (App Tracking Transparency). Only if you allow it does the advertising SDK get the IDFA identifier and may choose ads based on it. If you decline, ads are shown without it and the app works the same. You can change this in Settings → Privacy & Security → Tracking.

5. Phone permissions

• Notifications and exact alarms — reminders about feedings, medicines, head side, doctor visits and breast milk storage time, morning greetings, and notifications about family entries and shopping. They are created on the phone itself.
• Camera — to scan a family invitation QR code and, if you choose to, to photograph a child's document. A document photo is stored only in the encrypted “Documents” section (see 2a).
• Photos and files — only when you pick a photo or PDF yourself to add a child's document or a collage photo, or a backup file to restore.
• Microphone — only if you record your own “shhh” for sleep sounds. The recording stays on the phone.
• Internet — for family sync, cloud backup (Google Drive or Yandex Disk) and ads. Without internet the diary works fully.
• Background activity — from time to time (on Android about every 15 minutes, on iPhone when the system allows) to download new family entries and show a notification; to keep playing sleep sounds with the screen off.

6. Children

The app is intended for adults — parents and caregivers. Information about the child is entered by an adult and stays on their phone (and, optionally, encrypted on their Google Drive or Yandex Disk).

7. Changes

If this policy changes, the new version will appear on this page, and we will show significant changes in the app.