Privacy Policy
Last updated: September 21, 2026
BabyTime ("we", "our", or "us") respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains how we collect, use, and safeguard your information when you use the BabyTime mobile application (the "App").
1. Information We Collect
Data You Provide:
- Account Information: The App offers a single sign-in method — Sign in with Apple. Apple provides us with an anonymous user identifier and, only if you choose to share them, your name and email address (which may be an Apple private relay address). We do not operate password-based registration and never receive or store your Apple password.
- Billing Email: If you pay for a subscription in Russia through YooKassa, you must provide an email address so that a fiscal receipt can be issued, as required by Russian Federal Law No. 54-FZ. This email is used solely for issuing the receipt and identifying your purchase. Payments through YooKassa continue to be processed for existing subscribers in Russia until 2027.
- Child Profile Data: Name, date of birth, gender, weight, and height of your child(ren). This data is stored locally on your device and, if you enable iCloud Sync, in your private iCloud container.
- Activity Data: Feeding records, sleep logs, diaper changes, bath records, and growth measurements that you manually enter.
Data Collected Automatically:
- Analytics: We use AppMetrio, the developer's own analytics service, to understand how the App is used and to improve it. AppMetrio receives:
- app usage events and the screens you open — for example, that a record was added, a setting was changed, or the subscription screen was shown — as well as subscription and purchase events (plan, price, and currency);
- technical device information: device model, operating system version, app version, the country and language settings of the device (locale), and time zone;
- pseudonymous identifiers: installation and device identifiers generated by the App, Apple's identifier for vendors (IDFV), and the subscription account identifier used with RevenueCat (an anonymous identifier or, after Sign in with Apple, your Apple user identifier);
- profile attributes, such as the selected theme and appearance, the number of children, the age group of the active child (never the date of birth), whether a profile is marked as twins, subscription status, and whether notifications, iCloud Sync, widgets, or the Apple Watch app are in use.
- What Analytics Never Include: Your child's name, date of birth, photos, or notes, or the exact values in your records: times, durations, amounts, measurements, temperature readings, medication and allergen names, or reaction severity. An analytics event records that an action took place, with general details such as a duration or volume range. The App filters out parameters that look like names, email addresses, or other personal data before anything is sent.
- Health Details in Analytics: When you mark a vaccination, a tooth, or a developmental milestone, the event states which item from the App's built-in catalog was marked (the vaccine from the schedule, the tooth, or the milestone status); a medication entry only reports whether a temperature was recorded, never its value. These events are linked to the pseudonymous identifiers described above, not to your child's name or your email address, and are not sent while usage statistics are turned off.
- No Tracking: The App does not use the Advertising Identifier (IDFA), does not track you across apps and websites owned by other companies, and therefore does not request App Tracking Transparency permission. To measure Apple Ads campaigns, the App uses the attribution token of Apple's AdServices framework, which does not require tracking permission; this token is sent to AppMetrio and RevenueCat.
- Crash Reports: Crash and error reports are sent to our self-hosted GlitchTip service using the Sentry SDK. A report contains the stack trace, the error type or code, the device model, the operating system version, and the app version and build, and it may also record that the App stopped responding. Reports contain no personal data or user identifiers, no screenshots, no screen layouts, no network request addresses, and no error message text.
- Opt-out: Analytics and crash reporting are enabled by default and can be turned off in Settings → Privacy → Usage statistics. The switch takes effect immediately and is remembered on the device. While it is off, no analytics events or crash reports are sent, apart from a single event recording that the switch was turned off. Core app features are unaffected.
- Purchase Records: When you buy a subscription through YooKassa, we store your Apple user identifier, billing email, plan, amount, and payment status on our own server in order to activate and restore your premium access.
2. How We Use Your Information
- To provide and maintain the App's core functionality (timers, tracking, history).
- To sync your data across your devices via iCloud (if enabled).
- To enable family sharing features between authorized family members.
- To process subscription purchases via Apple's App Store (managed by RevenueCat) or via YooKassa for payments in Russia.
- To improve the App based on usage analytics and crash reports.
- To send push notifications you have opted into (feeding reminders, milestone alerts).
3. Data Storage and Security
All personal and child-related data is stored locally on your device using Apple's SwiftData framework. If you enable iCloud Sync, your data is stored in your private Apple iCloud container (CloudKit), which is encrypted and accessible only to you.
We do not store your child's profile or activity data on our own servers. Family sharing uses Apple CloudKit sharing (CKShare), where data remains within Apple's infrastructure.
Analytics data (AppMetrio) and crash reports (GlitchTip) are stored on servers of Hetzner Online GmbH in the European Union, in a data center in Helsinki, Finland.
Billing information — your Apple user identifier, the email address you supplied for the fiscal receipt, and the history and status of your payments and subscription — is held on our own payment server. This server is operated by us and located in the Russian Federation.
We implement industry-standard security measures including data encryption at rest and in transit, biometric authentication (Face ID / Touch ID), and secure session management.
4. Third-Party Services
We use the following third-party services:
- Apple (Sign in with Apple, CloudKit / iCloud, App Store): For authentication, data synchronization, family sharing, and in-app purchases. Governed by Apple's Privacy Policy.
- Hetzner Online GmbH: Hosting of the servers that run our analytics service (AppMetrio) and our crash reporting service (GlitchTip), in a data center in Helsinki, Finland.
- RevenueCat: For subscription management and entitlement validation. RevenueCat receives the subscription account identifier, the App's analytics installation identifier, and the Apple Ads attribution token. Governed by RevenueCat's Privacy Policy.
- YooKassa (YooMoney, Russia only): For card payments made inside Russia. Card details are entered in YooKassa's own secure component and are never transmitted to or stored by us — we receive only a payment token and the resulting payment status. Governed by the YooKassa privacy and security terms.
We do not use Google Firebase, Google Analytics, or any advertising SDK.
5. Children's Privacy
BabyTime is designed for parents and caregivers, not for use by children. We do not knowingly collect personal information from children under 13. The child profile data entered by parents is stored locally or in the parent's private iCloud container, is never shared with third parties, and is not included in analytics or crash reports.
6. Data Sharing and International Transfers
We do not sell, rent, or trade your personal data to third parties. Data is only shared in these limited cases:
- With family members you explicitly invite via a sharing code.
- With Apple, for authentication, iCloud synchronization, and App Store purchases.
- With Hetzner Online GmbH, as the hosting provider of our analytics and crash reporting servers.
- With RevenueCat and, for payments in Russia, YooKassa, to process and validate your subscription.
- When required by law or to protect our legal rights.
International transfers. Analytics data and crash reports are stored in the European Union (Helsinki, Finland). The billing information described in Section 3 is held on our server in the Russian Federation, a country that has not received an adequacy decision from the European Commission. If you use the App from the European Economic Area or the United Kingdom, we rely on the necessity of this processing for performing our contract with you. You can switch analytics off at any time in Settings → Privacy → Usage statistics, and you may contact us at the address in Section 11 to request erasure of data already collected.
7. Your Rights
Depending on your jurisdiction (including under the GDPR and Russian Federal Law No. 152-FZ), you have the right to:
- Access your data at any time within the App.
- Export your data in PDF or CSV format (Premium feature).
- Delete your account and all associated data through Settings → Account → Delete Account in the App.
- Object to or request erasure of analytics data. Analytics data is pseudonymous: it is linked to the App's installation and subscription account identifiers, not to your name or email address. To request erasure of any data we hold about you, contact us at the address in Section 11.
- Withdraw consent and lodge a complaint with your local data protection authority.
8. Data Retention
Your data is retained on your device as long as the App is installed. If you delete your account, your local and iCloud data is removed within 30 days. Billing records (payment identifier, amount, date, and the email used for the fiscal receipt) are retained for the period required by applicable tax and accounting law, even after account deletion. Analytics events are stored in AppMetrio for up to 400 days and are then deleted automatically. Crash reports are stored in GlitchTip for 30 days and are then deleted automatically.
9. Promotional Campaign Data ("Premium for a repost")
Participation in the promotional campaign is entirely voluntary and is not required to use the App or to obtain Premium, which remains available for purchase. If you choose to take part, we process the following data for the sole purpose of verifying your entry and issuing the reward:
- Link to your public social media post and the platform you posted on.
- The number of likes you report, which we verify by opening the post ourselves.
- Your account identifier (the subscription-provider user id), so the reward can be attached to the right account.
- The email address you provide, used to send you the code or the reason for a refusal.
- We do not ask for or store screenshots: the public post at the link you send is the only evidence we review.
Campaign records (post link, request id and status) are kept for up to 90 days after the request is closed, which is the period during which the post must remain published, and are then deleted. You can withdraw your entry at any time by writing to support@appmetrio.com; a withdrawn entry is deleted together with its data.
The campaign is run by MyBaby. Apple is not a sponsor of the campaign and is not involved in it in any manner. The full rules are published at mybaby.su/promo.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through the App or by updating the "Last updated" date above. Continued use of the App after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or your data, please contact us:
- Email: support@appmetrio.com
- Website: pages.appmetrio.com/babytime/support