Privacy

finliem is a baby day-planner for families. This policy is deliberately short, specific, and written from the database schema — not marketing copy. Version 2026-06-15 — the same version your in-app notice refers to.

The short version: your baby's data stays on your phone. Everything you log about your child — their details, naps, feeds, nappies, and any health events — is stored only on your device, and is never sent to us. We receive your account details and anonymous app-usage stats, and nothing else, unless you explicitly choose to share anonymised data to help improve predictions (below).

Who is responsible

finliem is run by a UK-based sole trader, contactable at privacy@finliem.com (name available on request). For data-protection law (UK GDPR), the operator is the data controller for your account and the usage telemetry below. For your baby's data — which stays on your device and which we never receive — you are processing your own family's information on your own device; we are the supplier of the software, not a controller of that data.

What stays on your device (we never receive it)

• Your baby: first name, date of birth, sex.
• Care events: naps, feeds, nappies, plan changes.
• Health events you log: temperatures, medicines and doses, vaccinations, foods offered (including any reaction you note), and growth measurements.
• What the app works out from them: the planner's suggestions and the Insights it shows you.

This is held in an encrypted store on your device (it is also included in your phone's own backup — iCloud or Google — if you have that switched on; that backup is between you and Apple/Google, and we have no access to it). Because it lives only on your device, if you lose the device without a backup, that history is gone — we cannot recover it for you.

What we receive

• Your account: name, email, and a password hash (or your Apple/Google identity if you sign in that way). This is all we need to know it's you.
• Usage telemetry: the names of things that happen in the app (e.g. "opened insights") — never what you logged, and never anything that identifies your baby. It exists so we can tell the app is working. There's an off switch in Settings, and you can read back every event in Settings → What we measure.
• Anonymous accuracy stats: to see whether the planner's predictions improve as it learns, the app may send how far off a prediction was, in rough bands, with no identifier attached at all — not your account, not your device, not your baby. These can't be tied back to anyone.

Why we have it

• Account: to provide the service you signed up for (contract). A baby's data is added and controlled by their parent or guardian — finliem is offered to adults, never directly to children.
• Usage telemetry: our legitimate interest in keeping the app reliable; opt out in Settings.
• Anonymous accuracy stats: not personal data (nothing ties them to you), so they sit outside these rules — included here for honesty, not because the law requires it.

Providing your account details is necessary to use finliem. Everything about your baby is yours, on your device — logging it doesn't send it to us.

Helping improve predictions (optional, off by default)

Settings offers a button to share anonymised data to help us improve how the planner works. If you choose it, the app builds an anonymised snapshot on your device first — your baby's name removed, age coarsened, health events and any free text left out — shows you what's in it, and only then lets you send it to us. We use it to test and tune the planner offline, then delete it. It is entirely your choice; nothing about the app changes if you never do it, and we will never make it a condition of anything. The app may occasionally offer this if its predictions seem off — you can always decline, and tell it not to ask again.

What we deliberately don't do

• No third-party analytics, advertising, or tracking SDKs — ever.
• No selling, sharing, or "partners".
• We don't receive your baby's data at all in this version — there is no server copy of it to leak, sell, or be compelled to hand over.
• No payloads or tokens in our server logs.
• No automated decisions with legal or significant effects. The planner only suggests a shape for the day from the history you've logged, and shows its working — you decide what to do with it.

What's coming

A later version will let you sync across your own devices and share with co-parents and carers. That means your baby's data would travel to our server, which is additional processing with a higher bar — so we will not switch it on silently: it will come with explicit consent, an updated version of this policy, and the data-protection assessment that children's health data requires.

How long we keep it

Your baby's data is kept on your device until you delete it (or delete the app). Your account and telemetry are kept until you close your account, which removes them from our server; telemetry can be cleared sooner by turning it off. Any anonymised snapshot you chose to share is deleted after we've used it to test the planner.

Your rights

• Export: Settings → Privacy & data → Export everything gives you your complete history as JSON, straight from your device.
• Erasure: deleting a baby, or deleting the app, removes that data from your device. Closing your account removes your account and telemetry from our server.
• Access & rectification: the app itself shows everything it holds; care events can be amended on the timeline and account details edited in Settings.
• Restriction, objection & your account data: for the account and telemetry we hold, email privacy@finliem.com.
• Complaints: you can complain to the UK Information Commissioner's Office (ico.org.uk) — though we'd appreciate the chance to fix it first.

This website

This website sets no cookies, runs no scripts, and loads nothing from third parties — there is nothing here to consent to, which is why there is no cookie banner. It is served from Cloudflare's CDN, which processes standard request logs (IP address, user agent) to deliver and protect the site.

Contact

Questions or concerns: privacy@finliem.com. To report a security issue, email the same address privately — please don't post it in public.