Privacy

Finliem is a baby day-planner for families. This policy is deliberately short, specific, and written from what the app actually does — not marketing copy. Version 2026-09-21.

The short version: your child's diary lives on your phone and in your own iCloud — never with us. Everything you log about your child — their details, naps, milk feeds, nappies, and any health events — is stored on your device and synced through your own iCloud account, encrypted with a key that only your household holds. We operate no server, hold no account for you, and receive nothing from the app.

Who is responsible

Finliem is made in the UK by an independent developer, contactable atprivacy@finliem.com. For data-protection law we are the supplier of the software, not a controller of your family's data: it is processed on your own device and in your own iCloud account, under your control. Apple processes it as your iCloud provider under Apple's own terms and privacy policy. We are responsible for the little we do receive — the emails you send us (below).

What stays with you (we never receive it)

This is held in an encrypted store on your device and, so that the people you invite can see it too, in your own iCloud account. It is encrypted on your phone before it leaves, with a diary key your phones hold; we never have that key, so we cannot read the diary. The key travels between your phones in iCloud's encrypted-field storage; if you turn on Apple's Advanced Data Protection, only your devices hold the keys to that storage. Losing the key means losing the diary — the app tells you when to keep a copy of it, and we cannot recover it for you.

Sharing the diary with a co-parent or a carer uses Apple's iCloud sharing, and you choose who. Everyone you invite sees the whole diary, including any calendar events it uses.

What we receive

Nothing from the app. There is no account with us and no server of ours the app talks to: the app opens no network connection of its own to anything but Apple's iCloud, App Store and notification services. It sends no usage statistics, no crash reports and no analytics. If you use Siri with Finliem, Apple processes what you say under its own terms. Apple tells us about sales in totals, not who bought.

If you email us, we hold that email to answer it. It may contain things about your child if you include them — a screenshot, say — so please send only what the question needs. We delete support email once your question is closed.

A baby's data is added and controlled by their parent or guardian — Finliem is offered to adults, never directly to children.

What we deliberately don't do

If this ever changes

Receiving any of your child's data ourselves would be additional processing with a higher bar, and we have no plans to offer it. If that ever changes, we will not switch it on silently: it would come with explicit consent, an updated version of this policy, and the data-protection assessment that children's health data requires.

How long it is kept

Your child's diary is kept on your device and in your iCloud until you delete it — in the app (delete a child, or delete everything), or by deleting the app's data from iCloud in your iPhone's iCloud settings. We hold nothing to keep.

Your controls

This website

This website sets no cookies, runs no scripts, and loads nothing from third parties — there is nothing here to consent to, which is why there is no cookie banner. It is served from Cloudflare's CDN, which processes standard request logs (IP address, user agent) to deliver and protect the site.

Contact

Questions or concerns: privacy@finliem.com. To report a security issue, email the same address privately — please don't post it in public.