Privacy Policy

1. Who we are

FirstWeeks is a baby-tracking and parent-guidance app operated by WAZZAPPS GLOBAL LIMITED, 16 Anexartisias street, 3036 Limassol, Cyprus (“we”, “us”). For anything in this policy, write to hello@firstweeks.app. We are the data controller for the personal data described below.

2. What we collect

Account. When you sign in with Apple or Google, we receive your name (if you choose to share it), your email address — or Apple’s private relay address if you hide your email — and a sign-in identifier. We never see your passwords. There is no email-and-password sign-up.

Your baby’s profile. The name, date of birth and sex you enter, and the due date if you enable corrected age. You provide this data; you can change or remove it at any time.

The records you create. Sleep, feeds, pumping, diapers, health entries (temperature, symptoms, medications, vaccinations), activities, measurements and notes. This is the core of the app, and it exists so you can see it — not so we can.

Your questions. Questions you ask in the app, and your thumbs-up/down feedback on answers.

Voice recordings. If you log by voice, your recording is sent over an encrypted connection to be transcribed and turned into records. We do not store your recordings. Our speech provider (OpenAI) may retain audio briefly for abuse monitoring and then deletes it; recordings are never used to train AI models. The transcript is shown to you for review before anything is saved.

Basic product analytics. We use Google Firebase to see which screens and features are used, tied to a random app-instance identifier — so we can tell, for example, where onboarding loses people. No advertising identifiers, no tracking across other apps or websites, and analytics data is not combined with your baby’s records.

Website. firstweeks.app is a content site. Our hosting provider keeps standard server logs (IP address, pages requested) for security and capacity purposes. The site sets no advertising or cross-site tracking cookies.

3. How the AI features work

Two features use third-party AI providers, and the app asks for your explicit consent in each flow before anything is sent (“Agree & Continue” / “Not now”; you can change the choice anytime in Settings). When you ask a question, we send Anthropic (via our server): your question text and recent thread messages — your baby’s name is replaced with a neutral placeholder on the device, including inflected forms — your baby’s age in weeks, and numbers-only summaries of your logs, today and by week: sleep, feedings, diapers, pumping, walks, baths, temperature and medication counts (no medication names, notes or titles). When you log by voice, your audio clip is sent as recorded to OpenAI for transcription; the baby’s name is removed from the transcript on the device before further processing, and we do not store the audio. Answers are built from our pediatric content library first, with AI used to match and phrase them.

Your questions and records are not used to train AI models — neither by us nor, under our agreements, by our providers.

4. What we never do

• No advertising in the app, ever.
• No sale of personal data. No sharing of personal data for advertising.
• No tracking across other companies’ apps or websites.
• No location collection — the app never asks for or records where you are.
• No use of your or your baby’s data for AI training.
• We never contact you about your baby’s health data; the app is a tool in your hands, not a monitoring service.

5. Where your data lives and how it’s protected

Records are stored on your device and synced, encrypted in transit (TLS) and at rest, to our cloud database so your data survives a lost phone and can be shared with a partner you invite. Access inside the database is restricted per account: your family’s records are readable by your family only.

Our providers run on servers in the European Union and the United States. Where data leaves the EU/EEA, the transfer is protected by recognized safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework. And an honest note no policy should skip: no app or transmission over the internet is completely secure — we take reasonable, industry-standard precautions, but cannot promise the impossible.

If you invite a partner, they get access to your baby’s records, and you can revoke that access at any time in Settings — revoking removes the shared records from their devices.

6. Sub-processors

We use a small number of service providers to run FirstWeeks. They process data only on our instructions:

We will keep this table current if providers change.

Beyond that, we disclose personal data only if the law requires it (for example, a valid legal request), to protect someone’s vital interests, or — if FirstWeeks is ever acquired or merged — to the successor, who will be bound by this policy or one at least as protective, with notice to you before any change takes effect.

7. Payments

Purchases are processed by Apple through your App Store account. We never see your card details. Tracking stays free regardless of subscription status.

8. How long we keep data

Your records are kept for as long as your account exists — that is the point of a baby journal. If you delete your account, it is scheduled for deletion with a 30-day grace period: sign back in within 30 days and everything is restored; after that, your account and synced data are permanently deleted from our systems. Backups age out on a rolling basis shortly after.

9. Your controls and rights

From Settings → Privacy you can:

• Export a full copy of your records as a CSV file that belongs to you.
• Delete your account and all synced data (30-day grace period, see above).
• Manage notifications and partner access.

Depending on where you live, you also have legal rights to access, correct, delete, restrict or port your personal data, and to object to processing — including under the GDPR (EU/EEA and UK) and the CCPA/CPRA (California). We honor these rights for everyone, not only where the law requires it. To exercise them, use Settings → Privacy or email hello@firstweeks.app; we respond within 30 days. For your protection we may need to verify your identity before acting on a request. EU/EEA residents may also lodge a complaint with their local supervisory authority.

We make no automated decisions about you that produce legal or similarly significant effects.

Under the GDPR, our legal bases are: performance of a contract (providing the app you signed up for), your consent (optional features such as notifications), and legitimate interests (keeping the service secure and improving it with basic analytics).

We do not “sell” or “share” personal information as those terms are defined in the CCPA, and we do not process personal data for targeted advertising.

10. Children

FirstWeeks is built for parents and caregivers and is intended for users 18 and older. The app is not directed at children, and we do not knowingly collect data from children directly. Information about your baby is entered by you and processed solely to provide the app’s features to you. You can delete it at any time.

11. Health information

Records you keep about your baby — including temperature, symptoms and medications — are used only to show them back to you, power your statistics and answer your questions. FirstWeeks is not a medical device, and nothing in the app is medical advice.

12. Changes to this policy

If we make material changes, we will update the date at the top and let you know in the app before the changes take effect. Continued use after that means the updated policy applies.

13. Contact

Questions, requests, concerns: hello@firstweeks.app.