BabyDiary – Privacy Policy
BabyDiary is developed by Rhine Bird FZ-LLC ("Rhine Bird," "we," "us," or "our"). This policy explains what data BabyDiary collects, how it's used, and your choices — in plain language, matched to what the app actually does today.
If you only read one section, read this: your recordings and notes stay on your iPhone by default. Nothing about your diary content leaves your device unless you explicitly turn on Cloud Features, and even then, only the specific note you act on is sent, only at that moment.
1. Data that never leaves your device
BabyDiary processes everything on-device by default, and none of it is transmitted anywhere — not to Rhine Bird, not to any third party — unless you explicitly turn on Cloud Features (§2).
- Free tier: audio recordings, playback, a title you type or dictate, and search over your notes' titles — all stored and processed only on your device.
- Pro tier adds on-device transcription, AI-generated summaries and titles (via Apple's on-device Foundation Models), full-text/semantic search over transcripts, and Ask-my-diary — still entirely on-device, still never transmitted anywhere.
There is no cross-device sync and no cloud backup of your notes or audio in the current version of the app.
2. Data sent to the cloud (Pro+ only, and only when you use it)
BabyDiary's Pro+ tier offers cloud-powered transcription and AI features (including Ask-my-diary), including on devices that don't support Apple's on-device AI at all. This is off by default. It only activates after you explicitly accept the in-app "Cloud Features" consent screen, and even then, only when you actually use a cloud-powered action on a specific note — never automatically, never in the background.
What gets sent: a note's audio and/or transcript-derived text is sent to BabyDiary's own backend service, which forwards it to:
- Deepgram — for cloud speech-to-text transcription (receives audio)
- OpenRouter, which routes the request to an underlying AI model provider (currently Anthropic's Claude models) — for AI-generated summaries, titles, and Ask-my-diary answers (receives transcript-derived text)
These are established third-party AI infrastructure providers used solely to produce the specific result you requested (a transcript, a summary, an answer). The underlying model provider reached through OpenRouter may change over time as we route to whichever provider best serves a given request; we'll keep this section current.
What happens to it after: BabyDiary's backend keeps audio only in a temporary file for the duration of that one request, and deletes it immediately afterward — on every path, whether the request succeeds or fails. A finished result is cached, encrypted, for up to 15 minutes so a dropped connection can be safely retried without sending (or billing) the request twice, then it's discarded. Nothing from your diary content — audio or text — is stored permanently on our servers, in our logs, in backups, or in any error report.
You can turn Cloud Features off at any time in Settings, which stops any further cloud requests immediately.
3. Account and subscription data
BabyDiary does not have user accounts. We do not collect your name, email address, or any diary profile, and we never ask you to sign in.
Subscriptions (Pro, Pro+) are purchased and billed entirely through Apple's In-App Purchase system. We never see your payment or card details — Apple handles that directly. To verify your subscription and let you use paid features, our backend stores:
- An internal, randomly generated identifier for your installation
- Apple's own transaction identifier for your subscription (encrypted at rest), used only to check entitlement status with Apple
- A device-attestation key identifier (see §4) and related technical metadata (status, timestamps)
- How much of your monthly cloud allowance you've used (a count, never the content itself)
None of this is tied to your name, email, or any personal profile — it exists purely to answer the question "does this installation have an active subscription, and how much of its allowance is left."
4. Device attestation (App Attest)
BabyDiary uses Apple's App Attest to confirm that requests to our backend are coming from a genuine, untampered copy of the app — a standard anti-abuse mechanism. This produces a cryptographic key and attestation tied to your device, not to you personally, and is not used to track you across apps or services.
5. Analytics and crash reporting
BabyDiary uses Apple's own built-in App Store Connect analytics and crash reporting only — the same OS-level, opt-in mechanism used across the App Store. We do not use any third-party analytics SDK, and your diary content is never included in any crash report or telemetry.
We do not use advertising, do not show ads, and do not collect an advertising identifier.
6. Permissions
BabyDiary requests microphone access to record your voice notes, and speech recognition access to turn them into text on your iPhone. Those are the only sensitive permissions the app requests — BabyDiary does not access your contacts, photos, location, or calendar.
7. Your choices and controls
- Delete anything, anytime. Deleting a note removes it from your device immediately. BabyDiary never deletes your notes automatically.
- Turn Cloud Features on or off at any time in Settings.
- Cancel your subscription anytime through your Apple ID account settings. Cloud Features access ends when your current billing period ends; you can also disconnect your installation's backend session immediately by turning Cloud Features off in Settings.
- Uninstalling the app removes everything stored on your device, including anything held in the Keychain for that installation.
8. Children's privacy
BabyDiary is made for parents and parents-to-be. It is not directed at children, and children are not meant to use it themselves.
The notes you record are about your pregnancy and your child, so they will often contain information about your child: their name, birth details, health moments, milestones. That information is part of Your Content and is handled exactly as §1 and §2 describe: it stays on your iPhone by default, and it leaves the device only for a cloud action you explicitly start, only for that one request, and is never stored on our servers. We do not build any profile of you or your child, and we never use your notes for advertising or to train AI models.
You decide what to record and can delete any note at any time (§7).
9. Changes to this policy
If BabyDiary's data practices change — for example, when cross-device sync or backup ships in a future version — we'll update this policy before that feature is available, and note the change here.
10. Contact us
Questions about this policy or your data: support@rhinebird.com
Rhine Bird FZ-LLC. This policy is governed by the laws of the United Arab Emirates.