Privacy Policy
1. General provisions
This Privacy Policy (the “Policy”) sets out how personal data of users of the Moy Kroha service (the “Service”) is processed. The Service is available on the website and in the iPhone app distributed through the App Store. One account works on both.
The personal data operator is the person providing the Service under the name Moy Kroha (the “Operator”). The Operator determines the purposes and scope of processing, protects the data and complies with the personal data laws of the Republic of Belarus. Contact the Operator by email at moy_kroha@mail.ru or by phone at +375 29 562-63-00.
The Service is intended for parents, guardians and other legal representatives of a child. An adult user creates and uses the account and enters information about the baby themselves. The child does not register in the Service and does not enter into any agreement.
Registration is allowed for persons who may enter into such agreements under the laws of their country (usually from 18 years old). This is a requirement for the account owner, not a content rating: the Service is designed for family use and contains no adult content.
By using the Service (including by creating an account on the website or in the app), you confirm that you have read this Policy and the Cookie Policy. If you do not agree, please do not use the Service.
2. Legal framework
Personal data is processed in accordance with the laws of the Republic of Belarus, in particular:
- Law of the Republic of Belarus No. 99-Z of May 7, 2021 “On Personal Data Protection” — the official text is available on the National Legal Internet Portal of the Republic of Belarus (pravo.by);
- other laws of the Republic of Belarus applicable to the relationship between the Operator and the user.
This Policy does not limit the rights of data subjects provided by law and applies to the extent it does not contradict mandatory legal rules.
3. Categories of personal data
Depending on the features used, the Service may process:
- account data: email address, name (or nickname), password in encrypted form;
- data the user enters about the baby (for example, name, date of birth, sex and other profile fields), log entries (sleep, feeding, diapers, height, weight and other trackers), notes, uploaded images and other media;
- when using the Moy Kroha AI assistant — the text of the user's question, the generated answer, technical details of the request (time, account ID, service metadata), the date and time of consent to share questions with the DeepSeek AI service (section 12) and data needed to count the request limit and keep the request history within the Service;
- technical data: IP address, browser type, device model, operating system and app version, request time, session identifiers, app authorization tokens, cookies and similar local storage — to the extent needed to run and protect the Service (see the Cookie Policy for details);
- the city the user chooses for the weather forecast; the city name is stored in the account. The device location is not requested;
- in the iPhone app — local reminders for trackers and notes. They are created on the device according to the user's settings. The push notification token is not sent to the Operator's server. A running timer may be shown on the Lock Screen and in the Dynamic Island; this display stays on the device;
- in the iPhone app — a local copy of the data and a queue of unsent changes, so the diary opens without internet access. When the connection is back, the queue is sent to the server. Signing out clears the local copy on the device;
- crash information — only if Apple shares it with the Operator as part of standard App Store diagnostics;
- when uploading a photo or avatar — the images and related metadata (file name, size, format) that the user chooses to attach to records.
4. Purposes of processing
Personal data is processed in order to:
- conclude and perform the user agreement (provide the features of the Service);
- identify the user, enable sign-in and keep the account secure;
- send service messages (including confirmation codes by email);
- sync data between the website and the iPhone app within one account;
- show the weather forecast for the city chosen by the user;
- improve the Service, prevent abuse and provide technical support;
- count visits to the website's information pages (home, About the app, About us, articles) with the Service's own statistics;
- provide the AI assistant (process the question, generate and display the answer, count limits, keep the request history in the Service);
- comply with the laws of the Republic of Belarus where required.
5. Legal grounds
Personal data is processed on the basis of the data subject's consent (in particular, when registering and using certain features) and on other grounds provided by the Personal Data Law and other acts (for example, when processing is needed to perform the agreement with the user).
6. Operations with personal data
Personal data may be collected, organized, stored, modified, used, anonymized, blocked and deleted to the extent needed for the purposes listed in section 4.
7. Sharing and disclosure
The Operator does not sell personal data. Data may be shared with third parties when required by law or to the extent needed to run the Service, in particular with:
- the hosting provider and infrastructure that host the server API and user files;
- the email delivery service that sends confirmation codes and service notifications;
- DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd., People's Republic of China) — a third-party AI service that generates the AI assistant's answers. Only the question text and up to 5 previous messages of the same chat are sent; see section 12. Data is sent only after the user's separate consent.
Sending AI assistant questions to DeepSeek is a cross-border transfer: DeepSeek's servers are located in the People's Republic of China. It happens only on the basis of the user's separate consent, which the app and the website ask for before the first question (section 12).
The Operator shares data only with third parties that provide the same or equal protection of the data as described in this Policy and required by the App Store Review Guidelines, and only to the extent needed for the stated purpose.
When you install the iPhone app through the App Store, Apple processes your Apple Account, installation, update and diagnostic data under its own rules. The Operator does not receive your Apple Account password or payment details.
8. Retention
Personal data is kept no longer than the purposes of processing require, unless a different period is set by law or by agreement with the user.
Website visit statistics. Records of views of the website's information pages are stored on the Operator's server. The full IP address is kept for no more than 90 days, after which its last byte is zeroed (for example, 93.84.12.57 → 93.84.12.0); the other fields are used only in aggregated statistics.
Account deletion. The user can delete the account in the Service settings (Settings → Account → Delete account permanently), confirming with the password. On deletion, the user's personal data and related content (baby profiles, trackers, notes, photos, AI assistant history, etc.) are deleted or anonymized on the server. Some technical records (for example, a log of the fact of registration or deletion, service metadata without recoverable content) may be kept as permitted by law for security, accounting and dispute resolution. Registering again with the same email after deletion creates a new account.
9. Your rights
Under the Personal Data Law, you have the right to:
- receive information about the processing of your personal data;
- access your personal data;
- request correction, blocking or deletion of personal data that is incomplete, outdated, inaccurate, unlawfully obtained or not needed for the stated purpose — within the limits set by law;
- withdraw consent to processing based on consent (except where processing without consent is permitted by law);
- appeal the Operator's actions (or inaction) to the authorized state body for the protection of data subjects' rights of the Republic of Belarus and/or to court.
To exercise your rights, contact the Operator using the details in section 1.
10. Security measures
The Operator takes legal, organizational and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, distribution and other unlawful actions, in line with the nature of the Service and its risks.
11. Cookies, local storage and no tracking
The website uses cookies and browser local storage. The iPhone app has no browser cookies: the sign-in token and settings are stored in the device's secure and local storage. See the Cookie Policy (in Russian) for details.
Tracking across apps and websites. The Service does not use Apple's advertising identifier (IDFA), does not request permission to track across apps and websites, does not show behavioral advertising, does not use third-party analytics for profiling (Google Analytics, Yandex Metrica, Facebook SDK, etc.) and does not share data with ad networks or data brokers. We do not link your activity in the Service with advertising profiles on other platforms.
Our own website statistics. On the website's information pages (home, About the app, About us, articles) a small script of the Service sends a page view to the Operator's server: page address, time, referring page and utm tags, IP address, browser and device type, browser language and time zone, screen width, time on page, scroll depth and whether the visitor opened the diary. To tell repeat visits apart, a random identifier is kept in the browser's localStorage and a session identifier in sessionStorage; they are not linked to an account. The data is not shared with third parties and is used only for aggregated visit statistics. No such statistics are collected inside the diary (the signed-in part of the website).
12. Moy Kroha AI assistant
The Service offers an AI assistant that gives automated text tips based on artificial intelligence. Answers are generated by the third-party AI service DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd., People's Republic of China).
- What is sent to DeepSeek: the text of the user's question and up to 5 previous messages of the same chat (questions and answers), plus the Service's instruction for the model.
- What is not sent: name, email address, account ID, baby details, tracker records, notes and photos. The request is sent by the Operator's server, so DeepSeek does not receive the user's IP address. Users should not include names, addresses or other personal details in their questions.
- How it is collected and why: the user types the question; DeepSeek processes the text on the Operator's behalf and only to generate the answer. The question and answer are kept in the Service's request history so the user can see their chats — until the chat or the account is deleted. DeepSeek processes and stores the received text under its own privacy policy.
- Consent: until the user agrees, the AI assistant chat is closed. The consent screen says what data is sent and to whom; no message is sent until the user taps “Allow”. The consent date is stored in the account.
- Withdrawing consent: at any time in Settings → Support → “AI helper: sharing questions”, or by writing to the Operator. After withdrawal, questions are no longer sent to DeepSeek.
Under every AI assistant answer the Service shows links to related medical guidance (WHO, American Academy of Pediatrics, NHS, etc.). The full list of sources of medical information is in Settings → Support → “Sources of medical information”.
By using the AI assistant, you understand and accept that:
- answers are generated automatically and may be incomplete, inaccurate or outdated;
- the AI assistant is not a doctor, pediatrician, medical professional or other licensed specialist and does not provide medical services;
- its information is for reference only and is not medical advice, a diagnosis, a treatment plan or a basis for medical decisions;
- if the child has symptoms, gets worse, or you have doubts about their health or about the data, see a qualified doctor (pediatrician) and follow their advice; in case of a threat to life or health, call emergency services immediately.
The Operator does not guarantee the accuracy, completeness or applicability of the AI assistant's answers. The user makes childcare decisions on their own. Detailed terms and limitation of liability are in the User Agreement (in Russian).
13. Changes to the Policy
The Operator may update this Policy. The current version is published on this page with the date of the update. Continuing to use the Service after a new version is published may mean you accept the changes, unless the law or a separate notice states otherwise.
This text is for information only and is not individual legal advice. If needed, consult a qualified specialist about the legal consequences.