Privacy Policy
The “Mama Help Bot” app. Version of 5 November 2026. Русская версия
This document explains what data the Mama Help Bot app collects, why, who receives it and how to delete it. We try to write in plain language wherever we can.
1. Who processes the data
The data controller is Arys Ussembayev, an individual registered in the Republic of Kazakhstan, city of Almaty. Contact: support@mamahelpbot.com.
2. What data we collect
| Category | What exactly | Source |
|---|---|---|
| Account | Email address. With Sign in with Apple — your Apple ID identifier (we do not receive your real email if you chose to hide it) | You enter it |
| Child data | Name, date of birth, sex | You enter it |
| Records about the child | Sleep, feeding, walks, stool, temperature, symptoms, medication, height and weight, teeth, vaccinations, tests, doctor visits, check-ups — with date and time | You enter it |
| Files | Photos for the photo book, images and documents you attach to medical-record entries | You upload them |
| Photo book print order | Name, phone number, city, street, house, apartment | You enter it when placing the request |
| Settings | Time zone, language, reminder settings, family members | You enter it |
| Technical data | The device’s push-notification token, IP address when you request a sign-in code, service session tokens | Collected automatically |
| Subscription | Subscription status and purchase events (started, renewed, cancelled, expired) | Sent by Apple or Google (depending on where you subscribed) through RevenueCat |
| Advertising statistics (iPhone only) | The fact of install and launch, completed sign-up and subscription purchase (with amount and currency), an anonymous Meta identifier, technical device details (model, system version, language) | Collected automatically |
3. Why we need this data
- Running the app — storing your records, showing statistics, producing a report for the pediatrician.
- Signing in — a one-time code by email or Sign in with Apple. The IP address of whoever requests a code is used to protect against guessing and spam.
- Reminders — push notifications about sleep, feeding, vaccinations and doctor visits.
- Shared access — so family members see the same records about the child.
- Printing the photo book — to contact you, agree the order and deliver the finished book.
- Subscription — to unlock paid features for those who paid.
- Measuring advertising — to understand how many installs and subscriptions our Facebook and Instagram ads bring. Only the anonymous events listed above are used.
4. Who receives the data
We do not sell data or pass it to third parties for their own purposes. Data is processed by contractors without whom the app does not work:
| Who | What they receive | Why |
|---|---|---|
| Railway | All app data | Servers and database |
| Cloudflare R2 | Photos and attached files | File storage |
| Resend | Email address | Sending the sign-in code |
| Expo, Apple, Google | Device token and notification text | Delivering push notifications: Expo passes them through Apple on iPhone and through Google Firebase on Android |
| Apple, Google, RevenueCat | Subscription purchase data | Payment processing and subscription status |
| Meta Platforms (iPhone only) | Install, launch, sign-up and subscription events, an anonymous Meta identifier, technical device details. Records and child data are not sent | Measuring the effectiveness of Facebook and Instagram ads |
| Telegram | Name, phone and delivery address from the print request, the child’s name, and the finished photo book layout with the photos you uploaded — as a file or a download link | The request and layout reach the service owner so that they can contact you and pass the book to the print shop |
These services’ servers may be located outside the Republic of Kazakhstan and outside your country. By placing a print request you agree to the transfer of your contact details, delivery address, the child’s name and the book layout with your photos to the service owner and to the print shop that will make the book.
We will also disclose data if the law or a competent state authority requires it.
5. How long we keep data
- Records, files and settings — as long as your account exists.
- Sign-in verification codes — no more than an hour.
- Session tokens — until they expire; revoked ones are deleted automatically.
- Sent reminders — 30 days.
- Print requests — until the order is complete and for a reasonable period afterwards, to resolve possible delivery claims.
- Database backups — no more than 30 days. Backups are needed to restore data after a failure; older ones are deleted automatically.
6. How to delete your data
You can delete your account right in the app: Settings → Delete account. Deleting the account also deletes the records about the child, uploaded photos and files, settings and device tokens. Deletion cannot be undone.
Data disappears from backups within 30 days after deletion — backups are not kept longer. We cannot and will not restore a deleted account from a backup.
Records about the child belong to the family, not to whoever entered them, so the result of deletion depends on who is in the family:
- You are the only member — the family and all records about the child are deleted with the account.
- You are the owner but there are other members — ownership passes to one of them and the records stay available to the family. Your account and personal data are deleted, and the remaining records no longer name you as the author.
- You joined someone else’s family — only your account is deleted; the family’s records are not affected.
Before deletion the app shows which of these outcomes applies to you. If you need the records about the child deleted while other members remain in the family, write to us and we will do it in agreement with them.
If the app is no longer on your phone or you cannot sign in, write to support@mamahelpbot.com from the address your account is registered to, with the subject “Delete account”. We will delete the account and data under the same rules and confirm by reply within 30 days. You must write from that address: this is how we make sure the account is deleted by its owner.
7. Your rights
You may request a copy of your data, correct inaccuracies, restrict processing or withdraw consent. Write to us and we will reply within 30 days.
You can withdraw consent to push notifications in your phone’s settings without contacting us.
If you are in the European Economic Area or the United Kingdom, you may also request erasure of your data, receive it in a machine-readable format, object to processing, and lodge a complaint with the data protection supervisory authority of your country. We process data to perform our contract with you (running the app and the subscription), on the basis of your consent (push notifications, print request) and on our legitimate interest in protecting the service from abuse (the IP address when a code is requested). Contractors’ servers may be located outside your country; section 4 says so.
8. Children
The app is intended for parents and other adults who care for a child. It is not meant to be used by children on their own and does not collect data directly from them. All information about the child is entered by an adult — a parent or legal guardian — who is responsible for entering it lawfully.
9. Security
The connection to the server is encrypted. We do not store passwords: sign-in is by one-time code or Apple. Codes and session tokens are stored as irreversible hashes. Access to records is limited to your family: the app does not let anyone reach another child’s data.
No service can guarantee absolute protection, and we are no exception.
10. Changes to this policy
If the policy changes materially, we will tell you in the app or by email before the changes take effect. The date of the latest version is at the top of the document.
11. Contact
Questions, requests and complaints: support@mamahelpbot.com