Privacy Policy

1. What this document is

Ninlo is an assistant app for parents in the form of a Telegram Mini App: a baby-care diary (feeding, sleep, diapers), a vaccination calendar, doctor visits, growth, solid foods, a milk bank, notes, and reference materials.

This Policy explains what data we collect, why, how we store it, and what rights you have. By using the app, you agree to this Policy.

2. What data we collect

Telegram profile data — name, username, Telegram ID, interface language, profile photo (if you upload one in the app).

Data you enter yourself — the child's name, age, sex, photo; tracker records (feeding, sleep, diapers); health data (vaccinations, doctor visits, medications, symptoms, growth, allergies); solid foods; milk bank entries; notes and attachments (photos/documents).

Premium payment data — the fact and date of payment, the amount in Telegram Stars, the Telegram transaction ID. We never have access to card details or other payment credentials — payment is processed entirely on Telegram's side.

Technical and statistical data — pages you open in the app, date of last activity — used in anonymized form, for analytics on feature usage and to improve the app.

3. Why we process this data

To make the app work: storing and showing your records, calculating the child's age, the vaccination calendar, reminders.

To send reminders and notifications (for example about vaccinations, medications, milk expiry) — you can turn off any of them individually in Settings.

So that several family members (mom, dad, grandma, etc.) can jointly keep records for the same child.

To improve the app — anonymized usage statistics help us understand which features are needed and which aren't.

Legal basis for processing — performance of a contract (providing the app's functionality under the terms of the Offer), your consent (analytics and non-essential cookies on ninlo.app, notification broadcasts), and legitimate interest (security, preventing abuse).

4. Shared access within the family

Data about the child is available to all family members invited by the family admin via a code or invite link. The role ("admin" / "member" / "view only") determines who can edit and who can only view.

The family admin can delete the family — this removes every member's access to shared data with no way to recover it.

5. Who we share data with

We do not sell or share data from the app itself (the diary, tracker, notes, etc.) with advertisers or third parties for marketing purposes.

To run the app we use technical service providers — backend hosting, database, storage for photos/documents, Telegram (as the Mini App launch platform). These providers only process data within the scope of providing their technical services.

Separately, our promo website ninlo.app (not the app itself) uses advertising and analytics services — see section 10 below for details.

6. How long we keep data

Data is stored for as long as your account and family exist in the app. If the admin deletes the family, all related data (children, tracker, notes, photos) is deleted with no way to recover it.

You can ask us to delete your user profile (not tied to family data) — write to us via the "Support" section in the app.

7. Data about children

The app is meant to be used by parents/guardians who enter data about the child themselves. The child is not a user of the app and does not go through their own authentication. The user who enters data about the child is responsible for its accuracy and lawfulness.

8. Security

All data exchange between the app and the server is encrypted (HTTPS). Authentication happens through Telegram's official verification mechanism (Telegram initData) — we don't use separate passwords. Access to family data is limited by the member's role.

9. Your rights

You have the right to: find out what data about you is stored (right of access); request correction of inaccurate data (right to rectification); request deletion of your data (right to erasure) — except where the data is needed to perform an ongoing contract; request restriction of processing in certain cases; receive your data in a structured, machine-readable format (right to data portability); object to processing based on legitimate interest; withdraw consent at any time, which does not affect the lawfulness of processing before the withdrawal — simply by stopping use of the app and/or deleting the family, if you are the admin.

If you are located in the European Union, the EEA, or the United Kingdom, you also have the right to lodge a complaint with your country's data protection supervisory authority if you believe the processing of your data violates applicable data protection law.

To exercise any of these rights — the "Support" section in Settings, or support@ninlo.app.

10. International data transfers

Our technical service providers (backend hosting, database, storage for photos/documents) may process data on servers located outside your country of residence, including in the European Union and the United States. In such cases, we rely on these providers' contractual and technical safeguards to ensure an appropriate level of data protection.

11. Analytics and advertising on ninlo.app

The app itself (Telegram Mini App) does not use cookies — authentication happens through Telegram's official mechanism, with no web cookies involved.

Our promo website ninlo.app (a separate site, not the app itself), however, uses cookies and similar technologies for visit analytics and advertising: Google Analytics, Google Ads, Meta Pixel (Facebook/Instagram), visitor session recording, and Facebook Conversion API — conversion data sent to Meta's server directly from our server, without relying on cookies in your browser.

These tools are only enabled after you consent via the cookie banner on the site — you can decline non-essential cookies and keep only the ones required for the site to function.

12. Changes to this Policy

We may update this Policy — the current version is always available in the app. Continuing to use the app after an update means you agree to the new version.

13. Contacts

For questions about this Policy — support@ninlo.app or via the "Support" section in the app.