Privacy Policy

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

For the purposes of this Privacy Policy:

• Account means a unique account created for you to access our Service or parts of our Service.
• Application refers to First Steps, the mobile application provided by the Developer.
• Developer (referred to as either "the Developer", "We", "Us" or "Our" in this Policy) refers to Ayaan Majeed, Arzoo Tex, 2.6KM Jaranawala Road, Khurianwala, Faisalabad, Pakistan.
• Country refers to: Pakistan.
• Device means any device that can access the Service such as a computer, a cellphone, or a digital tablet.
• Personal Data is any information that relates to an identified or identifiable individual.
• Service refers to the Application.
• Service Provider means any natural or legal person who processes the data on behalf of the Developer.
• Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
• You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

First Steps is a parenting guide app that helps you track child milestones, save memories (photos + diary), and chat with an AI Coach. This policy explains what we collect, why we collect it, and your choices.

Depending on features you use, you may provide:

• Account info: Sign in with Apple identifier (and email if you choose to share it)
• Child profile info: Child name/nickname, date of birth, gender, milestones, notes
• Memories & diary: Photos, captions, diary entries you create
• Developmental tracking: Milestones, Wonder Weeks leap status, daily check-in data (sleep quality, mood, feeding, parent energy)
• Parenting data: Feeding method and patterns, sleep patterns and schedules, fussiness patterns and wake windows, concerns and observations, parenting goals

AI Coach Conversations (Optional, With Consent)

If you choose to enable the AI Coach feature and provide consent:

• Questions you ask the AI Coach
• Conversation history with the AI Coach
• Child profile data used to personalize AI responses
• Developmental tracking data (milestones, leap status)
• Diary entries and parenting goals

Usage Data is collected automatically when using the Service.

Usage Data may include information such as your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.

When you access the Service by or through a mobile device, we may collect certain information automatically, including, but not limited to, the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, unique device identifiers, and other diagnostic data.

What is the AI Coach?

First Steps offers an optional AI Coach feature that provides personalized parenting advice powered by artificial intelligence. This feature uses OpenAI's language model to analyze your questions and your child's information to generate helpful, context-aware parenting guidance.

Is AI Coach Required?

No. The AI Coach is entirely optional. You can use all other features of First Steps (milestone tracking, photo memories, Wonder Weeks leaps, bonding activities, and reminders) without ever enabling the AI Coach.

Consent Requirement

Before you can use the AI Coach, you must provide explicit consent within the app. You will see a detailed disclosure screen that explains exactly what data is shared with OpenAI and why. You can decline this consent and still use the app normally.

Data Shared with OpenAI

When you grant consent and use the AI Coach, we share the following information with OpenAI, Inc. (a third-party artificial intelligence service provider based in San Francisco, California):

Conversation Data:

• Your questions and messages to the AI Coach
• Previous conversation history with the AI Coach

Child Profile Information:

• Child's age (calculated from date of birth)
• Child's gender
• Recent developmental milestones you've marked as observed
• Feeding method and patterns (if provided)
• Sleep patterns and schedules (if provided)
• Fussiness patterns and wake windows (if provided)

Developmental Tracking Data:

• Wonder Weeks leap status (current leap, upcoming leap, completed leaps)
• Daily check-in data (sleep quality, mood, feeding, parent energy)

Your Parenting Data:

• Recent diary entries and observations
• Parenting goals you've set in the app
• Concerns you've logged

What Data is NOT Shared with OpenAI

The following information is never shared with OpenAI:

• Your email address or login credentials
• Payment or subscription information
• Photos or videos from Memories
• Other users' data (if using family sharing)
• Any data from users who have not consented to AI Coach

Purpose of Data Sharing

We share this data with OpenAI for one purpose only: to generate personalized, context-aware parenting advice tailored to your child's age, developmental stage, and your specific concerns. For example, if your child is currently in a Wonder Weeks developmental leap and experiencing sleep regression, the AI Coach can provide advice specific to that situation.

How OpenAI Uses Your Data

According to OpenAI's API data usage policies:

• Not used for AI training: Your conversations are NOT used to train or improve OpenAI's AI models
• Processing only: Data is processed solely to generate responses for you
• Limited retention: OpenAI retains API data for a limited time (30 days) for abuse monitoring, then deletes it
• Security: OpenAI applies industry-standard security measures to protect your data

You can review OpenAI's full privacy policy at: openai.com/policies/privacy-policy

Your Control Over AI Data Sharing

Granting Consent:

• When you first try to use the AI Coach, you'll see a consent screen
• The screen itemizes all data that will be shared with OpenAI
• You must tap "Accept and Continue" to enable the feature
• You can tap "Decline" to disable AI Coach (app still works normally)

Revoking Consent:

• You can revoke consent at any time: Settings → Privacy & Data → AI Coach Consent
• Toggle "Enable AI Coach" to OFF
• Once revoked, no new data is shared with OpenAI
• AI Coach feature becomes disabled until you re-enable it

Managing Consent:

• View your current consent status in Settings
• See when you granted or revoked consent
• Re-enable AI Coach anytime by granting consent again

Data Security for AI Coach

All data shared with OpenAI is:

• Encrypted in transit using TLS 1.2+ encryption
• Encrypted at rest on OpenAI's servers
• Not sold or shared with other third parties by OpenAI
• Not used for advertising or marketing purposes
• Protected by OpenAI's enterprise-grade security infrastructure

Not Medical Advice — Important Disclaimer

The AI Coach provides general parenting guidance and educational information only. It is NOT a substitute for professional medical advice, diagnosis, or treatment.

Always consult your pediatrician for:

• Health concerns about your child
• Developmental delays or concerns
• Nutrition and feeding questions
• Vaccination schedules
• Any medical advice or treatment decisions

We use Supabase to store and sync your app data, including:

• Child profile data
• Milestones
• Diary entries
• Photos you upload to Memories

Facebook/Meta SDK

We use the Facebook SDK (provided by Meta Platforms, Inc.) to measure the effectiveness of our marketing campaigns and understand how users discover and interact with our app. This may involve collecting and sharing certain information with Meta.

App Tracking Transparency (ATT): When you first launch the app, we will ask for your permission to track your activity across other companies’ apps and websites. This prompt is required by Apple for any use of the Facebook SDK that involves cross-app tracking.

• If you allow tracking: the Facebook SDK may link your in-app activity with your Facebook profile and other apps/websites you use, to enable personalised advertising.
• If you deny tracking: we still use the Facebook SDK for basic, aggregated analytics (such as counting installs), but personalised advertising and cross-app tracking are disabled.

Change your choice at any time: Settings → Privacy & Security → Tracking on your iOS device.

We may use your Personal Data for the following purposes:

• To provide and maintain our Service, including to monitor the usage of our Service.
• To manage your Account: to manage your registration as a user of the Service.
• To contact you: by email or push notifications regarding updates or informative communications related to the Service, including security updates.
• To manage your requests: to attend and manage your requests to us.
• For business transfers: we may use your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets.
• For other purposes: such as data analysis, identifying usage trends, and evaluating and improving our Service, products, and your experience.

Personalized AI Coaching (With Your Consent)

With your explicit consent, we share certain information with OpenAI to:

• Generate personalized parenting advice through the AI Coach
• Provide context-aware responses based on your child's age and development
• Tailor recommendations to your specific parenting concerns and goals

We do not sell your personal information. We work with the following third-party service providers:

OpenAI (AI Coach Feature — Optional)

• Purpose: Artificial intelligence service provider for AI Coach feature
• Data Shared: Questions, conversation history, child profile, milestones, diary entries (only with explicit user consent)
• Privacy: Conversations not used for AI training; data encrypted in transit
• Control: Users must opt-in and can revoke consent anytime
• Privacy Policy: openai.com/policies/privacy-policy

Meta Platforms, Inc. (Facebook SDK — Analytics & Advertising)

• Purpose: Marketing measurement, ad effectiveness analysis, and app install attribution
• Data Collected: Device advertising ID, app opens, in-app events, purchase/subscription events, device type, OS version, app version, IP address, general location
• Cross-App Tracking: Only enabled if you grant tracking permission via the ATT prompt
• Your Control: Deny or revoke via Settings → Privacy & Security → Tracking
• Data Retention: Governed by Meta’s own retention policies
• Meta Privacy Policy: facebook.com/privacy/policy

Supabase (Data Storage)

• Purpose: Database hosting, data sync, and photo storage
• Data Shared: Account data, child profiles, milestones, diary entries, photos

Apple (Subscriptions)

• Purpose: Subscription purchase processing via the App Store
• Data Shared: Transaction and subscription status

We may also disclose information if required by law or to protect safety/security.

Business Transactions: If we are involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law Enforcement: Under certain circumstances, we may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Other Legal Requirements: We may disclose your Personal Data in the good faith belief that such action is necessary to:

• Comply with a legal obligation
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of users of the Service or the public
• Protect against legal liability

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

We will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods.

AI Coach Conversation Data

• Conversations are stored in your account as long as you maintain the account
• When you delete your account, all AI Coach conversations are permanently deleted
• When you revoke AI Coach consent, no new data is shared with OpenAI, but previous conversations remain in your account until you delete them or your account

Your information, including Personal Data, is processed at the Developer's operating offices and in any other places where the parties involved in the processing are located. This means that your information may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

The security of your Personal Data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

AI Coach Data Protection

Data shared with our AI service provider (OpenAI) is transmitted using industry-standard encryption (TLS/SSL). OpenAI has implemented appropriate technical and organizational security measures to protect your data. Your AI Coach conversations are not used to train artificial intelligence models.

You have the right to delete or request that we assist in deleting the Personal Data that we have collected about you.

You can request deletion of your account and associated data:

• In-app: Settings → Account → Delete Account
• Or by email: privacy@firststeps.blog (from your account email)

Before deleting your account, please cancel any active subscriptions through your Apple ID settings to avoid continued billing.

Deletion removes your stored child profiles, milestones, diary entries, uploaded photos, and AI Coach conversations from our active systems within 30 days, except where retention is required for legal or security purposes.

You can:

• Edit/delete diary entries and photos
• Remove child profiles
• Delete your account
• Control device permissions (photos/notifications)

AI Coach Consent Management

You have the right to:

• Grant or Deny Consent: Choose whether to enable AI Coach data sharing
• Revoke Consent: Disable AI Coach and stop data sharing with OpenAI at any time through app Settings
• View Consent Status: Check when you granted or revoked consent in Settings
• Use App Without AI: Access all other First Steps features without enabling AI Coach

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us.

If we become aware that we have collected Personal Data from anyone under the age of 13 without verification of parental consent, we take steps to remove that information from our servers.

If we need to rely on consent as a legal basis for processing your information and your country requires consent from a parent, we may require your parent's consent before we collect and use that information.

First Steps is intended for parents/guardians. Children should not create accounts. Any child information is provided by the parent/guardian for tracking and journaling purposes.

AI Processing of Children's Information

When you use the AI Coach feature with your consent, information about your child (age, developmental milestones, etc.) is processed by OpenAI to provide personalized advice. However:

• We do not collect personal information directly from children under 13
• All information is provided by parents/guardians through adult accounts
• Children do not interact with the AI Coach directly
• Parents/guardians control all data sharing through consent management

If you are under 18 years old, please have a parent or guardian review this privacy policy and provide consent for AI Coach on your behalf.

Our Service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

April 9, 2026

• Added Facebook/Meta SDK disclosure: data collected, purpose, and cross-app tracking details
• Updated Tracking section to explain App Tracking Transparency (ATT) prompt and user choices
• Added Meta Platforms, Inc. to Third-Party Service Providers list
• Added instructions for revoking tracking permission via iOS Settings
• Confirmed COPPA-compliance of Facebook SDK configuration (no personalised ads targeting children)

February 27, 2026

• Added comprehensive disclosure about AI Coach feature and data sharing with OpenAI
• Added information about user consent requirements for AI data sharing
• Added details about data protection measures for AI conversations
• Added itemized list of data shared and not shared with OpenAI
• Added AI Coach consent management rights
• Added AI-specific children's privacy (COPPA) clarification

If you have any questions about this Privacy Policy or our data practices, including AI Coach data sharing, please contact us:

Email: privacy@firststeps.blog

Address: Arzoo Tex, 2.6KM Jaranawala Road, Khurianwala, Faisalabad, Pakistan