Pediary is designed with privacy-first principles. Your family's diary lives on the phone, protected by the phone's own lock, and travels encrypted when you sync it with a second phone; we never sell it to anyone, and it does not leave your phone unless you turn something on yourself. Automatic backup is the exception, and the "Syncing and backup" section explains why.

01.Information We Collect

Pediary collects only the information necessary to provide our health tracking service. The diary lives on your phone, and it only leaves it if you choose to link a second phone or to turn on automatic backup:

Child and adult profiles (name, date of birth, optional photo, physical data and medical card if you enter them)
Health events (temperature, medications, symptoms, blood pressure and heart rate readings, blood glucose values with insulin, carbs, ketones and treated hypos, notes), lab tests and medical reports, with the pages you photograph or scan and the text read from those pages

We do NOT collect accounts, email, location data, contacts or other personal information: using Pediary requires no Pediary account. The only data that ever reaches us is anonymous, aggregated usage statistics (such as which features are used), collected only with your explicit prior consent and which you can turn on or off at any time in the app settings. It contains no personal or health information and cannot identify you. We use it solely to understand how the app is used and where to focus our improvement efforts. Messages you choose to write to us from the app are the exception: they reach us only if you send them, and the section "When you write to us from the app" explains them. Crash reports, however, always reach us: if the app closes because of an error, Firebase Crashlytics, the Google service that collects them for us, sends us the place in the code where it happened, the phone model, the system and app versions and a random installation identifier. These reports are always sent, because without them we could not fix bugs, and they contain none of your diary data. If you turn on syncing between two phones or automatic backup, your diary events (including lab tests and medical reports, with their pages), photos and profile also leave your phone, but they go into your own personal cloud space (Google Drive, Dropbox or OneDrive): no Pediary server receives them. The section "Syncing and backup" explains this in full.

02.How We Use Your Information

Your data is used on your device, and on the phones you link yourself through syncing, to:

Store and display your family's health records on your phone, and keep them in step with the second phone if you have turned syncing on
Read the text on the pages of lab tests and medical reports, to suggest the values and dates that you check and confirm before saving them. The reading happens entirely on the phone: on iPhone with the system's text recognition and, on models that support it, with Apple Intelligence, which also runs on the phone; on Android with ML Kit, Google's library for scanning and text recognition, which also runs on the phone. No page and no text is sent to Pediary, Apple or Google to be read. ML Kit sends Google only technical statistics (phone model, app version, reading settings, error codes), with no images and no text. On Android, to correct misread words, the app passes them to the spell checker chosen in the phone settings, which is part of the keyboard app (for example Gboard) and follows that app's rules
Generate health reports and summaries on your device for medical visits, including the blood pressure report for the doctor, which also includes an extract of the medical card (diagnoses, allergies, medical notes), and the blood glucose diary PDF for the diabetes doctor
Send local medication reminders via device notifications
Export data in standard formats (PDF, JSON and, for blood pressure and blood glucose, CSV) for manual sharing

If you contact us for technical support via email, we can only help with app issues. We do not have access to your health data and you will need to manually send us screenshots or exports if necessary to resolve an issue.

03.Data Storage and Security

Where the diary lives:

Pediary stores your data on your device. No Pediary server receives your diary: we run no servers that hold families' data. If you turn them on yourself, two features send data off the phone, and in both cases it goes through your own personal cloud space: syncing between two phones and automatic backup. The section "Syncing and backup" explains both.

The diary stays on the phone, protected by the phone's own lock, with no separate password to remember
On-device storage in the app's private directory (/data/data/net.pediary.android/)
No Pediary server receives your diary: all that reaches us is anonymous, aggregated usage statistics and the messages you choose to write to us from the app
Complete control: data leaves your phone only if you link a second phone or turn on automatic backup

Your Responsibility:

Since the data lives on your phone, YOU decide how to keep it safe:

Keeping a copy of your data: export it by hand whenever you want, or turn on automatic backup to your own personal cloud space, which is off to begin with
If you uninstall the app, the data on that phone is gone for good: only the copies you made yourself remain
We recommend always keeping a recent copy of your health records

04.Syncing and Backup

Pediary works with nothing linked and no account at all. If you want to, though, you can link up to four phones for each profile, for example yours, the other parent's and a grandparent's, and keep the same diary up to date; or you can turn on automatic backup. They are two separate features, both off to begin with, and each is turned on only from the app settings.

What leaves your phone:

Syncing sends out the profile, the child's or the adult's (name, date of birth, sex and photo), the diary events, including blood pressure readings and blood glucose values, with the photos and voice notes you attached, growth measurements and developmental milestones, reminders and treatments, the medical card, the doctor directory, the evolutions, the list of foods introduced, the lab tests and the medical reports, with the photographed or scanned pages and the text read from those pages. Automatic backup sends out the full export archive, meaning the same information plus your app settings. Until you turn one of them on, the diary does not leave your phone.

Which service it goes to:

The files are placed in a folder inside your own personal cloud space, the one you pick when you link the phones: Google Drive (Google Ireland Limited), Dropbox (Dropbox International Unlimited Company) or Microsoft OneDrive (Microsoft Ireland Operations Limited). No Pediary server receives them. Your relationship with the cloud service is between you and that service, and its terms and privacy policy apply: policies.google.com/privacy for Google, dropbox.com/privacy for Dropbox, privacy.microsoft.com for Microsoft. With Google Drive, Pediary can only see the files it created itself. With OneDrive, instead, the permission you grant covers your whole OneDrive, because Microsoft does not allow it to be limited to a folder that is then shared with another phone, and Microsoft's consent screen tells you so. Either way, Pediary only works inside its own folder.

Syncing is encrypted, and the keys stay on the phones:

Whatever syncing places in the cloud is encrypted on the phone before it leaves. The keys that open it stay on the linked phones and are never uploaded anywhere: neither the cloud service nor Pediary can read what you wrote.

Automatic backup is different, and we say so plainly:

The archive that backup uploads is the same file as the manual export: a ZIP archive with no password. Anyone who can open your cloud space can read it. This is a deliberate choice: a backup is needed years later, when nobody remembers a password any more, and an archive that will not open saves nothing. That is why protecting access to your cloud account matters.

How long the files stay, and who deletes them:

The files stay in your cloud space until you delete them. If you unlink the phones, the shared folder is emptied. We cannot delete anything on your behalf, because we have no access to your cloud space and do not even know what it holds.

The files may sit outside the European Union:

You choose the cloud space, and the three services keep the files in their own data centres, which may also be outside the European Union. Pediary does not decide where: the choice of service, and therefore of place, is yours, and the safeguards for the transfer are the ones the service you picked provides.

How to delete everything for real:

In the app settings, unlink the phones and turn off automatic backup; then delete the Pediary folder from your cloud space and empty the service's trash as well, since many services keep deleted files for a while; finally uninstall the app from every linked phone. Whatever the other phones already downloaded stays on those phones, and only the people using them can delete it.

05.When You Write to Us from the App

You can send us a message from the app, for example to tell us what helps you or what is missing. Writing to us is optional: if you don't, nothing is sent.

What reaches us: the text you write, together with the app version, the language and the phone's system (iOS or Android). We do not send your child's name or any identifier of your phone or account.
Where it goes: to a server run by Aruba S.p.A., in Italy, the provider that hosts our website. Your phone's IP address appears in the technical logs that Aruba keeps as the hosting provider, not in our message archive.
Who reads it: only us.
How long it stays: we delete it after 90 days.
Why we process it: because you send it to us, to follow up on what you write and to improve the app.

Please do not write names or health information: you don't need them to tell us what isn't working or what you would like.

If you want one of your messages deleted before the 90 days are up, write to privacy@pediary.net with the day you sent it and the text: we need both to find it, because the message does not carry your name.

06.Android App Permissions

The Pediary Android app requests only the permissions necessary for core functionality. Below is a complete disclosure of all permissions and why they are needed:

INTERNET: Used to send anonymous, aggregated usage statistics (e.g. which features are used), only with your explicit prior consent, so we can understand how the app is used and where to focus our efforts: it contains no personal or health data and cannot identify you. It is also used by the two features you turn on yourself, syncing between two phones and automatic backup, to reach your own personal cloud space. It is also used to send us any message you choose to write from the app. Firebase Crashlytics always uses it to send us a report when the app closes because of an error (section 1). Finally, ML Kit, the Google library that reads lab tests and medical reports, uses it to send Google the technical statistics described in section 2, with no images and no text. If you turn on neither of the two features, do not consent to statistics, do not write to us and do not read lab tests or medical reports, the app uses the network only for crash reports. You can withdraw your consent or revoke the permission at any time in the settings.
POST_NOTIFICATIONS: Used to send medication reminders that you explicitly set up. You can disable notifications in your device settings at any time. We do NOT send promotional or marketing notifications.
VIBRATE: Provides haptic feedback for medication reminder alerts. Enhances accessibility and ensures you don't miss important reminders.

Permissions We Do NOT Request:

Location access (we never track your location)
Camera or photo library (except when you explicitly choose to add a photo or to photograph the page of a lab test or medical report)
Contacts or phone access
SMS or call logs
Microphone
Bluetooth or NFC

07.Android Data Storage Details

How Your Data is Stored on Android:

Local Database: Health records are stored in an encrypted Room database on your device's internal storage, accessible only by the Pediary app.
App Data Folder: Located in the app's private directory (/data/data/net.pediary.android/), inaccessible to other apps or users without root access.
Uninstall Behavior: When you uninstall the app, ALL data is automatically deleted by Android. If you have no copy, either a manual export or automatic backup, there is no way to recover it.
No Recovery From Us: we do not hold your data, so we cannot recover or restore it if you lose your phone or uninstall the app. If you had automatic backup switched on, the copy is in your own personal cloud space and you restore it from there yourself.
Android Auto Backup: We do NOT participate in Android's automatic backup system, so your health data does not end up in Google cloud backups without your say-so. Pediary's own backup is a different thing and you switch it on yourself: it uploads to your personal cloud space the same ZIP archive as the manual export, which has no password.

08.Data Sharing

We NEVER sell your data. And we have no access to your diary at all.

No Pediary server receives, stores or transmits your family's health records. If you turn syncing on, what you write is encrypted on the phone and passes through your own personal cloud space, with the keys staying on the linked phones.

Only you control whether to share data:

How to Share Data:

Export Feature: export your health records in PDF or JSON format, and your blood pressure readings and blood glucose values in CSV too, and share with healthcare providers
Your Choice: decide what to show to the doctor, what to send, what to share
Automatic only if you switch it on: until you link a second phone, the app sends nothing from your diary by itself. Once linked, what you write reaches the other linked phones on its own, which is exactly the point; you can unlink whenever you want

Legal Requests: we do not hold your family's health data, so we cannot hand it to law enforcement or courts. This is not a promise, it follows from how the app is built: no Pediary server receives the diary, and whatever syncing places in your cloud space is encrypted with keys that stay on your phones. The exception is the messages you choose to write to us from the app, which we keep for 90 days: we process them because you send them to us, to follow up on what you write and to improve the app.

09.Your Rights and Control

You have complete control over your data:

Access: Export all your data at any time
Correction: Edit or update any health records
Deletion: Permanently delete specific records or an entire profile
Portability: Export data in standard formats (JSON, PDF and, for blood pressure and blood glucose, CSV)
Consent: Opt-in/out of any optional features

10.Children's Privacy

Pediary is designed for parents to track their children's health and, since version 3.1.0, that of the adults in the family too. If you create a profile for another adult, for example a grandparent you care for, ask for their consent first: health data is sensitive personal data. For children's profiles, we comply with COPPA (Children's Online Privacy Protection Act) and similar international regulations:

Parent/guardian consent required for all child profiles
No direct marketing to children
No social features or public sharing of child data
Parental controls for all data access and sharing

11.International Compliance

Pediary complies with international privacy regulations:

GDPR (EU): Full compliance with data protection rights
CCPA (California): California residents' privacy rights respected
PIPEDA (Canada): Canadian privacy principles followed
LGPD (Brazil): Brazilian data protection compliance

12.Data Retention

The data lives on your phone, and in the copies you decide to make:

Data exists as long as the app is installed on your device
Uninstalling the app deletes ALL data from that phone; the copies you already placed in your cloud space stay there until you delete them
We have no copies, backups or cloud storage of your data, except the messages you choose to write to us from the app, which we keep for 90 days: otherwise, the only copies that exist are yours, on your phones and in your own personal cloud space
Keep a recent copy, exported by hand or through automatic backup, so a lost phone does not take the diary with it

No 'account deletion' is needed, because a Pediary account does not exist. To delete everything: unlink the phones and turn off automatic backup in the app settings, delete the Pediary folder from your cloud space and empty the service's trash as well, then uninstall the app from every linked phone.

13.Cookie Policy and Tracking Technologies

Pediary is committed to transparency about the technologies we use on our website (www.pediary.net).

We Do NOT Use Tracking Cookies:

Our website does NOT use tracking cookies or third-party JavaScript trackers (no Google Analytics, no Facebook Pixel). Traffic statistics are produced by our hosting provider (Aruba) from its server logs, as described below.

Technical Cookies (Strictly Necessary):

The only technology we use is a Service Worker for Progressive Web App (PWA) functionality, which caches static resources (fonts, images, CSS, JavaScript) locally in your browser to enable offline access and improve loading speed. This is considered 'strictly necessary' under GDPR and ePrivacy Directive and does not require explicit consent.

Purpose: Enable offline functionality and faster page loading
Data Stored: Static website assets (images, fonts, stylesheets, scripts)
Duration: Managed by your browser cache settings
Third-Party Data: Google Fonts are cached locally; no data is sent to Google after initial download

Browser Local Storage:

We may use browser localStorage to remember your language preference. This does not track or identify you and can be cleared from your browser settings at any time.

Why We Don't Show a Cookie Banner:

We don't show a cookie consent banner because we use no non-essential cookies — only a brief informational notice. The server-log statistics do not store or read any information on your device, so under the EU ePrivacy Directive they do not require consent.

Legal Compliance:

GDPR Article 6(1)(f): Legitimate interest for strictly necessary cookies
ePrivacy Directive Article 5(3): Exemption for technically necessary cookies
CCPA: No personal information collected or sold through website cookies

Your Privacy on Our Website:

When you visit www.pediary.net, our hosting provider (Aruba) keeps standard server logs and produces aggregate, anonymous statistics — the number of visits, pages viewed and the approximate country of origin. We use this only to understand our audience and where to focus our efforts. We do not build profiles and do not identify individual visitors.

Future Changes:

If in the future we introduce cookies or tracking technologies that require consent, we will update this Cookie Policy, implement an appropriate consent banner and notify users at least 30 days before the change takes effect.

GDPRCCPAPIPEDALGPDCOPPAePrivacy

Have questions?

For privacy concerns or questions:

Email: privacy@pediary.net Data Protection Officer: dpo@pediary.net

We respond to all privacy inquiries within 72 hours.

Our Commitment:

We will notify you of any material changes to this privacy policy at least 30 days before they take effect. Your continued use of Pediary after such changes constitutes acceptance of the updated policy.

Your Privacy is Our Priority

On your phone

Encrypted sync

Never sold