My Family World

My Family World Privacy Policy

Last updated: 12 October 2026

Release status: Version 2.0 is available on the App Store. This policy describes the current version 2.0 app.

Version 1.6 policy scope: The storage, sharing, backup, subscription and deletion practices described below for versions 1.3 and 1.5 also apply to versions 1.5.1 and 1.6. The source-link and reminder sections for versions 1.5, 1.5.1 and 1.6 describe the current behavior. Version 1.6 adds the Family calendar, book cover pictures that load online and a Spanish interface, each described below. References to version 1.1 describe that earlier release.

Version 1.6.1 policy scope: Everything this policy says about version 1.6 also applies to version 1.6.1. Version 1.6.1 corrects version 1.6 and sends nothing new. The one new item it saves is a Parent Table allergy review marker: it is set only when the saved Parent Table allergy list is missing or damaged, it keeps Parent Table recipes closed until you confirm your allergy settings, it is stored locally in the app with the other Parent Table settings, and it is included in the encrypted backup.

Version 1.7 policy scope: Everything this policy says about versions 1.6 and 1.6.1 also applies to version 1.7. Version 1.7 changes the Home screen and the look of the sections, makes the Family calendar week easier to read, lets you mark a saved plan done and undo that mark, and lets you copy a saved plan to another day. Those marks and copies are stored with your other calendar entries in the app, are included in the encrypted backup and are removed by Reset all progress. Daily planning reminders are optional local notifications: you can choose up to two times per day and turn them off in the app, and they do not read your calendar plans. The app may occasionally ask Apple’s system to show a neutral review prompt; the system decides whether it appears, a local record limits how often the app makes that request, and there are no daily review reminders. Sharing is optional and starts only when you choose Share: the app opens the system share sheet where available, offers an explicit copy action if sharing is unavailable, and sends nothing when you cancel. Sharing the Family calendar text and sharing a link that invites someone to the app are separate actions. Version 1.7 sends nothing new to My Family World.

Version 2.0 policy scope: Everything this policy says about version 1.7 also applies to version 2.0, except where the sections marked version 2.0 below say otherwise. Version 2.0 adds an optional sharing account, a family circle for sharing the plans you choose with people you invite, and optional family circle alerts. You can use My Family World without an account, and what you enter stays in the app on your phone. Sharing is optional. If you choose to share plans with your family circle, you create a sharing account with your email address, and the plans, messages and circle details you share are stored with our service provider, Google Firebase, so the people you invite can see them. We do not sell your data, show advertising or track you.

Version 2.1 policy scope: The version 2.0 rules below also apply to version 2.1. Version 2.1 adds one new kind of family entered information: an optional allergen diary with notes you write about your child’s foods. It stays on your device, is included only when you choose an encrypted backup, is removed by Reset all progress or by deleting the child, and is never added to shared calendars or messages. Calendar sharing remains optional. Existing sharing, export and backup choices are unchanged.

My Family World ("the app", "we") is a calm companion for a parent and a young child: meal plans and a Development section with play ideas, age‑right reading guidance and real animal media, and, in version 1.6, a Family calendar for planning the day and the week ahead. This policy explains, in plain language, what the app does and does not do with your information. It is written to be honest and complete. If anything here is unclear, contact us at the address at the end.

The short version

Family-entered data is not automatically transmitted to My Family World. Your children's names, age bands, cooking logs and favourites, and in version 1.6 your Family calendar plans, stay in the app's own storage. Animals and all bundled media play from inside the app with no third‑party connection. In version 1.6, book cover pictures in the Books list are not bundled: they load online from Open Library and, for some covers, from Internet Archive servers, as described under Media. You can deliberately share selected content through the iOS share sheet or export an encrypted backup file to a destination you choose. On Apple devices, the app separately contacts Apple's subscription services to load available plans, check entitlement status, and process a purchase or restore that you request. Apple handles the Apple Account and transaction under Apple's privacy terms; My Family World sends no family-entered data in those subscription checks. (A planned optional updates email and feature request send is off in this version; if it ever turns on, this section will say so plainly.)

What the app stores, and where

My Family World stores the information below in the app's private local storage on your phone. The app does not transmit this family-entered data to My Family World on its own. My Family World shares or exports it only if you choose to share something yourself (such as a meal idea card, a moment, a cooking summary or, in version 1.6, a Family calendar preview), export an encrypted backup, or use one of the optional send features if a future version plainly enables it. Device or iCloud backups are separate copies outside My Family World's control, as described under How to review or delete your data. Apple's separate subscription-service calls are described below, and the version 1.6 book cover requests are described under Media.

Your setup, entered when you first open the app: the caregiver’s role and name, each child’s name and age band where a child profile is created, household size, daily time goal, topics, and one Mother Care setup answer, including whether “I’m expecting” was selected.
Your child's activity in the app: which animals were opened, how many sounds or recipes were played, the number of app sessions, and simple daily counts of meals prepared and time spent in the play areas. These power the parent summary screen, called Grown‑Ups in version 1.1 and Family Dashboard in version 1.3.
Your preferences: the meal allergies and disliked ingredients you set, your saved favourite dishes, the chosen language (English or Arabic, and in version 1.6 also Spanish), and the chosen colour theme. Little Meals settings and logs are kept separately for each child. Parent Table settings and favourites are household-wide on this device and apply whichever child profile is active. In version 1.6, a new installation starts in the iPhone's language when that is English, Arabic or Spanish, and otherwise in English; the app reads this setting on the device and does not send it to My Family World. You can change the language in Family Dashboard, Settings, Language.
Family calendar (version 1.6): the dates, optional times, plan types, titles, meal occasions, preparation, things to buy or bring, helper names and personal notes you enter, and optional references to app recipes or activities, with the age band they were chosen for. Baby meal and play entries belong to the selected child; family meals, notes and shopping reminders belong to the household on this device. The helper field can hold another person's name, so add only what you are comfortable keeping on this device and sharing. The calendar records plans, not what anyone ate or completed, and personal notes are not checked for age, allergy, safety or health. Entries stay until you delete them or replace them by restoring an encrypted backup, up to 1,500 entries. Calendar entries do not schedule notifications, are not synced to any account or cloud service, and are not written to or read from the iPhone Calendar app. Add to calendar in Little Meals, Parent Table and the activities adds a plan to this in‑app calendar only.
Feature requests: a copy of any suggestion you write is kept on your device.

In version 1.3, setup stores one Mother Care preference in the local family profile, including whether “I’m expecting” was selected. It is used to choose the setup path and local parent reminders and is not sent to My Family World. Browsing Mother Care does not save which stage, category, topic, symptom or urgent row is opened, or any pregnancy date, symptom answer, score, assessment or browsing history.

We do not collect location, contacts, photos, device identifiers for advertising, or any persistent identifier that would identify you across apps or services.

Sharing and backups you control

My Family World never opens the iOS share sheet or creates a backup on its own. These actions happen only after you tap the relevant control. The share controls available depend on your app version:

Version 1.1: depending on the control you choose, the share preview may contain a meal idea card, a moment, a Food Story or a cooking summary. Review the iOS share preview before choosing a recipient.
Version 1.3 Little Meals idea: shares the meal name, preparation time and selected age band or stage; the applicable portion or, where shown, a starting-serving reference and recipe-preparation amount; responsive-feeding context; applicable allergen, serving, Safe prep, supervision and storage notes; and the ingredient list. It does not share the child's name or the cooking method.
Version 1.3 Parent Table idea: shares the adult-recipe label, dish name, cuisine, category, time and recipe serving size; applicable allergen, food-safety, ingredient-filter and storage notes; and the ingredient list and cooking method. It does not share the child's name.
Version 1.3 moment or cooking summary: shares the summary shown to you, based on the on‑device cooking log. A cooking entry records only that a recipe was cooked. It does not show what a child ate, tried, or was offered, and it does not prove allergen exposure.
Each version 1.3 Little Meals, Parent Table, moment and cooking-summary text share also includes the standard My Family World footer and public App Store download link.
Version 1.3 encrypted backup: creates one passphrase‑encrypted file containing the fixed backup set: family setup and profiles, progress and local usage, language and theme, Little Meals settings and per-child cooking logs, Parent Table settings and favourites, reminder settings, saved updates email and feature requests or outbox, and local session and share counters. Apple entitlement state and recovery markers are excluded. You choose where to store or transfer the file. Earlier installed versions create the encrypted backup offered by that version.
Version 1.6 Family calendar share: after you tap Share calendar, a preview shows the day, week or month you choose, with the active child's entries and the family entries, including any occasion, time, title, age when planned, preparation, things to buy or bring, helper and notes. The child's name is left out unless you tick Include child’s name; anything you typed yourself, in titles, preparation, things to buy or bring, the helper field or notes, still appears. The text passes to the iOS share sheet only after you tap Open share sheet, and it ends with the My Family World name and the public App Store link. It is a snapshot: later edits do not update copies already sent.
Version 1.6 encrypted backup: contains the version 1.3 backup set plus all Family calendar entries and notes, which are checked when the backup is restored.

You choose the recipient or destination in the iOS share sheet. In version 1.1, after you tap a text share control, a non-cancelled native or Web Share failure may copy the text to your clipboard. Where no share API is available, the app may instead open a prefilled WhatsApp page, with clipboard copy as the final fallback. In version 1.3, a native share-sheet failure reports the problem and does not copy the text or open another destination automatically. After you send a share or backup to another person or service, that recipient or service handles the copy under its own privacy practices.

The sharing account and family circle are optional and for adults. To share, you create an account with your email address and a password. Firebase Authentication, a Google service, stores your email address and handles your password; we cannot read your password. It sends the verification and password reset emails. When you add someone, the app creates an invitation link and code that expire after three days. Only a person who uses that invitation and whom you approve joins your circle; there is no search by email or name and no public directory. When you ask to join someone’s circle, they see your verified email before they accept you.

When you share, we store only what you choose to share and what the circle needs to work: the plans you share (date, time, title, notes, location text you type, linked app recipe or activity, meal occasion, preparation, things to bring, helper and done state, repeat rule), shared shopping items and help requests, the short messages you send to a person in your circle, the name or label you choose for the circle, invitations and join requests, membership state, and your account identifier. Plans you keep private, child profiles, Mother Care, food settings and allergies, cooking history, favourites, reminders and backups are never sent. Shared plans can include a child’s name or a health detail if you type one; share only what you are comfortable sharing with that person.

Alerts (version 2.0)

If you allow alerts, the app stores an alert registration for your account: the notification token from Apple or Google, the platform, the app language, a random installation identifier and the time. The app asks once, after your first share or after you join a circle. Alerts say only that something is new in your family circle; they never contain plan details, names or messages. Apple Push Notification service and Firebase Cloud Messaging deliver them. You can turn alerts off in Family circle, under Account, or in your phone’s settings. Signing out or deleting your sharing account removes the registration.

Our service provider and where data is processed (version 2.0)

Google LLC provides Firebase to us as a service provider (processor). Firebase Authentication processes account data in the United States. The shared calendar database and the alert sender run in Google Cloud’s me-central1 region (Doha, Qatar). The alert sender reads only the recipient’s account state and alert registration, never plan content, and logs only a shortened account identifier and the outcome. Invitation and open pages are served by Firebase Hosting at my-family-world-f6ad8.web.app on Google’s global network. Your data may therefore be processed outside your country. Google processes it under its Firebase terms and data processing terms for providing the service to us, not for advertising.

Keeping and deleting shared data (version 2.0)

What you share stays until you stop sharing it, remove the person or delete the sharing account. Removing someone from your circle deletes the plans and messages the two of you shared, for both of you; copies either of you added to your own calendar stay on that phone. Leaving a shared calendar removes it from your view. Delete sharing account in the app deletes your account, the calendars you own and your memberships; plans you contributed to someone else’s calendar remain there, and minimal deletion markers remain so old data cannot return. Notices older than 30 days and shared plans dated more than 30 days ago are eligible for cleanup when the app opens online, and cleanup may be retried on a later opening. Reset all progress and deleting the app do not delete the sharing account. If you cannot use the app, email us from the address on your sharing account and we will delete the account and the data stored with it within 30 days.

Reminders in version 2.0

Daily planning reminders and optional reminders on individual plans are local notifications scheduled on your phone after you allow notifications. They are not sent through our service provider. Family circle alerts are separate and described above.

Update notice and suggestions (version 2.0)

Home may show that a newer version is available. The app asks Apple’s public App Store lookup for the current version, sending no family data, and lets you dismiss the notice. “Have an idea for the app?” opens a draft in your own email app; nothing is sent unless you send it, and no family data is attached.

Your rights (version 2.0)

Who is responsible for your data. My Family World is offered on the App Store by Msalam Issa, an individual developer, who is responsible for the data described in this policy (the data controller). In this policy, “we” and “us” mean the developer. You can reach us at the support email on this page.

Why we use your data, and our legal basis. We use your sharing account and family circle data to provide the sharing feature you ask for; the legal basis is performing our agreement with you and your consent. We send family circle alerts only if you allow them; the legal basis is your consent. Child profiles stay on your phone and are never sent to us; you add them as the parent or caregiver, by your own choice, and you can change or remove them in the app at any time. Creating a sharing account is optional; without one, the app works on your phone, but sharing is not available.

Where your data goes and how transfers are protected. Our service provider, Google LLC, processes shared data for us in the United States and in Doha, Qatar, as described under Our service provider and where data is processed. Google provides these services under its data processing terms: the Firebase Data Processing and Security Terms and, for the services that run on Google Cloud, the Cloud Data Processing Addendum. For personal data from Europe, those terms rely on a recognised transfer framework where one applies, such as the Data Privacy Framework between the European Union and the United States for transfers to Google in the United States, and otherwise on the European Commission’s standard contractual clauses.

What you can ask for. Depending on where you live, you can ask us to tell you what data we hold about you and give you a copy (access); to correct data that is wrong (correction); to delete your data (deletion); to limit how we use it, or to stop a particular use (restriction and objection); and to send you the data you gave us in a common, machine readable format so you can take it elsewhere (portability).

You can do much of this yourself in the app: stop sharing a plan, remove a person, turn alerts off, or delete your sharing account in Family circle, under Account. For anything else, write to the support email on this page from the address on your sharing account. To protect your account, we may confirm the request by replying to that address before we act. If you cannot use the app, we will delete the account and the data stored with it within 30 days of your request, and we answer other requests within one month.

Withdrawing your consent. You can withdraw your consent at any time: turn alerts off or sign out to stop alerts, or delete your sharing account to stop sharing altogether. Withdrawing consent does not affect anything done before you withdrew it.

How long we keep data. We keep your sharing account until you delete it, or until we delete it at your request. Shared plans, messages and notices are kept as described under Keeping and deleting shared data, including the 30 day cleanup described there. If you email us, we keep the correspondence only as long as needed to answer you or to meet legal obligations.

Complaints. If you are unhappy with how we handle your data, please tell us first at the support email on this page. You also have the right to complain to a data protection supervisory authority, for example in the country where you live or work.

Other points. We do not use your data for profiling or for automated decisions about you. The sharing account is for adults; please do not type a child’s health details into shared plans or messages.

The two things you can choose to send us

Versions 1.5, 1.5.1 and 1.6: Updates email and feature-request sending remain disabled. The app makes no submissions or automatic retries for these features. The possible future sending described below is not a feature of these versions. Voluntary support email sent through your own email service is separate and is described under Support email.

In the version shipping today, sending is switched off entirely: the updates field and your feature requests are saved on your device and nothing is transmitted to us. You can still choose to share a meal idea card, a moment, or a cooking summary, or export an encrypted backup yourself, as described above; that is your action, not the app's. If a future version switches sending on, this section is the complete ceiling: the two submission types below, plus the four context values named after them, are the only data a submission would contain. Each would be sent only by your explicit action, never automatically, and this policy would say plainly that sending is on.

Email updates (optional). If sending is enabled in a future version and you type your email into the updates field, in onboarding, in Family Dashboard, or on our website, we would use it to send news about new features, launch offers and app news, plus the occasional question that helps us improve the app, roughly once a month. Every email would carry an unsubscribe link. We would never sell or share the list.
Feature requests. If sending is enabled in a future version, suggestion text would travel to us only when you tap Send so we could read it.

If sending is enabled in a future version, each submission would also carry four small context values to help us improve the app for families like yours: your child's age band, your device language, your device time zone region, and the app version. It would contain no names, no location beyond the time zone region, and no identifier that follows you across apps.

If sending is enabled in a future version, submissions would be delivered into a private spreadsheet we control, processed by Google (Google Apps Script and Google Sheets) acting as our storage provider. Before enabling sending, we would update this policy to describe the active submission and retry behavior, including how a failed or offline send is handled. These submissions and retries are disabled in versions 1.5, 1.5.1 and 1.6.

Children's information

My Family World is operated by a parent or caregiver, not by the child. Any information about a child (name, age band, and with more than one child, each child's own Little Meals settings and cooking log; in version 1.6 also that child's Family calendar entries) is entered by the adult and stored on the device. Parent Table settings and favourites are shared across the household on that device; they are not separate child profiles. A cooking entry records only that a recipe was cooked, not what a child ate, tried, or was offered, and not allergen exposure. My Family World itself does not collect or transmit that information automatically. A parent can deliberately send one of the shares or encrypted backups described above to a person or service they choose. The app is designed to avoid creating the automatic data-collection obligations that apply to online services directed to children. This policy describes the app's actual design; it is not legal advice, and parents in regulated regions remain in control of the on-device data at all times.

Media

Every photo, video and sound of the animals, every dish photo and every section image is bundled inside the app and plays from your device. Playing it does not connect to any third party and sends nothing anywhere.

Book covers in version 1.6: book cover pictures are not bundled in the app. When you open the Books list, your device requests the cover pictures it shows from Open Library's image server (covers.openlibrary.org). For some covers, that server redirects the request to servers of the Internet Archive (archive.org), the non-profit that runs Open Library, and the picture loads from there. These requests carry no name, child data, calendar content or other My Family World identifier and are sent without a referrer. Because the list shows the covers of one age band at a time, by default the active child's age band, the set of covers requested could indicate which age band was viewed. Like any web request, each one reveals your device's IP address and standard technical request details to the servers that receive it, which handle them under their own privacy practices. If a cover cannot load, the book details stay in place and a Retry cover button appears. The Open Library courtesy link in the Books section opens openlibrary.org in the system browser only after you tap it.

A Songs area is planned but does not ship yet; its recordings stay out of the app until every licence position is fully documented.

Mother Care official-source links in version 1.3

When version 1.3 is installed, Mother Care content is bundled in the app and works offline. Browsing Mother Care makes no automatic web request and saves no stage, category, topic, symptom, urgent row or history. A named official-source link opens only after a deliberate tap. On Apple devices, that tap hands the exact allowlisted HTTPS page to the system browser. The destination then applies its own privacy practices; My Family World appends no name, child data, Mother Care setup preference or other My Family World identifier to the link.

Official source and support links in versions 1.5, 1.5.1 and 1.6

In versions 1.5, 1.5.1 and 1.6, the Sources directory and source links across the parent sections open the registered HTTPS page only after you tap. The Contact control opens My Family World's hosted support section. My Family World does not append your name, child data, Mother Care setup preference, feature-request text or another My Family World identifier to these URLs. Opening a page connects your device to that website, which applies its own privacy practices. My Family World does not control third-party websites. In version 1.6, when the app language is Spanish, the Privacy Policy, Terms of Use and Contact controls open the English pages of this site; there are no Spanish versions of the Privacy Policy or Terms of Use, and the support section the Contact control opens has a short Spanish paragraph. The Open Library courtesy link in the Books section, described under Media, is not one of the registered source links; it opens openlibrary.org in the system browser only after you tap it.

Daily reminders (notifications)

With your permission, version 1.3 can schedule up to two daily reminders for the parent: one about the day's play idea and the little one's meals, and one about tonight's Parent Table dinner. In version 1.1, the two child-focused reminder titles can include the active child's name. Version 1.3 also lets you turn on one weekly ideas reminder. Its general body text is chosen locally from the active child's age band, so on that weekday up to three reminders can be scheduled. In version 1.3, reminder titles are neutral and do not include the child's name. All reminders are scheduled locally on your device by iOS. Nothing is sent to a server, no push service is used, and we never notify the child. You can turn each reminder off inside the app under Grown‑Ups in version 1.1 or Family Dashboard in version 1.3, or in iOS Settings for My Family World.

Reminders in versions 1.5, 1.5.1 and 1.6

In versions 1.5, 1.5.1 and 1.6, with your permission, My Family World schedules reminders for the parent locally on the device. With a child registered, there is a daily play reminder and, where supported for the active child's age, a morning food reminder. For a child under six months, the morning reminder concerns milk guidance. When the food reminder is unavailable, including the 48 to 60 month age band, the daily reminder is for play only. With no child registered and “I’m expecting” selected in setup, there are two notes asking how you are feeling, one in the morning and one in the evening. With neither a child registered nor that expecting answer, there is one Parent Table dinner reminder. With a child registered, you can also enable one weekly ideas reminder, with general text selected locally from the active child's age band, so up to three reminders can be scheduled on that weekday. Reminder titles are neutral and do not contain the child's name. All reminders are scheduled by iOS on your device; no reminder data is sent to a server, no push service is used, and the app never notifies the child. You can turn each reminder off in Family Dashboard, Daily reminders, or in iOS Settings for My Family World. In version 1.6, Family calendar entries do not schedule reminders or notifications.

Subscriptions and payment

On a fresh installation of version 1.3, a verified active subscription is required to enter the app after setup. Apple supplies the localized product name, price, billing period, offer duration and eligibility. Downloading the app and completing setup do not start a trial. If Apple confirms eligibility, a 14-day introductory free trial starts only after the parent selects Monthly or Annual and confirms Apple’s purchase sheet; the selected plan then renews automatically unless cancelled. If the Apple Account is ineligible, standard billing starts when the purchase is confirmed. If product or entitlement data is unavailable, first run offers Retry and Restore Purchases only. Apple handles the Apple Account, payment details and transaction; My Family World never sees or stores card details.

What we do not do

No third‑party analytics or tracking SDKs.
No advertising of any kind.
No selling, renting, or developer‑initiated sharing of your information. In version 2.0 the only service that receives what you share is our service provider for the optional sharing feature, described above.
No cloud storage of anything you do not share. The optional sharing account in version 2.0 is the only account; without it the app works with no login.
Reminders are scheduled only on your device; in version 2.0 the only push notifications are the optional family circle alerts.

How to review or delete your data

Because family-entered data is stored locally in the app, you control the copy on this device:

Open Grown‑Ups in version 1.1 or Family Dashboard in version 1.3 → Settings → Reset all progress. The confirmation in your installed version summarises what it will erase; more detail follows, including the Family calendar in version 1.6. In version 1.3 this erases saved activity, cooking logs, Little Meals and household-wide Parent Table food settings, favourites, and saved or queued feature requests (a quick grown‑up check guards this). The family setup, selected language, colour theme, reminders, and any locally saved updates email remain; review every food setting before planning the next meal. In version 1.6, Reset all progress also erases all Family calendar entries and notes, and removing a child profile removes that child's calendar entries. You can also delete a single plan from the calendar itself. Restoring an encrypted backup replaces the calendar on this device with the calendar in that backup; a backup made before version 1.6 contains no calendar, so restoring it leaves the calendar empty. Otherwise, calendar entries stay until you delete them.
Sharing account (version 2.0): open Family circle, then Account, then Delete sharing account. Reset all progress and deleting the app do not delete the sharing account. If you cannot use the app, email us from the address on your sharing account and we will delete the account and the data stored with it within 30 days.
Or delete the app, which removes the app's local storage container from that device. Copies you deliberately shared or exported, copies held by recipients, and device or iCloud backups are outside My Family World's control and may remain until you delete them through the relevant app or Apple backup settings.

Support email

If you choose to email us at the support address below, we receive your email address, your message and any attachments you include. Please do not send a child’s name or private health details. We use this correspondence only to respond to you and provide support. We retain it only for as long as needed for those purposes or to meet legal obligations. You can ask us to delete your support correspondence at the same address; we will delete it unless retention is required by law. Your email service and ours process the message under their own privacy practices. Sending a support email does not sign you up for updates.

Changes to this policy

If the app ever adds a feature that changes how data is handled (for example an optional account or cloud backup), we will update this policy and make the change clear in the app before it takes effect.

Contact

Questions about privacy: msalamissa@alumni.ie.edu

We answer privacy questions and remove your email from the updates list on request. Sending is off in this version, so this version sends us none of the submission fields described above. If a future version enables sending after updating this policy, we will confirm on request exactly what we hold: the email address or request text you chose to send and the age band, device language, time-zone region and app version attached to that submission.