First Hello — Privacy Policy

Effective date: September 3, 2026 · Last updated: October 16, 2026 · Updated policy effective: October 16, 2026 (announced in app version 1.5.8) · Previous update: September 28, 2026 (effective September 30, 2026; announced in app version 1.5.4)

First Hello ("the app") is made by Minkeon Kim, an individual developer ("we", "us"). We keep the personal information you share with the app to a minimum and handle it with care. This policy applies to the English (US) edition of the app, published on the App Store as "First Hello: New Dad Checklist".

1. What we collect and why

You can use the app without creating an account. We collect only the following.

Information	Required?	When	Why
Anonymous user identifier (generated automatically)	Required	First launch of the app	Syncing and backing up your data across devices
Baby's name or nickname	Optional	Entered by you	Showing it in the app and syncing it
Country setting	Automatic	Based on the country you choose in the app	Showing that country's deadlines and syncing your settings
Baby's date of birth (or due date)	Optional	Entered by you	Calculating deadlines and countdowns, and scheduling reminders
Baby's photo	Optional	Added by you	The growth visual shown inside the app
Quest progress (which items you have completed)	Automatic	While you use the app	Saving and syncing your progress
Health-related checklist items you mark done (for example, checkups or vaccinations) and when you marked them	Optional	When you enter or mark them	Saving and syncing your progress
Google profile name and profile photo URL	Optional	If Google provides them when you link a Google account	Signing in and managing your account
Email address and social account identifier (only if you link an account or sign in with one)	Optional	When you link a Google or Apple account, or sign in with an account you linked before	Signing in and managing your account, and restoring your data on a new device or after reinstalling
Health insurance type and state (only if you choose US content)	Optional	When you answer the US setup questions	Calculating deadlines and syncing across devices
Sign-in and record-recovery usage counts (successes, failures, and buttons chosen, counted per day)	Automatic	When you use sign-in or account linking, or tap a button on the record-protection (lock) screen	Finding and fixing problems (we do not store them with your account)
(If you post in Dad space) the nickname you type to show with your post (for example, your baby's nickname), the text of your post, the board language, when you posted or edited it, and your agreement to the ground rules (rules version and time)	Optional	When you post or edit	Running the board (showing, editing, and deleting posts) and reviewing posts before they appear
(Dad space) "I've been there" reactions, reports (the reason you pick in the app), and blocks (with the author's nickname at the time you blocked them)	Optional	When you react, report, or block	Providing these features, handling reports, and hiding posts from authors you blocked
(Dad space) Anti-abuse records — the times you posted, edited, or reported (up to 60 per action; times older than a day are cleared the next time you use that feature), and a posting receipt that stops the same post from going up twice (a random number and a cryptographic hash of the request; the post text itself is not kept)	Automatic	When you post, edit, or report	Rate limits and preventing duplicate posts
(Dad space) Moderation records — each post's review status with the moderator's note, and whether an author is suspended	Automatic	When we review a post or take action	Reviewing posts before they appear, handling reports, and enforcing the ground rules

We do not read medical records from hospitals or clinics. Checklist items are only what you enter or mark in the app.
We do not collect advertising identifiers, location data, or your contacts.
The app contains no third-party tracking or analytics SDKs for advertising or behavioral profiling.

Signing in with an existing account: On a new device, or after reinstalling the app, you can sign in with the Google or Apple account you linked before, and the app loads the records saved to that account. Signing in never creates a new account. It uses the same information as linking an account.
US setup: If you choose US content and answer the health insurance type (employer, Marketplace, Medicaid, or not sure) and state questions, we save your answers to your account and sync them so deadline calculations carry over to a new device.
Sign-in and record-recovery usage counts: To find problems, we count only how many times certain fixed events happened each day (UTC), such as "sign-in started," "records loaded," the reason a sign-in was refused, or the button chosen on the record-protection screen. We do not store your account identifier, device information, email address, or any time more precise than the day, and we do not store the counts with your account. When the app sends a count, our servers may briefly keep a request log (such as the IP address).
Not sent to our servers: To show which account the records on your device belong to, the app keeps a partly hidden version of the linked account's email address (for example, ab***@gmail.com) and the sign-in method on your device, and shows them on the lock screen. This is not sent to our servers (it may be included in your device backups).

Dad space (posts by users)

Dad space is where dads share, in writing, what has stayed with them while caring for their baby. Right now only the Korean board is open; if the app language is English, the tab says it is not open yet.
You can read posts without linking an account. To post, react, report, or block, you need to link a Google or Apple account (the email address and social account identifier in the table above).
What other users see: the text of posts we have reviewed, the nickname shown with each post, and the date it was posted. The nickname is only what you type; the app does not fill it in from the baby's name you added on Home. For the block feature, the app also receives a random number that tells authors apart (not your account identifier; the same author's posts share the same number) and the exact time each post went up, but the screen shows only the date and never the number.
What stays private: your account details (email address and account identifier), the baby information you added on Home (name, date of birth, photo), and your progress. We do not show other users who reacted to, reported, or blocked a post, or how many reactions a post has, and we do not tell authors who reported them.
Review before posts appear: We read and review every post, and every edited post, before other users can see it. Until then, only you can see it in the app. Posts that break the ground rules are not shown or are removed from public view, and an author who repeatedly breaks them may be suspended. While suspended, that author's posts are hidden from other users and they cannot post, edit, or react (they can still delete their own posts, report, and block).
Posts are stored with your account, so when we review posts and handle reports we can see which account a post came from. We do not share account details or the reasons for our actions with other users.
Other users can read and copy posts once they are public. Please do not include details that could identify you, your child, your family, or anyone else. Please also do not post sensitive details, such as health information.
The ground rules and how we moderate Dad space are on our community guidelines page.
This information is stored with the same service provider and in the same place as described in Section 2. Nothing from Dad space is kept separately on your device.

2. Where your data is stored

Your data is saved on your device first. To keep it in sync, it is sent over an encrypted connection (TLS) to servers run by the service provider below and stored there.

Service provider	What they do for us	Server location
Supabase Pte. Ltd. (a Singapore company)	Database, file storage, and sign-in	Republic of Korea (AWS Seoul region, ap-northeast-2)

In plain terms: if you use the app in the United States, your data is stored outside the United States, on servers located in South Korea. The developer is also based in South Korea and handles data there. Supabase processes the data on our behalf, only on our instructions under the data processing addendum that is part of its terms of service, and does not use it for its own purposes. Its main sub-processors include US companies such as Supabase Inc. and Amazon Web Services.
Baby photos are kept in private storage. They cannot be accessed from any account other than yours.

3. Sharing with third parties

We do not sell your personal information, and we do not share it with third parties, except where the law requires us to. Posts and nicknames that you choose to publish in Dad space are shown to other users of the app after we review them.

4. How long we keep your data, and how to delete it

We keep your data until you delete it.
To delete your data, open the app and go to Settings → Delete account and data. The app deletes the current account's records (account, progress, baby's name, date of birth, and photo) from our servers and clears the app's data on your device. You do not need to contact us, and you can do this at any time. Previous accounts and copies in operational logs and backups are covered by the notes below.
You can also email us to ask for deletion, and we will take care of it for you.
When you sign in with an existing account on a new device, the anonymous account that was created automatically when you first opened the app on that device is deleted from our servers. If that anonymous account has records made on another device, the app tells you first, and if you choose to continue, those records are deleted too. If the deletion fails, an account with no records may remain on our servers.
If you try to sign in with an existing account that has no records, the sign-in does not go ahead and that empty account is deleted from our servers. If that account shows signs of recent use on another device, we keep it instead, and it may also remain if the deletion fails.
If you choose "Erase this device's records and start over" or "Continue with this device's records" on the app's record-protection (lock) screen, or start over after reinstalling the app, the server records of your previous account (progress, baby information, and photo) may not be deleted automatically.
- If the previous account was anonymous: email us the text you copied with "Copy support info" — on the lock screen before tapping the button, or in Settings before deleting the app — and we will delete them after checking. Without that text, we cannot identify the previous account.
- If the previous account was linked to Google or Apple: if you can sign in with that account on another device (one with no records), sign in and delete your account in the app. If you have no such device or cannot sign in, email us from the linked email address. We confirm it is you by checking that the sending address matches the email linked to that account, and then delete the account (its Dad space posts and other records are deleted too, just as when you delete your account in the app). If you linked with Apple's Hide My Email, so the linked email is an Apple relay address, we send a confirmation email to that relay address and confirm it is you when you reply to it.
Sign-in and record-recovery usage counts are statistics that are not linked to any account, so we do not set a retention period for them.
We do not delete accounts left behind as described above automatically; if you ask, we confirm it is you as described above and then delete them.
When you delete a post in Dad space, it is deleted from our servers, along with the reactions, reports, and moderation records for that post. We do not keep a copy of the deleted text or nickname. However, if another user blocked the author, the nickname saved in that user's block list stays until they unblock the author or either account is deleted. Posts removed from public view are kept, visible only to you, until you delete them or your account.
When you delete your account and data in the app, your Dad space posts, reactions, reports, blocks, anti-abuse records, and any suspension are deleted too. This also deletes other users' reactions to and reports on your posts, and other users' blocks of you.
Reports are deleted together with the reported post, or with the reporter's or the author's account. We do not keep separate copies.
The times of your posts, edits, and reports stay after you delete a post and are deleted with your account (times older than a day are cleared the next time you use that feature). Posting receipts also stay after you delete a post, so that a delayed request cannot put a deleted post back up, and we keep them until you delete your account.
The automatic deletions during sign-in described above never delete an account that has Dad space records.
If you leave your previous account — for example, by reinstalling the app and starting over — the posts you made with that account stay public. If you can sign back in to that account, you can delete them in the app. If you cannot sign in (for example, the account has Dad space records but no baby records), email us from the linked email address (if you used Apple's Hide My Email, we confirm with a confirmation email as described above), and after checking we will remove those posts from public view.
Copies in operational logs and database backups (including deleted Dad space posts) may remain for their retention periods.

5. Your choices and requests

You can view your information at any time (it is shown inside the app), change it (the date of birth and photo), and delete it (Settings → Delete account and data).
You can also email us to ask what information we hold about you, to correct it, or to delete it. We will confirm that the request came from you and respond without undue delay. There is no fee.
Anonymous accounts cannot be verified by email, so when you contact us we identify your account using the text from "Copy support info" in the app. It contains: the date it was copied (UTC), app version, platform (iOS or Android), country, account type, the sign-in method you linked, the account-switch stage and record-protection state, the first 8 characters of the current account identifier, the first 8 characters of the identifier of the account that owns the records, (if any) the first 8 characters of the identifiers of earlier owners of this device's records, and (when copied from a notice about a kept account) the first 8 characters of that account's identifier and its sign-in method. It does not include your baby's information, your email address or any full identifier. We use it only to answer your request, and we delete support emails one year after we finish handling them.
In Dad space, you can view, edit (edited posts are reviewed again before they appear), or delete your posts, and unblock authors. While only the Korean board is open, these screens are available when the app language is Korean; you can also email us.
Given the app's current size, we do not believe we meet the thresholds that would make state privacy laws such as the California Consumer Privacy Act (CCPA) apply to us. Regardless, we offer the same ability to access and delete your data to every user, wherever you live.

6. Security

All data sent between the app and our servers is encrypted in transit (TLS).
Photos and other files are kept in private, non-public storage.
Row-level access controls (RLS) on the database block any account other than yours from reading your data.
If a security incident affects your data, we will notify affected users as required by applicable law.

7. Children

First Hello is made for adult parents and caregivers. It is not directed at children, and we do not knowingly collect information from children under 13. The baby's date of birth and photo are entered by the parent, for the parent's own use in caring for their child, and the parent can delete them at any time.

8. Notifications

Deadline reminders are scheduled locally on your device. Nothing is sent to our servers to make them work. You can turn notifications off at any time in your device settings.

9. Contact

Developer: Minkeon Kim (individual developer)
Email: mkingg04@gmail.com
Questions or complaints about how we handle your information are welcome at the address above. Please allow a few days for a reply.

If we change this policy, we will let you know inside the app before the change takes effect.