Privacy Policy
FamilyFirst is a free iOS app that helps parents organize essential information about their children — all stored securely and privately on your device.
The simple version
We don't collect your data because we don't have servers. Everything you enter stays on your device.
1. Who We Are
FamilyFirst is developed and maintained by Steel Helmet, LLC, based in Washington State, USA.
2. The Most Important Thing to Know
FamilyFirst is 100% local storage. We do not collect, transmit, or store your family's information on our servers.
- ✓All data you enter stays on your iPhone or iPad
- ✓We never see your family's information
- ✓We don't have servers, databases, or cloud storage
- ✓We can't access, recover, or restore your data
- ✓Your data never leaves your device (except when you choose to share it via AirDrop)
We don't collect your data because we literally can't — we don't have anywhere to put it.
3. What Information FamilyFirst Stores (On Your Device)
When you use FamilyFirst, the app stores the following information locally on your device only:
Family Member Information
- —Names (full name, nickname)
- —Dates of birth
- —Gender (optional)
- —Blood type (optional)
- —Profile photos (selected from your photo library)
- —Personal notes
Contact Information
- —Contact names (doctors, emergency contacts, schools, etc.)
- —Phone numbers
- —Email addresses
- —Physical addresses
- —Relationship labels (e.g., "Doctor", "Emergency Contact")
- —Notes about contacts
Custom Section Data
- —Section titles you create (e.g., "School Info", "Activities", "Medications")
- —Field labels and values you enter
- —Notes and details you add
App Security Data
- —PIN hash (if you enable PIN lock)
- —Recovery email (if you set up PIN recovery)
- —Biometric authentication preference (Face ID / Touch ID enabled/disabled)
All of this data is stored in a local database on your device using Apple's SwiftData framework. It is protected by iOS Data Protection (encryption at rest) and is only accessible when your device is unlocked.
4. What Information We Do NOT Collect
The following refers to data we collect. See the Apple Platform note below for what Apple collects independently.
- ✕Your email address or phone number
- ✕Your location
- ✕Your contacts from your phone
- ✕Browsing history or search queries
- ✕Device identifiers for advertising
- ✕Analytics about how you use the app
- ✕Crash reports or diagnostic data
- ✕Your family member data (names, photos, contacts, sections)
FamilyFirst doesn't connect to the internet to send us data. It's designed to respect your privacy completely.
Apple Platform Data
The items above describe what wecollect — which is nothing. However, because FamilyFirst is distributed through Apple's App Store, Apple independently collects aggregate, anonymized data about app usage (such as download counts, session counts, crash reports, and device types). This data is collected and controlled by Apple — not by us — and is governed by Apple's Privacy Policy.
Apple presents this data to us in aggregate only — we never see individual user identifiers. You can limit this sharing at Settings → Privacy & Security → Analytics & Improvements → Share with App Developers.
5. How We Use Information
Since we don't collect your information, we can't use it.
What FamilyFirst does with data (on your device):
- —Displays your family members and their information
- —Organizes contacts and custom sections
- —Allows you to search and edit data
- —Encrypts data at rest using iOS Data Protection
- —Optionally locks the app with a PIN and biometric authentication
No analytics, no advertising (at this time), no selling data, no third-party sharing.
Future Advertising
FamilyFirst is currently free and ad-free. We reserve the right to introduce advertising in a future version to support ongoing development. If we do, this Privacy Policy will be updated to disclose what data ad networks may collect, and you will be notified before any change takes effect.
6. How We Share Information
We don't share your information because we don't have it.
AirDrop Sharing (User-Initiated)
- —You can export individual family members or all members to a .familyfirst file
- —You can share this file via AirDrop, Messages, Email, or any app that accepts files
- —You control who receives the file
- —We are not involved in this sharing — it's direct from your device to the recipient
Be careful who you share with
When you share a .familyfirst file, it contains all the data for the selected family member(s). Once you send a file, you can't take it back.
What We DON'T Do
- ✕Share your data with third parties (we don't have it)
- ✕Sell your data to advertisers (we don't have it)
- ✕Use your data for marketing (we don't have it)
- ✕Send your data to analytics companies (we don't have it)
7. Data Security
Security Measures
- —Encryption at Rest: iOS Data Protection (NSFileProtectionComplete)
- —Optional PIN Lock: 6-digit PIN hashed with SHA-256 + random salt, stored in Keychain
- —Biometric Authentication: Face ID or Touch ID for quick access
- —Jailbreak Detection: warns you if your device may be insecure
- —No Network Transmission: data never leaves your device
Limitations
No security is perfect. We cannot guarantee:
- —Protection against advanced attacks (e.g., device forensics if your device is seized)
- —Protection if you choose a weak PIN or share it with others
- —Protection if your device is jailbroken or compromised by malware
8. Data Retention & Deletion
We don't keep your data — you do. Your data stays on your device until you delete it.
How to Delete Your Data
- —Delete Individual Items: swipe left on contacts, sections, or fields
- —Delete All Data: Settings → Data → Delete All Data (type "DELETE" to confirm)
- —Uninstall: deleting FamilyFirst removes all data permanently
Backing Up Your Data
FamilyFirst stores data locally only. If you delete the app or lose your device, your data is gone forever. Export regularly: tap the share icon in the dashboard and save the .familyfirst file to iCloud Drive or email it to yourself.
9. Children's Privacy (COPPA)
FamilyFirst is designed for parents to organize information about their children. FamilyFirst does NOT collect information from children.
- —Parents use the app (not children)
- —Parents enter data about their children (children don't enter data)
- —Data is stored locally (not collected by us)
- —No online collection (no accounts, no servers, no transmission)
10. Your Rights & Choices
Since your data is stored locally on your device, you have complete control.
| Right | How to Exercise It |
|---|---|
| Access Your Data | Open FamilyFirst — all your data is visible in the app |
| Correct Your Data | Tap any item to edit it |
| Delete Your Data | Swipe to delete items OR Settings → Delete All Data |
| Export Your Data | Tap the share icon → save .familyfirst file |
| Data Portability | Export .familyfirst files (JSON format) |
California Residents (CCPA/CPRA)
- —Do Not Sell My Personal Information: we don't sell your information (we don't collect it)
- —Right to Know: you know what data you've entered (it's on your device)
- —Right to Delete: you can delete data anytime (see Section 8)
- —Right to Opt-Out: N/A (we don't collect or sell data)
11. International Users (GDPR)
If you're using FamilyFirst in the European Union, the General Data Protection Regulation (GDPR) applies.
We are NOT the data controllerbecause we don't collect or process your data. You are the data controller — you control the data on your device.
International data transfers don't apply because your data never leaves your device.
12. Third-Party Services
FamilyFirst does not currently integrate any third-party analytics, advertising, or data collection services. We do not embed any of the following:
- ✕Analytics SDKs (e.g., Google Analytics, Firebase, Mixpanel)
- ✕Crash reporting SDKs (e.g., Crashlytics, Sentry)
- ✕Advertising networks (at this time)
- ✕Cloud storage providers (e.g., AWS, iCloud sync)
- ✕Payment processors (the app is currently free)
Apple — Required Platform Provider
FamilyFirst runs on Apple's iOS platform and is distributed through the Apple App Store. As part of that relationship, Apple independently collects certain platform-level data:
- —App Store Analytics: aggregate download counts, session counts, active device counts, and retention data — Apple shares this with us in anonymized, aggregate form only
- —Crash Reports: iOS automatically generates crash reports when the app crashes and may share these with us via App Store Connect to help us fix bugs
- —App Store Interactions: search impressions, product page views, and install conversion data
This data is collected by Apple and governed by Apple's Privacy Policy. We only see aggregate totals — never data tied to individual users. You can control this at Settings → Privacy & Security → Analytics & Improvements.
Future Monetization
FamilyFirst is currently free and ad-free. To support continued development and improvement of the app, we reserve the right to introduce advertising or other monetization (such as a one-time purchase or optional paid features) in a future version.
If advertising is introduced, third-party ad networks may collect data such as device identifiers, approximate location, and interaction data to serve and measure ads. We will update this Privacy Policy to fully disclose:
- —Which ad networks or partners are involved
- —What data they collect and how it is used
- —How you can opt out of personalized advertising
We will notify you before any such change takes effect. Your continued use of the app after notification constitutes acceptance of the updated policy.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to the app's features, changes to privacy laws, or improvements to our explanations.
- —We'll update the "Last Updated" date at the top
- —We'll post the new policy at https://steelhelmet.net/familyfirst/privacy
- —For material changes, we'll notify you via an in-app banner
Your continued use of FamilyFirst after changes means you accept the new Privacy Policy.
14. How to Contact Us
If you have questions about this Privacy Policy or FamilyFirst's privacy practices: