Pannoli · Support

Last updated: October 27, 2026

Pannoli is a diary for adults caring for a child. This policy explains which data the app processes, where it is stored and the choices available to you. A summary is also available in Settings → Data and privacy and before you create your first diary.

Developer and contact

Pannoli is developed by Francesco Bianco. For support, privacy questions or requests concerning data you have sent to the developer, email f.bianco.dev@gmail.com. Francesco Bianco is the controller of support communications and any data you voluntarily send him. He does not automatically receive a copy of your diary.

Information stored by the app

  • Child’s profile: name, birth date and optional sex, used to identify the diary, personalize greetings and show age. You can use a nickname and leave sex unspecified.
  • Events: date and time, event type, milk amounts, breastfeeding duration and side, milk type or storage, diaper changes, optional poop color, weight, recorded medicines and vitamins, entered amounts and optional notes.
  • Medicines and reminders: names, entered amounts, schedules, times and start or end dates. These records belong to the diary and follow its optional iCloud sharing. Notifications are local: permission and scheduled requests remain on each device.
  • Preferences: selected diary, filters, visible event types and dismissed tips.
  • Sharing: technical diary and iCloud record identifiers, participant roles and permissions, and who last updated an event and when. Participant names available through iCloud help identify invited people and the person who updated an event.

This information is used to keep and review diary records, calculate summaries and charts, display widgets and export selected dates. Enter only what you need: notes and measurements may be particularly sensitive. The app is a diary, not a medical device. It does not diagnose conditions or make automated health decisions.

Where data is stored

Unshared diaries. Data is stored in the app’s local database on your device. You do not need a Pannoli account. The app does not send these diaries to a developer-operated server. Device backups, if enabled, depend on your system settings. A local diary does not automatically sync between devices.

Family diaries. Preparing an invitation in Settings → iCloud and family uploads the profile and diary records to Apple iCloud/CloudKit, including while the invitation is being prepared. The owner’s records are in their private database; participants access them through the shared database. Sharing is not public: access is limited to invited people who accept, according to the assigned permissions. The app retains a local copy for offline reading.

The owner can grant read-only or read-and-write access, change permissions and revoke invitations through iCloud sharing controls. Participants with write access can edit and delete events. Revoking access does not remotely delete PDFs, screenshots or copies already downloaded.

Apple manages Apple Accounts, iCloud and its infrastructure under its privacy policy. The app does not manage Apple Account credentials. Apple services may process data in multiple countries under their own terms and applicable safeguards; this policy does not promise that data stays exclusively in Italy or the EU.

Widgets read local summaries through storage shared between the app and its extension. Information may be visible to anyone looking at your screen. Choose where to place widgets and manage them through iOS controls.

PDF export includes events and notes for the selected dates and is generated on your device. The file is prepared in temporary app storage to open the system share sheet. You choose which app, person or folder receives it. Saved or received copies are managed by their recipients and services. Deleting diary records does not delete these copies.

Guides can open external information sources. This privacy policy and support pages are hosted on GitHub Pages. Opening a link visits the relevant site; your browser and its provider may process technical data such as your IP address and request information under their own policies. Your diary is not attached to those links. See also GitHub’s privacy statement.

Plus purchases

Pannoli Plus is an optional one-time purchase handled by Apple through StoreKit. The app verifies transactions and purchase entitlements to enable Plus features and restore a purchase. The developer does not receive your card details or payment credentials. Diary sharing does not require Plus.

Weight charts are calculated on your device and show measurements recorded in the diary. They include no reference curves or predictions and do not assess growth.

Advertising, analytics and diagnostics

The app includes no advertising, advertising identifiers or third-party usage analytics SDKs. It does not automatically send diary content to AI services and does not sell your personal data.

Apple may provide the developer with App Store statistics and diagnostic reports according to your device’s sharing settings. TestFlight testing also follows Apple’s rules for test data, diagnostics and feedback. These services do not automatically send your diary. Avoid including confidential information in feedback attachments.

Retention and deletion

Events remain in your diary until you edit or delete them. Deletions in a shared diary propagate when iCloud is reachable. Technical sync markers may remain to prevent an old offline copy from restoring deleted events. The updated app removes event content from these markers when uploading a deletion; records created by earlier versions may retain information until the entire shared diary is deleted.

In Settings → Data and privacy:

  • Export diary as PDF lets you select dates and save a readable copy.
  • Sharing and permissions opens iCloud invitation management.
  • Delete diary, for a local diary, removes the profile, events and related sync markers from that device.
  • Delete diary, for the owner of a shared diary, removes its CloudKit zone and local copy. Invited people lose access to the remote diary. An iCloud connection is required. If remote deletion fails, the local copy is retained so you can try again.
  • Leave and remove diary, for an invited participant, ends participation and removes their local copy. The owner’s and other participants’ diaries remain.

Deleting one diary does not affect other diaries. Copies on other devices, PDFs, screenshots and backups are not deleted remotely. Manage them on the devices or services storing them. Uninstalling the app does not guarantee deletion of iCloud data, exports or backups.

Support communications are kept for as long as needed to respond and manage your request, subject to any legal retention obligations. Support processing is based on handling your request and providing assistance. Diary data is managed through the features you request, rather than stored by the developer as a centralized viewing service.

Choices and rights

You can correct data, export selected dates, manage invitations and delete diaries using the controls described above. Where applicable, you can request access, correction, deletion, restriction, portability or object to processing of data you send to the developer by emailing the address above. The developer cannot remotely recover or delete your local database for you. For data managed directly by Apple, also use Apple Account controls and Apple Data and Privacy.

You can contact the Italian Data Protection Authority or the relevant authority in your country. The app is intended for parents and adults caring for children, rather than independent use by children.

This policy is updated when features or data processing change. The features described apply to Pannoli version 1.0; some controls may be absent from earlier beta versions.