Personal Data and Privacy Policy

1.1 The Owner and Developer of the Application (Administration): “NIKITA GRISHCHENKO” PRIVATE ENTREPRENEUR Address: 10 Zakyan str., Arabkir, Yerevan city 0015, Republic of Armenia Email: support@firstfood.app 1.2. We process your personal data based on your consent, provided when accepting this Policy, and for the performance of the contract (providing you with the functionality of the Application). 1.3. You have the right to: • Request access to and a copy of your personal data. • Request the correction or deletion of your personal data. • Withdraw your consent to data processing. • Submit complaints to a competent data protection authority. 1.4. To exercise your rights or obtain clarifications, please contact us at the email address above. We undertake to review your request within 30 days from the date of receipt. 1.5. For the proper functioning of the Application, the User agrees to provide and consents to the processing of personal data. “Personal data” refers to the information required to log in to the Application, as well as the data entered by the User, including: • the child’s name, date of birth, and gender; • any personal information about the User and their child added by the User; • photographs. 1.6. The Administration guarantees the confidentiality of the submitted data and provides access only to those employees who need this information to ensure the proper functioning of the Application. 1.7. The information received by the Administration is not subject to disclosure except in cases where disclosure is required by the legislation of the Republic of Armenia or is necessary for the operation of the Application and its features. 1.8. We store your personal data for as long as your account exists and for the period necessary to fulfill legitimate purposes. After deleting your account, your data is permanently removed with no possibility of recovery. 1.9. The User may completely delete all data from the Application, including personal data and the account. To do this, the User must delete their account in the Application. Deleting the account results in the complete removal of all data (including personal data, data entered within the Application’s functionality, account information) with no possibility of further recovery. If, for any reason, you are unable to use this feature yourself, please contact us.

2.1. To ensure reliable performance, data storage, analytics, and sending notifications, our Application uses third-party cloud providers: Yandex Cloud and Firebase (Google Ireland Limited). 2.2. Yandex Cloud acts as a Data Processor on our behalf. This means that all information provided by you when using the Application, including personal data (login, child data, photos), may be stored and processed on the provider’s secure servers. 2.3. Data is transferred solely for the following purposes: Yandex Cloud: • Storage and backup of user data. • Processing requests within the Application. • Sending push notifications. • Ensuring data security and integrity. Firebase (Google): • Analytics: Anonymous collection and analysis of Application usage data (e.g., frequency of use, in-app events, crash reports) to improve performance and quality. • Push notifications: Sending messages and notifications to your device. Firebase uses a unique device identifier (token), which does not allow identifying the user personally. 2.4. We enter into the necessary agreements with Yandex Cloud obligating them to protect your data, not use it for their own purposes, and comply with applicable data protection laws. 2.5. You can familiarize yourself with the privacy policies and terms of service at the links below: For Yandex Cloud: Terms of Use: https://yandex.ru/legal/cloud_termsofuse/ Privacy Policy: https://yandex.ru/legal/confidential/ For Firebase (Google): Terms of Use: https://firebase.google.com/terms Privacy Policy: https://policies.google.com/privacy Data is transferred solely to ensure the functioning of the Application (storage, backup, request processing, and sending notifications). Yandex Cloud acts as a Data Processor on our behalf. 2.6. Processing of your personal data is carried out on the following legal grounds: • Performance of a contract: Processing is necessary to provide you with the Application’s functionality under this Agreement. • Your explicit consent: Requested separately for specific purposes (e.g., marketing notifications). • Legitimate interests: We may process anonymized data to analyze and improve the Application. 2.7. Cross-border Data Transfer. Data may be stored outside the European Union. We use the European Commission’s Standard Contractual Clauses (SCC) (dated June 4, 2021), along with additional technical protection measures (encryption, access control) to ensure GDPR compliance. 2.8. Data Security. We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. All data is transmitted and stored using modern encryption methods. Access to the provider servers storing the data is limited to authorized employees who need it to ensure the Application’s operation. 2.9. Use of this Application signifies acceptance of the personal data and other data collection policies described in this Agreement, as well as the data policies and user agreements of the services listed in Section 2.1. If the User does not agree with the terms of this Privacy Policy and personal data collection, they must stop using the Application. 3.0. This Policy applies only to information processed during the use of the Application. The Administration does not control and is not responsible for the processing of information by third-party websites that the User may access through links found in the Application.

3.1. This Policy comes into effect upon the User’s first login to the mobile Application. 3.2. The Policy ceases to apply when a new version is released. 3.3. The Administration reserves the right to unilaterally amend this Agreement at its discretion. 3.4. The new version of the Policy is published in the Application (Settings → Privacy Policy) and on the website firstfood.app.

Last Updated: 01 November 2025