Privacy notice

Who processes the data?

The data controller is Beszteri Lajos, a private individual, the developer and operator of Resty. Contact: lajos.beszteri@gmail.com.

Resty is free; it contains no ads, analytics or purchases, and we do not sell the data to anyone.

Without an account

Without an account, all data (the babies and every entry) is stored only in your phone's local database. In this case the app does not send data anywhere, and we cannot see it either. The data is deleted when you delete the app.

The exception is if you send feedback yourself: its text is sent to the server (see the “Feedback” section).

What data do we process if you have an account?

Account data: name, email address, password (only in encrypted — irreversible — form), the family and the invite code, the time and version of your consent. For a password reset (forgotten password): a 6-digit code that we send by email; it is valid for 15 minutes, stored only in encrypted (irreversible) form, and deleted after a successful password change.

The babies' data: name, sex, date of birth and due date, birth weight and length.

The log: sleep, feeding (for solid food, also whether it was a new food, the allergens it contained and any reaction you observed afterwards), growth (weight, length, head circumference), developmental milestones (the milestone or the name you gave it, and the date it was reached), health (temperature and where it was measured, nappies, symptoms, wellbeing), vaccinations (the vaccine's name, the date, the dose number, the batch number and any reaction you observed), medicines and vitamins (the doses given and the routines you set up: name, active ingredient, dose, daily times, first and last day), activities, and your notes.

A child's health data counts as a special category of data (GDPR Article 9); we treat vaccinations, allergens and reactions, medicine routines and developmental milestones the same way.

Sign in with Apple (on iPhone): if you sign in with your Apple Account, we receive from Apple your Apple ID identifier, your name (only on the first sign-in) and your email address — or the address hidden by Apple (“Hide My Email”) if you choose that. When you delete your account, we also remove the Sign in with Apple connection; for this we use an access code received from Apple and stored encrypted. We do not send any data to Apple.

For what purpose and on what legal basis?

Purpose: so that family members (who joined with the invite code) see the same log, and so that your data is kept even if you lose your phone (cloud backup).

Legal basis: for account data, the provision of the service (GDPR Article 6(1)(b)); for the child's health data, your explicit consent (GDPR Article 9(2)(a)), which you give when signing up.

The calculations (sleep recommendations, statistics, warnings) run on your phone; there is no automated decision-making or profiling that would have legal effects on you.

Reminders: sleep and medicine reminders are scheduled and shown by your phone (local notifications); they do not come from the server, and their text is not sent to the server. Which routines the medicine reminder covers, and whether details are shown on the lock screen (by default they are not: only “Resty reminder” and the time), is set on that phone only and is not synced. With an account, the routine itself is uploaded to the server (like the other log entries), as is the per-family-member setting for whose phone gives sleep reminders.

Who has access?

Your family members (accounts that joined with the invite code) can see and edit the data of the family's babies.

The operator has technical access to the database in order to run the server; the data is not used for any other purpose.

Hosting: Rackhost Zrt. (Hungary) — the server is in the EU, in Hungary. The name servers of the resty.hu domain and the related email forwarding are provided by Cloudflare; the app's data traffic does not pass through it. Emails sent to us are handled in a Gmail mailbox (Google). The password reset email is delivered by the email service of Brevo SAS (France, EU); for this it receives only your email address and the content of the email (the code).

Export and sharing: in the app you can create a PDF report, a spreadsheet (CSV), an image or a full backup (JSON). The file is created on your phone; it is not uploaded to the Resty server, and we do not receive it. You decide whom to send it to (e.g. by email, in a messaging app, to a printer); once it is with the recipient or in the app you chose, the file is no longer handled by Resty.

How long do we keep it?

As long as your account exists. When you delete your account (in the app: Family & sync → Delete account, or on the resty.hu/fiok-torles/en page), your account is deleted immediately; if you are the last member of the family, all data of the family and the babies is also permanently deleted from the server. If the family still has other members, the shared data remains with them.

Deleted data disappears from the server's backups when the backup retention period expires, within 5 weeks at most.

The data on your phone remains even after the account is deleted (you can keep using the app without an account).

Feedback

In the app (on the home screen or in the menu: “Send feedback”) you can send feedback or a bug report even without an account. In this case the following is sent to the server: the text you wrote; your email address, if you provide it (optional — only needed if you want a reply); the app version and the phone platform (Android / iOS); and the time it was sent.

Feedback is anonymous: we do not link it to your account, your family or the babies' data, even if you are logged in. We can only identify you from the email address you provide.

Purpose: fixing bugs, developing the app, and, if you ask, replying. Legal basis: your consent, which you give by sending it (GDPR Article 6(1)(a)). At your request we will delete the feedback (if you did not give an email address, tell us when you sent it or its text so we can find it).

Please don't include health data or names unless necessary. If you do (e.g. when describing a bug), we use it only to process the feedback.

Retention: we keep feedback for at most 1 year after it has been processed (replied to or fixed), then we delete it.

Access: only the operator. Feedback is stored on the same server as account data (Rackhost, Hungary); if we reply by email, the correspondence remains in the Gmail mailbox.

Security

Traffic between the app and the server is encrypted (HTTPS). The password is stored only in encrypted form. All data is tied to the family: other families cannot see any of it.

Your rights

You can request information about and a copy of your data, rectification, erasure, restriction of processing, and the release of your data in a portable format. You can withdraw your consent at any time — most simply by deleting your account; this does not affect the lawfulness of processing carried out before the withdrawal.

You can send your request to lajos.beszteri@gmail.com; we will reply within one month at most.

You can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, naih.hu), or turn to the courts.

You can also create a copy of your data yourself in a portable, machine-readable format: in the app, home screen menu → “Back up my data (JSON)” (GDPR Articles 15 and 20). It contains every baby and every entry stored on your phone.

Health information

Resty is not a medical device. The warnings (e.g. fever under 3 months of age) and the measurement tips are based on international paediatric guidelines (AAP, NICE), and the age windows for milestones on WHO and CDC data; they are for information only, and do not replace a medical examination. You set the dose and the times of a medicine routine: the app does not suggest a dose.

Changes

If the notice changes materially (e.g. a new processing purpose, or a new type of data covered by your consent), we will notify you in the app, and you will need to accept it again at the next launch to continue family sync. For minor clarifications that do not affect your consent, only the date below is updated.

Consent version: 2026-10-20. Text last updated: 2026-11-04.