Privacy Policy

Last Updated: January 17, 2025

1. Introduction

Welcome to ToddlerBites ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

By using ToddlerBites, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address and password when you create an account
• Profile Information: Your child's name, age, allergies, dietary preferences, and food restrictions
• Meal Logs: Information about meals including food items, portions eaten, reactions, and notes
• Photos: Meal photos you choose to upload (stored securely and never shared)
• Voice Notes: Audio recordings when you use the voice logging feature (processed and not permanently stored)

2.2 Information Collected Automatically

• Device Information: Device type, operating system, and app version
• Usage Data: Features used, screens viewed, and interaction patterns
• Analytics: Anonymized data to improve app performance and user experience

2.3 Information from Third Parties

If you sign in using Apple Sign In or Google Sign In, we receive your email address and name (if provided) from these services.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the ToddlerBites service
• Track and display your child's meal history and eating patterns
• Generate personalized insights about your child's nutrition
• Provide recipe suggestions based on preferences and allergies
• Process voice input for hands-free meal logging
• Send important service updates and notifications
• Respond to your requests and provide customer support
• Analyze usage patterns to improve our app

4. Third-Party Services

ToddlerBites uses the following third-party services:

4.1 Firebase (Google)

We use Firebase for authentication, database storage, and analytics. Firebase's privacy policy can be found at firebase.google.com/support/privacy

4.2 RevenueCat

We use RevenueCat to manage subscriptions and in-app purchases. RevenueCat's privacy policy can be found at revenuecat.com/privacy

4.3 OpenAI

We use OpenAI's services for AI-powered recipe suggestions. Text you provide for recipe generation is processed by OpenAI. OpenAI's privacy policy can be found at openai.com/privacy

4.4 ElevenLabs

We use ElevenLabs for voice features in the app. ElevenLabs' privacy policy can be found at elevenlabs.io/privacy

5. Data Storage and Security

Your data is stored securely using industry-standard encryption and security practices:

• All data is transmitted using SSL/TLS encryption
• Data is stored in secure cloud infrastructure (Google Cloud Platform)
• We implement access controls to limit who can access your data
• We regularly review and update our security practices

6. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

• With Your Consent: When you explicitly authorize sharing (e.g., sharing profiles with caregivers)
• Service Providers: With third-party services that help us operate the app (listed in Section 4)
• Legal Requirements: When required by law or to protect our rights

7. Children's Privacy

ToddlerBites is designed for parents and caregivers to track their children's meals. We do not knowingly collect personal information directly from children under 13. All information about children is provided by their parents or guardians.

Parents have full control over their children's data and can view, modify, or delete this information at any time through the app.

8. Your Rights and Choices

You have the following rights regarding your data:

• Access: View all data we have about you through the app
• Correction: Update or correct your information at any time
• Deletion: Request deletion of your account and all associated data
• Export: Request a copy of your data in a portable format
• Opt-out: Disable analytics and non-essential data collection in settings

To exercise these rights, contact us at privacy@toddlerbites.app

9. Data Retention

We retain your data for as long as your account is active or as needed to provide services. If you delete your account:

• Your personal information is deleted within 30 days
• Anonymized analytics data may be retained for service improvement
• Some data may be retained as required by law

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this privacy policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new policy on this page
• Updating the "Last Updated" date
• Sending an in-app notification for material changes

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your rights

13. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing