Privacy Policy

Summary

Log: Baby Solid Food & Allergy is built privacy-first. Core data is stored locally on your device by default, including food diary entries, reaction logs, allergen introduction records, and child profiles. There is no account system, no advertising, no ad tracking, and no behavioural analytics SDK in the app.

The only data sent off your device by default is anonymous subscription state, sent to our subscription provider (RevenueCat) so we can verify your premium status. RevenueCat receives no child data.

If you opt in to Caregiver Sync (a Premium feature, off by default), optional caregiver sharing uses your own Google Drive account so invited caregivers can contribute. Shared sync data is end-to-end encrypted directly on your device before upload, making it completely unreadable by Google, us, or anyone else who gains access to your Drive files.

What this website collects

This website (baby-allergy-tracker.com) does not use cookies, analytics scripts, or tracking pixels. No personal data is collected when you visit. The site is hosted on Cloudflare Pages, which may retain standard server access logs (IP address, page requested, timestamp) for up to 30 days for security and abuse prevention purposes. Cloudflare's privacy policy governs this data.

What the app stores on your device

The app stores core data on your device by default. This includes food diary entries, reaction logs, allergen introduction records, and child profiles. We do not run app data servers and cannot access this data.

There are no user accounts. There is no sign-up. You can export an encrypted backup file at any time and restore it later — this is a manual, self-managed export to a file you control, not a cloud account. We never see or store this file.

Subscription management & analytics (RevenueCat)

Premium subscriptions are managed through RevenueCat, a third-party subscription provider. RevenueCat receives anonymous purchase events (purchase, refund, subscription state) so the app can verify your premium status and restore purchases.

RevenueCat does not receive your child's name, photo, date of birth, food logs, or reactions. It receives only the data Apple or Google requires to manage the subscription, plus an anonymous identifier that persists across sessions on the same device.

There are zero analytics services—first-party or third-party—running within the mobile app. As developers, we have no insight into how you interact with the app, which screens you view, or what health data you log. We use only the aggregate, high-level business metrics that RevenueCat provides (e.g., overall conversion rate and churn rate) to evaluate pricing and product decisions. This is the only analytics we perform.

Optional Caregiver Sync

Optional caregiver sharing uses your own Google Drive account to share sync data with invited caregivers. Shared sync data is end-to-end encrypted on your device prior to upload, rendering it unreadable by Google, us, or any third party with access to your storage. Google's privacy policy applies to Google Drive storage. You can revoke access at any time from Settings.

The app requests Google Drive access only when you initiate Caregiver Sync. If you don't use this feature, no Google account connection is made.

Third-party services / data recipients

• RevenueCat — subscription management. Receives anonymous purchase events. Privacy policy.
• Google Drive — only if you enable Caregiver Sync. Storage is on your own account, with end-to-end encryption.
• Apple App Store / Google Play Store — app distribution; their own privacy policies govern their platforms.

The app does not integrate any advertising SDKs, ad tracking, behavioural analytics SDKs, or crash reporting services.

COPPA compliance

We comply with the Children's Online Privacy Protection Act (COPPA) by design. The app does not run child data servers and cannot see your child's app data. Optional caregiver sharing stores end-to-end encrypted sync data in your Google Drive account, governed by Google's privacy policy.

Your rights

Because we hold no child data and no personal account, there is little for us to access, correct, or delete on our end. All data in the app can be deleted at any time from within the app settings, or by uninstalling the app. To request deletion of your subscription record from RevenueCat, contact us.

Changes to this policy

If we update this policy, we will update the date at the top of this page. We will not notify you by email because we don't have your email address.

Contact

Questions about this privacy policy? Email us at support@baby-allergy-tracker.com.