Privacy Policy

Summary

Baby Food & Allergy Tracker is built privacy-first. Core data is stored locally on your device by default, including food diary entries, reaction logs, allergen introduction records, and child profiles. There is no account system, no advertising, no ad tracking, and no behavioural analytics SDK in the app.

The only data sent off your device by default is anonymous subscription state, sent to our subscription provider (RevenueCat) so we can verify your premium status. RevenueCat receives no child data.

If you opt in to Caregiver Sync (a Premium feature, off by default), optional caregiver sharing uses your own Google Drive account so invited caregivers can contribute. Shared sync data is stored in your Google Drive, not on Baby Allergy Tracker servers.

What this website collects

This website (baby-allergy-tracker.com) does not use cookies, analytics scripts, or tracking pixels. No personal data is collected when you visit. The site is hosted on Cloudflare Pages, which may retain standard server access logs (IP address, page requested, timestamp) for up to 30 days for security and abuse prevention purposes. Cloudflare's privacy policy governs this data.

What the app stores on your device

The app stores core data on your device by default. This includes food diary entries, reaction logs, allergen introduction records, and child profiles. We do not run app data servers and cannot access this data.

There are no Baby Allergy Tracker user accounts. There is no sign-up. Cloud backup and restore are not currently available.

Subscription management (RevenueCat)

Premium subscriptions are managed through RevenueCat, a third-party subscription provider. RevenueCat receives anonymous purchase events (purchase, refund, subscription state) so the app can verify your premium status and restore purchases.

RevenueCat does not receive your child's name, photo, date of birth, food logs, or reactions. It receives only the data Apple or Google requires to manage the subscription, plus an anonymous identifier that persists across sessions on the same device.

We use the aggregate data RevenueCat provides (e.g. conversion rate, churn rate) to evaluate pricing and product decisions. This is the only analytics we perform.

Optional Caregiver Sync

Optional caregiver sharing uses your own Google Drive account to share encrypted sync data with invited caregivers. This data is stored in your Google Drive, not on Baby Allergy Tracker servers. Google's privacy policy applies to Google Drive storage. You can revoke access at any time from Settings.

The app requests Google Drive access only when you initiate Caregiver Sync. If you don't use this feature, no Google account connection is made.

Third-party services / data recipients

• RevenueCat — subscription management. Receives anonymous purchase events. Privacy policy.
• Google Drive — only if you enable Caregiver Sync. Storage is on your own account.
• Apple App Store / Google Play Store — app distribution; their own privacy policies govern their platforms.

The app does not integrate any advertising SDKs, ad tracking, behavioural analytics SDKs, or crash reporting services.

COPPA compliance

We comply with the Children's Online Privacy Protection Act (COPPA) by design. Baby Allergy Tracker does not run child data servers and cannot see your child's app data. Optional caregiver sharing stores encrypted sync data in your Google Drive account, governed by Google's privacy policy.

Your rights

Because we hold no child data and no personal account, there is little for us to access, correct, or delete on our end. All data in the app can be deleted at any time from within the app settings, or by uninstalling the app. To request deletion of your subscription record from RevenueCat, contact us using the email below.

Changes to this policy

If we update this policy, we will update the date at the top of this page. We will not notify you by email because we don't have your email address.