Privacy policy

Who we are

myBabyNUTRI is developed and operated by MYBABYNUTRI SOLE SHAREHOLDER SINGLE MEMBER P.C., Thermi, 57001 Thermi, Greece, Company register (G.E.MI.): 171664806000 · VAT no.: 802184722, info@mybabynutri.com (“we”), based in Greece. We are the data controller for the personal data described here. You can reach us at info@mybabynutri.com.

The short version

• The app stores what you log about your child (feeds, sleep, growth, foods, allergens, health notes) so you can see it on any of your devices.
• We never sell your data, and your child's records are not shown to other users of the app.
• Subscriptions are handled by Apple and Google. We only receive a purchase receipt to unlock Premium.
• The free tier shows adverts; ad, analytics and attribution SDKs receive device identifiers, not your child's records.
• AI features are off until you allow them.
• You can delete your account and its data at any time, in the app or by email. In the app you can also delete single records and, from version 3.6.28, one child with everything logged for that child. See Delete your account.

What we collect and why

1. Account data

When you create an account we store your email address, a display name, a hashed password (or, if you sign in with Apple or Google, or signed in with Facebook in an older version, the identifier and email those providers give us) and the tokens that keep you signed in. We use this to run your account, secure it and contact you about it.

2. Child profiles and tracking records

You choose what to enter. Typically this is a child's name or nickname, date of birth, sex (needed for the correct WHO growth chart) and the records you log: breast, bottle and pumping sessions, solids and snacks, sleep, nappies, weight, length and head circumference, allergen introductions and reactions, vaccines, milestones, wellbeing entries and free-text notes, plus recipes you add and photos you attach to a meal. Some of this is health-related data. We process it only to provide the features you asked for: showing your logs, charts and history, choosing food suggestions, writing the weekly AI text if you allow it (section 3), and exporting PDFs you request. The legal basis is the performance of our contract with you and, for health-related data, your explicit consent, which you can withdraw by deleting the data or your account.

3. AI-written text and reminder timing

Two features use an external language-model provider, DeepSeek (a company based in China): the weekly AI text (Premium) and choosing when to send you a reminder and which one. Neither runs unless you allow it: the app asks once, and you can change your answer at any time under More, AI features. If you do not allow it, the weekly screen shows your logged figures without AI text and no reminder-timing request is made for your account.

For the weekly text our server sends, for each of the last seven days, the sleep time you logged; the number of breastfeeds, bottles and solid meals; and the names of foods from the app's food list. Your child's age is not sent. Foods you named yourself, notes and photos are not sent.

For reminder timing it sends a summary made for this purpose: a coded account number in place of your account identifier; your youngest child's age band (or that the baby is not born yet) and how many children are on the account; how long you have had the account, whether you have Premium, the phone system and the app version; how recently and how much you logged, how far you are with the allergen tracker and which features you have used; the hours you are usually active; and your recent reminder history.

The child's name, your name, email address and device identifiers are never sent; the child's name is added to the text on our own server. The weekly text is not stored on our server. The reminder summaries and the provider's answers are kept in our own log until you delete your account. Food suggestions are chosen on our server by a fixed rule from the child's age and what you logged; no data goes to an AI provider for them.

4. Purchases

Premium subscriptions are sold by Apple's App Store or Google Play under their terms. We receive a purchase receipt or token, which our server verifies with Apple or Google to unlock Premium and keep it in sync across your devices. We do not receive your card or bank details. We store the receipt or token and the transaction identifiers, which we also keep after an account is deleted to prevent refund fraud.

5. Analytics, crash reports and attribution

To understand how the app is used and to fix problems, we use Firebase Analytics (Google), which receives usage events with an app-instance identifier; from version 3.6.24 it receives no account identifier. We also record which adverts were shown and which purchases were made, without linking these events to your account. To measure whether our advertising campaigns bring in new users, the app includes the TikTok App Events SDK and Meta (Facebook) App Events. These SDKs receive device identifiers (such as the advertising identifier where you have allowed it), coarse usage events (for example “app opened”, “subscription started”) and technical information about the device. They do not receive your child's records. In the EEA, the UK and Switzerland they start only if you agree in the privacy choices form (More → Privacy Options lets you change it). From version 3.6.24, on iOS they start only if you allow tracking when the app asks; on Android you can reset or delete your advertising ID in system settings.

6. Advertising

The free tier shows adverts served by Google AdMob. AdMob and its partners may use device identifiers and coarse location derived from your IP address to select adverts and limit repetition. Premium removes adverts. You can opt out of personalised advertising in your device settings.

7. Push notifications

If you allow notifications, we use Firebase Cloud Messaging to deliver reminders and insights. The device token is stored with your account and removed when you sign out or delete the account.

8. Photos

Photos of your child and of you on a profile, recipe photos and photos you attach to a meal entry stay on your device.

9. Website

The website is static and does not set cookies of its own. Fonts are loaded from Google Fonts, which receives your IP address when the page loads. If you use the support form, we receive the name, email address and message you enter and use them only to reply.

Where your data lives

Account and tracking data is stored on servers we operate in the European Union and is encrypted in transit (TLS). Firebase, AdMob, TikTok, Meta and, if you allow AI features, DeepSeek process the limited data described above under their own terms, and some of that processing happens outside the EU.

How long we keep it

Your data stays as long as your account exists. When you delete your account, everything described in sections 1, 2, 7 and 8, and the reminder log of section 3, is removed immediately from our live systems; residual copies can remain in server backups until those backups are deleted in our backup rotation. When you delete one child in the app (from version 3.6.28), that child's profile and everything logged for that child are removed from our live systems in the same way, except allergen, vaccine or milestone entries an older app version saved on another phone or an earlier installation, which cannot be matched to the child and are removed with your account or on request. Our server's request logs are deleted after 30 days, and expired sign-in tokens 30 days after they expire. Purchase records and transaction identifiers may be kept to prevent refund fraud and for the period required by tax law. Usage events that are not linked to your account may be kept. Data our analytics and advertising partners received is handled under their own policies.

Children

The app is for parents and caregivers and is not directed at children. The information you enter about your child is processed on your instructions as their parent or guardian. We do not knowingly create accounts for anyone under 16.

Your rights

Under the GDPR you can ask for access to your data, correction, deletion, restriction, portability, or object to processing. Most of this you can do directly in the app; for anything else email info@mybabynutri.com. You can also complain to your national data protection authority; in Greece this is the Hellenic Data Protection Authority (dpa.gr).

Changes

When we change this policy we update the date at the top and, for significant changes, tell you in the app.

The information in the app is general educational content and is not medical or dietary advice: see About myBabyNUTRI.