Feed-my-BabyGet the app

Privacy policy

24.10.2026

Privacy policy

Who is responsible

FeedMyBaby is operated by PPY Solutions — Peter Sigmond, Kulgberg 41/b, 5223 Pfaffstätt, Austria. Contact: [email protected]. This notice covers the FeedMyBaby mobile app and website. The service is for parents and caregivers; child information is entered by an authorized adult, not collected through a child’s own account.

Account and family information

We process your name or username, email, sign-in identifiers, language and account settings to provide and secure your account. Your optional child profiles can include a name, birth date, sex, growth measurements, feeding preferences, allergies, restrictions and recorded food reactions. Plans, recipe ratings, favourites, shopping lists, preparation checklists, stored portions, caregiver contributions and support messages are stored when you use those features. Health-related entries are sensitive: provide only information you are authorized to share and need for the feature.

AI features

When you request an AI meal plan, recipe or Journey insight, relevant child and meal information is sent to OpenAI. Depending on the feature this can include the child’s name, age, sex, weight, selected foods, restrictions, growth entries and food reactions, plus your language and preferences. Generated plans and insights can be retained on our server and cached in the app. AI illustrations are suggested presentations, not photos of your meal. AI results can be wrong and are not medical advice. You can browse existing recipes without requesting new AI processing.

Notifications, purchases and technical records

If you enable notifications, we store your device’s push token, platform, app version and your reminder choices. Google Firebase Cloud Messaging and Apple Push Notification service deliver alerts. Lock-screen reminders use generic text without child names or health details. We use Firebase for messaging, not Firebase Analytics or Crashlytics. Apple and Google process in-app payments; we receive purchase identifiers, status and expiry to verify access. Stripe processes website payments. We do not receive your full payment-card details. Server access/security records can include IP addresses, request times, device/app information and errors; they help protect accounts and diagnose failures.

Recipients and your choices

Information needed for the requested service is processed by our hosting and backup infrastructure, Cloudflare for delivery and security, OpenAI for requested AI features, Apple or Google for chosen sign-in/payment/notification services, Stripe for website checkout, and SendGrid for service email. These providers may process data outside the European Economic Area. Provider processing and retention also follow their applicable service terms. We do not sell your family data. Caregivers receive only the access you explicitly grant. Optional reminders can be disabled in the app; OS permission is separate. The native app does not use an advertising identifier or cross-app advertising tracking. The website has separate cookie choices for optional analytics/advertising; see Cookie settings.

Why we process data

We use account and requested service data to fulfil our agreement with you, technical/security data to operate and protect the service, and payment records to meet legal obligations. Optional communications and optional features follow your choices and applicable consent requirements. You can withdraw an optional choice without deleting the whole account. Do not enter another person’s health information unless you have authority to do so. Contact us if you need access to, correction of or removal of information about a child.

Retention and deletion

Account and feature records are kept while needed for your account or until you delete them. Delete your account in Account settings or at https://feedmybaby.eu/pages/delete-account/. Successful deletion removes the live account, child profiles, owned plans, preferences and push registrations. Contributions belonging to another parent’s child record remain without your author identifier. Paid-order records are detached from the account and retained for legal accounting periods, normally seven years after the relevant calendar year; longer statutory or pending-proceeding requirements can apply. Routine backup rotation keeps seven daily, four weekly and six monthly copies, so deleted data can remain in restricted backups until rotation. Separate release-recovery copies are restricted and retained only while needed for recovery. Provider records have their own retention. Deleting the app or your account does not cancel a store subscription: cancel it with Apple or Google separately.

Your rights and contact

You may request access, correction, deletion, restriction or portability of your information, and object to processing where applicable. You may withdraw consent where processing relies on it. Email [email protected]; we may verify your identity before disclosing or changing private records. You can complain to the Austrian Data Protection Authority (https://dsb.gv.at/) or your competent authority. This notice describes current practices; material changes will be communicated through the service.

[email protected]