Privacy Policy

A. Information Stored Locally on Your Device

Whether or not you sign in, the following information is stored on your device:

• Baby name or nickname (optional)
• Age or birth date
• Allergies
• Dietary requirements (e.g., vegetarian, gluten-free, nut-free)
• Feeding challenges
• Supplements
• Medical conditions
• Meal logs and reactions (including any photos you add)
• Saved and AI-generated recipes
• Insights, shopping lists, notes, and app settings

If you do not sign in, this information remains on your device and is not synced to a central database, except where specific features (such as AI recipe generation, analytics, or advertising measurement) transmit limited data as described below. You can delete local data at any time by clearing your profile or uninstalling the App.

Legal basis: Contractual necessity (Article 6(1)(b)) to provide core app functionality.

B. Accounts and Sign-In

Account creation is optional. The App offers the ability to create an account and sign in using a third-party sign-in option provided by an authentication provider acting on our behalf. When you sign in, we collect:

• Your email address
• An account identifier

We use this information to create and maintain your account, authenticate you, and sync your data across devices.

Legal basis: Contractual necessity (Article 6(1)(b)) and consent (Article 6(1)(a)).

C. Cloud Sync (Signed-In Users)

If you create an account and sign in, your profile and app data are synced to and stored in a hosted cloud database operated by our cloud hosting and database providers acting as our processors, so that your data is available across your devices. The synced data may include:

• Baby name and birth date
• Allergies and dietary requirements
• Feeding challenges and supplements
• Medical conditions
• Meal logs and reactions (including any photos)
• Saved and AI-generated recipes
• Insights and shopping lists
• App settings

Some of this synced information (such as allergies, medical conditions, dietary requirements, and feeding reactions) is health-related, special-category data. For signed-in users this data is stored in the cloud database, not merely processed ephemerally.

You can delete your account and all associated cloud data from within the App at any time. Doing so permanently removes your synced data from our cloud database.

Legal basis: Contractual necessity (Article 6(1)(b)) for account and sync functionality, and explicit consent (Article 9(2)(a)) for the storage of special-category health-related data in the cloud.

D. Special Category (Health-Related) Data

Allergy information, dietary requirements, medical conditions, and feeding reactions may qualify as health-related, special-category data under the UK GDPR and EU GDPR. This data is stored locally on your device and, if you sign in, synced to our cloud database as described above. It may also be transmitted to our AI processing provider when you use AI features.

Legal basis for processing:

• Explicit consent (Article 9(2)(a)), provided when you voluntarily enter this information, sign in to sync it, or use AI features.
• Provision of app functionality (Article 6(1)(b)).

You may withdraw consent and delete this data at any time by clearing your profile, deleting your account and cloud data from within the App, or uninstalling the App.

E. AI Features

When you use AI-powered recipe generation, the App sends the following to an AI processing provider acting as our processor:

• Ingredients entered
• Baby age in months
• Allergies
• Dietary requirement flags

The AI processing provider generates recipes and returns the results. Your data is not used to train the provider's models. The provider may retain data temporarily in accordance with its policies and acts solely as our processor for this functionality.

Legal basis: Contractual necessity (Article 6(1)(b)) and explicit consent (Article 9(2)(a)) where health-related data is involved.

F. Analytics

We use analytics providers acting as our processors to understand usage and improve the App. We collect pseudonymous usage analytics, which may include:

• Anonymous device identifier
• App version
• Device type
• Operating system
• Feature-usage events
• Onboarding selections (including challenges, supplements, medical conditions)
• Approximate location inferred from IP address

We configure analytics to use pseudonymous identifiers and to avoid collecting direct identifiers such as name or email.

Legal basis: Consent (Article 6(1)(a)) for EU/UK users.

G. Advertising and Attribution

We use advertising and attribution partners, via their mobile SDKs, to measure app installs and conversions (such as registration, trial start, subscription, and purchase) and to optimize our advertising. This involves collecting and sharing device-level advertising identifiers and conversion events with those partners.

• On iOS: Collection of the advertising identifier only occurs if you grant permission through Apple's App Tracking Transparency (ATT) prompt. If you decline, the advertising identifier is not collected. We also use Apple's privacy-preserving attribution framework (SKAdNetwork) to measure conversions without identifying you individually.
• On Android: Advertising-ID collection follows your device-level ads settings.

How to opt out:

• On iOS, decline the App Tracking Transparency prompt, or disable tracking for the App in your device privacy settings.
• On Android, reset or delete your advertising ID, or opt out of ad personalization in your device ads settings.
• Withdraw your consent at any time through the App's settings or by contacting us.

Legal basis: Consent (Article 6(1)(a)).

H. Email and Product Communications

If you opt in to marketing and product communications, we share your email address and your baby's name or nickname with an email and communications provider acting as our processor to send you those communications.

You can withdraw your consent and unsubscribe at any time by using the unsubscribe link in any message, adjusting your preferences in the App, or contacting support@weanify.com.

Legal basis: Consent (Article 6(1)(a)).

I. Backend and Server Logs

Our backend runs on infrastructure provided by our cloud hosting provider. Server and function logs may contain:

• IP address
• Request ID
• Anonymous client ID
• Duration and performance metrics
• Error messages (sanitized)

Log retention is governed by our cloud hosting provider's retention policies.

Legal basis: Legitimate interests (Article 6(1)(f)) in security, abuse prevention, and debugging.

J. Subscriptions and Payments

Subscriptions and purchases are processed through the app store platform from which you installed the App and a subscription and payment processor acting on our behalf. We do not receive or store payment card information. We receive only the entitlement and subscription status necessary to unlock features.

Legal basis: Contractual necessity (Article 6(1)(b)).

K. Push Notifications

If you enable push notifications, we collect:

• A push notification token

Notifications are purely functional (reminders, milestones) and are not used for advertising.

Legal basis: Consent (Article 6(1)(a)).