1. Who We Are

Ummy™, operated by Superfood Organics LLC dba UMMY™ ("Ummy™," "we," "us," or "our"), is a web-based application that helps parents track and understand their children's daily nutritional intake. We are accessible at ummyapp.com.

If you have any questions about this policy, please contact us at support@ummyapp.com.

2. Information We Collect

We collect only what is necessary to provide the service. This includes:

• Account information: Your first name, last name, email address, and password (stored securely via Firebase Authentication).
• Optional profile information: City, state, and ZIP code, which you may provide for your parent profile.
• Child profile data: Your child's first name, age group (2–3, 4–8, or 9–13), gender (optional, for display only), and avatar selection.
• Food log data: Foods logged, portion sizes, dates, and meal times entered by you or a co-parent you have shared access with.
• Usage data: We use Google Firebase Analytics to measure how the app is used and to improve performance. This collects event-level data (such as which screens are viewed and which features are used), browser and device type, country-level geography, session timestamps, and a pseudonymous app instance identifier. This data is not linked to your name, email, or any identifying information about your child. We do not log the contents of your child's food entries, growth measurements, mood notes, or sleep logs to Analytics.
• AI-assisted logging (optional): If you use voice or camera logging, the words you enter and any meal photo you take are sent to our AI provider to suggest possible foods. These are used only to generate suggestions and are not stored by Ummy™. You review and confirm every suggestion before anything is logged.

We do not collect Social Security numbers, payment information, health insurance data, or any government-issued identification.

3. Children's Privacy (COPPA Notice)

The child profile data stored in the app (name, age group, food logs) is entered by and accessible only to the parent or guardian who created the account, and any co-parent they have explicitly shared access with using a share code. We treat all child-related data with the highest level of care in compliance with the Children's Online Privacy Protection Act (COPPA).

If you believe we have inadvertently collected information from a child without parental consent, please contact us immediately at support@ummyapp.com and we will delete it promptly.

4. How We Use Your Information

We use the information you provide solely to:

• Create and maintain your account
• Display your child's nutritional data and analysis within the app
• Generate pediatrician reports you choose to export
• Enable parent sharing between accounts using share codes
• Send password reset emails when requested
• Improve the app based on aggregated usage patterns collected via Firebase Analytics (event-level, not personal — see Section 2 and Section 9)

We do not use your data for advertising, behavioral profiling, or sale to third parties.

5. How We Store and Protect Your Data

Your data is stored in Google Firebase (Firestore and Firebase Authentication), a secure cloud platform operated by Google LLC. Firebase provides industry-standard encryption in transit (HTTPS/TLS) and at rest.

Access to your data is protected by strict Firestore security rules. Only your authenticated account — and any co-parent you have explicitly shared with — can read or write your family's data. Ummy™ staff do not have routine access to individual user data.

6. Data Sharing

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

• Co-parent sharing: If you generate a share code and provide it to another parent, that parent will have access to the shared child's profile and food log.
• Service providers: We use Google Firebase as our infrastructure provider. Google processes data on our behalf under their data processing terms.
• Bot protection: Some of our pages use Google reCAPTCHA to tell real visitors apart from automated bots. When you load one of those pages, Google receives information about your visit, including your IP address, and handles it under Google's own privacy policy. Ummy™ receives only a score indicating how likely the visit is to be automated — we do not receive your IP address from reCAPTCHA.
• Legal requirements: We may disclose information if required to do so by law or in response to a valid legal request.

7. Data Retention and Deletion

Your account and all associated data remain stored in Firebase for as long as your account is active. If you wish to delete your account and all associated data, please email support@ummyapp.com with the subject line "Account Deletion Request." We will process your request within 30 days and confirm when deletion is complete.

Ratings, comments, and email addresses submitted on private preview pages are covered separately in Section 10 below.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to certain processing of your data
• Request a portable copy of your data

To exercise any of these rights, please contact us at support@ummyapp.com.

9. Cookies and Tracking

Ummy™ does not use advertising cookies or tracking pixels for marketing. Firebase Authentication sets session cookies necessary to keep you signed in. Firebase Analytics may store identifiers in your browser (including a pseudonymous app instance ID) used to count sessions and measure app performance. We do not use any cookies, identifiers, or stored data for advertising, behavioral profiling, or sale to third parties.

10. Private preview pages

From time to time we share early videos with parents on private preview pages. If you rate a video, leave a comment, or give us your email address on one of those pages, here is what we keep and why.

What we collect. The star rating you give, any comment you write, and your email address if you choose to enter one. Only the rating is required — the comment and email are optional.

Why we keep it. Ratings and comments tell us which videos are worth making more of. If you give us your email address, we use it for one thing: letting you know when new videos are ready. We do not sell it, rent it, or share it with advertisers.

What else gets recorded. To stop automated abuse of the form, we store a one-way scrambled version of your IP address rather than the address itself, along with your browser type. The scrambled value cannot be turned back into your IP address.

We do not ask about your child on these pages, and you should not enter any information about your child there.

How long we keep it. We keep this information until you ask us to delete it. You can ask us to delete your email address or your feedback at any time by writing to support@ummyapp.com. Every update email we send includes an unsubscribe link.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. If changes are material, we will notify you by email. Continued use of the app after changes are posted constitutes your acceptance of the updated policy.