1. Who We Are

Ummy™, operated by Superfood Organics LLC dba UMMY™ ("Ummy™," "we," "us," or "our"), is a web-based application that helps parents track and understand their children's daily nutritional intake. We are accessible at ummy-nutrition-tracker.web.app.

If you have any questions about this policy, please contact us at ummyteam@ummyshakes.com.

2. Information We Collect

We collect only what is necessary to provide the service. This includes:

• Account information: Your first name, last name, email address, and password (stored securely via Firebase Authentication).
• Optional profile information: City, state, and ZIP code, which you may provide for your parent profile.
• Child profile data: Your child's first name, age group (2–3, 4–8, or 9–13), gender (optional, for display only), and avatar selection.
• Food log data: Foods logged, portion sizes, dates, and meal times entered by you or a co-parent you have shared access with.
• Usage data: We use Google Firebase Analytics to measure how the app is used and to improve performance. This collects event-level data (such as which screens are viewed and which features are used), browser and device type, country-level geography, session timestamps, and a pseudonymous app instance identifier. This data is not linked to your name, email, or any identifying information about your child. We do not log the contents of your child's food entries, growth measurements, mood notes, or sleep logs to Analytics.
• AI-assisted logging (optional): If you use voice or camera logging, the words you enter and any meal photo you take are sent to our AI provider to suggest possible foods. These are used only to generate suggestions and are not stored by Ummy™. You review and confirm every suggestion before anything is logged.

We do not collect Social Security numbers, payment information, health insurance data, or any government-issued identification.

3. Children's Privacy (COPPA Notice)

The child profile data stored in the app (name, age group, food logs) is entered by and accessible only to the parent or guardian who created the account, and any co-parent they have explicitly shared access with using a share code. We treat all child-related data with the highest level of care in compliance with the Children's Online Privacy Protection Act (COPPA).

If you believe we have inadvertently collected information from a child without parental consent, please contact us immediately at ummyteam@ummyshakes.com and we will delete it promptly.

4. How We Use Your Information

We use the information you provide solely to:

• Create and maintain your account
• Display your child's nutritional data and analysis within the app
• Generate pediatrician reports you choose to export
• Enable parent sharing between accounts using share codes
• Send password reset emails when requested
• Improve the app based on aggregated usage patterns collected via Firebase Analytics (event-level, not personal — see Section 2 and Section 9)

We do not use your data for advertising, behavioral profiling, or sale to third parties.

5. How We Store and Protect Your Data

Your data is stored in Google Firebase (Firestore and Firebase Authentication), a secure cloud platform operated by Google LLC. Firebase provides industry-standard encryption in transit (HTTPS/TLS) and at rest.

Access to your data is protected by strict Firestore security rules. Only your authenticated account — and any co-parent you have explicitly shared with — can read or write your family's data. Ummy™ staff do not have routine access to individual user data.

6. Data Sharing

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

• Co-parent sharing: If you generate a share code and provide it to another parent, that parent will have access to the shared child's profile and food log.
• Service providers: We use Google Firebase as our infrastructure provider. Google processes data on our behalf under their data processing terms.
• Legal requirements: We may disclose information if required to do so by law or in response to a valid legal request.

7. Data Retention and Deletion

Your account and all associated data remain stored in Firebase for as long as your account is active. If you wish to delete your account and all associated data, please email ummyteam@ummyshakes.com with the subject line "Account Deletion Request." We will process your request within 30 days and confirm when deletion is complete.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to certain processing of your data
• Request a portable copy of your data

To exercise any of these rights, please contact us at ummyteam@ummyshakes.com.

9. Cookies and Tracking

Ummy™ does not use advertising cookies or tracking pixels for marketing. Firebase Authentication sets session cookies necessary to keep you signed in. Firebase Analytics may store identifiers in your browser (including a pseudonymous app instance ID) used to count sessions and measure app performance. We do not use any cookies, identifiers, or stored data for advertising, behavioral profiling, or sale to third parties.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. If changes are material, we will notify you by email. Continued use of the app after changes are posted constitutes your acceptance of the updated policy.