How we handle your family's information

• Account details — your name and email address, so you can sign in and we can contact you.
• Child records you enter — first name or nickname, date of birth, confirmed allergens, the plan you were given, exposures you log, reactions and outcomes, and any photos or notes you attach.
• Medical context you choose to add — specialist details, action plans and medication notes.
• Basic technical data — the information needed to run and secure the service, such as device type and error logs.

Only to provide the service: to show you your child's record, to keep your history available across sessions and devices, and to support you if something goes wrong. We do not build advertising profiles.

• We do not sell your data, or your child's data, to anyone.
• We do not share it with advertisers, insurers or data brokers.
• We do not use identifiable child health records for marketing.

Today, a family record is visible to the account it belongs to. Shared caregiver access with separate logins is on our roadmap; when it ships, you will control who is invited and what they can see. Our team can access data only where necessary to operate the service or to help you with a support request.

Data is encrypted in transit and at rest, access within our team is limited to those who need it, and we use reputable infrastructure providers. No system is perfectly secure; if a breach ever affected your data, we would notify you promptly.

• You can view and edit any record you have entered, at any time.
• You can delete an individual exposure, a child profile, or your whole account.
• Deleting your account removes your records from active systems; backups age out on a defined retention cycle.
• You can ask us for a copy of your data, or ask us to correct it.

We email you about your account, and — only if you opted in — occasional updates on our progress. Every update email has a one-click unsubscribe.

Accounts are held by a parent or guardian, not by a child. Records about children exist only because a caregiver entered them, and that caregiver can remove them.

Questions, requests or concerns: privacy@tiny-tastes.com.