Privacy policy

Your child's feeding record is nobody else's business.

Last updated 4 October 2026.

Particular Palate is operated by Noah Schultz, a sole proprietor in Missouri, United States. This policy explains what is collected, why, who it reaches, and how to get rid of it.

What is collected

Your email address, because it is how you sign in. Your password is hashed and salted and never stored in a readable form, which also means nobody here can read yours back to you.
About your child: the name or nickname you choose, date of birth, sex, any feeding diagnoses you select, and the feeds, measurements, medicines, plan steps, appointments and notes you enter. Date of birth and sex are required only because a growth percentile cannot be computed without them.
Billing: if you subscribe, Stripe collects and holds your payment details. We receive only a customer identifier, the subscription status, and the renewal date. We never see or store your card number.
Technical: our hosting providers log ordinary request data such as IP address, timestamp and browser type, for security and reliability.

We do not ask for your child's full legal name, and you should not enter it. A nickname works everywhere in the app.

What is not collected

No advertising identifiers, no behavioural tracking, no third-party analytics, no session recording, no fingerprinting, no location data, no contacts, no device identifiers beyond what a web server necessarily sees.

Who can see it

You, and anyone you deliberately invite to a child profile. Nobody else. Row-level security in the database is scoped to your account, so a request made with your key can only ever return your own rows — this is enforced by the database itself, not by the app's code.

Your data is not sold, rented, licensed, or shared with advertisers or data brokers. It is not used to train machine learning models. It is not aggregated into research datasets, published reports, or benchmarks. There are no third-party analytics, advertising or tracking scripts on this site.

Service providers

Being honest here is more useful than claiming nothing touches your data, because that claim would be false and would undermine the parts that are true. Each of these holds data on our behalf under its own terms, and none has any right to use it for its own purposes.

Cloudflare — serves the site and terminates TLS. Sees request metadata: IP address, timestamp, user agent, URL. Does not see your records, which your browser fetches directly from the database.
Supabase, running on Amazon Web Services in the United States — the database, authentication and file storage.
Stripe — payment processing, if you subscribe. Receives your email address and the card details you give it directly. Stripe is a separate controller of that payment data under its own privacy policy.

Where data is held

In the United States. If you use the service from outside the US, your information is transferred to and processed there, which may have different data protection law than your own country.

Why we are allowed to hold it

We process your data to provide a service you asked for and to take payment for it. Where consent is the basis — for information about your child's health — you give it by entering the information, and you can withdraw it at any time by deleting the records or the account.

Encryption

Traffic runs over TLS. Data is encrypted at rest by the database host using AES-256. Backups are encrypted with it.

How long it is kept

For as long as your account exists. A lapsed subscription does not delete anything. Deleted records are removed from backups within 30 days. We do not keep a shadow copy of a deleted account.

Cookies and local storage

Your browser stores your sign-in session, your theme choice, a reminder setting and an offline queue of writes that have not yet synced. That is all. There are no advertising or analytics cookies, so there is no consent banner, because there is nothing to consent to.

Children

The account holder is an adult. The information is about an infant, entered by their parent or guardian, and is treated as sensitive health information regardless of what any particular law requires. The service is not directed at children and we do not knowingly allow anyone under 18 to create an account.

A note on HIPAA

HIPAA does not apply here. It governs healthcare providers, health plans, clearinghouses and their business associates. Particular Palate is none of those: it is a consumer app that you, the parent, enter your own information into. We say this plainly rather than implying a compliance status we do not have. It does not change how carefully the data is handled.

Your rights

Export. One button in Settings gives you everything as a JSON file, at any time, with no request to anyone. The healthcare export produces a printable summary.
Correct. Every record in the app is editable.
Delete. Delete a child profile and its feeds, measurements, medicines, notes and appointments go with it immediately. Delete your account and everything goes, including from backups, within 30 days. There is no retention window designed to change your mind and no cancellation flow that tries to talk you out of it.
Object or restrict. Write to us and we will act on it.

Depending on where you live you may have further rights under laws such as the GDPR or state privacy laws. We honour access, correction, deletion and portability requests from anyone, wherever they are, rather than checking whether we are obliged to. We will not discriminate against you for exercising them.

If something goes wrong

If data is ever exposed, you will be told what happened, what was involved and when — by email and in the app — without waiting to see whether anyone noticed, and in any event within 72 hours of us becoming aware.

Changes

If this policy changes materially, the date at the top changes and you will see a notice in the app before the change takes effect.

Contact

hello@particularpalate.com