Particular PalatePrivacy
Your child's feeding log is nobody else's business.
Last updated 6 September 2026.
What is stored
- Your email address, because it is how you sign in. Your password is hashed and salted and never stored in a readable form, which also means nobody here can read yours back to you.
- Your child's first name or nickname, date of birth, sex, and cleft type. Sex and date of birth are needed to place a weight on the right growth curve; there is no way to compute a percentile without them.
- The feeds, measurements, plan steps, appointments and notes you enter.
We do not ask for your child's full legal name, and you should not enter it. A nickname works everywhere in the app.
Who can see it
You, and anyone you deliberately invite to a child profile. Nobody else. Row-level security in the database is scoped to your account, so a request made with your key can only ever return your own rows — this is enforced by the database itself, not by the app's code.
Your data is not sold, rented, or shared with advertisers. It is not used to train models. It is not aggregated into research datasets or reports. There are no third-party analytics, advertising, or tracking scripts on this site.
Encryption
Traffic runs over TLS. Data is encrypted at rest by the database host using AES-256. Backups are encrypted with it.
Service providers
Being honest here is more useful than claiming nothing touches your data, because that claim would be false and would undermine the parts that are true.
- Cloudflare serves the site and terminates TLS. It sees request metadata: IP address, timestamp, user agent, and the URL requested. It does not see your data, which is fetched by your browser directly from the database.
- Supabase, running on Amazon Web Services in the United States, holds the database, authentication, and file storage.
- Google Fonts serves two typefaces. Your browser requests them directly, which discloses your IP address to Google. If that matters to you, tell us and the fonts will be self-hosted.
Each holds data on our behalf under its own terms. None has any right to use it for its own purposes.
Cookies
One item in your browser's local storage holds your sign-in session and your theme choice. That is all. There are no advertising or analytics cookies, so there is no consent banner, because there is nothing to consent to.
Children
The account holder is an adult. The data is about an infant, entered by their parent or guardian, and it is treated as sensitive health information regardless of what any particular law requires.
Your rights
- Export. One button in Settings gives you everything as JSON, at any time, with no request to anyone.
- Correct. Every record in the app is editable.
- Delete. Delete a child profile and its feeds, measurements, plan steps and appointments go with it immediately. Delete your account and everything goes, including from backups, within thirty days. There is no retention window designed to change your mind and no cancellation flow that tries to talk you out of it.
If something goes wrong
If data is ever exposed, you will be told what happened, what was involved, and when — by email, and in the app — without waiting to see whether anyone noticed.