Last updated: November 2, 2026

1. Who we are

BabyLedBites is run by Baby Led Bites Ltd, Carrig House, Newgarden Rd, Lisnagry, Co. Limerick, Ireland (“we”, “us”). We decide how your information is used. Contact us at info@babyledbites.com.

2. What we collect

When you create an account: your first and last name, email address and password (which we store in a protected, hashed form).

About your child: for each child you add, their name, age and any diets and allergies you choose to enter. Allergies and diets are health and sensitive information, so the app asks your permission before we store them, and we record when you gave it.

When you use the app: the foods and recipes you log in the food journal (including dates and any reactions you note), foods and recipes you mark as loved, tried or favorite, your meal plans and your shopping lists.

If you subscribe: Apple handles payment, so we never see your card details. We receive your subscription’s status and history (plan, dates, renewals, refunds) from Apple through our subscription provider RevenueCat, and any offer code you used.

From your device: your device’s name and type, the app version, an identifier that’s specific to our app on your device, and a token so we can send you notifications if you allow them.

Crash reports: if the app crashes, a report of the app’s state and your device’s model and system version.

When you contact us: your name, email, phone number if you give one, and your message.

On our website: our hosting provider receives your IP address and browser details to deliver the pages. The site doesn’t use cookies or analytics.

3. How we use it, and our legal grounds

For users in the EU and UK, the legal ground for each use is shown in brackets.

• Run your account and the app’s features, using your account, child, journal, plan, list and device information (our contract with you).
• Hide foods and recipes that contain your child’s allergens, and filter by diet, using the allergies and diets you enter (your explicit consent, which you can withdraw at any time).
• Give Pro to subscribers, and pay creators their share when their code was used, using your subscription details and offer code (our contract with you; our legitimate interest in running the creator program).
• Send service messages, such as a password reset, and notifications you allow, using your email and notification token (our contract with you; your consent for notifications).
• Fix crashes and keep the app secure, using crash reports and device information (our legitimate interest in a working, secure app).
• Answer your messages, using your contact details and message (our legitimate interest in helping you).
• Keep financial records and meet legal obligations, using subscription and payment records (legal obligation).

Creators whose codes you use see how many people subscribed and what they earned, never who you are.

4. Who we share it with

We only share information with the companies that help us run BabyLedBites, under contracts that limit them to doing that:

• Amazon Web Services: hosts our servers and database in Ireland, and image storage in Sweden.
• Apple: the App Store, payments and subscriptions.
• RevenueCat (United States): manages subscriptions and offer codes for us.
• Google (United States): Firebase sends notifications and collects crash reports, and its email service sends our emails.

We may also share information if the law requires it, to protect someone’s safety, or with a buyer if the business is sold, in which case this policy continues to apply. We never sell or rent your information or share it for advertising.

5. Health information

Your child’s allergies, diets and any reactions you note in the food journal are health information. We collect them only from you, only with your consent, and only to provide the app’s features: hiding foods and recipes, filtering by diet and keeping your journal. We don’t sell them, use them for advertising or share them with anyone except the service providers above, who store and process them for us. You can see, change or delete them at any time in the app, or by emailing us.

6. Transfers outside Europe

RevenueCat and Google may process information in the United States. Where they do, the transfer is protected by the EU–US Data Privacy Framework or by standard contractual clauses approved by the European Commission.

7. How long we keep it

We keep your information while your account is open. When you delete your account in the app, we delete your account, your children’s profiles, food journal, meal plans, shopping lists, favorites, notification history and messages straight away. Copies in our encrypted backups are deleted as the backups expire, within 13 months. We keep subscription and creator-commission records for 6 years for tax and accounting, and Apple keeps its own payment records.

8. Your rights

You can:

• see, correct or download the information we hold about you;
• delete your account and its information at any time, in the app (Profile, then Your Profile, then Delete account) or by emailing us;
• withdraw your consent for us to store your child’s allergies and diets, by removing them from your child’s profile or emailing us;
• object to or ask us to limit how we use your information.

Email info@babyledbites.com and we’ll reply within 30 days. We won’t treat you differently for using these rights.

If you’re in the EU or UK, you can also complain to the Data Protection Commission in Ireland (dataprotection.ie) or your local data protection authority.

If you’re in the United States, you have these rights wherever you live. We don’t sell or share personal information for targeted advertising, and we only use health information such as allergies to provide the app, with your consent.

9. Children

BabyLedBites is for parents and caregivers aged 18 or over. Children don’t use the app, and we don’t knowingly collect information from them. The information about your child comes from you, and you control it: you can change or delete it at any time.

10. Security

We encrypt information in transit, limit who can access our systems, and keep encrypted backups. No system is perfectly secure, so please use a strong password and keep it private.

11. Changes

If we change this policy in a way that matters, we’ll tell you in the app or by email before the change applies.

12. Contact

Baby Led Bites Ltd, Carrig House, Newgarden Rd, Lisnagry, Co. Limerick, Ireland. Email info@babyledbites.com.