Privacy
This policy covers the Baby Food Tracker: First Foods app for iPhone and iPad and the babyfoodtracker.com website, including the web tracker. Short version: no account, no ads, no tracking, and no copy of your logs on our servers.
Updated October 5, 2026
What to expect
BabyFoodTracker is made by Nil Ni, an independent developer (“we”, “us”). On the App Store the app is published under the developer account Louerable. Nil Ni is responsible for this policy and for the small amount of personal data described in it.
This policy applies to the iOS app Baby Food Tracker: First Foods (the “App”) and to babyfoodtracker.com (the “website”). Questions go through the contact page at babyfoodtracker.com/contact.
Everything below is the long version of these points.
The App stores what you enter, in the App’s private storage on your iPhone or iPad. That storage is shared only with the App’s own Home Screen widgets.
If you are signed in to iCloud, the App also syncs this data to your private iCloud database through Apple CloudKit, so it reaches your other devices and survives a phone upgrade. Apple stores it under your Apple Account and Apple’s privacy policy. We, the developer, have no access to your iCloud data and cannot read, export, recover, or delete it for you.
Family sharing is optional and uses Apple’s CloudKit sharing. People you invite open the shared family book with their own iCloud accounts and can read and add to it: babies, logs, photos, and member names.
The person who created the book (the owner) controls the share. Invited people can leave at any time. Only invite people you trust with your baby’s records; anything they can see, they can also screenshot or export, and nobody can undo that.
When someone in the family buys BabyFoodTracker Pro, the App writes a small marker into the family book (an App Store transaction identifier and which family member unlocked it) so Pro turns on for everyone in the book. That marker lives in your family’s iCloud, not with us.
Apple may send silent background notifications to let the App know the shared book changed. They are delivered by Apple’s push service and carry nothing we can see.
You can add photos with the system photo picker or take one with the camera. With the picker, the App only receives the photos you choose; it does not get access to your photo library. Camera access is requested the first time you take a photo, and you can turn it off in iOS Settings at any time.
Photos are stored with the rest of your data: on the device, in your iCloud if you use it, and in the shared family book if you share one.
Reminders are local notifications scheduled on your device. We do not run a notification server.
Home Screen widgets and Siri or Shortcuts actions read the same on-device data and run on your device. They send nothing to us. Any voice processing is handled by Apple under Apple’s terms.
BabyFoodTracker Pro is a one-time, non-consumable in-app purchase processed entirely by Apple through StoreKit. Apple handles your payment details, Apple Account, receipts, refunds, and Family Sharing. We do not receive your name, email address, or payment information.
The App checks your purchase with Apple on your device. There is no third-party purchase, subscription, or paywall SDK in the App. Apple gives developers aggregated sales reports that do not identify you.
The App contains no advertising, no analytics SDK, no crash-reporting SDK, and no tracking. It does not use the advertising identifier (IDFA) and does not ask for App Tracking Transparency permission, because there is nothing to track.
If you have chosen in iOS Settings > Privacy & Security > Analytics & Improvements to share analytics with app developers, Apple may give us aggregated usage and crash data through App Store Connect. That is Apple’s opt-in feature; you control it and can turn it off in the same place.
Pediatrician reports (PDF), CSV exports, JSON backups, and share cards are created on your device. They go only where you send them, for example AirDrop, Mail, Messages, or Files. Once you send a file, the recipient and the service you used handle it under their own policies.
Because we never hold a copy of your App data, deleting it is fully in your hands, and we cannot recover anything you delete. Export a JSON backup first if you might want it later.
The web tracker at babyfoodtracker.com/app/ and the website’s checklist tools save your entries in your browser’s local storage on the device you use. Those entries are not sent to our servers. Clearing browser data, switching browsers or devices, or using private browsing can remove or hide them.
The website also keeps small preferences in local storage, such as whether you dismissed the install prompt, and uses a service worker to cache pages so the tracker works offline. The web tracker is separate from the App; web entries do not sync into the App.
babyfoodtracker.com uses Plausible Analytics, self-hosted by us at plausible.nilni.com. Plausible is cookieless: it does not set cookies, does not use persistent identifiers, and does not follow you across sites. Unique visitors are counted with a daily-rotating hash of IP address and browser user agent; raw IP addresses are not stored.
It records page views, referrers, browser, device type, and country, plus a few product events in the web tracker (for example “food status changed” or “tracker exported”) with coarse details like food category, status, and language. It never receives food names you type, notes, symptoms, baby names, or dates.
The App does not use Plausible or any other analytics.
We do not set advertising or tracking cookies. Local storage is used only for the tracker and preferences described above, and you can clear it in your browser settings at any time.
The website is hosted on Cloudflare. Like any web host, Cloudflare processes technical data such as IP addresses to deliver pages and protect against abuse, under its own privacy policy. We do not use that data to identify visitors.
The contact page uses a form hosted by Makeform. If you send a message, we receive what you write and any contact details you include. We use it only to reply, fix bugs, and improve the product, keep it only as long as that takes, and delete it on request.
Please do not send emergencies or detailed medical records. If a baby may be having a serious reaction, call your local emergency number now.
BabyFoodTracker is made for parents and caregivers. It is not directed to children, and children are not meant to use it themselves.
Information about a baby that a parent or caregiver enters stays on their device and in their iCloud; we do not collect it. We do not knowingly collect personal information from children under 13 (COPPA) or from anyone under the age of digital consent in their country (GDPR Article 8). If you believe a child has sent us personal information through the contact form, tell us and we will delete it.
Depending on where you live (for example under the GDPR, UK GDPR, CCPA/CPRA, LGPD, or PIPEDA), you may have the right to access, correct, delete, or port your personal data, to object to or restrict processing, to withdraw consent, and not to be discriminated against for using these rights.
For App data, you exercise these rights directly: you can view, edit, export (JSON or CSV), and delete everything in the App, and your iCloud data is managed through Apple. We hold no copy to hand over or erase.
For the limited data we do handle (contact messages and aggregate website analytics), contact us through the contact page. We will respond within the time required by law, such as one month under the GDPR or 45 days under the CCPA.
We do not sell personal information, do not share it for cross-context behavioral advertising, and do not use sensitive personal information to infer characteristics about you.
Under the GDPR, we handle contact messages and run cookieless, aggregate website analytics on the basis of our legitimate interest in supporting users and improving the website. If you are in the EEA or UK, you can also complain to your local data protection authority.
Data on your device is protected by iOS, including the encryption that comes with your device passcode. Apple encrypts iCloud data in transit and at rest. Keep your device locked and your Apple Account secure; anyone with access to them can see your logs.
Apple may store iCloud data in data centers outside your country. Website analytics and contact messages may be processed in countries other than yours, including the United States.
If the App or website starts handling data differently, for example by adding accounts, server sync, or analytics, we will update this policy before that change ships and change the date at the top. Material changes will also be noted in the App’s release notes or on this page.
