1. Who We Are

Ummy® Kids Daily Nutrition Tracker, operated by Superfood Organics LLC dba UMMY® ("Ummy®," "we," "us," or "our"), is a web-based application that helps parents track and understand their children's daily nutritional intake. We are accessible at ummy-nutrition-tracker.web.app.

If you have any questions about this policy, please contact us at ummyteam@ummyshakes.com.

2. Information We Collect

We collect only what is necessary to provide the service. This includes:

• Account information: Your first name, last name, email address, and password (stored securely via Firebase Authentication).
• Optional profile information: City, state, and ZIP code, which you may provide for your parent profile.
• Child profile data: Your child's first name, age group (2–3, 4–8, or 9–13), gender (optional, for display only), and avatar selection.
• Food log data: Foods logged, portion sizes, dates, and meal times entered by you or a co-parent you have shared access with.
• Usage data: Standard technical information such as browser type and access times, collected automatically by Firebase.

We do not collect Social Security numbers, payment information, health insurance data, or any government-issued identification.

3. Children's Privacy (COPPA Notice)

The child profile data stored in the app (name, age group, food logs) is entered by and accessible only to the parent or guardian who created the account, and any co-parent they have explicitly shared access with using a share code. We treat all child-related data with the highest level of care in compliance with the Children's Online Privacy Protection Act (COPPA).

If you believe we have inadvertently collected information from a child without parental consent, please contact us immediately at ummyteam@ummyshakes.com and we will delete it promptly.

4. How We Use Your Information

We use the information you provide solely to:

• Create and maintain your account
• Display your child's nutritional data and analysis within the app
• Generate pediatrician reports you choose to export
• Enable parent sharing between accounts using share codes
• Send password reset emails when requested
• Improve the app based on aggregated, anonymized usage patterns

We do not use your data for advertising, behavioral profiling, or sale to third parties.

5. How We Store and Protect Your Data

Your data is stored in Google Firebase (Firestore and Firebase Authentication), a secure cloud platform operated by Google LLC. Firebase provides industry-standard encryption in transit (HTTPS/TLS) and at rest.

Access to your data is protected by strict Firestore security rules. Only your authenticated account — and any co-parent you have explicitly shared with — can read or write your family's data. Ummy® staff do not have routine access to individual user data.

6. Data Sharing

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

• Co-parent sharing: If you generate a share code and provide it to another parent, that parent will have access to the shared child's profile and food log.
• Service providers: We use Google Firebase as our infrastructure provider. Google processes data on our behalf under their data processing terms.
• Legal requirements: We may disclose information if required to do so by law or in response to a valid legal request.

7. Data Retention and Deletion

Your account and all associated data remain stored in Firebase for as long as your account is active. If you wish to delete your account and all associated data, please email ummyteam@ummyshakes.com with the subject line "Account Deletion Request." We will process your request within 30 days and confirm when deletion is complete.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to certain processing of your data
• Request a portable copy of your data

To exercise any of these rights, please contact us at ummyteam@ummyshakes.com.

9. Cookies and Tracking

Ummy® does not use advertising cookies or third-party tracking pixels. Firebase may set session-related cookies necessary to maintain your authenticated session. We do not use cookies for marketing purposes.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. If changes are material, we will notify you by email. Continued use of the app after changes are posted constitutes your acceptance of the updated policy.