Privacy Policy
The short version
- Yumlo Baby helps you log your baby's first foods, introduce allergens and share that with people who help feed your baby.
- We collect what the app needs to do that, including information about your baby's health (such as reactions and allergies). We treat it as sensitive.
- We don't sell your data, don't show ads, and don't use third-party analytics or tracking.
- Only the people you invite to your family can see your family's information, and only as much as their role allows.
- You can export your data and delete your account from inside the app at any time.
1. Who we are
Yumlo Baby ("Yumlo", "we", "us") is developed and operated by Karanayakage Janindu Hansaka, an individual developer based in Sri Lanka, who is the data controller for the information described here.
Contact: contact@wpteacher.me · 3/25 Gamunupura 1st, Kothalawala, Kaduwela, Sri Lanka
2. Information we collect
You give us
| Category | Examples | Why |
|---|---|---|
| Account | Email address, or your Apple ID sign-in (Apple may give us a private relay email); your first name if you provide it | To create your account and sign you in with a one-time code or Sign in with Apple |
| Baby profile | Baby's first name, birth date, weeks born early (if any), an optional photo, feeding stage and approach | To tailor food and texture guidance to your baby's age |
| Health background sensitive | Whether your baby has eczema, a known food allergy, or a family history of food allergies | To hold allergen steps until you've checked with your pediatrician |
| Meals | Foods offered, date and time, meal type, serving style, how your baby liked it, amount eaten, notes, optional photos | Food history, progress (streaks, 100 foods) and allergen tracking |
| Reactions & allergens sensitive | Symptoms, severity, time since eating, notes, optional photos; foods you pause; allergens marked "avoid on doctor's advice"; doctor's notes | To keep your baby safe, pause foods after a reaction, and show allergy information to caregivers |
| Family & caregivers | Who is in your family, their role (co-parent, caregiver, view-only), access dates and permissions, invite codes | To share information with the people who feed your baby |
| Emergency contacts | Names, relationship and phone numbers you add (for example a parent or your pediatrician) | So caregivers can reach the right people quickly |
| Preferences | Region (US, UK or EU), family diet, goals you select | Regional food names and emergency numbers; suggestions that fit your diet |
Only add information about other people (for example a caregiver's name or a phone number) if you're allowed to share it with us.
Collected automatically
- Subscription status: whether you have Yumlo Pro, the plan and its renewal date. Payments are handled by Apple; we never receive your card details.
- Push notification token, if you allow notifications, so we can send reminders and caregiver alerts to your device.
- Technical logs kept by our hosting provider for security and reliability, such as IP address, request time and errors.
Stays on your device
Some things never leave your phone: answers to the readiness check during setup, your appearance and notification preferences, and a local copy of your family's data so the app works offline. The local copy is deleted when you sign out.
What we don't collect
We don't use advertising identifiers, third-party analytics, tracking pixels, location, or your contacts list.
3. How we use information
- To provide the app: food history, allergen journey, reminders, progress, caregiver sharing and alerts.
- To keep your data in sync across your devices and your family members' devices.
- To manage your Yumlo Pro subscription.
- To send one-time sign-in codes and important service messages (not marketing).
- To keep the service secure, prevent abuse, and fix problems.
We don't use your family's information to make decisions that have legal or similarly significant effects on you, and we don't use it to train AI models.
4. Legal bases (EU/UK users)
- Contract: to provide the app and your subscription.
- Explicit consent: for health information about your baby (health background, reactions, allergies, doctor's notes). You can withdraw consent at any time by deleting that information or your account.
- Legitimate interests: security, preventing abuse and improving reliability.
- Legal obligation: where the law requires us to keep or disclose information.
5. Who can see your information
People in your family
Your family's information is shared only with people who join through an invite from you or your co-parent:
- Owner and co-parents can see and edit everything.
- Caregivers can see the baby's profile, approved foods, allergy and "do not give" information and emergency contacts, and can log meals and reactions. Photos and doctor's notes depend on the permissions you give them.
- View-only members can follow along but can't make changes.
You can change roles, set an end date for access, or remove someone at any time. Caregivers can always log a reaction, for safety.
Service providers
We use a small number of providers who process data on our behalf, under contracts that require them to protect it:
| Provider | What they do | Where |
|---|---|---|
| Supabase | Database, sign-in, file storage and real-time sync | Data hosted in the EU (Frankfurt, Germany) |
| Apple | Sign in with Apple, App Store payments, push notification delivery | Global |
| RevenueCat | Subscription status and receipts (linked to an anonymous account ID) | United States |
| Expo | Relays push notifications to Apple's push service | United States |
| Resend | Delivers sign-in code emails | United States |
We may also disclose information if required by law, to protect someone's safety, or as part of a transfer of the app to a new owner (who would have to honor this policy).
We never sell or rent your information, and we don't "share" it for cross-context behavioral advertising.
6. International transfers
Your family's data is stored in the European Union. Some providers above are based in the United States or elsewhere; where data is transferred outside the EU/UK, we rely on safeguards such as the European Commission's Standard Contractual Clauses.
7. How long we keep information
- We keep your information while your account is active.
- When you delete your account in the app, your account is deleted right away. If you created the family, the family's data (baby profile, meals, reactions, photos, caregiver access) is deleted for everyone. If you joined someone else's family, you're removed and the family's data stays with the parents.
- Copies in our providers' backups and logs are removed on their normal schedule, typically within 30 days.
- Invite codes expire after 7 days.
8. Your choices and rights
- Access and export: Settings → Privacy & data → Export (meals as CSV, everything as JSON).
- Correct: edit your baby's profile, meals and settings in the app.
- Delete: Settings → Privacy & data → Delete account.
- Notifications: turn them off in the app or in iOS Settings.
- Other rights: depending on where you live (for example the EU, UK or California), you may also have the right to restrict or object to processing, to data portability, and to withdraw consent. Contact us at contact@wpteacher.me; we'll respond within 30 days.
- Complaints: you can complain to your local data protection authority (for example the ICO in the UK or your EU supervisory authority). We'd appreciate the chance to help first.
9. Children
Yumlo Baby is meant for parents and caregivers aged 18 or over. Information about babies is provided by their parents or guardians. We don't knowingly let children create accounts. If you believe a child has created an account, contact us and we'll delete it.
10. Security
Data is encrypted in transit (HTTPS). Access is enforced on our servers by role, not just in the app, so family members only see what their role allows. Photos are stored privately and shown only through short-lived links. No system is perfectly secure, so please keep your device and email account protected.
11. Not medical advice
Yumlo gives general information about introducing foods and allergens. It isn't medical advice and doesn't replace your pediatrician. In an emergency, call your local emergency number.
12. Changes to this policy
If we make meaningful changes, we'll update the date above and let you know in the app before they take effect.
13. Contact
Questions or requests: contact@wpteacher.me