YummyYucky

Privacy Policy

Last updated: July 30, 2026

YummyYucky LLC, a Delaware limited liability company operates YummyYucky.

This Privacy Policy explains what information we collect, why we collect it, who may receive it, how long we keep it, and what choices and rights you have. We have tried to explain our practices in plain English.

YummyYucky is built for adults caring for babies and young children. Babies and children do not create YummyYucky accounts themselves, but adults may enter information about them.

Our basic privacy promises

YummyYucky is built around private family information. We treat that responsibility seriously.

Unless we clearly explain otherwise and obtain any permission required by law:

Our Terms of Service also contain important rules about baby profiles, caretaker access, subscriptions, and use of the Service.

1. Who may use YummyYucky

YummyYucky accounts are for adults, including parents, legal guardians, family members, nannies, childcare providers, and other authorized caretakers.

You must be at least 18 years old, or the legal age of adulthood where you live, to create an account.

Babies and young children are not YummyYucky account holders. Their profiles are created and managed by adults who represent that they have authority to provide and manage the information.

If we learn that a child created an account or submitted information directly without appropriate adult involvement, we may restrict or delete the account and information as appropriate.

2. Important terms

In this Policy:

"Personal Information" means information that identifies, relates to, describes, or could reasonably be linked with a person or household. It includes information about an adult account holder, a caretaker, or a baby.

"Baby Information" means information entered about a baby or young child, including profile details, care logs, photographs, feeding information, and health-related information.

"Health-Related Information" means information that relates or could reasonably be used to infer a person's or baby's physical health, symptoms, feeding condition, allergies, reactions, development, or care. Depending on applicable law, some of this may be called "consumer health data," "medical information," or "special category data."

"Public Content" means recipes, comments, photographs, notes, votes, or other content that a user intentionally chooses to publish through a public or community feature.

"Service Provider" means a company that processes information for us to help operate YummyYucky.

"Deidentified Information" means information that cannot reasonably be linked to a particular person, baby, family, or household.

3. Information we collect

We collect information you provide, information created through your use of YummyYucky, and limited technical information needed to operate the Service.

You are not required to enter every type of information described below. Many YummyYucky features are optional.

Account information

This may include your email address, display name, login or authentication information, account and communication preferences, subscription status, account creation and last-login information, and profile and caretaker roles.

We do not receive your password in readable form when authentication is handled securely through our authentication provider.

Guest activity

YummyYucky may allow you to begin logging information before creating an account. Guest activity may be stored temporarily on your device or in our systems so it can be transferred into your account if you register.

If you do not create an account, server-side guest information is deleted or deidentified after approximately 30 days. Information stored only on your device may remain until you clear the browser or app data, uninstall the app, or the device removes it.

Baby profiles

A baby profile may include a name or nickname, an optional birthday or age, an avatar or profile photograph, relationships to account holders or caretakers, profile settings, caretaker permissions, and other profile information you choose to enter. You may use a nickname and may choose not to enter an exact birthdate unless a feature requires an age or developmental range.

Feeding and care logs

Depending on the features you use, these may include foods and ingredients, feeding dates and times, yummy or yucky reactions, preparation methods, bottles, nursing, diapers, sleep, milestones, caretaker notes, reminders, and other care information you choose to record.

Allergen, reaction, and health-related information

You may choose to enter foods or allergens introduced, possible symptoms or reactions, reaction dates and times, severity descriptions, photographs of a possible reaction, watch-window information, feeding difficulties or concerns, notes intended to help communicate with another caretaker or healthcare professional, and other health-related observations.

This information is optional and may be sensitive. YummyYucky does not diagnose a reaction or medical condition. Please see our Terms of Service for important medical and emergency disclaimers.

Reports and summaries

We may process information from your logs to create feeding summaries, food histories, allergen histories, reaction histories, caretaker handoffs, shareable summaries, cost summaries, and other organized reports requested by a user. These reports are based primarily on information entered by users. They are not medical records created or verified by a healthcare provider.

Cost and product information

You may choose to enter or view diaper or formula prices, product names, package sizes, purchase dates, retailers, estimated usage, estimated spending, and notes about products or purchases.

Community activity

If community features are available, we may collect recipes and food ideas, public notes and comments, votes or reactions, reports of inappropriate content, moderation records, and public profile information you choose to show. Public Content may be visible to other users and may be indexed by search engines. Do not include private baby, medical, contact, or family information in Public Content.

Photographs, videos, and avatars

If you upload media, we collect and store the file and related technical information needed to provide the feature. Uploaded media may include metadata created by your device. Where reasonably possible, we remove or avoid using unnecessary metadata such as precise location information.

We do not use uploaded photographs for facial recognition or biometric identification.

Voice logging

YummyYucky's voice-logging feature is designed to process audio on your device. The speech-to-text model runs locally in the app, and the model file may need to be downloaded to your device.

YummyYucky does not receive or store the voice recording. We receive only the text you choose to save, in the same way we would receive text you typed.

This describes the current feature. If we later introduce cloud-based voice processing, we will update this Policy and provide notice before that processing begins.

Device, app, and website information

We may collect limited technical information such as device type, browser type, operating system, app version, language and general settings, an app-generated or provider-generated device identifier, a push-notification token, pages or screens viewed, the referring page, approximate location based on IP address, date and time of access, crash reports, diagnostic logs, performance information, and security and authentication events.

We do not collect precise GPS location unless a feature clearly asks for it and you give the necessary device permission. We do not use location information to create a geofence around a healthcare facility or to infer that a person sought healthcare.

Payments and subscriptions

Payments may be processed by Apple, Google Play, Stripe, or another payment provider. YummyYucky does not store your complete credit-card number. We may receive subscription plan, subscription status, purchase date, renewal date, trial status, cancellation status, a transaction or receipt identifier, limited billing information, refund status, and payment-provider communications. The payment provider separately processes information under its own privacy policy.

Communications and support

If you contact us, we may collect your name and contact information, the content of your request, account or profile information needed to help you, attachments you send, records of our response, and information needed to investigate a complaint, bug, safety concern, or access dispute. Please do not send more sensitive information than is necessary to explain the issue.

4. Where information comes from

We may receive Personal Information from you; from other Profile Owners or caretakers connected to a baby profile; from your device or browser; from our payment, authentication, hosting, email, and app-store providers; from the logs and settings you provide; from people who report community content or account concerns; and from public sources where appropriate for our general food and product information.

A caretaker may enter information about another adult or baby. Users are responsible for having appropriate authority before doing so.

5. How we use information

We use Personal Information to:

We do not use YummyYucky information to diagnose, treat, or provide clinical medical advice.

6. How we use health-related information

We use Health-Related Information only for purposes reasonably connected to the features the user requests, such as saving feeding, allergen, symptom, and reaction logs; displaying those logs to authorized Profile Owners and caretakers; creating requested histories and summaries; providing watch-window and organizational reminders; personalizing relevant food or feeding features; providing user-requested support; protecting the security and integrity of the Service; and complying with applicable law.

We do not use private Health-Related Information for targeted advertising, to determine insurance eligibility, to determine employment eligibility, to set credit terms, to make legal or similarly significant decisions about a user or baby, or to train a general-purpose AI model.

For more detail on how we handle health-related information and the rights that may apply, see our Consumer Health Data Privacy Notice.

7. Who may receive information

We do not allow everyone described below to receive every type of information. Access depends on what is necessary for the particular purpose.

Profile Owners and caretakers

Private baby profiles and logs may be viewed by the Profile Owner, additional Profile Owners, caretakers invited to the profile, and other people with whom a user intentionally shares a report, screenshot, export, or message. What a caretaker can see or change depends on the permissions available in YummyYucky. Once information is downloaded, copied, photographed, or shared outside YummyYucky, we may not be able to control it.

YummyYucky personnel

Authorized employees and contractors may access Personal Information only when reasonably necessary to provide support requested by a user, maintain or secure the Service, investigate misuse or unauthorized access, respond to a dispute, comply with law, or perform another purpose described in this Policy. We seek to limit access based on job responsibility and need.

Service Providers

We use Service Providers to operate YummyYucky. Current providers include:

Push notifications are delivered through Apple (APNs), Google (FCM), or your browser's own web-push service. These providers may process information only for the services they provide to us, subject to their agreements with us and applicable law. We review the provider list and update this Policy when providers or data flows materially change.

Analytics

We use Plausible for basic traffic and feature insights. Plausible is configured without advertising cookies or cross-site behavioral tracking. We do not intentionally send Plausible baby names, email addresses, care logs, foods entered in private logs, notes, reaction information, photographs, or other private profile content. We may send limited event names or counts, such as whether a general page was viewed or a feature was opened.

Separately from Plausible, we keep a first-party product-analytics record in our own systems to understand how features are used and to improve onboarding, reliability, and awareness of paid features. This record holds limited event information, such as that an account completed its first log, viewed a report or the paid-plan page, configured a diaper supply, invited a caretaker, or viewed or opened a price link, together with the date and time, a coarse acquisition source such as whether you arrived from search, social, a referral, or a campaign, and, where relevant, the baby profile an action related to. It does not hold the private content you enter, such as the specific foods, notes, symptoms, free text, or photographs in your logs. We use it only for the purposes described in this Policy, do not sell it, and do not share it with advertising networks. It is deleted when the associated account is deleted.

Legal and safety disclosures

We may disclose information when required or permitted by applicable law, including in response to valid legal process. Where legally permitted and appropriate, we will review requests for overbreadth, limit disclosure to information reasonably necessary, object to or seek clarification of improper requests, and notify the affected account holder before disclosure.

We may also disclose information when we reasonably believe it is necessary to address an imminent risk of serious harm, suspected child exploitation or abuse, fraud or unauthorized account access, a serious security threat, or another urgent safety concern. We do not treat a general or speculative safety concern as permission to disclose an entire baby profile without considering what is reasonably necessary.

Business transfers

If YummyYucky is involved in a merger, financing, acquisition, bankruptcy, reorganization, or sale of some or all of its business, Personal Information may be reviewed or transferred as part of that transaction. A recipient must honor this Policy for information collected under it unless users receive clear notice and additional consent is obtained where required before materially different uses begin. Health-Related Information is not treated as an unrestricted asset that a buyer may use for any purpose it chooses.

At your direction

We may share information when you ask us to, such as when you invite a caretaker, export a report, share information with a pediatrician or daycare, publish community content, connect a third-party service, or ask support to send information to someone. We will provide additional notice or request additional permission where required.

8. What we do not do

YummyYucky does not:

If these practices change, we will not quietly revise this Policy and begin using existing sensitive information in a materially different way. We will provide clear notice and obtain additional consent where required.

9. Cookies, local storage, and tracking signals

Essential storage

YummyYucky uses cookies, tokens, or local storage needed to keep you signed in, protect account security, remember settings, remember the active baby profile, preserve temporary guest activity, remember that a one-time notice was dismissed, and complete subscription or checkout functions.

Optional technologies

We do not currently use advertising cookies or cross-site behavioral advertising tools. If we introduce optional analytics, advertising, or similar technologies that legally require consent, we will provide the appropriate choice before using them.

Do Not Track

Some browsers offer a Do Not Track setting. Because YummyYucky does not use advertising networks to track your activity over time and across unrelated websites or apps, a browser Do Not Track signal does not currently change how the Service operates.

Global Privacy Control

Where required by law, we recognize legally valid browser-based opt-out preference signals, including Global Privacy Control. Because we do not currently sell Personal Information or share it for cross-context behavioral advertising, there is no advertising sale or sharing for us to turn off.

10. Artificial intelligence and automated features

YummyYucky may use rules, calculations, or automated systems to organize logs, generate summaries, or suggest food ideas. These features do not make decisions that create legal or similarly significant effects about a person or baby.

YummyYucky does not currently send private baby logs, reaction information, photographs, or other Health-Related Information to a third-party generative AI provider.

If we introduce an optional feature that sends private information to an AI provider, we will first explain what information is sent, why it is sent, the type or identity of provider receiving it, whether the provider retains the information, whether it is used for model training, and how the feature can be avoided or disabled. We will obtain additional consent where required before that feature processes sensitive or Health-Related Information.

11. Notifications and communications

We may send operational communications such as password-reset messages, account and security notices, caretaker invitations, subscription receipts and renewal notices, changes to important legal terms, safety or service notices, and responses to support requests. You may not be able to opt out of messages necessary to operate your account or meet legal obligations.

With your permission, we may also send reminders, tips, product updates, and optional marketing communications. You may manage optional email and notification preferences through the Service, your device, or an unsubscribe link.

Push notifications may appear on a device's lock screen. We try to avoid including unnecessarily sensitive details in notification text, but you should review your device's notification-preview settings if other people can see your screen.

12. How long we keep information

We keep information only as long as reasonably necessary for the purposes described in this Policy, unless a longer period is required or permitted by law.

Our intended retention periods are:

Actual deletion may take longer when information must be preserved for security, fraud prevention, a legal hold, a valid dispute, or another legal requirement. We do not keep sensitive information indefinitely merely because storage is available.

13. Account, profile, and data deletion

You may request deletion through Settings, then Delete Account, available profile or log deletion controls, or by emailing hello@yummyyuc.ky. Before deleting information, we may verify your identity and authority.

Shared baby profiles

Deleting your own account may not delete a baby profile owned or jointly managed by another authorized Profile Owner. If you are only a caretaker, deleting your account normally removes your access and account information but does not delete the shared profile.

If a deletion request affects another Profile Owner, we may notify that person, verify the requesting person's authority, preserve the profile temporarily while resolving conflicting instructions, or delete only the requesting user's information where appropriate.

What deletion does not control

Deletion cannot retrieve screenshots, printed reports, files already exported, information sent to a pediatrician, daycare, or caretaker, copies another user made outside YummyYucky, or Public Content quoted or copied by another person.

Service Providers and backups

Where required, we instruct relevant Service Providers and other recipients to delete covered information. Information stored in archived or backup systems may be deleted on the backup's normal restoration or overwrite schedule. Where Washington consumer-health-data law applies, deletion from backups will not be delayed longer than the period allowed by that law.

14. Your privacy choices and rights

Whether or not a particular privacy law applies to YummyYucky, we generally allow verified users to:

Additional rights may apply depending on where you live.

How to submit a request

You may submit a request through available account controls or by emailing hello@yummyyuc.ky. Include your account email address, the baby profile involved if applicable, the right you want to exercise, and enough information for us to understand the request. Do not email a copy of a government ID unless we specifically and securely request it.

Verification

We may ask you to verify control of your account or email address, your identity, your role on a baby profile, or your legal authority to act for a baby or another person. We will not request more verification information than reasonably necessary.

Authorized agents

Where applicable law permits an authorized agent to submit a request, we may ask for proof that the person authorized the agent, that the agent is who they claim to be, and that the request concerns the correct account or profile.

Response and appeal

We respond within the period required by applicable law. If we deny all or part of a request, we will explain the reason unless the law prevents us from doing so. Where an appeal right applies, you may appeal by emailing hello@yummyyuc.ky with the subject line "Privacy Appeal" and an explanation of why you believe the decision should be reconsidered. If an applicable law requires it, we will also explain how to contact the relevant regulator or attorney general. We do not discriminate against a user for exercising a privacy right.

15. Consumer health-data rights

Depending on where you live, you may have additional rights concerning Health-Related Information, including the right to confirm whether we collect or share consumer health data, access that data, receive a list of third parties and affiliates that received it, withdraw consent for future collection or sharing, delete consumer health data, and appeal a refusal to act on a request.

See our Consumer Health Data Privacy Notice for details on these rights and how to exercise them.

16. Security

We use reasonable administrative, technical, and physical safeguards appropriate to the nature and volume of information we maintain. These may include encrypted network connections, access controls, authentication protections, restricted employee and contractor access, logging and monitoring, database and infrastructure protections, vendor review, backup procedures, incident-response procedures, and secure-development practices.

No website, app, database, or transmission can be guaranteed perfectly secure. You can help protect information by using a strong and unique password, protecting access to your email account, keeping your device secure, using caretaker invitations instead of sharing passwords, removing caretakers when access is no longer appropriate, and promptly reporting suspected unauthorized access.

Report security concerns to hello@yummyyuc.ky.

Security incidents

If we discover unauthorized access, acquisition, use, or disclosure, we will investigate and take appropriate steps. We will notify affected people, regulators, or others when required by applicable law. Because health-related information can be especially sensitive, our incident analysis considers both malicious attacks and disclosures caused by errors, misconfiguration, or unauthorized data transfers.

17. Children's privacy

YummyYucky is designed for adults caring for children, not for children to use independently. We do not knowingly allow a child to create an account.

If we learn that a child created an account or directly submitted Personal Information without appropriate permission, we may restrict the account, investigate what occurred, delete information as appropriate, and contact a parent or legal guardian where appropriate.

Parents and caretakers do not personally own a child's privacy rights. Their authority to manage information may depend on custody, guardianship, the child's interests, and applicable law. As a child becomes older, applicable law may give the child greater control over information concerning them.

Contact hello@yummyyuc.ky if you believe a child is using YummyYucky directly or that information was entered without appropriate authority.

18. California privacy information

California residents may have rights under one or more California privacy laws. Whether or not YummyYucky is legally required to provide a particular right, we generally offer the access, correction, export, deletion, and nondiscrimination choices described in this Policy.

During the preceding 12 months, YummyYucky may have collected the categories of information described in Section 3, including identifiers and account information, customer and subscription records, internet or device activity, approximate location based on IP address, user-created content, photographs, baby and caretaker information, feeding, care, allergen, reaction, and other potentially sensitive information, and inferences or summaries created from user-entered information.

We collect this information from the sources described in Section 4 and use it for the purposes described in Sections 5 and 6. We may disclose it to the recipient categories described in Section 7.

YummyYucky does not sell Personal Information and does not share Personal Information for cross-context behavioral advertising. We do not knowingly sell or share the Personal Information of people under 16 for cross-context behavioral advertising. The Do Not Track and Global Privacy Control information in Section 9 applies to California users.

19. European Economic Area and United Kingdom

This section applies when European Economic Area or United Kingdom data-protection law applies to our processing.

Controller

The controller is YummyYucky LLC, reachable at hello@yummyyuc.ky.

Our legal bases

The legal basis depends on what we are doing. We may rely on: contract, to create and manage an account, provide requested features, and administer a subscription; consent, for optional communications, device permissions, and other processing where we ask for consent; explicit consent, for Health-Related Information or other special-category information where applicable law requires it; legitimate interests, to secure the Service, prevent fraud and abuse, provide support, understand limited non-advertising use, maintain reliability, and improve the Service in ways that do not override the rights of users or children; legal obligation, to comply with tax, accounting, court, and regulatory requirements; and legal claims or vital interests, where processing is reasonably necessary to establish or defend legal rights or to address an urgent threat to someone's life or safety.

Health-related and children’s information

The only special-category data we process is health-related information: information about a baby, and, where you log breastfeeding, the nursing parent. We do not collect racial or ethnic origin, religious or philosophical beliefs, political opinions, genetic or biometric data, or other special categories.

Health information may be special-category data. Where we rely on explicit consent, we ask for a separate, clear statement rather than treating ordinary use of YummyYucky or acceptance of our Terms as explicit consent. A person entering Health-Related Information about a child must confirm that they are legally authorized to do so. Withdrawing consent does not make earlier lawful processing unlawful, but it may prevent us from continuing to provide the affected feature.

Your rights

Subject to applicable exceptions, you may have the right to access, correct, delete, restrict, object to certain processing, receive portable information, withdraw consent, and complain to your local data-protection authority. To exercise a right, contact hello@yummyyuc.ky.

International transfers

YummyYucky is based in the United States. Information may be transferred to the United States or another country where a Service Provider operates. Where required, we use an approved transfer mechanism, such as the European Commission's Standard Contractual Clauses, the United Kingdom's International Data Transfer Addendum or Agreement, or another legally recognized safeguard. You may contact us for more information about applicable safeguards.

Complaints

You may complain to the data-protection authority where you live or work or where you believe a violation occurred. We would appreciate the opportunity to address the concern first, but you are not required to contact us before contacting a regulator.

20. International users outside the EEA and UK

YummyYucky is operated from the United States. If you use the Service from another country, information may be processed in the United States and in countries where our Service Providers operate. Those countries may have different privacy laws from your country. We comply with applicable transfer and privacy requirements where they apply to our activities.

21. Changes to this Policy

We may update this Policy as YummyYucky, our providers, and applicable law change. For minor changes, we may post the revised Policy and update the "Last updated" date. For a material change, we will provide advance notice through email, the Service, or another appropriate method.

If a proposed change would allow us to collect a new category of sensitive or Health-Related Information, use existing sensitive information for a materially different purpose, share it with a materially different category of recipient, or begin selling consumer health data, we will not rely only on continued use. We will provide additional disclosure and obtain affirmative consent or authorization where required before the new practice begins.

22. Contact us

Questions, concerns, and privacy requests may be sent to:

YummyYucky LLC
United States

Please do not send highly sensitive information through ordinary email unless we ask you to do so.

Your use of YummyYucky is also governed by our Terms.