Yum Baby Privacy Policy
Effective date: 19 August 2026
We built Yum Baby to help caregivers navigate introducing solids, not to build an advertising profile. We know that information about you and your baby is personal, and we take that seriously.
This Privacy Policy explains what information Yum Baby collects, why we collect it, how we use and protect it, who we share it with, and the choices you have.
It applies to the Yum Baby app, website, and related services operated by Yum Baby Limited.
1. Who we are
Yum Baby is operated by Yum Baby Limited, a New Zealand company.
Yum Baby is designed for parents, guardians, and caregivers. It is not designed for children to create or manage accounts themselves.
Our Privacy Officer can be contacted at:
Privacy Officer
Yum Baby Limited
Auckland, New Zealand
info@yumbaby.co
2. Information we collect
We try to collect only the information we reasonably need to provide, protect, and improve Yum Baby.
Account and sign in information
When you create an account using email and password, Apple Sign In, or Google Sign In, we may receive and store information such as your email address, name where provided, account identifier, and authentication information.
Authentication is managed using Google Firebase Authentication.
We do not receive your Apple or Google password.
Your baby's profile
When you create a baby profile, you may provide information including:
your baby's name or nickname
date of birth or age
dietary preferences
feeding goals
feeding stage and progress
foods tried
allergen exposures
favourites and preferences
an optional profile photo
other information you choose to add through Yum Baby
This information allows us to personalise the experience, organise your baby's food journey, and keep information in sync between caregivers you choose to invite.
Providing some information is necessary for certain Yum Baby features to work properly. Other information, including photos and notes, is optional.
Feeding progress and notes
When you add foods to My List, mark foods as tried, change their order, add tags or notes, record progress, or use other tracking features, we store that information so Yum Baby can show your history, progress, streaks, badges, and other features.
If a baby profile is shared, authorised caregivers may also be able to see or contribute to this information.
Recipe builder and AI recipe information
When you use Yum Baby's AI assisted recipe features, we send the information needed to generate the recipe through a secured Google Firebase Cloud Function to OpenAI's API.
Depending on what you choose, this may include:
selected foods
your baby's feeding stage
recipe preferences or options
a note you choose to enter
We do not send your Yum Baby account credentials to OpenAI.
Please avoid including names, contact details, or other personal information in recipe notes unless it is genuinely necessary for your request.
When you choose to save a recipe, information such as its title, ingredients, instructions, ratings, notes, or photos may be stored in your Yum Baby account so you can access it later.
Photos
If you choose to add a baby profile photo or recipe image, the image is uploaded to Google Firebase Cloud Storage.
Yum Baby does not access your full photo library simply because you use the app. You choose the photo or image you want to provide, subject to the permissions on your device.
Subscription information
If you purchase a Yum Baby subscription through the Apple App Store, Apple processes your payment.
Yum Baby may receive information needed to recognise and manage your subscription, such as your subscription status, plan, transaction identifier, renewal status, or entitlement information.
We do not receive or store your full payment card details from Apple.
Support and other communications
If you contact us at info@yumbaby.co, submit a website enquiry, send feedback, or otherwise communicate with us, we may retain your contact details and the information you provide so we can respond.
If you acknowledge a medical or safety disclaimer within Yum Baby, we may record that acknowledgement and its timestamp.
3. Information collected automatically
Some technical information is collected when you use Yum Baby so we can operate and secure the service.
Device, security, and diagnostic information
Google Firebase services including Authentication, Firestore, Cloud Functions, Storage, and App Check may process technical information such as:
IP address
device or installation identifiers
authentication information
security and attestation information
technical logs
error or diagnostic information
We use this information to operate the service, authenticate users, protect accounts, investigate technical problems, and prevent misuse.
Yum Baby does not currently use Firebase Analytics or third party advertising SDKs.
Abuse prevention
We may maintain per user usage counters and related technical records to prevent automated or excessive use of features such as AI recipe generation and to protect the reliability of the service.
Information stored on your device
Yum Baby may store authentication information and cached app content on your device so the app can operate reliably and efficiently.
The app and the third party technology services we use apply security protections to stored and transmitted information as described further below.
4. How we use information
We may use personal information to:
create and manage your account
provide and personalise Yum Baby's features
organise your baby's food journey
show foods, stages, allergen progress, and feeding progress
save and sync recipes
generate AI assisted recipes
keep shared caregivers in sync
manage subscription access
provide badges, streaks, and progress features
provide customer support
respond to enquiries and feedback
maintain the security and integrity of Yum Baby
prevent fraud, misuse, or automated abuse
troubleshoot technical problems
comply with legal obligations
communicate important service, privacy, or security information
improve Yum Baby using aggregated or de-identified information
We do not use baby profile information to build advertising profiles.
We do not use baby profile information for third party targeted advertising.
We do not sell personal information.
We do not sell information about babies or children.
5. Why we process information
Where applicable law requires us to identify a legal basis for processing personal information, our reasons may include:
providing the service you have asked us to provide
protecting the security and integrity of Yum Baby
complying with legal obligations
our legitimate interests in operating and improving the service
your consent where you choose to use an optional feature requiring particular information or device permissions
You can choose not to provide optional information. Doing so may mean that the related optional feature is unavailable, but it will not necessarily prevent you from using other Yum Baby features.
6. Sharing with other caregivers
Yum Baby allows you to share a baby profile with caregivers you choose.
An authorised caregiver may be able to see information associated with that baby profile, including foods, feeding progress, recipes, notes, and photos, depending on the features and permissions available within Yum Baby.
Only invite people you trust.
Removing a caregiver's access prevents them from continuing to access the shared baby profile through Yum Baby. We cannot control copies, screenshots, notes, or information they may have legitimately retained outside Yum Baby while they had access.
You should only provide or share information about a child if you are their parent, guardian, authorised caregiver, or otherwise have appropriate authority to do so.
7. Service providers
We use trusted technology providers to help us operate Yum Baby.
These currently include:
Google Firebase
We use Google Firebase services including Authentication, Firestore, Cloud Storage, Cloud Functions, and App Check for account management, database hosting, storage, server side functionality, and security.
Expo
We use Expo and EAS for app build and update delivery services.
OpenAI
We use OpenAI's API to provide AI assisted recipe generation.
Only information needed to process the recipe request is sent to OpenAI. We do not send your Yum Baby login credentials.
OpenAI may retain API request and response data for up to 30 days for abuse monitoring unless a different retention arrangement applies or longer retention is required by law or reasonably necessary to protect its services or third parties.
Apple and Google
We may use Apple and Google for federated sign in services.
Apple also provides App Store distribution, subscription, and payment services for the iOS version of Yum Baby.
We require service providers that process personal information on our behalf to protect that information appropriately and use it only as necessary to provide the relevant services or as otherwise permitted under their applicable agreements and law.
8. We don't sell your data
Yum Baby does not sell personal information.
We do not sell baby profile information, feeding information, allergen information, recipe information, or caregiver information.
We do not run advertising within Yum Baby.
We do not share personal information with data brokers.
We do not use information about your baby to create an advertising profile.
If these practices ever materially change, we will update this Privacy Policy and provide any notice or consent required before using personal information in a materially different way.
9. Children and baby information
Yum Baby is designed for adults who are caring for babies and young children. Children do not create or independently operate Yum Baby accounts.
Information about a baby or child is provided by their parent, guardian, or authorised caregiver.
If you create or contribute to a baby profile, you confirm that you have appropriate authority to provide that information.
We recognise that information about a child deserves particular care. We use child profile information only to provide, operate, secure, and improve the Yum Baby services described in this policy.
If you believe information about a child has been provided to Yum Baby without appropriate authority, contact us at info@yumbaby.co.
10. International processing
Yum Baby Limited is based in New Zealand, but some of the technology providers we use may process or store information in the United States or other countries where they operate.
Where required, we take reasonable steps to ensure that personal information processed or disclosed overseas receives appropriate privacy protection, including through contractual or other safeguards.
Privacy and data protection laws may differ between countries.
11. How long we keep information
We keep personal information only for as long as reasonably necessary to provide Yum Baby, maintain security, fulfil the purposes described in this policy, meet legal requirements, and resolve disputes.
Your caregiver and baby profile information is generally retained while the relevant account or profile remains active.
Uninstalling Yum Baby does not delete your account or information stored on our servers.
We may remove inactive accounts or profiles following an extended period of inactivity. Where reasonably practicable, we will provide notice before doing so.
Some technical or security information may be retained for a limited period where reasonably necessary to maintain security, prevent fraud, investigate problems, or comply with legal obligations.
Aggregated or de-identified information that can no longer reasonably identify you or your child may be retained for product improvement and statistical purposes.
12. Account and profile deletion
You can initiate deletion of your Yum Baby account from within the app through Settings.
When you delete your account, we will delete or de-identify personal information associated with the account unless we are required or reasonably permitted to retain particular information for legal, security, fraud prevention, or compliance purposes.
Owners of a baby profile can also delete that baby profile. Deleting a baby profile removes its associated food history, progress, recipes, notes, and stored images and ends access to that profile for invited caregivers.
Where a baby profile has multiple caregivers, you may also be able to transfer ownership to another authorised caregiver before leaving the profile.
Deleting your account is separate from cancelling an Apple App Store subscription. If you have an active subscription, you should manage or cancel it through your Apple account.
Some deleted information may remain temporarily in secure backups until those backups are routinely overwritten or deleted.
You can also contact info@yumbaby.co if you need assistance with a privacy or deletion request.
13. Your rights and choices
Depending on where you live, you may have rights relating to your personal information.
These may include the right to:
ask what personal information we hold about you
request access to that information
ask us to correct information that is inaccurate, incomplete, or misleading
request deletion where applicable
withdraw consent where processing relies on consent
object to or restrict certain processing where applicable
request a portable copy of certain information where applicable
make a complaint about how your information has been handled
Many profile details can be edited directly within Yum Baby.
For other privacy requests, contact info@yumbaby.co.
We may need to verify your identity before giving access to or changing personal information.
Where a request concerns information about a child, we may also need to confirm that you have authority to act in relation to that child.
For requests governed by New Zealand privacy law, we will respond within the time required by law.
If you are not satisfied with how we have handled a privacy matter, you may also have the right to complain to the New Zealand Office of the Privacy Commissioner or another relevant privacy regulator.
14. Device permissions
Yum Baby may request access to certain device functions when they are needed for a feature you choose to use.
Camera and photo library
Access is requested only when you choose to take or select an image for a supported Yum Baby feature.
If you deny access, photo upload functionality may not be available.
Notifications
Yum Baby does not currently use push notifications.
If we introduce optional notifications in the future, we will request the appropriate device permission before sending them.
Network access and local storage
Network access is needed to communicate with Yum Baby's cloud services and sync information.
Local device storage may be used for authentication information and caching app assets.
15. Website and cookies
Our website may use cookies or similar technologies that are necessary for basic website functionality, security, or remembering preferences.
Yum Baby does not use the website to build advertising profiles about parents or children.
If we introduce non-essential analytics, advertising, or other tracking technologies in the future, we will update this Privacy Policy and provide consent choices where required.
Information you voluntarily submit through a website contact form or similar feature may be retained so we can respond to your enquiry.
16. Security
We use administrative and technical safeguards designed to protect personal information from loss, misuse, unauthorised access, alteration, or disclosure.
These measures include:
HTTPS encryption for information transmitted between the app and our services
encryption at rest provided by Firebase for hosted data
authentication controls
Firebase database security rules
Firebase App Check
server side security token validation
per user rate limits for selected features
No online service or method of storage can guarantee absolute security.
You are also responsible for keeping your password, account, and device secure.
If a privacy or security breach occurs, we will investigate and notify affected individuals, regulators, or other parties where required by law.
17. Research and product improvement
We may use aggregated or de-identified information to understand how Yum Baby is being used and improve the product.
For example, this may help us understand which features are useful or where the app could be improved.
We do not use this process to build advertising profiles about individual users or children.
Where information has been de-identified, we take reasonable steps to prevent it from being used to identify an individual again.
18. Changes to this policy
Yum Baby will continue to evolve, and we may update this Privacy Policy as our features, technology, service providers, or legal obligations change.
The effective date at the top of this policy will show when it was most recently updated.
If we make a material change to how we collect, use, or share personal information, we will provide additional notice where appropriate or required, such as through the app, website, or email.
19. Contact us
Questions about privacy, security, your information, or this policy are always welcome.
Privacy Officer
Yum Baby Limited
Auckland, New Zealand
info@yumbaby.co