Privacy Policy
Last updated: September 18, 2026
1. Who we are
nibblenibble is a mobile app that helps families track their baby's food diversification. This policy explains what data is collected, why, and how you can control it.
Data controller: Guillaume Raspaud
Contact: contact@nibblenibble.app
2. What data is collected
2.1 Account data
- Email address and password (if signing up by email), or Google profile information (name, email, photo) if signing in with Google Sign-In.
- First name (editable in Account).
2.2 Data about the tracked baby
Entered by the adult account holder, never directly by a child:
- Baby's first name
- Date of birth
- Sex (optional)
- Logged meals: foods, date/time, baby's reactions, free-text notes
- Optionally, a shared family note
This data concerns a minor but is entered, controlled, and managed exclusively by the family adults who have access to the profile.
2.3 Data related to family sharing
If you invite a relative to follow the same baby profile: their email address (for the invitation) and their first name once they've joined the profile.
2.4 Technical and advertising data
- Device advertising identifier (via Google AdMob), for displaying ads.
- Standard usage data collected by Google Play Services / Firebase (e.g. crashes, performance) if these services are enabled.
2.5 What we do NOT collect
- No geolocation.
- No medical health data in the strict sense (the app tracks self-reported food preferences, not a medical record).
- No payment data (the app doesn't offer any purchases).
3. Why this data is collected
| Data | Purpose |
|---|---|
| Email, password / Google account | Account authentication and security |
| First name | App personalization, identification within a shared family |
| Baby and meal data | Core function of the app: tracking food diversification |
| Invited relative's email | Enables sharing the tracking between family members |
| Advertising identifier | Displaying ads (AdMob), which fund the app's free use |
4. Where and how data is stored
Data is hosted on Firebase (Google Cloud), a third-party service used for:
- Firebase Authentication — account management
- Cloud Firestore — storage of app data (profiles, meals, families)
By using the app, you agree that this data is processed by Google as part of these services. See Google's privacy policy for more details on their own practices.
5. Advertising (Google AdMob)
The app displays ads via Google AdMob to remain free. AdMob may collect an advertising identifier and other technical data to display ads, possibly personalized based on your preferences and consent.
Depending on your region, a consent screen may be shown to let you choose between personalized or non-personalized ads. You can manage your ad preferences at any time from your Android device settings (Settings > Privacy > Ads).
More information: Google's Ads Policy.
6. Data sharing
We do not sell any data. Data is only shared:
- With Google/Firebase (technical hosting) and Google AdMob (advertising), as technical processors.
- With the other family members you explicitly invite to a baby profile — they see the meals and information you choose to share with them.
No other third party has access to your data.
7. How long data is kept
Data is kept as long as the account exists. You can at any time:
- Delete a baby profile (from the Baby Profile screen) — permanently deletes its meals and notes.
- Delete your account (from Account) — removes your access; if you're the only administrator of a baby profile, the app will first ask you to transfer admin rights or delete that profile.
These deletions are permanent and irreversible.
8. Your rights (GDPR)
If you reside in the European Union, you have the following rights over your data and your child's data:
- Right of access: know what data is held.
- Right of rectification: correct inaccurate data (editable directly in the app for most fields).
- Right to erasure: delete your data (via the app's deletion features, or by contacting us).
- Right to portability: receive your data in a usable format.
- Right to object: object to certain processing (e.g. personalized advertising).
To exercise these rights beyond what the app allows directly, contact us at contact@nibblenibble.app.
You can also file a complaint with your national data protection authority (in France, the CNIL: www.cnil.fr).
9. Data concerning a minor
The baby tracked in the app is not the user of the service — the app is designed to be used by an adult (parent, legal guardian, or authorized relative) who enters and controls the child's data. We do not collect any data directly from a child, and the app is not intended to be used directly by minors.
10. Security
Data is protected by Firebase's security rules: only members explicitly authorized on a baby profile can view or edit its data. Passwords are never stored in plain text (managed by Firebase Authentication).
11. Changes to this policy
This policy may evolve along with the app. In case of a significant change, we will notify you via the app or by email.
12. Contact
For any question about this policy or your data: contact@nibblenibble.app