Privacy Policy 💛

⚠️ DRAFT — for attorney review before launch. Do not treat as final legal text.

Last updated: [DATE] · Brave Little Bites — Carb & Insulin Log

The short version

This app is a private logbook for your family. The information you enter — your child's carbs, blood-glucose readings, the insulin you gave, and your notes — is stored in your private account and synced securely between your devices so any caregiver in your family can sign in and see the same log. We do not sell or share your data, and the app never calculates or recommends an insulin dose.

1. What we collect

Email address: used only to send you a one-time sign-in link and (if you turn it on) an optional weekly digest of your own log. We do not use it for marketing.
Log entries & settings: the entries, caregiver names, and preferences you enter. Stored privately in your account.
Food-lookup searches: the words you type in "look up a carb estimate" are sent to our server, which forwards them to a nutrition database (e.g. Nutritionix or USDA). We do not attach your name, your child's name, or your log to that search.
Basic server logs: our hosting providers may keep standard request logs (IP, timestamp) for security and reliability.

2. Where your data lives

Your account, entries, and settings are stored in a Supabase Postgres database hosted on AWS in the us-east-1 region (Northern Virginia, USA). Access is restricted by row-level security so that only you, signed into your account, can read or change your data. Connections are encrypted in transit (TLS) and the database is encrypted at rest.

3. What we do NOT do

We do not sell, rent, or share your data with advertisers, brokers, or any third party for marketing.
We do not read your entries. They are only accessible from your signed-in account.
We do not use your entries to train AI models.
We do not use your child's information for advertising or profiling.

4. Your data is yours — and you can delete it

You can export a backup (JSON or CSV) at any time from the in-app Menu. You can also delete your account and all associated data from the same Menu — this permanently removes your profile, caregivers, entries, and sign-out of all sessions. If anything goes wrong, email us and we will help.

5. Email — sign-in & optional digest

We use your email only to:

Send the one-time sign-in link (magic link) so you don't need a password.
If you opt in, send you a weekly digest summarizing your own log entries. You can turn this off any time from Settings, and digests will stop.

We do not send marketing emails.

6. Children's privacy

This app is intended for parents and caregivers, not children. We do not knowingly collect personal information directly from children under 13. Caregivers create the account and choose what to record about their child; we recommend recording only the minimum information needed for your family's records (initials/nickname rather than full name, for example).

7. Not a covered entity / not medical advice

This is a consumer record-keeping tool, not a healthcare provider, and is not intended to be a HIPAA-covered service. It does not provide medical advice and does not calculate insulin doses. Always follow your care team.

8. Contact

Questions, account deletion help, or data requests? Email hello@bravelittlebites.net.