Privacy Policy

Last updated: April 7, 2026

1. Introduction

TinyTaste ("the App") is operated by Cognitive Intelligence Development ("CID", "we", "us"). We respect your privacy and are committed to protecting your personal data. This policy explains how we collect, use, and safeguard your information.

2. Data We Collect

We collect the following data that you voluntarily provide:

Baby profile information: Name, date of birth, due date (optional), weaning start date, milk feeding type
Food and milk logs: Foods logged, reactions, textures, amounts, meal times, notes
Supplement tracking: Supplement names and daily check-off status
Journal entries: Freeform text entries you write
Account data: If you sign in with Apple, we receive your Apple ID identifier

3. How We Use Your Data

To provide personalised nutrition insights and recipe suggestions
To generate AI-powered developmental insights based on your baby's age
To track nutrition patterns and identify gaps in your baby's diet
To sync your data across devices (if signed in)
To improve the App through anonymised analytics

4. Data Storage

Your food logs, milk logs, journal entries, and supplement data are stored locally on your device using Apple's SwiftData framework, protected by iOS Data Protection (encrypted at rest). This data is never uploaded to or stored on our servers.

If you sign in, only your subscription status and usage counts are stored in Google Firebase Firestore. We do not store your baby's name, food logs, or any health data on our servers. We do not sell your data to third parties.

5. User Identity & Security

Your account is identified internally by a Firebase Authentication user ID. This ID is never exposed to you or shared externally.

For support purposes, we generate a Support ID — a cryptographic code created using a one-way keyed hash (HMAC-SHA256) of your user ID with a secret key. This Support ID:

Cannot be reversed to reveal your actual user ID
Cannot be used to access your account or personal data
Is only used to help us locate your account if you contact support

In our backend logs, user activity is recorded using a separate one-way hash of your user ID. Raw user IDs are never written to logs, displayed in admin tools, or shared with third parties.

6. AI Processing

When you use intelligent features (recipe generation, insights), your baby's food log data is sent to our backend server over an encrypted connection (HTTPS/TLS) for processing via Anthropic's Claude AI. This data is used solely to generate personalised content and is not stored on our servers or Anthropic's servers after the response is returned. Anthropic does not use your data for model training.

7. Third-Party Services

Firebase: Authentication, Firestore (subscription data), Analytics, Crashlytics
Anthropic Claude AI: Recipe and insight generation
Apple: Sign in with Apple, In-App Purchases, App Store

8. Children's Privacy

TinyTaste is designed for parents and caregivers, not for use by children directly. The baby profile data you enter is under your control as the parent. We do not knowingly collect data from children under 13.

9. Data Deletion

You can delete your account and all associated data at any time through Settings > Delete Account in the App. This permanently removes your data from both the device and our servers.

10. Your Rights

You have the right to access, correct, or delete your personal data. Contact us at tinytaste@cogdev.ai for any data requests.

11. Changes

We may update this policy from time to time. We will notify you of significant changes through the App.

12. Contact

Cognitive Intelligence Development
Email: tinytaste@cogdev.ai
Website: cogdev.ai