← Back to Yummy Starts

YummyStarts

Privacy Policy

Effective Date: April 8, 2026

1. Introduction

Welcome to YummyStarts. This Privacy Policy explains how Mimi Studio d.o.o., a limited liability company organized under the laws of the Republic of Slovenia, with its registered office at Trubarjeva cesta 79, 1000 Ljubljana, Slovenia (hereinafter "Mimi Studio", "we", "us", or "our"), collects, uses, discloses, and protects your personal information when you use the YummyStarts mobile application and related services (collectively, the "Service").

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

We may collect the following information when you voluntarily provide it:

• Account Information: Email address and password when you create an account.
• Baby Profile Data: Your baby's name, date of birth, and gender, which you enter to personalize the experience.
• Onboarding Responses: Answers to our questionnaire, including feeding stage, dietary preferences, family allergy history, and parenting goals.
• Food Tracking Data: Information about which foods your baby has tried, liked, or reacted to.
• Allergen Tracking Data: Records of allergen introductions, reactions, and notes.
• Meal Plans: Meal plans you create within the app.
• Support Communications: Any messages or feedback you send to us.

2.2 Information Collected Automatically

When you use the Service, we may automatically collect:

• Device Information: Device model, operating system version, unique device identifiers, and language settings.
• Usage Data: App interactions, screens viewed, features used, session duration, and frequency of use.
• Analytics Data: Aggregated and anonymized usage statistics to help us improve the Service.
• Crash Reports: Technical data about errors and performance issues.

2.3 Information from Third Parties

We may receive information from:

• Payment Processors: Apple manages in-app purchases. We receive confirmation of subscription status but do not process or store payment card details.
• Attribution Partners: Anonymized data about how you discovered the app, used to measure advertising effectiveness.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service, including personalized food recommendations and meal plans based on your baby's age and preferences.
• Create and manage your account and sync your data across devices.
• Process subscriptions and verify entitlements.
• Send you relevant notifications, including food introduction reminders, allergen schedules, and meal plan suggestions (with your permission).
• Analyze usage patterns to improve features, content, and user experience.
• Respond to your support requests and communications.
• Detect and prevent fraud, abuse, or security incidents.
• Comply with legal obligations.

4. How We Share Your Information

We do not sell your personal information. We may share your data with:

• Service Providers: Third-party companies that help us operate the Service, including:
  • Supabase (database and authentication hosting)
  • RevenueCat (subscription management)
  • Mixpanel (analytics)
  • Singular (attribution)
  • Resend (transactional email delivery)
  • Apple (in-app purchases and app distribution)
• Legal Compliance: When required by law, regulation, or legal process, or to protect the rights, property, or safety of Mimi Studio, our users, or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Storage and Security

Your data is stored on secure servers provided by Supabase, with data centers located in the European Union. We implement industry-standard security measures, including encryption in transit (TLS) and at rest, row-level security policies, and access controls.

While we strive to protect your personal information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

Anonymized and aggregated data that cannot be used to identify you may be retained indefinitely for analytics and service improvement purposes.

7. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Restriction: Request that we limit the processing of your data.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to the processing of your data for specific purposes, including direct marketing.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec) or your local supervisory authority.

8. Legal Basis for Processing (GDPR)

We process your personal data on the following legal bases:

• Contract Performance: Processing necessary to provide the Service you requested (account management, food tracking, meal planning).
• Legitimate Interests: Analytics, fraud prevention, and service improvement, where our interests do not override your rights.
• Consent: Push notifications, marketing communications, and tracking for advertising attribution. You may withdraw consent at any time.
• Legal Obligation: Where we are required to process data by applicable law.

9. Children's Privacy

YummyStarts is designed for parents and caregivers of infants and young children. The Service is not directed at children and we do not knowingly collect personal information directly from children under 16 years of age.

The baby profile data (name, date of birth) is entered by the parent or caregiver and is used solely to personalize the food introduction experience. This data is stored under the parent's account and is subject to the parent's control.

If we become aware that we have inadvertently collected personal data from a child under 16 without appropriate parental consent, we will take steps to delete that information promptly.

10. Cookies and Tracking Technologies

The YummyStarts mobile app uses local storage and device identifiers to maintain your session and preferences. We use analytics tools (Mixpanel) that employ device-level identifiers to understand how the Service is used.

On our website, we may use cookies and similar technologies. You can control cookie preferences through your browser settings.

11. App Tracking Transparency (iOS)

On iOS devices, we request your permission via Apple's App Tracking Transparency (ATT) framework before collecting your device's advertising identifier (IDFA) for attribution and advertising purposes. You may decline this request, and the app will function normally without it.

12. International Data Transfers

Your data may be transferred to and processed in countries outside of your country of residence, including the United States, where some of our service providers are located. When such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or by other appropriate means. The "Effective Date" at the top of this page indicates when the policy was last revised.

Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

14. Digital Products

In addition to the app, we may offer one-time digital products, such as The Baby & Toddler Cookbook (a downloadable PDF). Digital products are delivered immediately upon purchase. By purchasing and downloading a digital product, you expressly consent to immediate delivery and acknowledge that the purchase is final and non-refundable, as the content is digital and cannot be returned once delivered, except where a refund is required by applicable law. See our Terms & Conditions for full refund terms.

15. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us: