Safety & privacy, in plain language

The ten promises

1. Parents open the door. A parent creates the account, verifies consent, and sets up each child. No child can sign up alone.
2. No ads to kids. There is no advertising anywhere in the kid experience — no banners, no "sponsored" games, no ad-funded anything.
3. Sparks can't be bought. The in-app currency is earned by logging, full stop. There is no purchase flow for Sparks, so there is no children's spending to worry about — and nothing for a child to buy by accident.
4. We collect the minimum. A child profile is a first name (or nickname), age band, and the health inputs a parent chooses to add. We ask for what the features need, and nothing more.
5. Meal photos serve one purpose. Photos are processed to recognise food and are then handled per the retention rules in the policy below. They are never used for advertising and never sold.
6. Nothing social with strangers. Leaderboards, duels and cheers work only inside your own family account. Kids cannot be contacted by anyone through Food Replay.
7. No selling data. No "sharing" that means selling. We do not sell personal data, child or adult, and we don't trade it for advertising reach.
8. You can leave with everything. Parents can export the family's data or delete the account — and deletion means deletion, on a stated schedule.
9. Grown-up areas are locked. Settings, subscription and profile switching sit behind a parent PIN (or Face ID), so kids stay on the kid side.
10. The design itself is protective. No guilt language, no body-weight talk at kids, no red-alert psychology, nightlight mode for evenings, and play caps parents control. Safety here isn't just a policy — it's the product.

How does Food Replay handle COPPA and GDPR-K?

For families in the United States, the Children's Online Privacy Protection Act (COPPA) requires verifiable parental consent before collecting personal information from children under 13 — Food Replay's parent-first onboarding is built around that requirement. For families in the UK and EU, we follow the principles of the GDPR and the UK Age-Appropriate Design Code (often called GDPR-K): data minimisation, high privacy by default, no nudging children toward sharing, and clear, child-comprehensible communication. The same protective defaults ship worldwide — we don't run a weaker version anywhere.

What data do you actually collect?

What we don't collect from kids: precise location, contacts, browsing history, advertising identifiers, or anything needed to build an ad profile — because we don't build ad profiles.

The formal privacy policy

Effective date: to be set at launch. This policy is written to be readable; where law requires precise terms, they appear in brackets.

1. Who we are

Food Replay ("we", "us") operates the Food Replay mobile applications and this website. For the purposes of applicable data-protection law, Food Replay is the data controller for personal data processed through the app. Contact: [email protected].

2. Children's data and parental consent

Food Replay is designed for use by children aged 5–13 under a parent-managed account. We obtain verifiable parental consent during onboarding before any child profile is created or any child data is collected. Parents may review, correct, export or delete their children's data at any time from Settings → Privacy, or by emailing us. If we learn we have collected a child's data without parental consent, we delete it.

3. What we collect and why

We process the categories listed in the table above, on the legal bases of consent (child profiles, optional health inputs) and contract performance (running the service you signed up for). Aggregated, de-identified statistics that cannot be tied to a person may be used to improve the product.

4. Meal photos

Photos submitted for logging are processed to recognise food items. Recognition output (the food list) is stored with the log; photos are retained only as long as needed to display the log history to your family and are deleted with the log or the account. Photos are not used for advertising, are not sold, and are not used to train models in a way that identifies your child.

5. What we never do

We do not sell personal data. We do not serve third-party advertising in the kid experience. We do not offer any mechanism to purchase Sparks or any in-app currency. We do not enable contact between children and anyone outside their family account.

6. Sharing and processors

We use a small set of service providers (hosting, food-recognition processing, payments for the parent subscription, crash analytics on the parent surface) bound by contracts that limit them to processing on our instructions. A current list of processors is available on request.

7. Retention and deletion

Family data is retained while the account is active. When a parent deletes the account, personal data is deleted from production systems within 30 days and from backups within 90 days, except where law requires longer retention of specific records (e.g., payment records).

8. Security

Data is encrypted in transit and at rest. Access is role-restricted and logged. Grown-up areas of the app are protected by parent PIN or platform biometrics.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, export, and object to processing of personal data — for your children's data, you exercise these on their behalf. Write to [email protected]; we respond within 30 days.

10. Changes

If we change this policy in a way that affects children's data, we will notify parent accounts and, where required, re-request consent before the change applies.