Privacy Policy

Last Updated: 2026-04-29

Hysa Tech ("we", "our", or "us") operates Nica: Baby Food & Meal Planner — both the mobile app (iOS and Android) and the website at nicababy.com (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Services. By installing or using the App, or by accessing the website, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Services.

1. Information We Collect

Mobile App

1.1 Account Information

• Email address and display name provided during account creation.
• Authentication credentials managed through Firebase Authentication, including Google Sign-In and Apple Sign-In. We do not store your third-party passwords.

1.2 Baby Profile Data

• Baby's name and date of birth — used to calculate age and personalize food recommendations, preparation guides, and meal plans.
• Feeding philosophy (smooth purees, baby-led weaning, or mixed approach).
• Meal prep time preference and feeding goals.
• Known allergies and sensitivities — to exclude unsafe foods from recommendations.

1.3 Usage & Activity Data

• Food logs — meals logged including foods consumed, date/time, and any reactions noted.
• Allergen tracking data — introduction history for each major allergen, exposure frequency, and reaction notes.
• Meal plans — generated weekly meal plans and any modifications you make.
• Shopping lists — auto-generated and manually added items, and their checked-off status.
• Saved foods and recipes — your bookmarked content.

1.4 Device & Analytics Data

• Device information — device model, operating system version, app version, and language/locale settings.
• Analytics events — we use Firebase Analytics to collect anonymized usage data such as screen views, feature usage patterns, and search queries to improve the App.
• Advertising identifiers — on iOS, we request your permission via the App Tracking Transparency (ATT) framework before collecting any advertising identifier. You can decline, and the App will function normally without it.
• Crash reports — collected via Firebase Crashlytics to identify and fix technical issues.

1.5 Subscription Data

Subscription purchases and management are handled entirely by Apple (App Store) and Google (Play Store) through RevenueCat. We do not collect or store your payment card details. We receive only a confirmation of your subscription status to unlock premium features.

Web App (nicababy.com)

The website is read-only and does not require an account. We collect:

• Anonymous analytics via Google Analytics 4, Firebase Analytics, and Vercel Web Analytics — page views, scroll depth, time on page, referrer, language, approximate geolocation derived from IP.
• Cookie consent state stored in a first-party cookie.
• Locale preference stored in a NEXT_LOCALE cookie.
• App-install click events with UTM parameters when users tap App Store / Play Store buttons.

We do not collect names, email addresses, baby profiles, food log entries, or payment information from the website.

2. How We Use Your Information

• Personalize food recommendations, recipes, and meal plans based on your baby's age, feeding philosophy, and known allergies. (Mobile App only.)
• Generate smart shopping lists from your meal plans. (Mobile App only.)
• Send daily meal reminders and weekly progress summaries (with your permission). (Mobile App only.)
• Track achievements and milestones in your baby's feeding journey. (Mobile App only.)
• Improve the Services through anonymized analytics and crash reporting.
• Provide customer support when you contact us.

Web app: account-based personalization, push notifications, meal plan generation, and shopping list features are not available on the website in Phase 1. Analytics collected by the website are used solely to improve the website experience.

3. Data Sharing & Third-Party Services

We do not sell your personal data. We share data only with the following service providers who process it on our behalf:

• Firebase (Google) — authentication, database storage, analytics, and crash reporting. Firebase Privacy Policy
• RevenueCat — subscription management. (Mobile App only.) RevenueCat Privacy Policy
• Meta (Facebook) SDK — used for install attribution and conversion measurement. On iOS, this is subject to your ATT consent. No personal health data is shared with Meta. (Mobile App only.) Meta Privacy Policy
• Google Analytics 4 — anonymized web analytics. (Website only.)
• Vercel — website hosting and anonymized web analytics. (Website only.) Vercel Privacy Policy

We may also disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Hysa Tech, our users, or others.

4. Data Storage & Security

Your data is stored securely on Google Cloud infrastructure (via Firebase Firestore) with the following safeguards:

• Encryption in transit (TLS) and at rest.
• Firebase Security Rules restrict access so that each user can only read and write their own data.
• Access to production data is restricted to authorized Hysa Tech personnel who require it to operate and maintain the service.

Web app: the website does not write personal data to Firestore. Anonymous analytics data is processed by Google and Vercel under their respective security frameworks.

5. Data Retention & Deletion

We retain your data for as long as your account is active or as needed to provide the App's services. You can delete your account and all associated data at any time:

• In-app: Settings → Account → Delete Account.
• Email: Send a request to support@hysa-tech.com.

Upon account deletion, all personal data — including baby profiles, food logs, meal plans, allergen tracking data, shopping lists, saved content — is permanently removed from our servers directly. Anonymized, aggregated analytics data that cannot identify you may be retained for product improvement purposes.

Web app: the website does not create user accounts or store personal data on our servers, so no deletion request is needed for website visits. Anonymous analytics data retained by Google and Vercel is governed by their respective data retention policies.

6. Your Rights & Choices

Depending on your jurisdiction (including the EU/EEA under GDPR, UK under UK GDPR, California under CCPA/CPRA, and other applicable laws), you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate data.
• Deletion: Request deletion of your personal data.
• Portability: Request your data in a structured, machine-readable format.
• Restriction: Request restriction of processing of your data.
• Objection: Object to processing of your data for certain purposes.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

You can also exercise the following controls directly:

• Revoke notification or tracking permissions in your device settings at any time.
• Decline the App Tracking Transparency prompt on iOS — the App works fully without it.
• Manage or cancel your subscription via your Apple ID or Google Play account settings.

To exercise any of these rights, email us at support@hysa-tech.com. We will respond within 30 days (or sooner as required by applicable law).

Web app: to opt out of analytics on the website, you may decline cookies via the cookie consent banner, or use your browser's built-in tracking protection. For Google Analytics opt-out, you may also install the Google Analytics Opt-out Browser Add-on.

7. Children's Privacy

Nica is designed for use by parents and caregivers of babies and toddlers. The App is not intended for use by children under the age of 13 (or the applicable minimum age in your jurisdiction).

Baby profile data (name, date of birth, feeding information) is entered and controlled by the parent/caregiver, not by the child. This data is used solely to personalize age-appropriate food and nutrition guidance for the parent.

We do not knowingly collect personal information directly from children. If you believe a child has independently created an account or provided personal information, please contact us at support@hysa-tech.com and we will promptly delete it.

8. Health Information Disclaimer

Nica provides general educational information about baby nutrition and feeding. The App is not a medical device and does not provide medical advice, diagnosis, or treatment. Food recommendations, allergen introduction guidance, and choking hazard assessments are for informational purposes only. Always consult your pediatrician or qualified healthcare provider before introducing new foods or allergens to your baby, especially if your child has known allergies or medical conditions.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence, including the United States (where Google Cloud infrastructure is located). Where such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or other legally recognized transfer mechanisms.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or via email before the changes take effect. The "Last Updated" date at the top indicates the most recent revision. Continued use of the Services after any changes constitutes acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: support@hysa-tech.com
• Company: Hysa Tech
• Website: hysa-tech.com