Privacy policy

Controller and contact

DR TECHNOLOGY, S.L., Calle Benet Mateu 30, 7º 2ª, 08034 Barcelona, Spain. Data protection contact: rgpd@auliafamily.com.

What we process

Account data: your email address, a hash of your password if you set one, your language, and, if you sign in with Google, your Google account identifier.

Content you record: the foods your baby has tried, dates, notes and reaction flags. Reactions and notes can reveal health information about your child.

Technical data: session cookie, IP address and user agent for security (rate limiting, abuse prevention), and anonymous, cookieless page statistics.

Why and on what legal basis

To provide the service you sign up for (contract, art. 6.1.b GDPR).

To store the health-related notes and reactions you choose to record, based on your explicit consent, given when you create the account or, if you signed in with a code or Google, the first time you open the app; we keep a record of when you gave it (art. 9.2.a GDPR). You can withdraw it at any time by deleting the entries or your account.

To keep the service secure and prevent abuse (legitimate interest, art. 6.1.f GDPR).

We do not sell your data, do not use it for advertising and do not make automated decisions about you.

Who processes it for us

Vercel Inc. (hosting; functions in Frankfurt), Neon / Databricks (database in Frankfurt, AWS eu-central-1), Amazon Web Services EMEA (email delivery, Ireland) and, only if you use it, Google (sign-in). Some of these providers are US companies; transfers are covered by the EU–US Data Privacy Framework and/or Standard Contractual Clauses.

How long we keep it

Until you delete your account. Deleting it from the app menu erases your account and everything you recorded immediately; encrypted database backups are overwritten within 7 days. Sign-in codes and security records are deleted within a day.

Your rights

You can access, correct, export or delete your data, object to or restrict its processing and withdraw consent by writing to rgpd@auliafamily.com. You can also complain to the Spanish Data Protection Agency (www.aepd.es).

Cookies

We only use a strictly necessary session cookie to keep you signed in and a preference cookie for your language. No advertising or tracking cookies.

Children

BabyWean is for adults (parents and caregivers). We do not knowingly collect data from children other than the food information you record about your baby.