Privacy Policy

When you sign up, we store your email address to identify your account.

When you add a baby profile, we store your baby's first name, date of birth, region (state), and any allergens you list.

When you use the meal planner, we store your saved meal plans tied to your baby profile.

We do not collect payment card details — payments are handled entirely by Razorpay.

Your baby's age, region, and allergens are sent to our AI model (hosted on Railway) to generate personalised recipes. No names are sent to the AI — only age, region, and dietary info.

We use your email solely for authentication (magic login links). We do not send marketing emails.

We use anonymised usage metrics via Vercel Analytics to understand which features are used.

Your data is stored in Supabase (PostgreSQL database hosted on AWS) and is protected by row-level security — only your account can read your records.

Our AI backend runs on Railway. Razorpay processes all payment transactions and is PCI-DSS compliant.

We do not sell, share, or rent your data to any third party.

Your data is retained as long as your account is active. You can request deletion at any time by emailing us (see below). We will delete your account and all associated data within 7 days.

TinyTastes is designed for parents. We collect limited information about babies (first name, DOB, region, allergens) solely to generate safe, age-appropriate recipes. This data is linked only to the parent's account and is never shared.

We use a single session cookie to keep you signed in (set by Supabase Auth). We do not use advertising or tracking cookies.

You can request access to, correction of, or deletion of your personal data at any time. To do so, email us at hello@tinytastes.in with the subject "Data request". We will respond within 7 days.

We may update this policy as the product evolves. Changes will be posted on this page. Continued use of TinyTastes after changes constitutes acceptance of the updated policy.