Privacy Policy
Effective date: November 11, 2026
Celiac Family is operated by CeliacFamily. For any question about this policy, or to ask us to delete an account or stored data, email [email protected].
This policy covers two different things: the information families enter inside the app, and the email address you give us to get a free PDF. They are stored separately, and the sections below say what happens to each.
Information in the app
- Accounts: parent email, name, and a hashed password; subscription and billing status, including Stripe customer and order IDs for paid plans.
- Family and kids: each child's first name, age range, picky-eater and Type 1 diabetes flags, Gigi avatar color and accessory choices, and food likes and dislikes.
- App activity: saved recipes, weekly meal plans, grocery lists, game progress, earned badges, Academy lesson progress and quiz scores, onboarding goals, and messages exchanged with the AI Coach.
- Care Passport (Caregiver Info): a child's name, family-entered foods to use or avoid, symptoms, emergency contact and doctor names and phone numbers, general notes, and Type 1 diabetes details including warning signs, a low-blood-sugar plan, supplies, emergency medication, care-team contacts, and school-plan notes. This area can contain health information about a child and phone numbers for emergency contacts and doctors.
The "send me the PDF" email list
Several pages offer a printable PDF in exchange for an email address: the 504 packet, the restaurant card, the Halloween candy list, and the Thanksgiving checklist. When you submit one of those forms we store the email address you typed and which PDF you asked for. We do not ask for your name, your child's name, or a diagnosis on those forms.
What "occasional helpful resources" means: a few emails a year, not a newsletter. New guides, new printables, and seasonal checklists when they are ready. We do not sell or rent the list, and we do not hand it to other companies for their own marketing. You can leave the list at any time by replying to any email and asking, or by emailing us at the address above; we remove the address and stop sending.
The PDF is yours either way. The download appears on the page as soon as you submit the form. If you would rather not be on the list at all, use the free Hand-Off Sheet or print any page of this site directly; neither requires an email address.
Cookies and analytics
The app sets a sign-in cookie so you stay logged in between pages, and it uses a small amount of browser storage for the same purpose. We do not run third-party advertising trackers, and we do not run a third-party analytics product today. If that changes, this policy will be updated before the change goes live, and the new section will name the service and what it collects.
The public tools on this site
Most of this site needs no account: the guides, the 504 packet, the restaurant card, the candy list, the snack bin, the medicine check, the books page, and the free lessons. Reading them does not create a profile. The medicine check downloads a public list of FDA label summaries to your browser and searches it there, so the words you type into that box are not sent to us. The only thing stored from a public page is the email address described above, and only if you submit one of those forms.
Care Passport share links
If you create a Care Passport share link, the details you choose can be viewed by anyone who has that link and its passcode until you turn the link off or it expires. We don't record who opens a share link. Treat a share link like a key: send it to the people who need it, and turn it off when the sitter changes or the school year ends.
Children's information
Celiac Family is written for parents and caregivers, and accounts are created by adults. The details about a child in the app are entered by the parent or guardian. We do not knowingly collect information directly from a child, and we do not use a child's information for advertising.
How to delete an account or stored data
Email us from the address on the account and tell us what you want removed. We will delete the account, the family and child profiles, the Care Passport details, and any email-list entry tied to that address. We may keep a record of a payment or invoice where the law or our payment processor requires it, and we will tell you if that applies. Deletion is permanent, so download or print anything you want to keep first.
Changes to this policy
When this policy changes in a way that matters, we update the effective date at the top of this page. The current version always lives at celiacfamily.org/privacy.