Draft for owner & legal review — not final

This is a fact-bounded draft prepared for owner and legal review. It is not yet a final, published privacy policy. Sections marked “Owner review required” must be verified against the deployed system and approved before public release.

Privacy Policy

Effective date: September 26, 2026

Celiac Family is operated by CeliacFamily. For questions about this policy, email [email protected].

Information in the app

  • Accounts: parent email, name, and a hashed password; subscription and billing status, including Stripe customer and order IDs for paid plans.
  • Family and kids: each child's first name, age range, picky-eater and Type 1 diabetes flags, Gigi avatar color and accessory choices, and food likes and dislikes.
  • App activity: saved recipes, weekly meal plans, grocery lists, game progress, earned badges, Academy lesson progress and quiz scores, onboarding goals, and messages exchanged with the AI Coach.
  • Care Passport (Caregiver Info): a child's name, family-entered foods to use or avoid, symptoms, emergency contact and doctor names and phone numbers, general notes, and Type 1 diabetes details including warning signs, a low-blood-sugar plan, supplies, emergency medication, care-team contacts, and school-plan notes. This area can contain health information about a child and phone numbers for emergency contacts and doctors.

Owner review required

Verify where data is stored, who can access it, what is disclosed to service providers and AI services, how payments are handled, security measures, retention and deletion, account/parent controls, and any legal jurisdiction-specific notices. These sections will be completed from the actual deployed practices confirmed by the owner — they are not filled from a template or model guesses.

Note on wording: “family-entered foods to use or avoid” describes a field the family fills in themselves. It is not a claim that any food is universally safe. Always check labels and cross-contact conditions for your own child.