PuddingPrivacy Policy
Last updated: October 23, 2026
Pudding (the "app") is a solid-foods diary for parents. We built it privacy-first: your diary never leaves your device and your own iCloud. The only thing the app sends is anonymous feature-usage statistics (see below), and you can turn it off.
What data the app holds
You may enter: your baby's name (optional), date of birth, the chosen feeding methodology, which foods have been introduced, reaction notes, and free-text notes. This data exists only to make the diary work.
Where it is stored
Data is stored on your device using the system framework (SwiftData) and synced through your own iCloud (a private CloudKit database), so your records survive a lost phone and follow you across your devices.
The app has no backend and no account with us. Syncing happens directly between your devices and your iCloud account — we have no access to that data and cannot have it. You can turn syncing off by turning Pudding off in iPhone Settings: your name → iCloud → apps using iCloud; the app keeps working locally.
Anonymous usage statistics
Starting with version 1.2, the app sends anonymous usage statistics: which screen was opened, that an entry was saved, that a PDF was exported, that the Pro screen was opened. They are received by TelemetryDeck GmbH (Germany). The user identifier is hashed on your device, so neither we nor TelemetryDeck can link events to you. Food names, reactions, notes, your child's name and age, and photos are never sent. We use these stats only to learn which features people use and what to improve. To turn them off: Profile → "Anonymous usage stats". In App Store terms, this is "Data Not Linked to You → Product Interaction".
Notifications
The app may send local reminders (e.g. time to repeat an allergen). They are generated and shown on your device; you can grant or deny permission — the app works fully without them.
Child health data
Reaction notes are sensitive. They are stored like every other entry — on your device and in your own iCloud — never sent to us, and never used for ads or analytics. The app does not use HealthKit.
Deleting data
You can delete an entry inside the app at any time, and Profile has a full data reset. Deleting also removes the iCloud copy. Since we run no servers, there is no "server-side" deletion to request — your iCloud data stays entirely under your control.
Retention: records are kept for as long as you keep them — until you delete an entry, run the full reset in Profile, or remove the app together with its iCloud data. There is no retention period on our side, because there is no our side.
Children
The app is intended for parents, not for children. Data about a child is entered by the parent and stays on their device and in their own iCloud.
Website analytics
This website (the landing page) uses privacy-friendly, anonymous visit analytics (Vercel Web Analytics): no cookies, no user identification, and no personal data. This applies to the website only; for the app, see "Anonymous usage statistics" above.
Future changes
If we add features that change how data is handled (for example a shared diary with a partner), we will update this policy and the App Store privacy disclosure before releasing them.
Contact
Privacy questions: pudding.support@babyfooddiary.com.