Privacy Policy

The controller responsible for your personal data is PrimeBalance OÜ, a company registered in Estonia (registration number: 17089317), which operates Personal Weaning Plan. As an Estonian company, we are established within the EU. For any privacy question or to exercise your rights, you can contact us at [email protected].

We collect the account details you provide (such as your name and email address) and the information you enter during onboarding to generate your plan — for example, your child's age, current feeding pattern, temperament, and any notes you choose to add. We also store the plan we generate for you and the progress you record (which steps are ticked). We keep basic technical and usage information needed to operate the Service securely.

Some of the details you provide relate to health and family life. We treat this as sensitive personal data and only process it with your explicit consent, which you give during onboarding, and solely to create and manage your personalised plan. You can withdraw this consent at any time by deleting your data or your account.

We use your information to: create, display, and update your personalised plan; run your account and remember your progress; process payments and calculate any applicable tax; send essential service emails such as email verification and partner invitations; keep the Service safe and reliable; and meet our legal obligations. Our legal bases are your consent (for health-related data), performance of our contract with you (to provide the Service), and our legitimate interest in operating a secure product.

To build your plan, the details you enter are sent to a trusted automated content provider that generates the text on our behalf. This processing produces your plan only; it is not used to make legally significant decisions about you, and your inputs are not used to train third-party models.

When you write free text — for example, an optional note during onboarding or a reason for regenerating your plan — that text is automatically screened for wording that may signal a crisis, a possible health concern, or that you may be struggling. The sole purpose is your wellbeing: if such wording is detected, we may show you relevant support information and helpline resources, and we keep an internal flag so we can keep the Service safe. This screening does not make any legally significant or automated decision about you, and it never results in your account being changed or closed on its own. The legal basis is our legitimate interest in the safety of the people who use the Service. You can avoid this processing by not entering free-text notes.

We do not sell your personal data. We share it only with service providers who help us run the Service — such as our hosting, payment, email, and content-generation partners — under agreements that require them to protect it. If you invite a partner, the plan details you choose to share become visible to that person. We may disclose information where required by law.

Some of our providers may process data outside your country. Where that happens, we rely on appropriate safeguards (such as recognised adequacy decisions or standard contractual clauses) to keep your data protected to the standard required by applicable law.

We keep your data for as long as your account is active or as needed to provide the Service. When you delete your account, we remove your personal data, except where we must retain limited records to meet legal, accounting, or security obligations.

Subject to applicable law, you have the right to access, correct, or delete your data; to export a copy; to restrict or object to certain processing; and to withdraw consent at any time. You can export your data as a file or permanently delete your account directly from your account settings. You also have the right to complain to your local data-protection authority.

We use appropriate technical and organisational measures to protect your data, including encrypted transport, hashed passwords, and access controls. No online service can be guaranteed to be completely secure, but we work to keep your information safe. If a personal data breach does occur that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority, and you where required, without undue delay and in line with our obligations under applicable data-protection law.

The Service is for adults (18+). It is about a child but is not directed at or intended to be used by children. Please do not let anyone under 18 create an account.

If you believe you have found a security vulnerability or a way that data could be exposed, please let us know responsibly at [email protected] so we can investigate and fix it.

We may update this policy from time to time and will note the date of the latest revision at the top. For any privacy question or request, please contact us through the option in your account settings, or by email at [email protected].