Privacy Policy

This Privacy Policy explains how we collect, use, share and protect your personal information when you use the HeySolids mobile app and the heysolids.com website (together, the "Service").

HeySolids is a tool that helps parents and carers introduce solid foods to their baby - logging the foods you offer, tracking which foods have been tried, and noting any reactions. Because some of the information you record relates to a child and to their health, we take its protection seriously. Please read this policy carefully.

Who we are

The Service is provided by GentleWorks Ltd, a company registered in England and Wales under company number 16487059 ("GentleWorks", "we", "us" or "our"). GentleWorks Ltd is the "data controller" responsible for your personal information.

Registered office: 3-4 Sentinel Square, Pollock Accounting, London, United Kingdom, NW4 2EL.

If you have any questions about this policy or how we handle your information, contact us at [email protected].

Changes to this policy

We may update this Privacy Policy from time to time, for example if we add new features or change the services we rely on. When we make material changes we will post the updated policy on this page and update the effective date above. Where required by law, we will also notify you in the app or by email. Please review this page periodically.

The information we collect

We collect information that you provide to us directly, and information that is collected automatically when you use the Service.

Information you provide

• Account and sign-in details. You can sign in with Apple, sign in with Google, or use a guest account. Depending on the method you choose, we receive a unique identifier from the provider and, only if you choose to share it, your name, email address and profile photo. Guest accounts do not require a name or email.
• Your child's profile. The name or nickname you give your baby, their date of birth, and the developmental readiness signs you choose to record.
• Food and feeding logs. The foods you offer or introduce, the dates and times you log them, whether a food is a favourite, the introduction status of each food (for example "tried" or "watching"), and any notes you add.
• Reactions and symptoms. Any reactions or symptoms you record against a food (for example signs of a possible allergic reaction). This is health information about your child - see Health information about your child below.
• Searches. The search terms you enter when looking for foods or other content in the app.
• Communications. Information you provide when you contact us for support or otherwise correspond with us.

Information we collect automatically

• Device and technical data. Device model and type, operating system version, app version, language and unit-system preference, and unique device or installation identifiers. If you enable notifications, we store a push-notification token for your device.
• Approximate location. We derive an approximate country from your IP address (using an offline geolocation database) so we can set sensible defaults such as metric or imperial units. We do not collect your precise or GPS location.
• Usage and diagnostic data. In-app events and feature usage, the experiment or test group your account is assigned to, and crash and error reports generated if something goes wrong.
• Website data. When you visit heysolids.com we use cookies and similar technologies, including Google Analytics, to understand how the website is used. Most browsers let you refuse or delete cookies; some parts of the website may not work properly if you do.

Health information about your child

HeySolids lets you record reactions or symptoms that your child may have to particular foods. Under UK data protection law, information about health is a "special category" of personal data that receives extra protection.

We process this information only to provide the tracking features you ask for - so that you can see which foods have been introduced, flag foods to watch, and keep a record you can share with a healthcare professional. We rely on your explicit consent to do this, which you provide by choosing to enter the information. You can withdraw your consent at any time by deleting the relevant entries, or by deleting your account, which removes this information from our live systems.

HeySolids does not provide medical advice. The app is not a substitute for professional medical guidance, diagnosis or treatment. Always seek the advice of a qualified health professional about your child's diet, allergies or any medical concern.

We never use your child's health information for advertising, and we never sell it.

How and why we use your information

We use your information for the purposes below. Data protection law requires us to have a "legal basis" for each use; the legal basis we rely on is shown alongside each purpose.

• To provide the Service - to create and manage your account, store your child's profile and your food logs, and sync them across your devices. Legal basis: performance of our contract with you (and steps taken at your request before entering it).
• To record reactions and symptoms - to store and display the health information you choose to log about your child. Legal basis: your explicit consent.
• To improve, secure and support the Service - to understand how the app is used, fix bugs, monitor performance, prevent abuse and provide customer support. Legal basis: our legitimate interests in running and improving a reliable, secure service.
• To communicate with you - to respond to your messages, send important service notices, and (if you enable them) send push notifications. Legal basis: performance of our contract, our legitimate interests, and your consent for push notifications.
• To comply with the law - to meet our legal and regulatory obligations and to establish, exercise or defend legal claims. Legal basis: compliance with a legal obligation and our legitimate interests.

Where we rely on consent, you can withdraw it at any time without affecting processing carried out before withdrawal. Where we rely on legitimate interests, you can object - see Your rights.

Who we share your information with

We do not sell or rent your personal information. We share it only as described below.

We use trusted third-party companies ("service providers" or "processors") to help us run the Service. They may access your information only to perform tasks on our behalf, under contracts that require them to protect it and use it only on our instructions:

• Apple and Google - to provide sign in with Apple and Google Sign-In.
• Cloud hosting and infrastructure providers - to host the app, database and supporting services.
• Sentry - crash and error reporting, so we can diagnose and fix problems.
• Mixpanel - product analytics, to understand how features are used.
• New Relic - performance and reliability monitoring of our servers.
• Google Analytics - website analytics on heysolids.com.
• Apple App Store and Google Play - app distribution and, where applicable, processing of any purchases.

We may also disclose your information where we are required to do so by law, to a regulator or law enforcement, or in connection with a sale, merger or reorganisation of our business (in which case the recipient will be bound by this policy).

International data transfers

Some of our service providers are based outside the United Kingdom, including in the United States. Whenever we transfer your personal information outside the UK, we make sure a similar level of protection applies by relying on an appropriate safeguard, such as the UK "adequacy" rules (including the UK Extension to the EU-US Data Privacy Framework) or the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses. You can ask us for more detail about the safeguards we use.

How long we keep your information

We keep your personal information for as long as your account is active. When you delete your account, we delete your account details, your child's profiles, your food logs, recorded reactions and your search history from our live systems. Residual copies may remain in our encrypted backups for a limited period before they are overwritten, generally within 90 days.

We may retain information for longer where we need to in order to comply with a legal obligation or to establish, exercise or defend legal claims. We may also keep aggregated or anonymised information, which can no longer identify you, for analysis and to improve the Service. Diagnostic and analytics data held by our service providers is retained in line with their own retention periods.

Children's privacy

HeySolids is intended for parents and carers, who are adults. The Service is not directed to children and is not intended for use by children. You must be at least 18 years old to create an account.

The information recorded in the app about a baby or child is provided by you, the parent or guardian, and you are responsible for ensuring you are entitled to provide it. We do not knowingly collect personal information directly from children. If you believe a child has created an account or provided us with personal information, please contact us at [email protected] and we will take appropriate steps to delete it.

How we protect your information

We use appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, misuse or alteration, including encryption in transit and access controls. However, no method of transmission over the internet or method of electronic storage is completely secure, so we cannot guarantee absolute security. You are responsible for keeping your device and access to the app secure.

Your rights

Under UK data protection law, you have the following rights in relation to your personal information:

• Access - to ask for a copy of the personal information we hold about you.
• Rectification - to ask us to correct information that is inaccurate or incomplete.
• Erasure - to ask us to delete your personal information.
• Restriction - to ask us to limit how we use your information in certain circumstances.
• Portability - to receive certain information in a structured, commonly used, machine-readable format.
• Objection - to object to processing that is based on our legitimate interests, including direct marketing.
• Withdraw consent - where we rely on your consent (including for health information), to withdraw it at any time.

To exercise any of these rights, email us at [email protected]. We will respond within the time limits set by law (normally one month). We may need to verify your identity first.

If you are unhappy with how we have handled your information, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk. We would, however, appreciate the chance to address your concerns first.

Deleting your account

You can delete your account at any time from within the app's settings. Deleting your account removes your account details, your child's profiles, your food logs, recorded reactions and your search history as described in How long we keep your information. If you need help deleting your account, email us at [email protected].

Contact us

If you have any questions, concerns or requests about this Privacy Policy or your personal information, please contact us at:

GentleWorks Ltd
3-4 Sentinel Square, Pollock Accounting, London, United Kingdom, NW4 2EL
Email: [email protected]