Privacy

Privacy Policy

Short version: your baby’s data lives on your device by default, sync is optional, we don’t run ads, we never sell your data, and you can delete everything at any time.

Last updated: September 25, 2026

First Bites is a logging tool, not medical advice. It doesn’t diagnose or treat anything. Always talk to your pediatrician about your baby. See our Terms of Use & Medical Disclaimer.

Who we are

First Bites is made by Data Hound Tech LLC (“we,” “us”), a small independent developer in Phoenix, Arizona, USA. This policy covers the First Bites website (firstbites.traqqit.com), the installed web app, and the Android app. You can reach us at alex@datahoundtech.com.

What First Bites is

First Bites is a tool for parents and caregivers to track an infant’s first foods and allergen introduction. It is not directed to children. Adults use it on a child’s behalf.

What we store, and where

On your device (default): the foods, feedings, reactions, notes, baby name/birthday and app preferences you enter are saved in your browser’s local storage on your device. If you never create an account, this data never leaves your device, and we can’t see it.
If you create an optional account: the same data is also stored on our server, so it can sync across your devices and to family members you invite. To sign you in, we store your email address and a securely hashed password. We keep no other personal profile.
Family sharing: if you create or join a family, the people in that family can see the shared babies and feedings. An activity feed shows which member logged each entry, by email address.

The baby’s name and birthday are optional. A nickname works fine. The birthday is used only to show age-appropriate information.

Data inventory

What	Where it’s kept	Why	How long	Who else sees it
Baby profile: name or nickname and birthday (both optional)	Your device. Also our server if you sign in.	Age-based guidance; telling twins apart	Until you delete it, reset the app, or delete your account	Family members you invite
Feeding log: foods, dates and times, reactions, “how’d it go,” notes, custom foods, want-to-try list	Your device. Also our server if you sign in.	Your log, food board, allergen windows, nutrients, plans and reports	Until you delete it, reset the app, or delete your account	Family members you invite
App settings: theme, quiet warnings, banner dismissed, terms agreed	Your device only	Remembering your choices	Until you clear the app’s storage	No one
Account: email address and hashed password (never the password itself)	Our account server, shared by traqqit apps	Signing in, syncing, password-reset emails	Until you delete your account	No one. Family members see your email only as “who logged it.”
Sign-in token	Your device	Keeping you signed in	Until you sign out or it expires	No one
Family membership: which family you’re in, your email in its member list, “who logged it” on entries	Our server and family members’ devices	Sharing and the activity feed	Until you leave the family or delete your account (see Deleting your data)	Members of that family
Usage analytics: page views, referring site, browser, OS, device type, screen size, language, approximate location (country/region/city)	Our self-hosted analytics server	Counting visits and finding problems	Kept as aggregate statistics. No cookies, and IP addresses are not stored.	No one
Server security logs: IP address, time, page or API requested, browser type	Our servers	Security, abuse prevention and fixing errors	Deleted automatically, usually within about 7 days	No one
Data requests you send us: email, request type, details	Our server and email inbox	Handling your request	Deleted within 30 days after we complete the request	No one

How we use information

To run the app: show your log and views, sync your devices, and share with the family members you choose.
To run your account: sign you in, and send password-reset and essential service emails. We don’t send marketing email from First Bites.
To keep things secure and working: prevent abuse, fix bugs, and understand in aggregate which features get used.
To follow the law and respond to your requests.

We don’t use your data or your baby’s data for advertising or profiling. We don’t sell it, and we don’t use it to train AI models.

Analytics

We use Umami, an open-source analytics tool that we host ourselves at stats.traqqit.com. No third-party analytics company receives your data.

Cookieless. It sets no cookies and stores nothing on your device.
It records page views and general information about each visit: the page, the referring site, your browser, operating system, device type, screen size and language.
It works out an approximate location (country, region and city) from your IP address when you visit. The IP address itself is not stored. To count unique visitors without cookies, it uses a one-way hash that changes regularly and can’t be turned back into your IP address.
Analytics never includes what you log about your baby.
No cross-app or cross-site tracking. Each traqqit app is counted separately, and we don’t combine it with data from anywhere else.

Family members you choose. Anyone you give your family invite code or link to can see and edit that family’s babies and feedings.
Service providers who run our infrastructure. Our servers are virtual servers we rent from Hostinger, which also delivers our emails (such as password resets). Our support inbox (alex@datahoundtech.com) is hosted by Google Workspace, so emails and data requests you send us are stored there. They process data only to provide those services to us.
When the law requires it. We may disclose information to comply with a valid legal process, or to protect someone’s safety. Where allowed, we’ll tell you first.
If First Bites changes hands. If the app is sold or transferred, your data would move with it and stay protected by this policy, and we’d let you know first.

What we do NOT do

No advertising, and no ad trackers.
No selling or renting of your data to anyone. No “sharing” for cross-context behavioral advertising.
No cookies for tracking. Analytics are cookieless and aggregate (see above).
No third-party advertising, social, or profiling SDKs.

Health & children’s data

You, the caregiver, enter the information in First Bites, and it’s about your child’s feeding. That can include health-related information, such as reactions. We treat all of it as sensitive. It is not sold, not used for advertising, and not shared beyond the family members you choose. First Bites is a logging tool and is not medical advice. Always consult your pediatrician.

Not directed to children. First Bites is for adults (18+). It is not directed to children under 13, and children should not create accounts or use it.
Information about an infant is entered by a parent or caregiver. We don’t collect anything directly from children, and we don’t knowingly collect personal information from children under 13. If you believe a child has created an account or given us information, email us and we’ll delete it.
Residents of Washington, Nevada and other states with consumer health data laws: see our Consumer Health Data Privacy Policy.

Security

All traffic to First Bites and our account server is encrypted in transit with HTTPS (TLS).
Passwords are stored only as secure one-way hashes. We never see or store your actual password.
Access rules on the server limit a family’s data to its members. Your invite code works like a key, so share it carefully.
Synced data is not end-to-end encrypted, so we, as the operator, can technically access it on our server. We access it only when we need to run the service, fix a problem you report, act on your request, or meet a legal obligation.
Data on your device is protected by your device’s own security. Anyone who can use your unlocked phone or browser can open the app.
No system is perfectly secure. If a breach affects your personal or health information, we’ll notify you, and regulators where required, as the law requires (including the FTC’s Health Breach Notification Rule where it applies).

How long we keep data

On your device: until you delete it (⚙️ Settings → Reset this device), clear the app’s storage, or uninstall.
Account and synced data: kept until you delete it or delete your account.
Backups: our servers are backed up for disaster recovery (our own daily backups are encrypted, and our hosting provider also keeps weekly server snapshots). Data you delete may stay in those backups for up to 60 days until they’re overwritten. We don’t restore deleted data from backups, except to recover from a disaster. If that happens, we delete your data again.
Security logs: usually deleted automatically within about 7 days.
Data-request forms: deleted within 30 days after we complete the request.
Emails you send us: kept as long as needed to help you. Ask and we’ll delete them.

Your choices & rights

Access and export: everything you’ve logged is visible in the app. To download a copy, go to ⚙️ Settings → 📄 Doctor report & CSV export and save a CSV or PDF. You can also ask us for a copy of the account data we hold.
Correct: edit or delete any entry, baby or custom food in the app.
Delete: delete individual entries, reset the device, or delete your account (see below).
Stop syncing: sign out at any time. The app keeps working on your device.

U.S. state privacy rights. Depending on where you live, you may have legal rights over your personal information. Examples include California (CCPA/CPRA), Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Washington and Nevada. These can include the right to know what we collect and to access, correct, delete or get a copy of it. You may also have the right to opt out of sale, “sharing” for targeted advertising, or profiling. We don’t sell or share personal information and don’t profile you, so there is nothing to opt out of. We honor Global Privacy Control signals anyway.

We extend these rights to every user, whether or not a particular law applies to us. We will never treat you differently for using them.

How to make a request. Use the request form or email alex@datahoundtech.com. We’ll verify that the request comes from the account holder, usually by emailing the account’s address. We’ll respond within 30 days, or tell you if we need more time as the law allows. An authorized agent may make a request for you with your written permission. If we decline your request, you can appeal by replying to our decision. If you’re still unsatisfied, you can contact your state attorney general.

Deleting your data

Local data: in the app, open ⚙️ Settings → Reset this device to erase everything on the device. The Android app stores its data in your browser (usually Chrome). To make sure it’s gone after uninstalling, also clear site data for firstbites.traqqit.com in your browser settings.
Your account & synced data: in the app, open 👤 Account → Leave family or delete account → Delete account (or ⚙️ Settings → Delete account & data). You can also do it on the web, without the app, at firstbites.traqqit.com/delete-account.html. Either way permanently deletes your account, the families you created (with their babies and feedings), and your family memberships from our server. Your login is shared across traqqit apps, so it is deleted for all of them.
Can’t sign in? Use the request form or email us, and we’ll verify and complete your request within 30 days.
Shared families: if you were a member of a family someone else created, that family’s log stays with them. We remove your email from its member list and from the entries you logged. Details are on the delete-account page.

Third parties

The app is hosted on our own servers, which run on Hostinger virtual private servers. Analytics use our self-hosted Umami instance. Our support inbox is hosted by Google Workspace, so emails and data requests you send us are stored there. The app’s font is served from our own server. We don’t use third-party advertising, social, or profiling SDKs. Links to outside sources (such as the AAP or FDA) take you to sites with their own privacy policies.

First Bites has no paid features and doesn’t process payments. If you buy a subscription for another traqqit app with the same login, Stripe processes the payment, under that app’s terms.

Where we operate

We’re based in the United States, and First Bites is intended for U.S. users. If you use it from somewhere else, your information will be handled under this policy on our U.S.-operated service.

Changes

If this policy changes, we’ll update this page and the “last updated” date. If a change is significant, we’ll also tell you in the app before it takes effect.

Contact

Questions or data requests: alex@datahoundtech.com, or use the request form. Data Hound Tech LLC, Phoenix, Arizona, USA.

First Bites is provided for general education and personal tracking. It is not a medical device, does not diagnose, treat, cure, or prevent any medical condition, and is not a substitute for professional medical advice. See the Terms of Use & Medical Disclaimer.