This Policy applies to information BeBa collects:

• In the App and through your interactions with the App.

• On our website at heybeba.com.

• In email and other electronic messages between you and BeBa.

Some of the information we collect, such as food logs and dietary details, may be considered “consumer health data” under certain state laws. Our Consumer Health Data Privacy Policy provides additional disclosures required by those laws, including the Washington My Health My Data Act and Nevada SB 370.

Important note about children: BeBa is designed for use by parents and caregivers who are 18 years of age or older. Children may not use the App directly. However, in order to provide our service, parents provide us with certain information about their children (such as a child’s first name, age, and the foods they eat). Section 9 of this Policy explains how we handle children’s information.

1. Information We Collect

We collect information in three ways: directly from you when you provide it, automatically from your device when you use the App, and from Apple and our subscription infrastructure providers in connection with your purchase. We do not purchase information about you from data brokers or other outside sources.

Account Information. When you create a BeBa account, we may collect:

• Your name;

• Your email address;

• Authentication information (such as a password, or an authentication token if you sign in with Apple or Google).

Child Profile Information. To personalize the App, we ask you to provide certain information about your child, such as:

• Your child’s first name or nickname;

• Your child’s date of birth or age;

• Dietary information, such as allergies, intolerances, restrictions, or preferences you choose to share.

You are not required to use your child’s real name; a nickname works equally well.

Food Log and Nutrition Data. The core function of the App is recording what your child eats. This includes food descriptions you type or dictate, and the nutrition information, scores, trends, and insights the App generates from those entries.

Product Scan Data. If you use the App’s scanning features, we collect the barcodes you scan and any images of product packaging or labels you capture, which we use to identify products and retrieve their nutrition and ingredient information.

Onboarding Responses. Answers you provide during setup (for example, what matters most to you about your child’s nutrition) that we use to personalize the App.

Purchase Information. If you subscribe to BeBa, your payment is processed by Apple through the App Store. We do not receive or store your credit card number. We receive limited information about your subscription (such as whether it is active, the plan type, and renewal status) from Apple and our subscription infrastructure providers.

Automatically Collected Information. When you use the App, we may automatically collect certain technical information, including your device type and model, operating system version, IP address, device and app identifiers, push notification tokens, App usage data (such as screens visited and features used), crash logs, and diagnostic information.

2. How We Use Artificial Intelligence

BeBa uses artificial intelligence to interpret the food descriptions you enter. When you log a meal, the text you enter (for example, “half a banana and some mac and cheese”) is sent to third-party AI service providers, such as OpenAI and Anthropic, to be parsed into structured food and nutrition data. Product scan images may be processed in the same way to identify products. We also use established nutrition databases, such as the USDA FoodData Central database, to look up nutrient values.

We send these providers only the information needed to perform these functions, and they process it on our behalf under contractual restrictions. Under our API agreements, these providers do not use data submitted through our integrations to train their AI models.

Nutrition values, scores, and insights generated by the App are estimates and may contain errors. They are provided for general informational purposes only and are not medical, dietary, or health advice. Always consult your pediatrician or a qualified healthcare provider with questions about your child’s nutrition, allergies, growth, or health.

3. Cookies and Similar Technologies

On our website, we may use cookies and similar technologies to remember your preferences, understand how visitors use the site, and improve your experience. In the App, we may use software development kits (SDKs) and similar tools that collect the technical information described in Section 1. Most browsers allow you to block or delete cookies; if you do, some parts of our website may not function properly.

We do not use your or your child’s personal information for third-party targeted advertising, and we do not permit third-party advertising networks to collect information through the App.

4. How We Use the Information We Collect

We use information that we collect about you or that you provide to us to:

• Provide, operate, and maintain the App, including generating nutrition scores, trends, and insights for your child;

• Personalize the App and the content we deliver to you;

• Process and manage your subscription;

• Send you service-related communications, such as updates to the App, changes to our terms, or important account information;

• Send you optional product and marketing communications, which you may opt out of at any time;

• Improve the design, content, and accuracy of the App, including the accuracy of our food recognition and nutrition data;

• Conduct research and analytics about how users interact with the App, using aggregated or de-identified data wherever possible;

• Investigate fraud, protect our legal rights, and enforce our Terms of Service;

• Comply with any court order, law, or legal process, including responding to any government or regulatory request; and

• Fulfill any other purpose with your consent.

Some information you provide, such as dietary and allergy details and information about your child, may be considered sensitive information under certain state privacy laws. Where required by law, we process such information only with your consent, which you provide when you enter the information into the App and request the features that rely on it. You may withdraw your consent at any time by deleting the information or your account.

If you do not want to receive promotional emails from us, you may opt out at any time by following the unsubscribe instructions in those emails or by contacting us at help@heybeba.com.

5. How We Disclose Your Information

We do not sell your personal information, we do not sell information about children, and we do not share personal information with third parties for targeted advertising. We may disclose personal information that we collect or that you provide as described below:

• Service Providers. We work with third-party companies that process information on our behalf to help us operate the App, including cloud hosting and database providers (such as Google Firebase), AI service providers (as described in Section 2), subscription and paywall infrastructure providers, and analytics and crash reporting providers. These providers are bound by contracts that limit their use of your information to performing services for us, and they are prohibited from using it for their own purposes.

• Legal Requirements. We may disclose information when we reasonably believe it is required by law or legal process, or to protect and defend the rights, property, or safety of BeBa, our users, or others.

• Business Transfers. If BeBa goes through a business transition, such as a merger, acquisition, or sale of all or a portion of our assets, your personal information will, in most instances, be part of the assets transferred. If that happens, the acquiring entity will be required to honor the commitments in this Policy or provide you notice and choices regarding your information.

• Aggregated and De-Identified Data. We may aggregate and de-identify information so that it no longer identifies you or your child, and use or share that information for research, analytics, and product improvement. We commit to maintaining such data in de-identified form and not attempting to re-identify it.

6. Data Retention

We retain your personal information only for as long as reasonably necessary to fulfill the purposes described in this Policy:

• Account, child profile, and food log data is retained for as long as your account is active, so that we can provide you with your child’s nutrition history and trends.

• When you delete your account, we delete the personal information associated with it, including your child’s profile and food logs, within thirty (30) days, except where a longer retention period is required by law or necessary to resolve disputes or enforce our agreements.

• Diagnostic and analytics data is retained for a limited period and then deleted or de-identified.

• AI processing data submitted to our AI service providers is subject to their limited retention periods for abuse monitoring and is not retained by them for other purposes.

We do not retain children’s personal information for longer than reasonably necessary to fulfill the purposes for which it was collected, and we never retain it indefinitely.

7. Your Choices and Rights

• Access and Update. You can review and update your account and child profile information at any time in the App’s settings.

• Delete Your Data. You can delete your account and associated data from within the App, or by emailing us at help@heybeba.com.

• Marketing Opt-Out. You may opt out of promotional communications at any time. We will still send you essential service communications.

• Notifications. You can manage push notification preferences in the App or your device settings.

8. State Privacy Rights

Depending on where you live, you may have rights under your state’s privacy laws, including comprehensive privacy laws in California, Colorado, Connecticut, Texas, Virginia, and other states, as well as consumer health data laws such as the Washington My Health My Data Act and Nevada SB 370. These rights may include the right to:

• Confirm whether we process your personal information and access a copy of it;

• Know the categories of personal information we have collected about you and your child, the sources, the purposes for collection, and the categories of third parties with whom it is disclosed;

• Correct inaccurate personal information;

• Delete personal information we have collected;

• Obtain a portable copy of your personal information;

• Opt out of the sale of personal information, targeted advertising, and certain profiling (note: BeBa does not sell personal information and does not engage in targeted advertising or profiling that produces legal or similarly significant effects); and

• Not face discrimination for exercising any of your rights.

Because we do not sell personal information or share it for targeted advertising, universal opt-out signals such as the Global Privacy Control do not change how we process your data; where required by law, we honor such signals as valid opt-out requests. Our website does not respond to browser “Do Not Track” signals, for which no uniform industry standard has been adopted.

To exercise any of these rights, email us at help@heybeba.com with “Privacy Rights Request” in the subject line. We will verify your request (typically by confirming control of the email address associated with your account) and respond within the timeframe required by applicable law, generally 45 days. If we decline to take action on your request, you may appeal our decision by replying to our response with “Appeal” in the subject line, and where applicable, you may contact your state Attorney General.

For additional disclosures regarding consumer health data, please see our Consumer Health Data Privacy Policy.

9. Children’s Privacy

BeBa is intended for use by parents and caregivers who are at least 18 years old. The App is not directed to children, children are not permitted to create accounts or use the App, and we do not knowingly collect personal information directly from children under 13. If we learn that we have collected personal information directly from a child under 13, we will delete that information promptly.

As a core part of our service, parents and legal guardians provide us with information about their children, such as a child’s first name or nickname, age or date of birth, dietary details, and food logs. By providing this information, you represent that you are the child’s parent or legal guardian (or have the parent or guardian’s permission) and you consent to our collection and use of this information as described in this Policy.

We treat children’s information with heightened care:

• We use it solely to provide and improve the App’s features for you;

• We do not sell it, use it for advertising of any kind, or make it public;

• We disclose it only to the service providers necessary to operate the App, as described in Section 5;

• We retain it only as described in Section 6; and

• You may review, update, or delete your child’s information at any time through the App, or by emailing help@heybeba.com.

10. Data Storage; Users Outside the United States

We store your personal information on our servers and the servers of third-party service providers, located in the United States. The App is intended for users in the United States. If you access the App from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where privacy laws may differ from those in your jurisdiction.

11. Data Security

We maintain a security program with measures designed to protect your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. These measures include encryption of data in transit, access controls limiting who can access personal information, and secure cloud infrastructure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The safety of your account also depends on you. Please keep your login credentials confidential and notify us immediately at help@heybeba.com if you believe your account has been compromised.

12. Changes to This Privacy Policy

We may update this Policy from time to time. When we do, we will change the “Last Updated” date at the top of this Policy. If we make a material change that affects how we use your or your child’s personal information, we will provide a more prominent notice, such as an in-App notice or an email, and where required by law, we will obtain your consent before applying material changes to previously collected information.

13. How to Contact Us

Email: help@heybeba.com

For questions about this Policy or the information you have submitted to us, please email us with “Privacy” in the subject line.