Privacy policy

Neurobite is an educational nutrition and feeding companion for families and professionals supporting children with autism and ADHD. It is available as a website at neurobite.org and as an Android app that runs the same secure experience.

Neurobite does not diagnose, screen for or treat any condition. Nothing in the app replaces advice from your care team.

Account data: your email address, and the name, country, bio and avatar you choose to add.

Child and health data you enter: child profiles, food preferences and refusals, sensory notes, daily food, mood, sleep, bowel and symptom logs, growth measures, goals, and supplement or medication reminders.

Community content: posts, replies, likes and follows, visible only to signed-in members.

Billing data: subscription status and billing country. Card details are entered directly with Stripe and never reach our servers.

Technical data: basic request logs and error reports needed to keep the service secure and working.

No advertising identifier, no Android Advertising ID, and no cross-app tracking.

No precise or background location. Country is an optional text field only.

No contacts, call logs, SMS, installed-app list, or device identifiers used for profiling.

No microphone or camera access unless you explicitly pick a photo to upload.

To run the features you ask for: saving child profiles and tracker entries, generating feeding plans and meal ideas, showing your progress reports, and delivering reminders.

To operate your account, subscription and support requests.

To keep the service secure, prevent abuse and fix faults.

We do not sell personal data, and we never use health data to target advertising.

Child and health entries are treated as sensitive data. They are stored against your own account, protected by row-level database rules so that only you — and administrators acting on a support request — can read them.

AI-assisted features send only the profile details needed to produce the requested plan, are used solely to generate your result, and are not used to train third-party models.

Health data is never shared with advertisers, data brokers or analytics networks.

The Android app requests no runtime permissions at install time. Internet access is the only capability it needs.

Photos are chosen through the Android photo picker, so the app receives only the single image you select — it never gains access to your whole gallery.

Notifications, if you enable reminders, use the Android 13+ notification permission and can be switched off at any time in system settings.

All traffic uses HTTPS/TLS with cleartext network traffic disabled, and the app is verified against neurobite.org through Android Digital Asset Links.

Data is encrypted in transit and at rest, and the app is covered by Google Play's Data safety declarations kept in step with this policy.

Cloud hosting and database: our managed backend provider, in the EU.

Payments: Stripe, for subscription billing and receipts.

Email: our transactional email provider, for account, receipt and support messages.

Each processor receives only the data needed for that task and is bound by a data processing agreement.

We keep your data for as long as your account exists. Delete your account and everything tied to it — profiles, logs, posts and uploads — is removed within 30 days, except records we must keep for tax or fraud-prevention reasons.

Under GDPR and UK GDPR you can access, correct, export, restrict or erase your data, and object to processing. Email us and we will respond within one month.

You can also complain to your national data protection authority.

Neurobite is designed for adults — parents, caregivers and clinicians — who enter information about the children in their care. It is not directed at children and we do not knowingly create accounts for them.

Because caregivers enter data about a child, we treat that content with the strictest protection available in the app and never use it for advertising, profiling or recommendations outside your own account.