Privacy Policy

Last updated: July 28, 2026 · Applies to the Minuka mobile app and the minuka.app website.

This Privacy Policy explains what personal information Minuka (“Minuka”, “we”, “us”, “our”) collects, how we use it, who we share it with, and the choices and rights you have. Minuka is a food-label companion app that helps parents and caregivers understand packaged foods for children aged 0–12. It is made for adults, not for use by children directly.

By creating an account or using Minuka, you agree to this Policy. If you do not agree, please do not use the app.

1. Who we are (Data Controller)

The controller responsible for your personal information is:

Maoz Group
Contact us at the address below and we will provide our registered postal address on request.
Email: minuka.app@gmail.com · Support: minuka.app@gmail.com

2. Information we collect

We collect only what we need to run Minuka. This falls into the following categories:

a. Information you give us

CategoryExamples
Account detailsYour name, email address, and password (passwords are handled by our authentication provider and stored only in hashed form — we never see your plain password).
Child profileYour child’s first name, date of birth or age band, and any foods or allergens you ask Minu to watch for. You provide this — it helps tune answers to your child’s age.
Scans & food logProducts you scan (barcodes, typed ingredients, or photos of labels/products you take), the results Minu shows, items you mark as “eaten”, and timestamps.
Questions to MinuThe questions you type in the in-app chat, so Minu can answer them.
PreferencesYour goals (“what brings you”) and notification settings.
FeedbackIf you cancel, we may store the reason you select. This is stored without your identity attached.

b. Information collected automatically

  • Basic technical & diagnostic data — such as app version, device type, operating system, and crash/error logs, used to keep the app working and secure.
  • Minuka does not use third-party advertising or cross-app tracking, and does not build advertising profiles.

c. Purchases

Subscriptions are processed by Apple or Google through their in-app purchase systems. We receive your subscription status (active / expired) so we can unlock the app. We never receive or store your card or bank details — those stay with Apple or Google.

3. How we use your information & our legal bases

Where the EU/UK GDPR applies, we rely on the legal bases shown below.

Why we use itLegal basis (GDPR)
To create and run your account and provide the app’s featuresPerformance of a contract
To tune answers to your child’s age and flag the allergens you setPerformance of a contract; and your explicit consent for information about your child and any allergy/health details (which may be “special-category” or “sensitive” data), which you can withdraw at any time
To send account emails (e.g. email verification)Performance of a contract
To send optional weekly reminders/notificationsYour consent (you can turn these off at any time)
To keep the app secure, prevent abuse, fix bugs, and improve featuresOur legitimate interests
To meet legal obligationsCompliance with a legal obligation

Providing account and child information is optional, but the app cannot personalise its answers without it. You can withdraw consent at any time by editing or deleting the information in the app (this does not affect processing that already took place).

Automated processing

Minuka uses automated processing to produce its results — for example, turning label information into an age-based summary and highlighting things to watch. These results are informational only: they do not produce legal effects or similarly significant effects concerning you, and we do not make solely automated decisions about you within the meaning of Article 22 of the GDPR. You remain in control of every choice about your child’s food.

4. Who we share it with

We do not sell your personal information, and we do not share it for advertising. We share it only with service providers who help us run Minuka, under contracts that require them to protect it and use it only on our instructions (“sub-processors”):

ProviderWhat it doesWhat it may process
SupabaseAccount sign-in and secure database hostingAccount details, child profile, scans and food log
OpenAITurns scan findings into Minu’s plain-language answers, reads text from label photos, and powers the chatYour child’s first name, the ingredient findings, label text/photos, and your typed questions — we send only what is needed for the answer
Apple / GoogleApp distribution, payments, and push notificationsSubscription status; device push token
ResendSends account emails such as verificationYour email address
VercelHosts the website and app servicesTechnical/connection data
ExpoDelivers push notifications (such as the optional weekly reminder)Device push token

We may also disclose information if required by law, to protect our rights or the safety of others, or as part of a business transfer (e.g. a merger), with notice where required.

Product lookups (e.g. matching a barcode) may query public food databases such as USDA FoodData Central, Open Food Facts, or UPCitemdb. In these lookups we send only the barcode number — never your child’s name, age, profile, food log, account details or photos. Most barcodes are answered from a copy of these databases held on our own servers, so no lookup leaves them at all; UPCitemdb is used only when a barcode is in none of them.

5. International data transfers

Some of our providers (for example, OpenAI) are based in the United States, so your information may be processed outside your country, including outside the EU/UK. Where we transfer personal data internationally, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum), or another lawful transfer mechanism.

6. How long we keep it

  • We keep your account and family information for as long as your account is active.
  • When you delete your account in the app, we delete your account and its associated data from our systems, and instruct our providers to do the same. Some information may remain in secure backups for a limited period before being overwritten.
  • Anonymous cancellation feedback is kept in aggregate and cannot be linked back to you.
  • We may retain limited information where the law requires it (for example, records related to a transaction).

7. How we protect your information

We use technical and organisational measures to protect your information, including encryption in transit, access controls, and storing data in secured accounts. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Your rights

If you are in the EU, UK, or a similar region (GDPR)

You have the right to: access your information; correct it; delete it; restrict or object to how we use it; receive a copy in a portable format; and withdraw consent at any time. You can do much of this directly in the app (edit or delete your profile, children, and account). To make any other request, email minuka.app@gmail.com. You also have the right to complain to your local data protection authority.

If you are in California (CCPA/CPRA)

You have the right to know what personal information we collect and how we use it; to request access to, correction of, or deletion of your information; and to not be discriminated against for exercising these rights. We do not sell or “share” your personal information (as those terms are defined under California law), and we do not process it for cross-context behavioural advertising. To exercise a right, use the in-app controls or email minuka.app@gmail.com. We will verify your request through your account before acting on it.

The categories of personal information we collect are described in Section 2, the purposes in Section 3, and the recipients in Section 4.

9. Children’s privacy

Minuka is designed for parents and caregivers (adults). It is not directed to children, and we do not knowingly collect personal information directly from a child. Information about a child (their first name, age, and allergens) is provided by the parent or caregiver to personalise the app, and the parent controls it — you can view, edit, or delete it at any time in the app.

If you believe a child has created an account or provided us personal information directly, please contact minuka.app@gmail.com and we will delete it. We comply with the U.S. Children’s Online Privacy Protection Act (COPPA) and applicable children’s-data rules such as the UK Age Appropriate Design Code.

10. The website

The minuka.app website is informational. It does not use advertising or third-party tracking cookies.

11. Changes to this Policy

We may update this Policy from time to time. If we make a material change, we will update the “Last updated” date and, where appropriate, notify you in the app or by email. Your continued use of Minuka after an update means you accept the revised Policy.

12. Contact us

Questions or requests about this Policy or your information: minuka.app@gmail.com.

Minuka — a gentle helper for your family’s food. 💚  ·  Home  ·  Terms of Service  ·  Support