Privacy Policy

Last updated: July 4, 2026

Fruutium is a nutrition-education app for families. It is designed to be set up and managed by a parent or legal guardian (the “account holder”). This policy explains what information we collect, why we collect it, how it is protected, and the choices and rights you have — with particular care for the data of children.

Who controls the account

When you create a Fruutium account you confirm that you are at least 18 years old and are the parent or legal guardian of any child profile you add. Children do not create their own accounts. All family profiles live inside, and are controlled by, the guardian’s single account.

Information we collect

We collect only what the app needs to work:

Guardian account — your email address and a display/family name (used to sign you in and label your account). Authentication is handled by Google Firebase.
Family member profiles — for each member you add: a first name or nickname, an age, and an avatar (an emoji or an image you optionally upload).
Learning progress — gameplay and education data such as XP, Honey Points (an in-app reward currency with no monetary value), streaks, completed lessons, achievements, and cosmetic items.
Optional parental lock PIN — if you set a 4-digit PIN to gate the adult area, it is stored only as a one-way Argon2id hash. We never store the PIN itself.
Notification preferences — your in-app toggles for reminders and updates.
Meal plans (if you use the planner) — the recipes you pick for the week and the grocery list we generate from them, stored under your account. This is parent-level data only. It never includes a child’s name, age, or other personal information. Deleting your account deletes it too.

We ask for a child’s age, not a full date of birth, and only to assign an age-appropriate learning track. We do not collect a child’s precise location, contacts, photos beyond an optional avatar, or any persistent advertising identifier.

What we do NOT do

We do not sell or rent your or your child’s personal information.
We do not use third-party advertising or behavioral ad tracking (no Google Analytics, no Meta Pixel, no advertising networks).
We do not send marketing email. The only emails we send are transactional — for example, address verification and password resets.
Children cannot spend real money in the app. The shop uses in-app Honey Points only.

Analytics on our public pages

Fruutium uses Cloudflare Web Analytics on our public marketing pages: the homepage, the recipe hub, our guides and blog, and these legal pages. It’s cookieless. It sets no cookies, collects no personal information, and does no cross-site or cross-device tracking or profiling. It only reports aggregate numbers, like how many people visited a page. It never runs on the signed-in family dashboard or anywhere your child uses the app; that part of Fruutium stays analytics-free.

How your data is stored and protected

Your data is stored in Google Cloud Firestore and access is governed by server-side security rules so that only your authenticated account can read or write your family’s data. Connections use HTTPS, and parental PINs are stored only as Argon2id hashes. Google (Firebase) acts as our data processor.

Parental consent

Before any child profile data is stored, we ask the account holder to confirm they are the child’s parent or guardian and to consent to this policy. We record that consent (and the policy version) on your account. You may withdraw consent at any time by deleting the relevant profile or your entire account (see below).

Your choices and rights

As the account holder you can, at any time:

Review and edit any family member’s information from the Dashboard or Settings.
Delete a child’s profile — removing their data from our servers — using the remove (trash) action on the profile.
Delete your entire account from Settings → Delete Account, which permanently erases your account and all family profiles and progress.
Request access or deletion by contacting us at fruutium@gmail.com.

We keep family data only for as long as the profile or account exists; when you delete it, it is removed from our database.

Changes to this policy

If we make a material change to how we handle children’s data, we will update the policy version and ask account holders to review and re-consent where appropriate.

Contact us

Questions, access requests, or deletion requests: fruutium@gmail.com.