Privacy policy
Last updated: September 16, 2026
1. Data controller
Lexa — Axel Leclercq, sole trader (entrepreneur individuel), France
SIRET: 841 864 341 00026 · RCS Évry: 841 864 341
15 rue Séverine, 91380 Chilly-Mazarin, France
Email: feedo@lexa.bzh
Feedo is published by a single person. There is no data protection officer (DPO) and no formal impact assessment — the current scale of the service doesn't call for either.
2. Data we collect
Feedo only collects what's needed to track a child's feeding:
- Account — email address, used for authentication.
- Tracked child — first name, date of birth, sex.
- Feedings — timestamp, type (bottle or breastfeeding), volume and content or per-side durations, and who logged the entry.
- Shared access — who has access to a child, their role, and an append-only log of arrivals, departures and revocations.
We do not collect: location data, address-book contacts, or advertising data, and we don't show any ads.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Running the service (logging, sharing, timeline) | Performance of a contract |
| Security, preventing unauthorized access | Legitimate interest |
| Responding to your requests | Legal obligation |
4. Data sharing
We use a single processor: Supabase, for database hosting and authentication, on infrastructure located in the European Union. No data is sold, none is shared for advertising purposes, and Feedo uses no third-party analytics or tracking tools.
5. Retention
Data is kept for as long as your account is active. A deleted feeding is first soft-deleted, then permanently purged.
A child's data is only purged once their last remaining parent leaves the child's profile. You can delete your account directly from the app at any time.
6. Security
Access control is enforced directly in the database (Postgres Row Level Security), not just in the app: someone without access to a child sees none of that child's data. Traffic is encrypted in transit.
7. Your rights
Under GDPR, you have the right to access, rectify, erase, and port your data (export it from the app), plus the right to object and to restrict processing.
To exercise these rights, write to feedo@lexa.bzh.
8. Accounts and age
Creating an account is reserved to adults responsible for the child being tracked. The child does not have their own account: their data is entered and managed by their parents, or by people the parents authorize.
9. A note on health data
An infant's feeding information can be sensitive. We handle it with the same care as health data, even though the service's current scale doesn't require certified health-data hosting (HDS).
10. Changes
This policy may evolve with the service. Any significant update will be reflected on this page, with its date.
11. Contact
Questions about your data? feedo@lexa.bzh.