Privacy policy
Last updated: October 1, 2026
1. Data controller
Lexa — Axel Leclercq, sole trader (entrepreneur individuel), France
SIRET: 841 864 341 00026 · RCS Évry: 841 864 341
15 rue Séverine, 91380 Chilly-Mazarin, France
Email: feedo@lexa.bzh
Feedo is published by a single person. There is no data protection officer (DPO) and no formal impact assessment — the current scale of the service doesn't call for either.
2. Data we collect
Feedo only collects what's needed to track a child's feeding:
- Account — email address, used for authentication.
- Tracked child — first name, date of birth, sex.
- Feedings — timestamp, type (bottle or breastfeeding), volume and content or per-side durations, and who logged the entry.
- Shared access — who has access to a child, their role, and an append-only log of arrivals, departures and revocations.
- Feedback (optional) — only if you send a problem report or a suggestion from the app: your text, any screenshots you choose to attach, technical information (app version, device model and operating system, language, time zone, network status, number of entries waiting to sync), your pseudonymous account identifier, and your email address if you tick the box offered for that purpose.
We do not collect: location data, address-book contacts, or advertising data, and we don't show any ads.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Running the service (logging, sharing, timeline) | Performance of a contract |
| Security, preventing unauthorized access | Legitimate interest |
| Handling the feedback you send (fixing problems, improving the service) | Legitimate interest; consent for sharing your email |
| Responding to your requests | Legal obligation |
4. Data sharing
Supabase hosts the database, authentication, and the screenshots attached to feedback, on infrastructure located in the European Union.
GitHub (GitHub, Inc., United States) only receives the feedback you choose to send: text, technical information, pseudonymous identifier and, if you agreed, your email. Screenshots stay with Supabase in the European Union; the feedback only contains a restricted-access link to them, valid for 90 days. This transfer outside the European Union relies on GitHub's certification under the EU–US Data Privacy Framework.
No data is sold, none is shared for advertising purposes, and Feedo uses no third-party analytics or tracking tools.
5. Retention
Data is kept for as long as your account is active. A deleted feeding is first soft-deleted, then permanently purged.
A child's data is only purged once their last remaining parent leaves the child's profile. You can delete your account directly from the app at any time.
Screenshots attached to your feedback are deleted along with your account. The text of a piece of feedback is kept on GitHub for as long as needed to handle it; write to us to have it erased.
6. Security
Access control is enforced directly in the database (Postgres Row Level Security), not just in the app: someone without access to a child sees none of that child's data. Traffic is encrypted in transit.
7. Your rights
Under GDPR, you have the right to access, rectify, erase, and port your data (export it from the app), plus the right to object and to restrict processing.
To exercise these rights, write to feedo@lexa.bzh.
8. Accounts and age
Creating an account is reserved to adults responsible for the child being tracked. The child does not have their own account: their data is entered and managed by their parents, or by people the parents authorize.
9. A note on health data
An infant's feeding information can be sensitive. We handle it with the same care as health data, even though the service's current scale doesn't require certified health-data hosting (HDS).
10. Changes
This policy may evolve with the service. Any significant update will be reflected on this page, with its date.
11. Contact
Questions about your data? feedo@lexa.bzh.