Privacy Policy

Last updated: 26 August 2026

Plain-English summary: we collect the details you give us about your family so we can write your meal plans and bedtime stories, we send them to you by email, and we don't sell your data to anyone. You can ask us to delete everything at any time by emailing hello@nibbleandnod.com.

1. Who we are

Nibble & Nod ("we", "us") is a subscription service that sends families weekly meal plans and personalised children's bedtime stories. For any privacy question or request, contact hello@nibbleandnod.com.

2. What we collect

Account and contact details: your first name and email address.
Household details you provide: the number of adults and children in your home, your children's ages and first names, food allergies and intolerances, foods your children refuse, meals they already accept, dietary style, available cooking time, and your chosen delivery day.
Story personalisation details: your child's preferred story themes and any optional details you choose to add, such as a favourite toy or colour.
Optional feedback: the parenting challenge you select, anything you write in monthly check-ins, and any reply you send us.
Usage and billing information: whether emails were delivered and opened, which foods you have marked as accepted, and subscription status. Card details are handled by our payment processor and are never seen or stored by us.
Website visit information: when you browse this website, our advertising pixel records the pages you view along with your IP address, browser and device type, and an identifier stored in your browser. This is collected whether or not you go on to subscribe. See section 8, which explains what it is for and how to stop it.

We do not knowingly collect information directly from children. Everything about a child is provided by their parent or guardian, and it is limited to what is needed to write age-appropriate stories and safe meal plans.

3. Why we use it, and our legal basis

To provide the service you signed up for — generating and sending your meal plans and stories, and keeping allergy information out of your plans. (Performance of a contract.)
To communicate with you — welcome emails, trial reminders, monthly check-ins, and replies to your messages. (Contract and legitimate interest.)
To improve the service — reviewing aggregate quality and feedback. (Legitimate interest.)
To meet legal and tax obligations. (Legal obligation.)

We ask for your consent at signup before we begin sending you email. You can withdraw it at any time.

4. Who we share it with

We do not sell your personal information. We do use Meta's advertising pixel on this website, and under California law that may count as "sharing" personal information for cross-context behavioural advertising. Section 8 explains exactly what it collects and how to opt out. We never share the details you give us about your family — your children's names, ages, allergies or story preferences — with any advertising platform.

We use a small number of service providers to run the product, and they only receive what they need:

Tally — collects your signup, profile and check-in answers.
Google Sheets (Google LLC) — stores your family profile.
Make.com — moves data between these systems on a schedule.
Anthropic (Claude API) — generates your meal plans and stories from your profile. Anthropic does not train its models on data submitted through its commercial API.
Resend — delivers your meal plans and bedtime stories by email.
Stripe — manages your subscription and processes payments. Stripe collects and holds your card details directly; we never see or store them.
Netlify — hosts this website.
Meta Platforms — receives website visit information through the advertising pixel described in section 8, so we can measure our advertising and reach people who have visited this site. It does not receive your family profile.

Some of these providers are located in the United States, so your information may be processed outside Canada and may be accessible to authorities there under the laws of that country. We may also disclose information where required by law.

5. How long we keep it

We keep your profile for as long as you have an active subscription, and for up to 12 months after you cancel so that you can return without starting over. We keep billing records for as long as tax law requires. Ask us to delete your data sooner and we will, except for records we are legally required to retain.

6. Your rights

Depending on where you live, you have the right to access the personal information we hold about you, correct it, delete it, withdraw consent, ask for a copy in a portable format, and — in California — to know what we collect and to opt out of the sale or sharing of your information. We do not sell your information. We do share website visit information with Meta for advertising, and you can opt out of that at any time using the methods in section 8, or by emailing us. Canadian residents may also raise a concern with the Office of the Privacy Commissioner of Canada. To exercise any of these rights, email hello@nibbleandnod.com. We respond within 30 days and we will not treat you differently for asking.

7. Security

Access to your data is limited to the accounts needed to run the service, protected by strong passwords and multi-factor authentication, and API credentials are stored as encrypted variables rather than in plain text. No system is perfectly secure; if a breach ever affects your information, we will notify you and the relevant regulator as the law requires.

8. Cookies, tracking and advertising

Meta Pixel. This website uses the Meta (Facebook) advertising pixel, ID 1401179015298450. It runs on our home page, this page and our terms page. When you visit, it records that visit and sends Meta your IP address, your browser and device type, the page address, and an identifier stored in your browser. We use this for two things: to measure whether our advertising works, and to show ads to people who have visited this site. Meta may also use what it receives for its own purposes under its own data policy.

The pixel has an "advanced matching" setting enabled, which would transmit contact details such as an email address if you typed one into a form on this website. There are no forms on this website, so at present it has nothing to send. If we add one, this section will be updated before it goes live.

The pixel does not follow you into signup. It is not installed on the form where you enter your family's details, and it is not installed on the payment page. Your children's names, ages, allergies and story preferences are never sent to Meta.

How to stop it. Any of these work, and none of them affect your subscription:

Use a browser content blocker or privacy-focused browser — most block this pixel by default.
Turn on Global Privacy Control in your browser, which signals an opt-out request automatically.
Adjust what Meta shows you in your Facebook or Instagram Ad Preferences settings.
Block or clear third-party cookies in your browser settings.
Email hello@nibbleandnod.com and ask us to exclude you.

Everything else. We do not use any other analytics or advertising service. Our email provider records standard delivery and open events so we can tell whether your plan arrived. Fonts on this site are loaded from Google Fonts, which receives your IP address as part of that request.

9. Changes to this policy

If we make a material change we will update the date at the top of this page and email active subscribers before it takes effect.

10. Contact

Nibble & Nod — hello@nibbleandnod.com

This policy describes our actual practices in plain language.