Privacy Policy
Last updated 30 August 2026
This policy explains what personal data TotFuel collects, why we collect it, who we share it with, and the rights you have over it.
1. Who we are
TotFuel (“TotFuel”, “we”, “us”) operates this website and is the data controller for the personal data described in this policy. You can reach us at , or by post at United Kingdom.
2. The data we collect
Account data
Your name, email address and an encrypted (hashed) version of your password. We never store your password in readable form.
Baby and feeding data
If you create a baby profile we store the name or nickname you choose, the date of birth you enter, and the feeding records you log — the foods introduced, the dates, any allergen reactions and the notes you add. Some of this is information about a child’s health, so we treat it as sensitive and only process it because you have asked us to provide the tracker to you. You can delete a baby profile, and its records, at any time from your dashboard.
Payment data
Payments are handled by Stripe. We never see or store your card details. What we keep is the customer and subscription reference returned by Stripe, the plan you chose, the amount, and the dates your access starts and ends. If you pay without creating an account first, we use the email address you give Stripe at the checkout to create your TotFuel account and unlock it.
Technical data
Our servers keep standard logs: IP address, browser and device type, the pages requested and the time of the request. These are used to keep the service running, secure and free of abuse.
3. Cookies
We set essential cookies that are needed to log you in and keep your session secure — these cannot be switched off without breaking the site. Any optional cookies, such as analytics, are only set after you accept them in the banner shown on your first visit. Your choice is stored in your browser, and you can change it by clearing your browser storage for this site and choosing again.
4. Why we use your data, and our legal basis
| What we do | Legal basis (UK GDPR) |
|---|---|
| Create and run your account, give you access to the database, tracker, recipes and articles | Performance of our contract with you |
| Store the baby profiles and feeding records you enter | Your explicit consent, given by choosing to use the tracker; you can withdraw it by deleting the profile |
| Take payment, manage renewals, issue refunds | Performance of our contract, and our legal obligations (tax and accounting records) |
| Send service emails: password resets, payment links, receipts, changes to your access | Performance of our contract |
| Keep the site secure, prevent fraud and abuse, fix faults | Our legitimate interests in running a safe and reliable service |
| Understand how the site is used through optional analytics | Your consent |
We do not sell your personal data, and we do not use it to make automated decisions that have a legal or similarly significant effect on you.
5. Who we share it with
We share data only with the service providers we need to run TotFuel, and only as far as they need it:
- Stripe, our payment provider — to take payment and manage subscriptions.
- Hosting and infrastructure providers — to store the database and serve the site.
- Email delivery provider — to send the service emails described above.
- Analytics provider — only if you accepted optional cookies.
We may also disclose data where the law requires it, or to establish or defend legal claims. If our business is ever transferred to another owner, your data may transfer with it, and you would be told beforehand.
6. Transfers outside the UK
Some of our providers process data outside the UK or the EEA. Where that happens we rely on the safeguards permitted by UK data protection law — an adequacy decision for the country concerned, or standard contractual clauses with the provider. You can ask us for details of the safeguards that apply.
7. How long we keep it
- Account, baby profiles and feeding records — until you delete them, or until you close your account. When you delete your account we remove this data within 30 days.
- Payment and billing records — six years after the transaction, because tax law requires it.
- Payment link requests — up to 12 months if they do not lead to a subscription.
- Server logs — normally no more than 12 months.
8. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted, where we have no continuing reason to keep it;
- restrict or object to how we use it;
- receive your data in a portable format;
- withdraw consent at any time, without affecting what we did before you withdrew it.
You can do much of this yourself: edit your details on your profile page, delete a baby profile from your dashboard, or delete your whole account from the profile page. For anything else, email and we will respond within one month.
If you are not happy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk. We would appreciate the chance to put things right first.
9. Children
TotFuel is for parents and carers, and accounts are only for adults aged 18 or over. Children cannot create accounts. Data about a baby is only ever entered by the parent or carer who holds the account, and it stays under their control.
10. Security
Traffic to the site is encrypted, passwords are stored hashed, and access to the production database is restricted to the people who need it. No online service can promise perfect security, but if a breach ever affects your rights we will tell you and the ICO as the law requires.
11. Changes to this policy
If we change this policy we will update the date at the top of this page. If the change materially affects you, we will tell you by email or with a notice on the site before it takes effect.