Privacy policy
Last updated 4 November 2026. Applies to the Munch Mirror app, currently available for iPad, and to munchmirror.com.
Munch Mirror is built so that nothing about your child needs to leave the device it runs on. There is no account, no profile and nothing that identifies them. This page says exactly what the app and this website do today, and what we promise about anything we add later.
The short version
- Nothing about your child is collected by us, stored by us or shared. There are no accounts, sign-in or profiles.
- The camera is a live mirror. Nothing is recorded unless a grown-up switches recording on, and today the app has no recording feature at all.
- Today the app sends nothing anywhere. The only network traffic is the optional phone remote on your own local Wi-Fi.
- A picture is saved only when you or your child choose to keep one of what they made, and only to your own Photos library.
- No advertising, no selling or sharing of data, and no third-party trackers. That does not change.
What the app uses on the device
Camera and face tracking
The front camera shows the child their own face and, in face paint mode, Apple's ARKit face tracking places the design on their face. Camera frames and face tracking data are processed on the device in real time and discarded immediately. They are not stored, do not leave the device, and are never used for identification. The app does not use face data for any purpose other than drawing the design in the mirror.
Scene mode
Scene mode uses on-device person segmentation so that scenery can sit behind and in front of the child. The same rules apply: frames are processed live and discarded.
Photos
When your child reaches their goal, you or they can choose to save a picture of what they made. The app asks for permission to add to your Photos library at that moment, and it can only add pictures, not read them. If nobody chooses to save a picture, the app never touches Photos.
Local network
The phone remote is a small web page that the iPad serves over your local Wi-Fi network. Opening it needs the one-time code shown in the QR on the setup screen, which changes every time the app launches. iPadOS asks for Local Network permission the first time. The remote carries only the meal's progress and the steps you tap. It never uses the internet.
What the app stores on the device
The app keeps a few small things in its own storage on the device. None of it leaves the device unless you choose to export or share it.
| What | Why |
|---|---|
| Your settings | The activity, design, goal and options you chose last time, so setup is quick. |
| The sticker book | A record of each meal: the activity, the goal, how many steps were taken, when the meal started and how long it lasted, and the optional carer check-in rating if you fill it in. No names, no images and no food other than any food names you type in yourself. |
| Signal logs (off by default) | If you switch on logging in the carer settings, the app saves a file of face-tracking numbers (how open the mouth is, and so on) along with the steps you registered. It contains no images or video. It exists so bite detection can be tuned, and it only goes anywhere if you export it yourself through the share sheet. |
The sticker book can be exported as a CSV file from the setup screen. Deleting the app deletes everything above.
What the app does not do today
- It does not connect to any server run by us or by anyone else.
- It does not include analytics, crash reporting or advertising SDKs.
- It does not ask for your name, email address, location or contacts.
- It does not sell, share or transfer any data, because it has none.
The app includes two open-source libraries, FlyingFox (the local web server for the remote) and ConfettiSwiftUI (the confetti). Neither collects data or makes outbound connections.
What we promise about what comes next
Three things are on the roadmap that would change the list above. Here is how each will work if we build it, so that you can hold us to it.
Learning which features help
We would like to know which activities and goals families actually use, so that we can improve the app. If we add this:
- It will be switched off by default, with an opt-in in the carer settings.
- It will be anonymous counts about the app: which activity and goal kind were chosen, whether the phone remote was used, whether a meal reached its goal or ended early. Nothing about your child, no food names, no images, no face data, and no identifier that follows you across reinstalls.
- This page and the App Store privacy label will describe it before the version that includes it is released.
Recording for a feeding therapist
A future version may let a carer record a meal to share with their child's feeding therapist. If we add this:
- Recording will be off unless a grown-up turns it on for that meal, with explicit consent each time.
- A clear indicator will be on screen for the whole recording.
- You will choose who it goes to, and you will be able to delete it.
- This page will describe it in full before it is released.
Extra designs and scenes to buy
To fund development, a future version may offer extra face paint designs and scenes as in-app purchases. If we add this:
- Purchases will go through Apple's App Store. We never see your payment details, and Apple's own privacy policy covers the transaction.
- The shop will sit behind the grown-ups' gate, with no prices, adverts or prompts to buy anywhere a child can reach from the mirror.
- Buying something will not create an account or send us anything about your child.
Things we will not do
- Show advertising.
- Sell or share personal data.
- Track you across other apps or websites.
- Collect anything that identifies a child.
Children
Munch Mirror is made for grown-ups to use with children at the table. It is not directed at children on their own, it does not collect personal information from children, and it contains no third-party content, links or purchases that a child could reach from the mirror screen. Anything a grown-up can buy will stay behind the grown-ups' gate. Any future feature that sends data will be anonymous or will need a grown-up's explicit consent, as described above.
This website
munchmirror.com is a static website hosted by Vercel. It uses Vercel Web Analytics to count page views and see which pages and countries visitors come from, so that we can tell what on the site is useful. This sets no cookies, stores nothing on your device, does not identify you, and does not follow you to other sites. Vercel's servers may also keep standard request logs (such as IP addresses and the pages requested) for a short period to run and secure the service. If you email us, we keep your message so that we can reply.
Changes to this policy
If the app changes what it does with data, this page will be updated before that version is released, and the date at the top will change. The promises above are the ones we intend to keep whatever we add.
Contact
Munch Mirror is made by Good Chap Labs. Questions about privacy can be sent to hello@munchmirror.com.