Privacy Policy
Last updated: 5/31/2026
BabyPostal, Inc. ("BabyPostal," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the BabyPostal website and applications (collectively, the "Platform"). Please read this policy carefully. By using the Platform, you consent to the practices described herein.
1. Information We Collect
We collect the following categories of information: Account Information: When you create an account, we collect your name, email address, password, and optional profile details such as your profile photo, location, and preferred language. Baby Profile Information: When you add a baby profile, we collect the baby's name (or nickname), date of birth, and optionally gender and birth details. This information is used to personalize features like the Leap Guide and Baby Tracker. Baby Tracker Data: If you use the Baby Tracker, we store the feeding logs, sleep records, diaper changes, growth measurements, and milestone entries you create. This data is entered by you and stored in your account. Photos and Media: If you use Baby Albums, Marketplace listings, or Community posts, we store the photos and media you upload. Community Content: Posts, comments, and messages you share in the Community forums. Marketplace Data: Listing details, transaction history, payment information (processed by our third-party payment provider), shipping addresses, and communication between buyers and sellers. Wellness Journal Entries: If you use the Mom Wellness journal, we store the journal entries and mood logs you create. This data is private to your account. Device and Usage Information: We automatically collect device type, operating system, browser type, IP address, pages visited, features used, session duration, and referring URLs. Location Information: With your consent, we may collect approximate location data to provide localized Marketplace results, Safety Info, and Travel Planner features. Cookies and Tracking: We use cookies, local storage, and similar technologies as described in Section 8.
2. How We Use Your Information
We use the information we collect to: Provide and operate the Platform and its features, including the Marketplace, Baby Tracker, Leap Guide, Medical Corner, Community, Mom Wellness, Lullaby Songs, Bedtime Stories, Baby Games, Baby Albums, Family Travel Planner, and Safety Info. Personalize your experience, such as showing age-appropriate content in the Leap Guide based on your baby's date of birth. Process Marketplace transactions and facilitate communication between buyers and sellers. Send you account-related notifications, transaction updates, and important service announcements. Improve, develop, and optimize the Platform through analytics and usage patterns (in aggregate, not individually). Enforce our Terms of Service and Community Guidelines. Comply with legal obligations and respond to lawful requests from public authorities. With your consent, send you optional marketing communications about new features or relevant content. You can opt out at any time.
3. AI Features and Data
Several Platform features use artificial intelligence, including the Leap Guide, Medical Corner, Bedtime Stories, and contextual recommendations. When you interact with AI features: Your inputs (such as questions or prompts) are processed to generate responses. We may retain these interactions to improve the quality and safety of our AI features. We do not use your Baby Tracker data, wellness journal entries, or private photos to train AI models. AI-generated content (such as stories, developmental information, or general health information) is created algorithmically and may not be accurate. It is not a substitute for professional advice. We use commercially available large language models provided by third-party AI providers. Your interactions with AI features may be processed by these providers subject to their data processing agreements with us. We require these providers to maintain appropriate security and privacy protections and not to use your data for their own training purposes.
4. Children's Privacy
BabyPostal is designed for use by parents and caregivers, not by children directly. We do not knowingly collect personal information from children under the age of 13 (or the applicable minimum age in your jurisdiction). Baby profile information (name, date of birth) is provided by the parent or caregiver and is associated with the adult's account, not a child's account. Photos of children uploaded to Baby Albums or other features are stored under the parent's account and are private by default. If we become aware that we have collected personal information from a child under 13 without parental consent, we will promptly delete that information. If you believe a child has provided us with personal information without your consent, please contact us at privacy@babypostal.com.
5. How We Share Your Information
We do not sell your personal information to third parties. We may share your information in the following circumstances: With Other Users: Information you include in Marketplace listings, Community posts, and your public profile is visible to other users as intended by those features. With Service Providers: We share information with third-party service providers who help us operate the Platform, including cloud hosting (Vercel, AWS), database services (Back4App/Parse), payment processing, email delivery, and analytics. These providers are contractually required to protect your information and use it only for the services they provide to us. With AI Providers: As described in Section 3, interactions with AI features may be processed by third-party AI providers under data processing agreements. For Legal Reasons: We may disclose information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others. In Business Transfers: If BabyPostal is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change. With Your Consent: We may share information for other purposes with your explicit consent.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with the Platform's services. Specifically: Account and profile data is retained until you delete your account. Baby Tracker data, wellness journal entries, and Baby Album photos are retained until you delete them or delete your account. Marketplace transaction records are retained for a minimum of 3 years after the transaction for legal and dispute resolution purposes. Community posts may be retained after account deletion if they are part of ongoing conversations, but your name and profile information will be anonymized. Device and usage data is retained in aggregate form for analytics and may be retained for up to 24 months. After account deletion, we will delete or anonymize your personal information within 30 days, except where retention is required by law.
7. Data Security
We implement appropriate technical and organizational security measures to protect your personal information, including: Encryption of data in transit (TLS/SSL) and sensitive data at rest. Secure authentication and access controls for accounts. Regular security assessments and updates. Access to personal data is limited to authorized personnel who need it to perform their job functions. While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
8. Cookies and Tracking Technologies
We use the following types of cookies and similar technologies: Essential Cookies: Required for the Platform to function, including session management and authentication. These cannot be disabled. Analytics Cookies: Help us understand how users interact with the Platform so we can improve it. We use privacy-focused analytics that do not track users across websites. Preference Cookies: Remember your settings, such as language, theme (light/dark mode), and locale preferences. We do not use advertising or third-party tracking cookies. We do not participate in cross-site tracking or targeted advertising networks. You can manage cookie preferences through your browser settings. Disabling essential cookies may impair Platform functionality.
9. Your Rights and Choices
Depending on your jurisdiction, you may have the following rights regarding your personal information: Access: Request a copy of the personal information we hold about you. Correction: Request that we correct inaccurate or incomplete information. Deletion: Request that we delete your personal information, subject to legal retention requirements. Portability: Request a machine-readable copy of your data. Restriction: Request that we restrict processing of your data in certain circumstances. Objection: Object to processing of your data for certain purposes. Withdraw Consent: Where processing is based on consent, you may withdraw it at any time. To exercise these rights, contact us at privacy@babypostal.com or through the settings in your account. We will respond to your request within 30 days (or the applicable period required by law).
10. International Data Transfers
BabyPostal is based in the United States. If you access the Platform from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. For users in the European Economic Area (EEA), United Kingdom, or Switzerland: We rely on Standard Contractual Clauses approved by the European Commission and other appropriate safeguards to transfer data internationally. For users in other jurisdictions: We comply with applicable local data protection laws regarding cross-border data transfers.
11. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA): Right to Know: You may request details about the categories and specific pieces of personal information we have collected, the sources, the business purposes, and the categories of third parties with whom we share it. Right to Delete: You may request deletion of your personal information, subject to certain exceptions. Right to Opt Out of Sale: We do not sell personal information, so this right does not apply. Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights. To exercise these rights, contact us at privacy@babypostal.com.
12. European Privacy Rights (GDPR)
If you are in the European Economic Area, United Kingdom, or Switzerland, additional protections apply under the General Data Protection Regulation (GDPR): Legal Bases: We process your data based on: (a) your consent, (b) performance of a contract (our Terms of Service), (c) our legitimate interests (improving the Platform, preventing fraud), or (d) legal obligations. Data Protection Officer: For GDPR-related inquiries, contact us at privacy@babypostal.com. Supervisory Authority: You have the right to lodge a complaint with your local data protection authority if you believe we have not adequately addressed your concerns. Data Minimization: We collect only the data necessary for the purposes described in this policy.
13. Health and Wellness Data
Certain features of the Platform involve health-related and wellness-related information: Baby Tracker data (feeding, sleep, diaper, growth logs) is health-adjacent information that you enter voluntarily. We treat this data with heightened security measures. Mom Wellness journal entries and mood logs are sensitive personal data. This data is private to your account, encrypted, and never shared with other users or third parties. Medical Corner content is general health information, not personal health data. Your interactions with the Medical Corner (questions asked) are processed to provide responses but are not linked to your health records. We do not share health-related data with insurance companies, employers, or data brokers. We do not use health-related data for advertising purposes.
14. Payment Processing & Stripe
All monetary transactions on the Platform are processed by Stripe, Inc. ("Stripe"), a PCI DSS Level 1 certified payment processor. This includes credit pack purchases, Marketplace checkout, and seller payouts via Stripe Connect. What Stripe collects: When you make a purchase, Stripe collects your payment card number, expiration date, CVC, billing address, and email. This data is processed directly by Stripe and is subject to Stripe's Privacy Policy (https://stripe.com/privacy). What we store: We store only a reference to your Stripe customer ID, the last four digits of your card (for display purposes), transaction amounts, and timestamps. We never store your full card number, CVC, or complete billing details on our servers. For Marketplace sellers: If you use Stripe Connect to receive payouts, Stripe may collect additional identity verification information (such as government ID and bank account details) as required by financial regulations. This information is collected and stored by Stripe, not by BabyPostal.
15. Credits & Purchase Data
When you purchase credit packs on the Platform, we collect and store the following information: The credit pack selected, the amount paid, the date and time of purchase, and the Stripe transaction ID. Credit usage history, including the feature used (e.g., Bedtime Stories generation, Baby Albums export, Mom Wellness meal plan), the number of credits consumed, and the date and time of use. This purchase and usage data is retained for as long as your account is active, plus an additional 3 years after account deletion for financial record-keeping and tax compliance purposes. We use this data to maintain your credit balance, provide transaction history, detect fraudulent purchases, and improve our pricing and feature offerings (in aggregate, anonymized form only).
16. Third-Party Services
The Platform integrates with or links to third-party services. These services have their own privacy policies: Payment Processing: Stripe, Inc. — processes all payments and payouts (https://stripe.com/privacy). Cloud Infrastructure: Vercel — hosts the Platform's web application. Back4App (Parse) — provides database and backend services. AI Providers: We use third-party AI models to power features like Bedtime Stories, Leap Guide, and Medical Corner. Interactions with these features may be processed by our AI providers under data processing agreements that prohibit them from using your data for their own purposes. Authentication: We may offer social login options (e.g., Google, Apple). When you use these, the social platform shares limited profile information with us per their privacy policy. Analytics: We use Vercel Analytics for privacy-focused, aggregated usage analytics. This service does not use cookies for tracking, does not collect personal identifiers, and does not track users across websites. External Links: The Family Travel Planner, Safety Info, and other features may link to external websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party services you interact with through the Platform.
17. Data Breach Notification
In the event of a data breach that compromises your personal information, we will: Notify affected users by email within 72 hours of becoming aware of the breach, where feasible and required by applicable law. Provide a description of the nature of the breach, the categories of data affected, the likely consequences, and the measures we have taken or propose to take to address the breach. Notify relevant supervisory authorities as required by GDPR, CCPA, or other applicable data protection laws. Maintain an internal record of all data breaches, including those that do not require user notification. We encourage you to keep your account credentials secure and to contact us immediately at security@babypostal.com if you suspect unauthorized access to your account.
18. Do Not Track Signals
Some browsers transmit "Do Not Track" (DNT) signals to websites. Because there is no universally accepted standard for how to respond to DNT signals, the Platform does not currently respond to them. However, as described in Section 8 (Cookies), we do not use advertising or cross-site tracking cookies, and we do not participate in targeted advertising networks. Our analytics are privacy-focused and aggregate-only.
19. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting a notice on the Platform or sending you an email. The "Last updated" date at the top of this policy indicates when it was last revised. Your continued use of the Platform after changes take effect constitutes your acceptance of the updated policy.
20. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at: BabyPostal, Inc. 855 Maude Ave, Mountain View, CA 94043, United States General privacy inquiries: privacy@babypostal.com Data protection inquiries (EU/EEA): privacy@babypostal.com CCPA requests (California residents): privacy@babypostal.com Security concerns: security@babypostal.com Payment-related inquiries: support@babypostal.com