Privacy Policy

1. What information do we collect?

We collect personal information that you provide to us, and access third-party data on your behalf.

Information you provide directly

We collect personal information you voluntarily provide when you create an account or contact us, including:

• Account information: your email address and password (hashed — we cannot read it)
• Third-party credentials: the login credentials you provide for your daycare app (Lillio or Procare) and your baby tracking app. These are encrypted using industry-standard encryption before being stored and are never readable by us in plain text

We do not process sensitive personal information.

Payment data

Payments are processed by Stripe. We store your Stripe customer ID but never see or store your full credit card number or billing address.

Data accessed from third-party services

When you provide your daycare app credentials, we access your child's daily activity data (naps, bottles, diapers, meals) from that service to perform the sync. This data is transmitted directly to your baby tracking app and is not stored on our servers.

2. How do we process your information?

We process your information to provide the sync service, communicate with you, and comply with law.

We process your personal information for the following reasons:

• To create and authenticate your account
• To perform the sync — logging into your connected apps on your behalf and transferring your child's activity data
• To send administrative communications — sync failure notifications, billing receipts, password resets
• To process billing — managing your subscription via Stripe
• To send marketing communications — waitlist and launch emails (you may opt out at any time)
• To protect the service — fraud monitoring and abuse prevention
• To improve the service
• To comply with our legal obligations

3. When and with whom do we share your personal information?

We share information only with service providers necessary to operate databébé.

We share your data with the following third parties:

• Stripe — payment processing. Privacy policy
• Resend — transactional email delivery
• Railway — application hosting
• Supabase — database hosting. Your account data, and any email you submit through the waitlist form, are stored on Supabase's infrastructure
• Google Analytics — anonymous usage analytics on our public marketing pages (not on signed-in pages). Privacy policy

We do not sell your data. We do not share your data with your daycare app provider or baby tracking app provider beyond what is necessary to perform the sync you authorized. We may share your information in connection with a business transfer (merger, acquisition, or sale of assets).

4. How long do we keep your information?

We keep your information for as long as your account is active.

We retain your personal information only as long as necessary for the purposes described in this notice. When you delete your account, your email address and stored credentials are permanently deleted immediately. Anonymized billing records may be retained as required by law.

You can remove your stored third-party credentials at any time from Settings without deleting your account. This will pause syncing.

5. How do we keep your information safe?

We use encryption and technical measures to protect your information.

Third-party credentials are encrypted at rest using Fernet symmetric encryption. Encryption keys are stored separately from the database. Your databébé account password is hashed and cannot be recovered or read by us.

Child activity data (naps, bottles, diapers) flows directly from your daycare app to your baby tracking app and is never stored on our servers.

Despite these measures, no system is completely secure. We encourage you to use a strong, unique password for your databébé account and to access the service only from secure environments.

6. Do we collect information from minors?

databébé is for parents and guardians. We do not collect data from or market to children.

databébé is a service for parents and legal guardians only. You must be at least 18 years old to create an account. We do not knowingly collect, solicit data from, or market to children under 13 years of age.

While our service involves syncing data about infants and young children, this data is provided by and controlled entirely by parents. We do not collect data directly from children, and our service is not directed at children. We act solely as your agent in moving your child's activity data between apps you have authorized us to access.

We do not use your child's activity data for any purpose other than performing the sync you requested. We do not build profiles on children, share children's data with advertisers, or retain children's activity data on our servers.

If you believe a child under 13 has provided us with personal information without parental consent, please contact us immediately at hello@databebe.com and we will promptly delete such information.

7. What are your privacy rights?

You have the right to access, correct, or delete your personal information.

Depending on your location, you may have rights to access, correct, or delete your personal information, and to withdraw consent to processing. To exercise any of these rights, email us at hello@databebe.com.

You can also exercise your rights directly within the product:

• Remove credentials: delete your stored daycare and baby tracking app credentials from Settings at any time
• Delete account: permanently delete your account and all associated data from Settings at any time

Opting out of marketing: You can unsubscribe from marketing emails at any time by clicking the unsubscribe link or contacting us directly. Transactional emails (sync failures, billing) cannot be opted out of while your account is active.

8. Controls for do-not-track features

We do not currently respond to Do Not Track (DNT) browser signals, as no uniform technology standard for recognizing DNT signals has been finalized. California law requires us to disclose this.

9. Do United States residents have specific privacy rights?

US residents may have additional rights depending on their state.

Depending on your state, you may have the right to request access to, correction of, or deletion of your personal information. To exercise these rights, email hello@databebe.com. We will respond in accordance with applicable state privacy laws. If your request is denied and you wish to appeal, you may submit a complaint to your state attorney general.

California "Shine The Light" Law: California residents may request information about categories of personal information we disclosed to third parties for direct marketing purposes in the preceding calendar year. Contact us at hello@databebe.com.

10. Do we make updates to this notice?

Yes. We may update this Privacy Notice from time to time. The updated date at the top of this page will reflect any changes. If we make material changes, we will notify you by email before they take effect.

11. How can you contact us about this notice?

Email us at hello@databebe.com or write to us at:

Margo Louise LLC
82 Wendell Ave.
STE 100
Pittsfield, MA, 01201, USA

12. How can you review, update, or delete the data we collect from you?

You can remove your credentials or delete your account directly from your Settings page. For any other data requests, email hello@databebe.com.