Privacy Policy

1. Introduction

PeloParent (“we,” “us,” or “our”) operates the PeloParent application and website at peloparent.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. By using PeloParent, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and a securely hashed password. If you sign in with Google OAuth, we receive your name, email, and profile image from Google.

Child Information

To provide tracking and predictions, we collect information about your children, including name, date of birth, and gender.

Tracking Data

We collect the data you log through the application, including:

• Sleep logs (start time, end time, duration, quality, environment settings)
• Feeding logs (type, amount, duration, side, timing)
• Diaper logs (type, color, consistency, timing)
• Activity sessions (type, duration, sensory input)
• Pumping sessions (volumes, duration, method)
• Growth records (weight, height, head circumference)
• Milestones (category, achievement date)

Device and Usage Data

We automatically collect certain information when you access PeloParent, including browser type, timezone, and IP address. This data is used for authentication, timezone-aware features, and service security.

Family Sharing Data

When you invite family members, we collect the email addresses of invited members to send invitations and manage access permissions.

3. How We Use Your Information

We use the information we collect to:

• Provide core baby and child tracking functionality
• Generate sleep predictions, diaper forecasts, and growth analytics
• Enable real-time synchronization between caregivers
• Send transactional emails (invitations, password resets, account notifications)
• Improve our prediction algorithms (opt-in only — controlled via the “Help Improve Algorithm” preference)

4. Children's Privacy

PeloParent collects information about children under 13 only from their parents or legal guardians. We take children's privacy seriously and adhere to the following principles:

• We do not collect information directly from children
• We do not allow children to create accounts
• We do not share children's data with third parties for marketing or advertising purposes
• Parents and guardians can review, modify, or delete their child's data at any time through the application

5. Third-Party Services

We use the following third-party services to operate PeloParent:

• Supabase — Database hosting and management
• Vercel — Application hosting and deployment
• Pusher — Real-time data synchronization between caregivers
• Resend — Transactional email delivery
• Google — OAuth authentication (optional, only if you choose to sign in with Google)
• Anthropic — AI-powered voice command processing (opt-in only)

We do not sell your personal information or your children's data to any third party. Third-party services receive only the minimum data necessary to perform their function.

6. Data Security

We implement industry-standard security measures to protect your data:

• Passwords are hashed using bcrypt before storage
• All data is transmitted over HTTPS with TLS encryption
• Database connections use connection pooling with row-level scoping
• Authentication sessions use signed JWT tokens
• Family sharing enforces per-child role-based access control

7. Data Retention and Deletion

We retain your data for as long as your account is active. You may delete individual child data (including all associated tracking logs) at any time through the application. To delete your entire account and all associated data, contact us at admin@peloparent.com.

8. Your Rights

You have the right to:

• Access your personal data and your children's data stored in PeloParent
• Correct inaccurate or incomplete information
• Delete your account and all associated data
• Export your data through the reports feature
• Withdraw consent for optional data processing (such as algorithm improvement)

9. Cookies

PeloParent uses essential cookies only for authentication and theme preferences. We do not use third-party tracking cookies or advertising cookies. No personally identifiable information is stored in cookies beyond what is necessary for session management.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or through an in-app notification. Your continued use of PeloParent after such changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at admin@peloparent.com.