Privacy Policy

1. Introduction

Baaby is a property of Luminous Pathways LLC, located in Brewster, NY 10509 ("Luminous Pathways," "Company," "we," "us," or "our"). We operate baaby.com, a directory and set of tools that help parents and expecting parents find maternal and infant care providers, and that help providers connect with the families who need them. This Privacy Policy explains what information we collect when you visit or use baaby.com (the "Service"), how we use that information, who we share it with, and the choices you have about it.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. This policy should be read together with our Terms of Service, which govern your use of baaby.com generally, and our DMCA Policy, which explains how we handle copyright complaints. If you do not agree with the practices described in this policy, please do not use the Service.

2. Information We Collect

We collect information in a few different ways: information you give us directly, information generated by your use of the Service, and information collected automatically through cookies and similar technologies.

Account Information

When you create a Baaby account, we collect your name, email address, and account type (parent or provider). We use your email address to authenticate your login, send account related notices, and, where you have opted in, send you product updates or marketing communications.

Profile Information

If you are a provider and you claim or create a listing on Baaby, we collect additional information about you and your practice, which may include professional credentials and certifications, practice or business details, service offerings, service areas, business hours, and contact information such as a phone number, business address, and website. This information is used to build and display your provider profile and to verify that you are authorized to manage the listing you are claiming.

Usage Data

We collect information about how you interact with the Service, including the pages you visit, searches you perform, providers you view or save, tools you use (such as our due date, baby names, nutrition, birth plan, hospital bag, or weight tracker tools), and general browsing patterns within the Service.

Analytics

We use PostHog, a third party analytics provider, to help us understand how visitors use baaby.com. PostHog may collect anonymized or pseudonymized usage data and, in some cases, session recordings that capture on-screen activity such as clicks, scrolling, and page navigation. We use this data solely to understand and improve the user experience, diagnose issues, and inform product decisions. Session recordings are configured to avoid capturing sensitive form fields such as passwords wherever technically possible.

Device Information

We automatically collect certain technical information when you access the Service, including your browser type and version, operating system, device type, referring and exit pages, and your IP address. We use this information for security, troubleshooting, and to understand aggregate trends in how the Service is accessed.

Cookies and Similar Technologies

We use cookies and similar technologies to operate the Service and to collect the usage and analytics data described above. See Section 5, "Cookies and Tracking Technologies," below for more detail.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service, including account creation, login, search, and the provider claim flow;
• Improve, personalize, and expand the Service, including understanding which features and content are most useful;
• Communicate with you, including responding to inquiries, sending account and transactional notices, and, where permitted, sending marketing or product update messages;
• Personalize your experience, such as showing more relevant providers, tools, or content based on your activity;
• Detect, investigate, and prevent fraud, abuse, and security incidents, and enforce our Terms of Service;
• Comply with legal obligations and respond to lawful requests from public authorities.

4. Provider Profile Data

Baaby maintains a directory of maternal and infant care providers. Basic provider listing information, such as a provider's name, practice or business name, category, general location, and publicly available contact details, is compiled from public and licensed sources and is displayed publicly on the Service as part of its core directory function. This is inherent to how a provider directory operates and is not something an individual listing can opt out of while remaining part of the directory, though providers may request corrections as described in Section 10 below.

When a provider claims their listing through our provider claim flow, they gain the ability to control and update the additional details on their profile, such as credentials, service offerings, photos, bios, and hours. Claimed providers are responsible for the accuracy of the additional information they choose to add or edit, and can update or remove that supplemental content at any time through their account. Claiming a listing does not change the public nature of the base directory entry, but it does give the provider ownership over how the profile is presented beyond that baseline.

5. Cookies and Tracking Technologies

We use a limited set of cookies and similar technologies on baaby.com:

• Essential cookies: used to keep you logged in, remember your session, and secure your account. These are necessary for the Service to function and cannot be disabled without affecting your ability to use core features.
• Analytics cookies: used by PostHog to collect anonymized or pseudonymized usage data, as described in Section 2 above, to help us understand and improve the Service.

We do not use third party advertising cookies, and we do not allow third party ad networks to track visitors across the Service for advertising purposes. Most browsers allow you to control cookies through their settings, including blocking or deleting cookies. If you disable essential cookies, some parts of the Service, such as staying logged in, may not work properly.

6. Third-Party Services

We work with a small number of trusted third party service providers to operate the Service. These providers process data on our behalf and are bound by confidentiality and data protection obligations. They are not permitted to use your information for their own independent purposes.

• PostHog: provides website analytics and session replay to help us understand how the Service is used and identify opportunities to improve it.
• Resend: delivers transactional email, such as account verification, password reset, and other service related notices.
• Railway: provides the cloud hosting infrastructure on which baaby.com and our databases run.
• Payment processors: we do not currently process payments on baaby.com. If we introduce paid features or subscriptions in the future, we will engage a reputable payment processor, update this Privacy Policy accordingly, and disclose which categories of information that processor collects.

7. Data Sharing

We do not sell your personal data. We share personal information only in the following circumstances:

• Service providers: with vendors such as PostHog, Resend, and Railway, solely to help us operate and improve the Service, as described in Section 6 above.
• Legal requirements: when we believe in good faith that disclosure is necessary to comply with a law, regulation, subpoena, court order, or other legal process, or to protect the rights, property, or safety of Baaby, our users, or the public.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of some or all of our assets, in which case personal information may be transferred as part of that transaction, subject to standard confidentiality arrangements.
• With your consent: in any other circumstances where you have given us your explicit permission to share your information.

Provider profile information that is inherently public, as described in Section 4, is visible to anyone who visits the Service and is not considered "sharing" in the sense described above.

8. Data Security

We take reasonable administrative, technical, and physical measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypting data in transit, hosting our infrastructure with reputable cloud providers that maintain their own security controls, restricting internal access to personal data on a need to know basis, and monitoring for unauthorized activity.

No method of transmission over the internet or method of electronic storage is completely secure, so while we work to protect your information, we cannot guarantee its absolute security. If we become aware of a security incident that affects your personal information, we will notify affected users and relevant authorities as required by applicable law.

9. Data Retention

We retain personal information for as long as your account remains active or as needed to provide you the Service. If you ask us to delete your account, we will delete or anonymize your personal information within a reasonable period, except where we are required or permitted to retain certain information for legal, tax, security, or fraud prevention purposes, or to resolve disputes and enforce our agreements.

Publicly available provider directory information, described in Section 4, may continue to appear in the directory after an associated account is deleted if that information was sourced independently of the account and remains accurate and relevant to the directory's purpose, unless the provider requests its removal in accordance with Section 10.

10. Your Rights and Choices

Depending on where you live, you may have certain rights regarding your personal information. In general, you can:

• Access the personal information we hold about you;
• Request that we correct inaccurate or incomplete information, including correcting or updating a provider listing;
• Request that we delete your personal information or close your account;
• Opt out of marketing communications at any time by using the unsubscribe link in any marketing email or by contacting us directly;
• Set your cookie preferences through your browser, as described in Section 5.

To exercise any of these rights, contact us using the information in Section 15. We will respond to verified requests within the timeframe required by applicable law.

11. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA"), gives you additional rights over your personal information, including the right to know what personal information we have collected about you and how it has been used and shared, the right to request deletion of personal information we have collected from you, and the right to opt out of the "sale" or "sharing" of your personal information, as those terms are defined under the CCPA.

We do not sell personal information, and we do not share personal information for cross context behavioral advertising. You will not be discriminated against for exercising any of your rights under the CCPA. To make a request under the CCPA, contact us using the information in Section 15; we may need to verify your identity before completing your request.

12. International Users

Baaby is based in the United States, and the Service is hosted and operated from the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, which may have different data protection laws than your country of residence.

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar data protection laws, we process your personal information on the following legal bases: performance of a contract when we provide the Service to you, our legitimate interests in operating, securing, and improving the Service, your consent where we have obtained it, such as for certain analytics or marketing, and compliance with our legal obligations. You have the right to access, correct, delete, restrict, or object to our processing of your personal information, and the right to data portability, subject to the conditions and exceptions set out in applicable law. Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards recognized under applicable law.

13. Children's Privacy

The Service is intended for use by parents, expecting parents, and providers, and is not directed at children. We do not knowingly collect personal information from children under the age of 13. If we learn that we have collected personal information from a child under 13 without verified parental consent, we will take steps to delete that information promptly. If you believe we may have collected information from a child under 13, please contact us using the information in Section 15.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, provide additional notice, such as an email or an in-app notification. We encourage you to review this Privacy Policy periodically. Your continued use of the Service after a revised Privacy Policy becomes effective constitutes your acknowledgment of the changes.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, including requests to access, correct, or delete your personal information, please contact us:

Luminous Pathways LLC
Brewster, NY 10509
Email: [email protected]

For questions about our Terms of Service, see Terms of Service. For copyright related concerns, see our DMCA Policy.