Privacy policy

CradleOn helps parents keep track of a pregnancy and a young child’s care, together. This policy explains what we collect, why, who else handles it, and the choices you have. CradleOn is run by Cloutix LLC (“we”). You can reach us at [CONTACT EMAIL] or [MAILING ADDRESS].

The short version

• We collect what you type into CradleOn so it can show it back to you and the people you share with.
• We do not sell your data, show ads, or use it to advertise to you.
• You can download everything, or delete your account, from the Settings tab at any time. If you can’t sign in any more, ask us to delete it at cradleon.com/delete-account.

What we collect

• Your account: your email address, your name, and a password (stored only in hashed form by our authentication provider).
• About your child: name, due date or birth date, birth details, weights, a photo if you add one, and the details on the Child tab, such as pediatrician, pharmacy, allergies, medical record number and notes.
• What you log: feeds, sleep, diapers, pumping, activities, milestones and their photos, appointments, checklists, and supplements or medications for you or your child.
• If you subscribe to Plus: your plan, its status and renewal dates. Your card details go straight to Stripe, our payment processor; we never see or store your card number.
• Ask CradleOn: the questions you ask the assistant and its answers, kept in your account so you can pick up where you left off or go back to a past chat. Only you can see your conversations, not the other parent. You can delete any chat from Past chats, and each is deleted automatically 90 days after its last message. We keep a count of the questions you ask and what each answer cost to make (never the words) for about a year, for the monthly question limit and to watch costs. If you rate an answer or report a problem with one, we see the rating, and for a report, that one question and answer and what you wrote, so we can fix it. We also keep an anonymous record of each question, without your question’s words, your account or anything else that identifies you: a topic from a fixed list (like “Sleep”) and a few general words (like “night waking”, never a name, age or date); your family’s stage as a range (like “6–9 months” or “2nd trimester”) and your country, both left out when your family has turned off sharing its information with Ask; where the answer came from (CradleOn’s guides, official health pages, your family’s logs or a web search); its rating, if you gave one; and what the assistant searched the web for (its search phrases, with children’s names taken out, and the official pages it showed). We use it to see what parents need help with and to add guides for common topics. The search phrases and the record of each question are deleted after 180 days; monthly totals by topic, stage and country are kept (counts only, with the general words only when several questions that month share them).
• Notifications: if you turn them on, a push address for your device so we can send reminders.
• Feedback you send us: what you write, the page you were on, your device and browser type, and, if you say it’s OK, your email so we can reply.
• Usage statistics: which pages and features are used (for example “a feed was started”), counted with an anonymous code rather than your name or email, and never including what you logged about your child. We keep these for 180 days, in our own database, and don’t count browsers that send a Global Privacy Control signal.
• Technical information: when something goes wrong, an error report with details about the error, your browser and device type; and anonymous measurements of how fast pages load. These do not include what you’ve logged.

Some information is also kept on your own device: changes made while you’re offline (until they sync), copies of pages you’ve opened so the app works without signal, and preferences like your theme. Signing out removes the page copies and unsynced changes.

How we use it

• To run CradleOn: showing your entries, trends and summaries, and keeping everyone in your household in sync.
• To send the reminders you ask for, such as appointments, missed doses and, if you turn them on, feed and nap reminders worked out from what you log.
• To answer your questions in Ask CradleOn. With each question, we send it, the conversation so far, and a summary of your family’s information (ages, the last week of feeds, sleep and diapers, growth, health records, allergens, milestones, supplements and appointments) to Anthropic’s Claude, which writes the answer from official health sources. When a question needs more detail, it can look up more of what you’ve logged, such as the care log, activities and pregnancy nutrition ticks, tough moments, the bedtime routine, development check answers and the birth plan. If you tap the microphone to speak a question, your phone or browser turns your speech into text (Safari through Apple, Chrome through Google); we receive only the text, never the recording. It is never sent your child’s medical record number, pharmacy, private notes, legal name, birth hospital or photos, and Little Wish’s cycle log never leaves your phone. Before your first question, Ask CradleOn asks whether it may use your family’s information, and sends none of it until you say yes. You can change your answer any time in the Settings tab (Ask CradleOn), and either parent can turn it off for the whole family there: it then answers from the health sources alone, and none of your family’s information is sent, only your question and the conversation so far.
• To find and fix problems, and keep the service secure.
• To decide what to improve, using your feedback and the usage statistics above. We may use AI tools to help turn feedback into fixes; they see what you wrote in the feedback form, not your other data.
• To tell you about important changes to CradleOn or this policy.

Who can see it

Everything you log is shared with the people in your household: other parents you invite, and anyone you add as a viewer. Viewers see your baby’s information but not the parents’ own supplements or medications, or the baby’s medical record number, pharmacy or notes.

Who processes it for us

We use a few companies to run CradleOn. They handle data only to provide their service to us:

• Supabase: database, sign-in and photo storage.
• Vercel: hosting, and page-speed measurements.
• Sentry: error reports.
• Anthropic: writes Ask CradleOn’s answers, when you ask a question (see above). Under its commercial terms it doesn’t use what we send to train its models. [REVIEW: confirm Anthropic’s current data retention period for API requests and state it here.]
• Stripe: payments for CradleOn Plus, including your card, billing address and receipts, if you subscribe. Stripe also uses this information under its own privacy policy, for example to prevent fraud.
• Your browser’s push service (such as Apple, Google or Mozilla): delivering notifications, if you turn them on.

We may also disclose information if the law requires it, or to protect someone’s safety. If CradleOn is ever sold or merged, your information would move with it under this policy, and we’d tell you first.

Health information

CradleOn is not a healthcare provider, and what you record here is not part of a medical record. It is your own record, kept for you and your household. [REVIEW: note any health-privacy laws that apply where you operate, e.g. the US FTC Health Breach Notification Rule, Washington My Health My Data Act, or GDPR special-category data.]

Children

CradleOn is for parents and guardians aged 18 or over. Information about a child is added by their parent or guardian, who controls it and can delete it at any time. CradleOn is not meant for children to use.

Keeping it and deleting it

We keep your information while your account is open. From Settings you can download all of it as spreadsheets, or delete your account. Deleting removes your sign-in and your name. If another parent is in your household, the baby’s history stays with them, and what you logged is shown as “Former member”. If you’re the only parent, the child and everything logged are deleted too. Backups are cleared on our providers’ normal schedule, within [BACKUP RETENTION PERIOD].

Security

Data is encrypted in transit, and each household’s data is walled off at the database level so only its members can reach it. Photos are private and shown through short-lived links. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

Your rights

You can see, correct, download and delete your information in the app at any time. Depending on where you live you may have further rights, such as to object to certain processing or to complain to a data protection authority. To use them, email [CONTACT EMAIL]. [REVIEW: add region-specific sections as needed, e.g. GDPR/UK GDPR (lawful bases, international transfers) and California (CCPA/CPRA).]

Changes

If we change this policy in a meaningful way, we’ll let you know in the app or by email before it takes effect.