Privacy Policy

1. About Moonbelly

Moonbelly is a baby-care tracking application that helps parents and caregivers log and review their baby's daily activities — feeds, sleep, diapers, pumping, growth measurements, and medications. Medication entries are health-related information you choose to record; they receive the same protections as all your tracking data and are never used for advertising.

2. Data we collect

We collect only what you actively provide: your email and password (for your account), and the tracking entries you choose to log. We do not use advertising SDKs, precise-location APIs, or cross-site tracking. The app performs automatic update checks and the server keeps standard security logs.

3. How we use your data

Your data is used solely to provide the tracking service, sync across your devices and caregivers, and generate the insights and reports you request. We do not use your data for marketing, profiling, or any purpose outside the service.

4. Data sharing

We do not sell, rent, or share your personal data with third parties for marketing or any other purpose. We use the following subprocessors to operate the service:

• Vercel / Cloudflare (hosting and delivery)
• Neon (database hosting, AWS us-east-1)
• Cloudflare Web Analytics (marketing pages only; truly cookieless)

5. Data security

All traffic is encrypted with TLS. Data at rest is encrypted on our hosted database. Passwords are hashed with bcrypt and never stored in readable form.

6. Data retention

We keep your account and tracking data until you delete your account. Server security logs are kept only as long as needed for security and operations, then discarded. Encrypted database backups age out within our database provider's standard retention window after deletion.

7. Your rights

GDPR (EU/EEA): You have the right to access, correct, port, and erase your personal data. Use the export and delete features in Settings, or contact us. For our EU users we rely on Standard Contractual Clauses (GDPR SCCs).

CCPA/CPRA (California): You have the right to know what categories of personal information we collect, to delete it, and to opt out of the sale or sharing of personal information. We do not sell or share your data for cross-context behavioral advertising. We do not sell or share personal information as defined by the CCPA, so no opt-out action is required.

PIPEDA (Canada): You may request access to your personal information and ask for corrections. Your express consent is collected at sign-up.

VCDPA (Virginia): Virginia residents have the right to access and delete their personal data and to opt out of the sale of personal data and profiling for targeted advertising. We do not sell personal data or engage in targeted advertising, so no opt-out action is required. You can exercise these rights at any time through the in-app data tools or by contacting us.

For Québec users: French translation available on request; full fr-CA version in Phase 2.

8. Children's data

Moonbelly tracks data about infants and toddlers, but that data is provided by a parent or legal guardian (the account holder). We do not knowingly collect data directly from children.

9. Contact

Privacy inquiries: [email protected]
Security reports: [email protected]