Privacy Policy

1. Introduction

This Privacy Policy describes how Healthy Holistic Homes LLC ("Company", "we", "us", or "our"), a US company operating under the brand name Baby Acrobatics by Healthy Holistic Homes, collects, uses, discloses, and protects your information when you use our websites, authenticated guide, iOS and Android applications, Movement Quiz, saved profiles, community, notifications, purchases, and support services (collectively, the "Service").

We are a US company. Some customers are outside the United States. This notice says what we collect, who we use to run the Service, and how to ask us to delete it.

2. Who We Are

The company responsible for this information is:

3. Information We Collect

We collect several types of information to provide and improve our Service:

3.1 Information You Provide

• Account Information: Name, email address, and authentication records. You sign in with a magic link we email you
• Payment Information: Billing address, payment card details (processed securely by Stripe - we do not store full payment card numbers)
• Contact Information: Name and email address when you contact support or subscribe to our newsletter
• Purchase Information: Products purchased, transaction amounts, dates, and payment status
• Gift Recipients: If you buy a gift, the recipient's name and email so we can deliver the access code
• Child Information: Your child's name (or nickname) and date of birth, which you provide so we can recommend age-appropriate exercises and maintain the child profile you request. The Movement Quiz may also ask whether the child is a boy or a girl, so result copy can say he or she. See Movement Quiz data below.
• Movement Profile Details: Optional parent-reported birth history, movement observations, comfort or safety notes, goals, and the educational plan we generate from those answers. This is not a medical record or diagnosis.
• Quiz Session and Delivery Information: An opaque quiz-session identifier, mode, consent records, the parent's delivery email for a public result, and result-access records. Signed-in attempts are linked to the account and selected child.

• Community Information: Display name, threads, replies, reactions, subscriptions, searches, reports, blocks, moderation decisions, bans, and appeals.
• Testimonials and Media: Optional review text, photos or video selected through the system picker, the exact marketing permission, and its withdrawal history.
• On-device face hide: The free /blur-kids-faces tool reads a photo or short video in your browser and writes a mosaiced copy on the same device. That media is not uploaded to Baby Acrobatics and is not stored by us. That tool has its own privacy notice.
• Support Context: The message plus only the account, order, entitlement, device, browser, time-zone, and diagnostics context necessary to investigate it. Sensitive quiz answers and profiles are not attached automatically.

Quiz answers are protected with access controls and technical safeguards, but they are not anonymous. Baby Acrobatics can reconnect an authorized quiz session to the delivery email, and to the optional child name or nickname supplied in that session, when needed to provide the result, handle support, honor a privacy request, or protect the Service.

Birth history and movement answers are described in Movement Quiz data. They are not a medical record.

Movement Quiz data

Optional birth-history, movement, comfort, and safety answers are supplied by the parent or caregiver, stored only after a separate yes in the quiz, and used to build the educational movement plan they asked for. Skipping those questions leaves a birth-date-based experience. We do not sell those answers, use them for ads, or send raw answers, movement profiles, or safety flags to Meta, Kit, PostHog, or Sentry. The adult can export, retake, or delete one child's quiz data without deleting the whole account, or email [email protected].

3.2 Information We Collect Automatically

• Device Information: IP address, browser type, device type, operating system
• Usage Data: Pages visited, time spent on pages, links clicked, referring website
• Cookies and Tracking: We use cookies and similar technologies (see Section 6)
• Marketing Data: UTM parameters, campaign sources, conversion tracking data
• Payment Session Data: Transaction identifiers needed to complete and reconcile a purchase
• App and Device Data: App/build version, operating system, IANA timezone from the account profile, push token and delivery status, security logs, update status, optional scrubbed crash logs, and an encrypted offline cache retained for up to seven days. On iOS, the routine timer may use Live Activities while it is running. Product analytics and client crash diagnostics run unless you turn them off in the app. Browser push subscriptions are no longer used.
• Testimonial Request Timing: timestamps used to avoid re-prompting you for a review

4. How We Use Your Information

• Process transactions and deliver purchased products
• Create and manage your account
• Send order confirmations and important service updates
• Provide customer support
• Send marketing emails (with your consent)
• Improve our website and user experience
• Analyze usage patterns and website performance
• Prevent fraud and ensure security
• Comply with legal obligations
• Process refunds and handle payment disputes
• Personalize your experience and recommend products
• Generate and retain the educational movement profile you asked us to create
• Operate community reporting, blocking, moderation, and appeals
• Deliver requested notifications and application updates

Legal bases. Depending on the processing, we rely on performance of our contract with you, our legitimate interests in operating, securing and improving the Service and preventing fraud, your consent where required, and compliance with legal obligations.

5. Third-Party Service Providers

We share your information with trusted third-party service providers who assist us in operating our business:

5.1 Payment Processing

• Stripe: Processes payments securely. They may store your payment information for future purchases.View Stripe's Privacy Policy

5.2 Email & Communications

• Kit (ConvertKit): Manages our email lists, sends marketing emails, and delivers transactional communications such as gift code delivery and purchase follow-up emails. We do not send raw quiz answers, movement profiles, safety flags, child names, dates of birth, or derived movement stages to Kit. When an account is deleted, we erase writable profile fields and unsubscribe the matching subscriber. Kit may retain the email address only as a suppression record needed to honor the unsubscribe.View Kit's Privacy Policy
• Resend: Delivers requested quiz-result and other service emails. For the initial quiz-result delivery, Resend receives the parent's email address, generic delivery copy, and the opaque reusable result link; it does not receive the child's name, quiz answers, corrected week, movement stage, or plan details in that message. Separately consented marketing messages may use the limited personalization described at the point of consent.View Resend's Privacy Policy
• ManyChat: Messaging. Not used on quiz, result, community, or authenticated app surfaces.

5.3 Analytics & Advertising

• Google Analytics: Analyzes website usage and performance outside restricted quiz and saved-result routes
• Google Ads: Measures advertising and conversions on eligible public pages through tags loaded by Google Tag Manager.
• Meta/Facebook Pixel & Conversions API: We use both the Facebook Pixel (client-side) and Meta Conversions API (server-side) to track conversions and improve ad targeting. The server-side integration sends hashed versions of your email address, name, and phone number (when provided during payment), along with your IP address, browser information, and Facebook cookie identifiers to Meta's servers unless you opt out of marketing in Your choices or via Global Privacy Control. Server-side measurement follows the same choice as client-side measurement. Advertising pixels are disabled on quiz answering, recovery, result-link verification, saved-result-link routes, the on-device face-hide tool (/blur-kids-faces), and the kids-online-privacy guides (/kids-online-privacy). The quiz finish page may load a generic advertising PageView for campaign measurement. Quiz answers, safety flags, week, and named health events are not included in advertising events.
• Google Tag Manager: Loads Google Analytics, Google Ads, and related marketing tags on eligible public pages unless you opt out of analytics and marketing. The on-device face-hide tool may load Google Tag for visit counts and how the tool is used (photo or video, a saved copy, and whether someone opened Baby Acrobatics from that page). Meta stays off that path and off /kids-online-privacy. The file itself is not included. We do not use a Content Security Policy to block those vendors, fonts, checkout, or video hosts. The browser is allowed to load them.
• OpenAI Ads Measurement: Measures eligible marketing-page conversions unless you opt out of marketing; it is disabled on quiz answering, saved-result-link, child, community, and authenticated app surfaces.
• PostHog: We record a closed set of first-party product events in our own database — for example result opened, result section viewed, offer clicked, and authenticated guide or app reading events. When external product analytics is enabled and analytics is allowed, we may forward those events to PostHog in the European Union. On the authenticated guide, PostHog may load through our first-party /ph proxy so the request stays on our domain. Native iOS and Android events are sent unless you turn off Product Analytics in the in-app privacy settings. Guide browser events follow the same analytics choice as other non-essential guide analytics. These events exclude names, email addresses, dates of birth, quiz answers, safety flags, and result-link credentials. A keyed pseudonymous identifier lets us count repeat use without sending the database user or quiz-session ID. Autocapture and session replay are off. Account deletion queues removal of known account-linked PostHog identities and their pre-request events.

5.4 Video Hosting

• Bunny.net: Hosts and delivers educational video content via Bunny CDN and Stream, and hosts the photos and videos you submit as a testimonial. Testimonial video may upload directly from your device to Bunny (TUS). May collect viewing behavior and device information. Account deletion queues removal of account-linked profile and testimonial media. View Bunny.net's Privacy Policy
• Vimeo: Some public blog embeds. View Vimeo's Privacy Policy

5.5 Infrastructure

• Hosting and database providers: Store and serve the Service, including accounts and order information
• Google Fonts: Delivers web fonts. Your IP address and browser information are shared with Google when fonts are loaded.

5.6 Native App Delivery and Diagnostics

• Expo/EAS: Builds and delivers application updates and registers native device push tokens. Browser push has been retired.
• Apple Push Notification service and Firebase Cloud Messaging: Transport notifications enabled by the user.
• Sentry: Server errors, and crash logs from the app or guide unless you turn diagnostics off. Sampled performance traces follow that same switch. We send a keyed identifier, not your database user ID. Child names, dates of birth, quiz answers, and free text are excluded. Logs expire after 90 days.
• Apple and Google: Operate the app stores, system photo picker, operating-system permissions, and platform services under their own notices.

Some service providers may process personal data outside the EEA. Where required, we use an applicable lawful transfer mechanism, such as an adequacy decision or Standard Contractual Clauses.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Keep you logged in to your account
• Remember your preferences
• Analyze how you use our website
• Deliver targeted advertisements
• Track marketing campaign effectiveness

Advertising tracking is disabled on /start/quiz, recovery, result-link verification, saved-result-link routes (/start/r), the on-device face-hide tool (/blur-kids-faces), and the kids-online-privacy guides (/kids-online-privacy). Those pages may still load Google Tag (Google Analytics) for traffic measurement when analytics is allowed. On the face-hide tool that measurement may include whether a photo or video was opened, whether a copy was saved, and whether someone opened Baby Acrobatics from the tool. The file itself is not included. /start and /start/results may load a generic advertising PageView for campaign measurement. We do not send quiz answers, safety flags, week, or named health events to advertising platforms. Essential security and quiz-continuity storage remains available on restricted routes so the requested feature can function. Advertising remains disabled on those restricted routes even if marketing is otherwise enabled.

Necessary storage covers authentication, security, checkout, quiz continuity, fraud prevention, and encrypted offline app cache. On eligible public pages the site loads Google Tag Manager, Google Analytics, Google Ads, Meta and OpenAI advertising pixels, and first-party product events that may be forwarded to PostHog. We do not use a Content Security Policy to block those scripts, Google Fonts, Stripe checkout, or Bunny video. They never load on quiz answering, saved-result-link, child-profile, community, or authenticated app surfaces. The face-hide tool and kids-online-privacy guides may load Google Tag for visits and how the tool is used, without the file; Meta and OpenAI pixels stay off there. The public website may load fonts from Google Fonts; the guide and native apps use bundled fonts.

Types of Cookies We Use

• Essential Cookies: Required for the website to function (e.g., authentication, security)
• Analytics Cookies: Help us understand how visitors use our website (Google Analytics)
• Marketing Cookies: Used to track advertising effectiveness and deliver relevant ads. This includes Google Ads cookies and Facebook cookies used for advertising measurement, including server-side conversion matching.
• Preference Cookies: Remember your choices and settings

Your choices

Analytics and marketing technologies load on eligible public pages by default. Use the controls below to opt out or change that at any time. Browser Global Privacy Control is treated as an opt-out of sale, sharing, and targeted advertising. Necessary authentication, security, checkout, and requested-feature storage remains active.

7. Your Privacy Rights

Where applicable, you may request access, correction, deletion, restriction or portability of your personal data, object to processing, withdraw consent where processing relies on consent, and lodge a complaint with a competent data protection authority. Contact [email protected] to exercise your rights. We will respond as required by applicable law.

Signed-in users can export or delete one child's quiz history in the iOS and Android apps under Account → Data rights, delete the whole account under Account → Account & data, or use the same controls on the web at guide.babyacrobatics.com/settings#delete-account. You can also use our deletion form or email [email protected].

8. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Account Data: As long as your account is active. In-app deletion removes active first-party account data immediately, revokes the session, and queues provider cleanup. Provider cleanup is retried and targeted for completion within 30 days.
• Child Information: As long as your account is active, or until you delete it yourself. Deleted active copies are removed promptly and encrypted backups expire within six months
• Movement Profiles: For as long as the requested profile remains available to you, or until you ask us to delete it. Result links do not expire automatically; deleting the associated result makes the link unavailable
• Transaction Records: 7 years for tax and legal compliance. These are detached from the active account and minimized to necessary customer, order, product, amount, payment-status, and payment-provider identifiers. Marketing identifiers and unnecessary gift-recipient details are removed.
• Marketing Data: Until you unsubscribe or request deletion
• Product Analytics: Up to 13 months during an active account; first-party account-linked events and queued deliveries are removed on account deletion, and applicable provider deletion is queued.
• Crash Logs and Operational Diagnostics: 90 days. These use a pseudonymous identifier and expire through Sentry's retention schedule; Sentry does not support safe deletion of an individual event from a shared grouped issue.
• Notification Delivery Logs: 30 days; push tokens remain until disabled, invalidated, sign-out, or deletion
• Community Reports and Moderation Evidence: 24 months after resolution, deidentified where practical
• Testimonial Text: Retained for as long as it's published. Removed within 30 days of a withdrawal request.
• Testimonial Media (photos and videos): Stored on Bunny.net for as long as it's published. Removed from Bunny within 30 days of a withdrawal request.
• Consent and Acceptance Evidence: Retained for seven (7) years where needed for legal claims or contract evidence. Testimonial and quiz consent records retain only the applicable copy/type version, grant or action timestamp, permission flags, and any revocation timestamp and scope. Terms acceptance retains only the document type/version, action, timestamp, surface, and platform. Account, customer, order, review, and child links; review text; names; email addresses; locale; app version; idempotency keys; IP addresses; and user agents are removed from these evidence records.
• Support Communications: 2 years after resolution

9. Where Data Is Processed

We are a US company. Payment, email, advertising, analytics, hosting, and crash tools may process data in the United States or the EU. Using the Service means your information may be processed in those countries.

10. Data Security

Production traffic uses HTTPS. Payments go through Stripe. Access to accounts and quiz data is restricted. No method of transmission or storage is perfectly secure.

11. Children's Privacy

Our Service is directed at parents and caregivers, not children. Account holders must have legal capacity where they live, or use the Service through a parent or guardian. We do not collect an account-holder birth date solely to enforce this adult-directed positioning.

11.1 Information About Your Child

To provide age-appropriate exercise recommendations, we ask parents to provide:

• Your child's name or nickname
• Your child's date of birth
• Optional boy or girl answer in the Movement Quiz, so result copy can say he or she
• Optional birth-history and everyday movement observations used to personalize an educational movement profile

Important: This information is provided by you (the parent or guardian), not by your child. Your child does not interact with our Service directly.

11.2 How We Use Child Information

• Purpose: To personalize exercise recommendations based on your child's developmental stage and, only when separately selected, to personalize age-matched email communications
• Movement profiles: These are educational personalization records, not medical records, diagnoses, or clinical assessments. The details are not sent to advertising platforms or used for off-site ad targeting.
• Not anonymous: We can reconnect a quiz session to the delivery email and optional child name when needed to deliver the result, handle support, or delete the record.
• Sharing: We do not sell your child's information. Providers process limited information only to run the Service. The first result email is generic and contains a link, not the child's name, answers, or plan (see Section 5.2).
• Durable result landing link: The landing link identifies the saved result but does not authorize an unfamiliar browser. New or unfamiliar browsers, and browsers whose 30-day authorization expired, must complete renewed delivery-email verification. Keep the link private and use the deletion page if it should be revoked.

11.3 Your Control Over Child Information

You have full control over your child's information:

• Direct access: View the saved result through its reusable link and, if claimed into an account, through applicable account surfaces
• Correction: Retake the quiz where available or contact us to request correction of associated information
• Delete or withdraw: Use in-account per-child controls or our public Account and Data Deletion page

When a verified deletion request applies, we remove the covered data from active systems and direct applicable service providers to do the same, subject to limited legal, security, fraud-prevention, and backup exceptions permitted by law.

11.4 Children

We do not knowingly collect information directly from children. If a child has used the Service without a parent, email [email protected] and we will delete it.

12. Marketing Communications

With your consent, we may send you marketing emails about our products, services, and special offers. You can opt out at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Contacting us at [email protected]
• Managing your preferences in your account settings

Note: We will still send you transactional emails (order confirmations, account updates) even if you opt out of marketing.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For significant changes, we may also notify you by email.

14. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

15. California Residents

We do not sell your personal information. Advertising measurement stays off until you turn it on. California residents can request access or deletion at [email protected].

16. User-Submitted Content

When you submit testimonials, reviews, photos, or videos, we may display your first name and last initial, your child's age (if you have that toggle on at submission), and the content you provided, on our website and in our marketing materials. We do not display your email address, your surname, your location beyond country level, or any medical conditions you may mention, without your separate consent.

The full license you grant us, our publication channels, our Bunny.net media sub-processor, the consent audit log we keep, the featured-content email-first promise, and the 30-day withdrawal mechanism are all described in Terms & Conditions Section 7. To withdraw consent or remove a submission, email [email protected] from the address you used to submit.