Privacy Policy

1. About this policy

This Privacy Policy explains how Faran Tareen, an individual carrying on business as MyBabyBase (“MyBabyBase”, “we”, “us”) collects, uses, discloses, and protects personal information when you use the MyBabyBase website at https://www.mybabybase.com and our mobile applications (the “Service”).

We are based in the Province of Ontario, Canada, and we handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable privacy laws. Additional rights may apply to you depending on where you live — see section 12.

This policy is part of, and should be read with, our Terms of Service.

2. Information we collect

Information you give us

• Account information — your name or display name, email address, and authentication details. If you sign in with Google or Apple, we receive basic profile information from them, not your password.
• Your family space — partner names, due date, baby name ideas, baby gender if you record it, currency and unit preferences, and who you invite.
• Pregnancy and wellbeing entries — anything you choose to log, including weight, kick counts, contraction timings, appointments, journal entries, birth plans, and documents you upload. See section 3.
• Planning and registry information — checklists, hospital bag lists, budgets, registry items, cash funds, and event details.
• Photos and files — images and documents you upload for announcements, reveals, journal entries, or storage.
• Contacts — names and contact details you enter or import in order to invite people or send updates.
• Community content— posts, comments, and replies you publish, and reports you submit about other users’ content.
• Communications — messages you send us for support, and their contents.

Information collected automatically

• Device and usage information — device type, operating system, app version, browser type, language, general location inferred from IP address (city or region level, not precise GPS), pages or screens viewed, and actions taken.
• Log and diagnostic information — IP address, timestamps, crash reports, and error logs, used to keep the Service working and secure.

We do not collect precise geolocation, we do not access your camera roll except for files you explicitly select, and we do not read your device contacts except those you choose to import.

3. Pregnancy and health-related information

We handle it on the following basis:

• It is optional. Every one of these features is something you choose to use. The Service works without them.
• We use it to show it back to you — to display your logs, charts, reminders, and history — and for nothing else.
• We never use it for advertising, ad targeting, or profiling, and we do not disclose it to advertisers, data brokers, insurers, or employers.
• It is shared only where you direct it — with a partner or co-organizer you invite into your space, or through a link you choose to create.
• We do not use it to train machine learning or AI models.

MyBabyBaseis an organizational tool, not a medical service, and we are not a health information custodian under Ontario’s Personal Health Information Protection Act. Your records here are not a medical record and are not shared with any care provider unless you show or send them yourself.

4. How we use your information

We use personal information to:

• create and maintain your account and your family space;
• provide the features you use, and show your own content back to you;
• deliver invitations, share links, and notifications you ask us to send;
• let you participate in the community, and moderate it;
• respond to your support requests;
• keep the Service secure — detecting, investigating, and preventing fraud, abuse, spam, and unauthorized access;
• understand how the Service is used in aggregate so we can fix problems and improve it;
• send you service messages about your account, security, or material changes; and
• comply with legal obligations and enforce our Terms.

We use your information for the purposes we identified when we collected it, or for a purpose you would reasonably consider consistent with it. If we want to use it for a new, unrelated purpose, we will ask you first.

5. Consent and how to withdraw it

We collect, use, and disclose personal information with your consent, except where the law permits or requires otherwise. By creating an account and entering information, you consent to the handling described in this policy. For sensitive information, your consent is express: you choose to use each tracking feature and to enter what you enter.

You can withdraw consent at any time, subject to legal and contractual restrictions and reasonable notice, by deleting the relevant content, turning off a feature, deleting your account, or writing to privacy@mybabybase.com. Withdrawing consent may mean we can no longer provide some or all of the Service.

6. When we share information

We do not share your personal information except as described here.

• With people you invite. A partner or co-organizer you add to your space can see the content in it. Guests you invite see what you share with them. If partners separate, either of them can choose to give the person leaving their own copy of the shared family records.
• Through links you create. Registry, name list, reveal, invitation, and announcement pages are visible to anyone with the link. Treat them as public.
• In the community. What you post is visible to other users, along with your display name.
• With service providers who process information on our behalf and under contract — hosting, database, storage, authentication, email delivery, analytics, crash reporting, and payment processing. They may use it only to provide services to us.
• For legal reasons — where required by law, subpoena, warrant, or court order; to investigate suspected illegal activity or breach of our Terms; or to protect the rights, safety, or property of any person.
• In a business transfer — see section 8.
• With your consent, for anything else.

We may also share aggregated or de-identified information that cannot reasonably be used to identify you.

7. We do not sell your information

We do not sell your personal information, and we do not share it for cross-context behavioural advertising or targeted advertising. We do not disclose your pregnancy or health-related information to advertisers, data brokers, insurers, or employers.

A transfer of the business as described in section 8 is not a sale of personal information for these purposes.

8. Business transfers

We may transfer or disclose personal information in connection with a proposed or completed business transaction — including a merger, amalgamation, acquisition, corporate reorganization, change of control, financing, or a sale or lease of all or part of our business or assets — or in an insolvency or bankruptcy proceeding.

This expressly includes transferring the Service and its data from an individual proprietor to a corporation or other entity we form or acquire.

Where we do this, we will comply with section 7.2 of PIPEDA and equivalent requirements: the information disclosed will be limited to what is necessary for the parties to decide whether to proceed and to carry out the transaction, the recipient will be bound by agreement to protect it and to use it only for that purpose, and if the transaction does not close the information will be returned or destroyed.

If a transaction completes, the successor may continue to use your personal information as set out in this policy. We will notify you of any change in ownership or in the uses of your personal information, and of any choices you may have, before it takes effect.

9. Where your information is stored

We use service providers that may store and process personal information outside Canada, including in the United States and other countries. Our database, file storage, authentication, and hosting are provided by third parties operating in those jurisdictions.

While personal information is in another country, it is subject to the laws of that country and may be accessible to its courts, law enforcement, and national security authorities under those laws. We use contractual and other means to require comparable protection while it is processed on our behalf.

If you are in the European Economic Area or the United Kingdom and we transfer your personal data out of it, we rely on appropriate safeguards such as the European Commission’s standard contractual clauses or an adequacy decision. Canada holds a partial adequacy decision from the European Commission for commercial organizations.

You may ask us for information about our policies and practices regarding service providers outside Canada by writing to privacy@mybabybase.com.

10. Retention and deletion

We keep personal information only as long as we need it for the purposes described in this policy, or as long as the law requires. In practice, we keep your account information and content while your account is open. Records of past pregnancies and of your children are kept until your family removes them.

Deleting your account

You can delete your account and its associated content at any time from within the Service — open Settings and choose to delete your account. You can also ask us at privacy@mybabybase.com and we will action it.

When you delete your account, we delete or irreversibly anonymize your personal information, except that:

• content you shared with others or posted publicly may remain visible to them, or may have been copied or saved by them, and we cannot retrieve those copies;
• content in a shared family space may be retained by the other member of that space, whose copy is their own;
• residual copies may persist in encrypted backups and logs for a limited period before being overwritten in the ordinary course; and
• we may retain what we must to comply with legal obligations, resolve disputes, prevent fraud or abuse, and enforce our agreements — for example, a record that an account was banned for abuse.

11. Security and breach notification

We use safeguards appropriate to the sensitivity of the information, including encryption in transit, encryption at rest for stored files, access controls, row-level authorization rules so that one household cannot read another’s data, and limiting internal access to what is necessary. Pregnancy documents you upload, such as scans and lab results, are kept private to your family space and are opened through short-lived signed links, not public addresses.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your password confidential and for the devices you use.

If a breach of security safeguards occurs that creates a real risk of significant harm to you, we will report it to the Office of the Privacy Commissioner of Canada and notify you as required by PIPEDA, and we will keep records of breaches as the law requires.

12. Your privacy rights

Everyone

Under PIPEDA you may ask to access the personal information we hold about you, to know how it has been used and to whom it has been disclosed, and to have it corrected if it is inaccurate or incomplete. You may also withdraw consent as described in section 5.

Write to privacy@mybabybase.com. We will respond within 30 days, or tell you if we need an extension the law permits. We may need to verify your identity first, and we may decline a request where the law allows — for example, if granting it would reveal personal information about another person. If we refuse, we will tell you why.

Quebec

If you are in Quebec, you also have rights of de-indexation and portability, and the right to be informed about automated decision-making. We do not make decisions about you by automated processing alone.

European Economic Area and United Kingdom

If the GDPR or UK GDPR applies to you, you have rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your supervisory authority. We process your data to perform our contract with you, on the basis of your consent for sensitive data and optional features, and for our legitimate interests in securing and improving the Service.

United States

If you are a resident of California, Washington, Nevada, Virginia, Colorado, or another state with a comprehensive privacy or consumer health data law, you may have rights to know, access, correct, delete, and obtain a copy of your personal information, and to appeal a refusal. As stated in section 7, we do not sell personal information or share it for cross-context behavioural advertising, including any consumer health data. Contact us at the address above to exercise these rights. We will not discriminate against you for doing so.

13. Children

The Service is for adults aged 18 and over. We do not knowingly collect personal information from children, and the Service is not directed to them.

Information you record about your pregnancy, your baby, or your child is collected from you, as an adult, and is treated as your personal information. If you believe a child has provided us with personal information, contact us at privacy@mybabybase.com and we will delete it.

14. Cookies and analytics

We use cookies and similar technologies that are necessary to run the Service — keeping you signed in, remembering preferences, and protecting against fraud and abuse.

We use privacy-oriented analytics to understand aggregate usage — which pages are visited and whether features work. We do not use advertising cookies, we do not run third-party ad trackers, and we do not build advertising profiles about you.

You can control cookies through your browser settings, though blocking necessary cookies may prevent you from signing in. On mobile, you can limit ad tracking through your device settings.

15. Third-party services

The Service relies on third parties to function, and links to others. These currently include providers of hosting and analytics, database and file storage, authentication (including Google and Apple sign-in), email delivery, and payment processing.

When you follow a link to a third-party site, or sign in with a third-party account, that third party’s own privacy policy governs what they collect. We do not control them and are not responsible for their practices. We encourage you to read their policies.

16. Changes to this policy

We may update this policy from time to time. If we make a material change — particularly a change to how we use or disclose sensitive information — we will take reasonable steps to notify you before it takes effect, such as by posting a notice in the Service or emailing you, and we will update the “Last updated” date at the top of this page.

Your continued use of the Service after a change takes effect means you accept it.

17. Contact us and how to complain

Our privacy officer is responsible for our compliance with this policy. To ask a question, exercise a right, or make a complaint:

Faran Tareen, an individual carrying on business as MyBabyBase
Privacy Officer
Email: privacy@mybabybase.com
Web: https://www.mybabybase.com

We will acknowledge your complaint, investigate it, and tell you the outcome. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada. If you are in Quebec, the EEA, the UK, or a U.S. state with its own regulator, you may also contact your local privacy authority.