Emotional crisis? Call or text 988, any time.Crisis? Call or text 988. In danger right now? Call 911. Call 988Text 988Emergency 911 Pregnant or a new parent? The National Maternal Mental Health Hotline, 24/7: call or text 1-833-TLC-MAMA
Legal

Consumer Health Data Privacy Policy

The health information Postpartum+ collects, why, who it is shared with, and how to see it, delete it or withdraw your consent.

Effective September 30, 2026. Questions? Contact us.

This policy explains how Postpartum+ handles consumer health data: information that is linked to you and says something about your physical or mental health, including pregnancy and the postpartum period. It sits alongside our Privacy Policy, which covers everything else.

1. Who this covers

It is written for people covered by Washington's My Health My Data Act, Nevada's consumer health data law (SB 370) and the Connecticut Data Privacy Act. We apply it to everyone who uses Postpartum+, wherever they live.

2. What we collect and why

Health dataWhy we use it
That you are pregnant or have a new baby, the role you chose and your baby's stage (due date or weeks since birth)To show the guides, weeks and support that fit where you are.
Daily check-ins: mood, sleep, energy, support and any noteTo show you your own check-ins and how they change. Only you can see them.
What you tell the Navigator: what is hard (which can include mood, anxiety or scary thoughts), the baby's age, your insurance type and your own wordsTo build your plan, and, if you are signed in and ask, a tailored plan that is saved to your account.
The kind of care you search for in Find Care (for example a therapist or psychiatrist) and the place you searchTo run that search. We do not save clinical search kinds to your account or to our usage counts.
Family Assistance Fund applications: insurance status, the treatment or service you need, income band and what is in the wayTo review your request against the published criteria and, if it is approved, arrange the help with the provider or vendor.
Health details you choose to put in posts, Moments, messages, a village page or a family plan (such as care contacts or insurance notes)To show them to the people you chose: discussions to signed-in members (and, only if you tick it on a post, its title and first line to visitors, without your name), circles to their members. New posts may be screened for safety (see the Privacy Policy).

We do not use health data to draw conclusions about you for any other purpose, and we do not collect it from other companies.

3. Where it comes from

From you, when you fill in your profile, check in, use the Navigator, search Find Care, apply to the Fund, or post. From people you share with, when they add to a shared space or family plan you are part of. Some things never leave your device, such as the baby's birthday you enter for Week by week. We do not buy health data or receive it from data brokers.

4. Who it is shared with

We do not sell consumer health data, and we do not share it for advertising. We share it only with service providers that process it for us to run Postpartum+, under contract:

  • Supabase: stores the database, accounts and files.
  • Vercel: hosts the website, so it handles the requests your browser makes.
  • Resend: sends the emails you get from us.
  • Anthropic: writes the practical parts of a tailored Navigator plan when you are signed in and ask for one, and helps screen new community posts for safety. It receives what you entered in the Navigator, or the words of the post being checked, never your name or email, and its commercial terms do not allow it to train on it.
  • Push services (Apple, Google, Mozilla, Microsoft): deliver notifications, encrypted so they cannot read them.

When you search Find Care, the kind of provider and the place you search go to public directories (the U.S. CMS NPI Registry and OpenStreetMap services) to fetch results, without your name or account. Other members and the public see only what you choose to post or share, as the Privacy Policy explains. We may also disclose data when the law requires it, for example to answer a valid court order.

Inside Postpartum+, only staff who need it for support, safety, Fund review or legal reasons can see consumer health data, and admin access is logged.

When you sign up we ask, as a separate choice from the Terms, whether you agree that Postpartum+ can store the health information you choose to share to run the features you use. Members who joined earlier are asked once. We record your answer and its date. We would ask you again, separately, before sharing health data with anyone for a purpose other than running the service for you; we do not do that today.

You can withdraw consent at any time in your account, under Your data. That deletes your check-ins and Navigator plans and clears your baby's stage from your profile. It does not delete posts you have made; you can delete those yourself.

6. Your rights

  • Access. You can ask whether we hold your consumer health data, see it, and get the list of every third party and service provider we have shared it with, with a way to contact them.
  • Deletion. You can ask us to delete it. We delete it from our systems and tell our service providers to delete it too. Copies in backups are deleted as the backups roll off on our database provider's fixed schedule, and are never restored into use.
  • Withdraw consent, as described above.
  • No discrimination. We will not treat you differently for using these rights.

7. How to use your rights

Signed in, go to your account, under Your data, to download your data or withdraw consent, and tap your picture at the top, then Delete account, to delete your account and everything in it. Or ask through the contact page (topic "Account or data request"). We act only on requests from your signed-in account or confirmed from the email on the account. We answer within 45 days, and if we need longer we can extend once by another 45 days, telling you why. There is no charge.

8. Appeals

If we turn down your request, you can appeal through the contact page (topic "Privacy appeal"). We answer within 60 days and explain our decision in writing. If we still refuse, you can contact your state attorney general: in Washington, the Attorney General's Office; in Nevada, the Attorney General; in Connecticut, the Attorney General's Office.

9. No geofencing

We do not set up virtual boundaries around hospitals, clinics or any other place that provides health care to identify, track or message people who enter them. "Use my location" in Find Care is used once, for the search you asked for, and is not stored.

10. Contact

Questions about this policy: the contact page (topic "Account or data request").