Last updated September 30, 2026. Questions? Contact us.

Postpartum+ touches a sensitive part of life. This policy explains, plainly, what we collect and why. The short version: we collect what you give us to run the service, we do not sell it, we do not run advertising trackers, and you decide what other members can see.

1. Who we are

The operator of Postpartum+ decides how your information is used and is responsible for it under privacy law (the "controller").

You can reach us about privacy through the contact page (topic "Account or data request").

2. What we collect

• Account. Your email address and a password (stored hashed by our authentication provider). Optionally a display name, profile icon or photo, the role you chose (mom, dad or partner, family member…), city and state, bio, interests and baby's stage.
• Your consent records. Which version of the Terms, the Privacy Policy and the health-data consent you accepted, when, and that you confirmed you are 18 or older. The Terms version you agreed to at sign-up is also recorded on your profile, with the time our server received it.
• Things you create. Posts, replies, votes, saved items, Moments and photos, poll answers, event RSVPs and proposals, calendar items, care notes, care comparisons, reviews of providers in Find Care (stars, what you wrote, the insurance you used, the month of your visit if you give it), shared-space items, check-ins, your last Village Score and its eight answers, messages and reports.
• Family Assistance Fund applications. The kinds of help you ask for and the amount, household size, children under 5, city and state, insurance status, income band, what you need and what is in the way, how urgent it is, the program or vendor and its contact, and your permission for us to verify. Reviewers add their scores, recommendation and notes.
• The donor launch list. If you join it: your email, your name if you give it, whether you are a person or an organization, how you would like to help and any message. It holds no amounts.
• Forms you send. The contact form, feedback, Write for Postpartum+ and the organizations form: your name, email, organization, city and state where asked, and what you write. Feedback can be anonymous.
• Searches. When you search Find Care for providers, the city, town or ZIP you type (or, if you choose "Use my location", your coordinates, or, when you open a search from your Navigator plan, the city you gave it) goes to our search function, which places it with a ZIP code table of its own and asks the public directories for providers near it; it asks a free map service only about a place the table doesn't know. Childcare and places-to-go searches go from your browser straight to OpenStreetMap and other free map services. Your last search, distance and insurance choice are kept on your device so the next search starts there. We do not store your location in your profile.
• The Navigator. What you tell it: your role, the baby's age, what is hard, your city and state, your insurance type and anything you write in your own words. Signed out, the plan is built in your browser and nothing is sent; its first three steps and your city stay in your browser for two weeks so they are there when you come back (never what you wrote), and Forget this plan removes them. Signed in or out, which of those three steps you tick as done stays in your browser for two weeks: the step numbers, never the words of the plan. Signed in, if you ask for a tailored plan, it goes to our Navigator function and the plan is saved to your account, where you can delete it.
• Village. The family name you choose, and if you like the baby's name, a date and a short note, plus the ways to help you list. Someone who claims a slot gives a first name and, if they choose, a way to reach them. A list you start before you have an account stays in your browser, and is sent to us only when you create an account or sign in to get its link.
• Safety records. If you report something, ask for a review of a decision, or something you posted is reviewed, we keep a record of it and of any decision, so decisions can be checked and appealed. If you are asked to confirm your age, we keep only whether you meet the minimum, never your date of birth. If you send a legal request (an intimate image shared without consent, a copyright notice, a child-safety report), we keep what you tell us to handle it.
• Linked calendars. The private calendar address you paste (stored encrypted), a name and a color.
• Payments. We do not take payments. Postpartum+ has no paid membership, and we never ask for card details.
• Emails you asked for. If you join the weekly note, your email and the role you chose. People who accepted an invitation to a shared support space get a Sunday note of the week ahead, with a one-click unsubscribe.
• How you use it. When you are signed in we record which features you use, such as "made a village page", never what you wrote and never health details: not what is hard, the baby's age, scores or notes. For Find Care we record the kind of search only for childcare and places to go. We use these to count how the product is used.
• How you found us. The campaign tag on the link you first arrived by (for example "flyer"), or the name of the website that linked you, never the full address. It is kept in your browser for 90 days and added to your account if you sign up, so we can tell which outreach is worth doing.
• Technical. Standard server logs from our hosting providers (IP address, browser, pages requested) used for security and reliability. Vercel's analytics count page visits and which features are used (as counts: a plan built, a list made, a search run, never what was written or ticked, and never who) and measure page speed, all without cookies; they are given the page's address without private links, codes or ids, and nothing at all from the safety and reporting pages. We do not use advertising trackers, advertising pixels or third-party analytics cookies, and we never share what you do here with advertising platforms.

3. Health information and your consent

Some of what you share is health information: that you are pregnant or recently gave birth, your baby's stage, your check-ins, what you tell the Navigator, the kind of care you search for, and parts of a Fund application. When you sign up we ask, separately from the Terms, whether you agree that Postpartum+ can store the health information you choose to share to run the features you use. We record that consent with its date.

We use health information only to provide the features you use. We do not sell it, use it for advertising, or share it except with the service providers that run Postpartum+ for us, as described below. You can withdraw your consent at any time in your account, under Your data; that deletes your check-ins and Navigator plans and clears your baby's stage. The Consumer Health Data Privacy Policy has the details.

4. Who can see what

What "only you" means. This table is about other members and the public. The service providers below store your information so the service can run. A small number of authorized Postpartum+ staff can access it when needed for support, safety or legal reasons, under access controls, and admin views, changes and exports are logged.

5. How we use information

To run the service you signed up for: showing your content to the audience you chose, sending account emails (confirmation, password reset), sending the emails you asked for, notifying you about replies or requests if you keep those on, writing a tailored Navigator plan when you ask for one, reviewing reports and Fund applications, screening new community posts for safety (see below), handling legal requests, answering your messages, and keeping the service safe and reliable. We also count, in aggregate, which features are used and which outreach brings people who stay, so we spend our time on what helps; those counts never carry health details. We do not share personal information with providers, advertisers or data brokers.

6. The Navigator and Anthropic

When you are signed in and ask for a tailored plan, we send Anthropic what you entered in the Navigator: your role, the baby's age, what is hard, your city and state, your insurance type and anything you wrote in your own words. We do not send your name, email or anything else from your account. Anthropic's model, Claude, writes the practical parts of the plan: a summary, up to three practical steps, and questions for a dad or partner, family, childcare or insurance admin. The steps about care, the questions for your clinician and the safety note come from our own fixed text, not from AI. The Navigator never diagnoses and never suggests a treatment or a level of care.

Anthropic processes this for us under its commercial terms, which do not allow it to train its models on what we send. It may keep it for a limited time to monitor for misuse and safety. We keep your plans until you delete them or your account. Signed out, the plan is built in your browser and nothing is sent.

7. Services we rely on

• Supabase hosts our database, authentication and file storage.
• Vercel hosts the website and provides cookieless visit counts, counts of which features are used, and speed measurements.
• Resend delivers the Sunday note and the other emails we send.
• Anthropic provides the AI model that writes the practical parts of a tailored Navigator plan (see above), and that helps screen community posts for safety when screening is switched on. For screening, only the words of the post, reply, comment or profile being checked are sent, without your name, account, location or anything else about you; private messages are sent only if someone in the conversation reports them. A person makes every decision to remove content or restrict an account.
• Calendar hosts (Google, Apple iCloud and Microsoft Outlook). When you open your calendar, our server fetches the calendars you linked from them, using the private address you gave us.
• Push services (Apple, Google, Mozilla, Microsoft) deliver encrypted notifications to devices you turned them on for.
• Public directories and map services (U.S. CMS NPI Registry, OpenStreetMap / Nominatim, Photon by komoot, Zippopotam.us) receive the location you search when you use Find Care. The map services see it directly from your browser, along with your IP address, as any website you visit does. Our search function looks up the providers it shows in CMS's Medicare clinician data (Doctors and Clinicians) by their registry number, and places ZIP codes with GeoNames data it keeps itself, so neither learns anything about you.
• Google, if Postpartum+ turns on Google ratings in Find Care: when you open a provider's reviews, our search function sends Google that provider's name and address to fetch its rating. Nothing about you is sent.
• Pexels serves the stock photography on public pages. Fonts are served from our own site.

Supabase, Vercel, Resend and Anthropic process data on our behalf, only to provide their service to us.

8. No sale, no targeted advertising

We do not sell personal information, and we do not share it for targeted advertising or profiling. Because we do neither, there is nothing to opt out of. We still honor the Global Privacy Control signal: if your browser sends it, we treat it as a request to opt out of sale and targeted advertising, and nothing about how the site works for you changes.

9. Your rights and choices

Wherever you live, you can ask to:

• See the personal information we hold about you (access);
• correct it if it is wrong;
• delete it;
• take a copy in a format you can reuse (portability); and
• withdraw your consent to us storing health information.

How. Signed in, go to your account, under Your data, to download your data or withdraw health-data consent, and tap your picture at the top, then Delete account, to delete your account. Deleting your account also deletes what you posted in Discussions and circles, and the replies to it. You can also edit your profile, post anonymously, turn notifications off, and delete your own posts, Navigator plans and village page yourself. Or ask us through the contact page (topic "Account or data request").

Verification. To protect you, we act only on requests that come from your signed-in account or that you confirm from the email address on the account. Someone you authorize can ask for you; we will confirm with you before acting.

Timing. We answer within 45 days. If we need longer, we can extend once by another 45 days, and we will tell you why within the first 45.

Appeals. If we turn down a request, you can appeal through the contact page (topic "Privacy appeal"). We answer appeals within 60 days and explain our decision in writing. If we still refuse, you can contact the attorney general of your state.

We will not treat you differently for using any of these rights. You can also clear this site's data in your browser to remove the note of how you found us.

10. How long we keep it

When you delete your account (tap your picture at the top, then Delete account) we delete it, with your profile and photos, your private notes, check-ins and plans, messages you sent, and what you posted in the community along with the replies to it. Circles you started stay for their members without your name. Reports you made, and safety or legal records we must keep, stay without your name. Family Assistance Fund records may be kept without your name where needed for accounting. Backups held by our database provider roll off on its fixed schedule, and deleted data leaves them as they do. Server logs are kept by our hosting providers for their own short periods.

Safety records after deletion. Some safety records stay after an account is deleted, because they protect other members and let decisions be checked: moderation decisions and their log, reports other people made, legal requests, and a short excerpt of content that was reported. We clear those excerpts, and what reporters wrote, a year after a case closes. If an account was suspended or banned, we keep a one-way fingerprint of its email (not the address) until the suspension would have ended, or for good after a ban, so we can notice a return. Where the law requires us to preserve information, for example after a report to the National Center for Missing & Exploited Children or a preservation request from law enforcement, we keep it for as long as that requires, and an account under such an obligation is deleted once it ends.

11. Security

Data is encrypted in transit and at rest by our providers, and linked calendar addresses are encrypted again in our database. Access to member data is restricted with database-level rules so members can only read what this policy says they can. Photos in Moments are served through short-lived signed links; profile photos are public links. Admin views, changes and exports are logged. No system is perfectly secure.

12. If something goes wrong

If a security breach affects your information, we tell you, and the regulators the law requires (such as the Federal Trade Commission and state attorneys general), as the law requires and without unreasonable delay. We will say what happened, what information was involved, what we are doing, and what you can do.

13. Children and babies

Postpartum+ is for adults. You must be 18 or older to have an account, and we do not knowingly collect information from anyone under 18. If we learn an account belongs to someone under 18, we close it to the community straight away and delete it, with its information, within 30 days.

Parents naturally share things about their babies: a name on a village page, a due date or stage, a birthday for Week by week. Share only what you are comfortable with. The baby's birthday stays on your device. Please do not post identifying information about children in public discussions.

14. Changes

We post any new version here with its date. If we change this policy in a material way, we tell you on the site and ask you to accept it again before you keep using your account.

15. Contact

Privacy questions and data requests: the contact page (topic "Account or data request"). Appeals: the contact page (topic "Privacy appeal").