Privacy & data

Privacy & data notice · October 19, 2026

Your Our Baby Hub account

When you register using Google or an email sign-in link, we store your account identifier, email address, selected parenting stage, preferred plan, email-update preference, data-notice version and registration/update timestamps. We use these records to manage your account and save your preferences. Choosing a plan is not a purchase or subscription. After signing in, you can create your own Free family workspace. Paid features require an active subscription.

Account registration does not opt you into promotional emails. You may opt in separately and change that choice on your account page. Restricted administrator reporting uses aggregate counts. The administrator can see the email address and reference for a pending deletion request, but the reporting screen excludes family care notes and chat contents. Verified administrator email and an authenticator code are required. Dashboard access is logged; entries older than 90 days are removed when a later dashboard visit occurs. We do not collect payment details in this flow.

Supabase manages authentication and login sessions. Google processes Google sign-in, and Resend delivers requested sign-in, account welcome and subscription messages. We temporarily store pending transactional email content, then clear that content after delivery acceptance or when the retry window expires. Delivery metadata is retained for up to 90 days and cleared during later email processing. Private care notes and personal notebooks are not included in these emails. Essential cookies keep you signed in and complete the secure login process. Open email sign-in links in the browser where you requested them. Existing ChatGPT registrations remain available through the legacy account link; accounts are not automatically merged.

Product updates

We store the email address and parenting stage you submit, along with the submission date. If you opt in, we use this information to send occasional Our Baby Hub tips, research links and product updates. Account and billing emails are separate from optional newsletters. Submitting the product-update form does not create an account or a paid subscription.

The site uses a hashed network identifier to limit repeated submissions. Identifiers older than a day are cleared when later submissions are processed. Hosting providers also process technical request information needed to operate the website.

Family workspaces

Supabase stores your family name, member display names, pregnancy stage, estimated due date or birth date, timezone, checklist and care logs. Access is restricted to members of your family. Every plan includes shared care: Free lets you invite 1 user, Plus 3 users, and Premium 6 users, in addition to the owner. These limits count people who can add or edit records; read-only viewers do not count. The owner chooses each person’s role and shared categories. Pending email invitations for users who can add or edit reserve places until accepted, revoked or expired. Read-only viewer invitations do not reserve a place. Co-parents can manage shared care records, appointments and preparations. Caregivers can record and delete their own feeding, sleep and diaper entries in the categories the owner shares; editing saved care entries requires Plus or Premium. Viewers have read-only access. Checklist access shares the full checklist; appointment access includes only visits explicitly marked for sharing, including their notes and location. Pregnancy information and family dates are hidden from caregivers and viewers unless the owner explicitly grants that access. The owner chooses permissions and can set an access expiration or remove access. Each account uses its own login and may join more than one family; workspace data stays separate. Invitation codes are tied to a verified email address, expire after seven days or earlier if access ends, and can be accepted once. Share an invitation only with the person you intend to invite. We store invitation email addresses, roles, shared categories, optional relationship labels, expiration dates and acceptance/revocation status. Care records retain the original author and last editor attribution. A family activity log records who joined, changed access or saved/deleted records, with timestamps and record references; it does not copy care content. Removing a member ends access and preserves earlier shared entries and attribution. Free workspaces include personal planning and core care logging; family sharing and shared appointments require an active paid plan. Personal timezone preferences stay with each account. The service owner may access data to operate the service or respond to support and deletion requests.

New family workspaces start separately. If you explicitly request a migration from your original private workspace, its records may be copied into your selected family. A personal read-only import archive is visible only to the account it belongs to while that account retains family access. Imports do not continuously sync with the original app. Your requested plan is a preference and does not activate a subscription. Plus and Premium parents may choose to enable private AI Companion chat.

For You and practical help

Your personal check-ins, daily priority, notes and care-team questions are stored in your account and visible only to you within the app. They are separate from family records and remain private when you share your workspace. If you choose to ask for help, you review a separate support request before saving it to the family checklist. Support requests contain the title, help category, optional helper name, due date, details, status and related appointment reference you enter, and follow checklist access permissions. Copying a request prepares a message for you to send; the app does not contact or invite a helper automatically. Your private Parent Care entries are included in your account export. You can delete individual notes.

Saved Companion sharing and PDF export

Your saved Companion library is private by default. When you explicitly create a share link for one conversation or saved message, we store a read-only copy of that selected content and its title, together with your account and family references, creation and expiration dates, and a hash of the random link token. Anyone with the link can view that copy without signing in. The link expires after seven days, and you can disable it from your saved library. Disabling removes the shared copy and prevents further link access; copies a recipient already viewed, downloaded or forwarded cannot be recalled. Sharing one item does not share other chats, folders, personal preferences or workspace access. PDF exports are generated on your device from the selected content; a PDF may be stored or shared outside this app.

Optional AI Companion

AI chat, family workspace context and automatic saving are optional and start off. You control them in Companion options; workspace context and automatic-saving consent are separate for each parent and family.

What is sent when you ask

AI chat: your question and up to six recent exchanges from that private conversation are sent to OpenAI to generate a reply.
Family workspace context, if enabled: a current, limited snapshot of shared pregnancy or baby dates, timezone, open tasks and support requests, upcoming appointments, visits needing review, and recent care logs. Task helper names, shared details and appointment notes may be included. Information you put into these fields may identify someone.
Automatic saving, if enabled: your family timezone, the local date, your member display name and names of members eligible for task assignment help interpret your request. This is separate from the shared-record snapshot switch. The server checks permission and validates each proposed record before saving. No email or phone number is included in this action context.
Not included automatically: personal For You notebooks and care-team questions, other members’ private chats, imported archives, account email addresses, billing details or the family name field. Anything you type or paste into a question is still sent as part of that question.

Files you attach

When you send a message with attachments, the selected files are sent to OpenAI to help answer that message. Supported formats include PDF, Word, Excel, PowerPoint, CSV, TSV, text, PNG, JPG and WebP, up to three files at 3 MB each and 6 MB total. Files are processed in transit; Our Baby Hub does not keep the original files in a document library. File names and successful questions and answers remain in your private chat and may quote file contents. Originals must be reattached for detailed follow-up analysis or a regenerated answer. Provider processing and retention below still apply. Office document images and charts may not be read; use PDF for visual content. Spreadsheet analysis may include only the first 1,000 rows per sheet and does not recalculate your workbook. Files do not authorize automatic saves: review any proposed workspace entry yourself. Each successful answer uses one reply from your existing family allowance.

What workspace access covers

The Companion reads shared records to provide summaries and suggestions. Use Add to workspace beneath a reply to review and save a task, reminder or appointment, or select an existing item to update. With review enabled, only the fields you review and save become shared workspace records under your family’s permissions; your private conversation is not automatically shared. Saving through this form does not contact OpenAI or use an additional reply. If you separately enable Automatically save my requests, clear new-record requests can save without review. This starts off and applies only to your account in the selected family. Tasks, appointments and care logs follow family sharing permissions; notes and care-team questions stay in your private For You notebook. Missing details require clarification. Edits, deletions, childcare communications, billing and permission changes require manual action. Save-result cards show what was created and where. We retain your preference and save receipts to prevent duplicate retries. Turning automatic saving or AI off stops new automatic saves; previously saved records remain in their sections even if you delete the chat. Task assignments and due reminders appear in the assigned member’s notification bell while they use the app; no push, text or email alert is scheduled. Appointments can be added to a personal calendar from the Appointments section. Access is checked against your current family membership and Plus or Premium eligibility. Each request uses fresh data rather than a continuously connected feed.

Care logs normally cover the last seven days, today when requested, or 30 days for monthly questions. Lists include up to 30 care entries, 40 open tasks, 20 upcoming appointments within 90 days, and 10 visits needing review. Long text and lists may be shortened further. Replies show the coverage, check time and links back to workspace sections. A limited snapshot is not a complete medical or family history.

How information is protected

Connections to our services use HTTPS. Server-side authentication, family membership checks and database access controls restrict access to shared records. Companion conversations and saved replies are stored in Supabase privately to your account. Other family members, including your partner and people with full-workspace viewer or editor access, cannot read them through their own logins. The family shares a reply allowance, not chat history. Enabling family workspace context does not share your chats or let another parent’s Companion read them. Each person should use a separate login. OpenAI API credentials remain on the server. We do not sell your family records.

Authorized service operators and providers may access information as needed to run the service, investigate issues or meet legal obligations. These protections are not a guarantee against every security risk, and this is not end-to-end encrypted messaging: our services and OpenAI must process the information needed to answer you.

OpenAI processing and retention

OpenAI states that API inputs and outputs are not used to train its models by default, unless the API account owner explicitly opts into data sharing. We disable optional response storage in our API requests. This does not mean no provider retention: OpenAI may retain abuse-monitoring logs, normally for up to 30 days or longer when legally required, and temporary prompt-cache data. We do not claim Zero Data Retention. See OpenAI’s current data controls.

Your controls and saved chats

Edit a message: saving a correction does not contact OpenAI or use a reply. We retain the original wording so you can see what the existing answer was based on. Requesting an updated answer sends the revised question under your current AI settings and uses one reply when successful. Earlier versions remain in your private data export until you delete the conversation.
Turn workspace context off to stop new workspace reads. Earlier replies may still contain workspace information and may be included with follow-up questions. Start a new chat to avoid sending those earlier exchanges.
Turn AI off to stop new Companion questions from being sent. This does not erase existing chats or recall information already processed by a provider.
Export or delete a conversation in Companion options. Deleting clears its question and answer text and removes it from private history and Saved. Request timestamps, account/family references and completion status remain for usage enforcement. Previously exported PDFs and separately created share-link copies are not recalled; disable share links separately.

We store successful questions and replies, which may repeat information from your workspace. We do not save a separate copy of the raw workspace snapshot in the chat database. Consent preferences are included in your account export. Provider logs and backups follow their own retention rules; deleting a chat here does not promise immediate removal from every provider system or backup.

Replies and usage

AI answers may be inaccurate and do not replace your care team. Plus includes 50 replies and Premium includes 100 replies per family per UTC calendar month, with up to 20 requests per UTC day for the family. These allowances are shared by the workspace owner and co-parents, not allocated separately to each user. Caregiver, viewer and editor roles do not include Companion access, even with full-workspace sharing. Each family workspace has its own plan; an invitation does not upgrade another workspace you own. Failed replies do not count toward the monthly allowance. Our Baby Hub pays the API usage cost; users are not charged per question.

Your Week Ahead is an optional weekly educational email for every plan. Newsletter consent is separate from occasional product news and offers. No existing account, invitation or product-updates preference automatically subscribes you. An explicit request sends a confirmation link that expires in 48 hours; opening the link does not subscribe you until you select the confirmation button. Weekly delivery is being prepared and is currently off.

We store your newsletter email, chosen stage and parent role, optional estimated due date or birth date, timezone, subscription status and dated consent history. Newsletter dates are saved separately from your family workspace and can be changed in Settings. They select curated educational content; private notes, chats, appointments and care logs are not used. Resend receives your email and newsletter topic choice when you confirm, and receives the stage-relevant email content when we send. Newsletter dates and private workspace records are not added to Resend contact properties.

Every weekly edition includes an unsubscribe link, email preferences and a one-click unsubscribe header. You can unsubscribe without signing in, or use Settings. This stops future newsletter delivery and does not change authentication, account or billing emails. Requesting account deletion also stops newsletter delivery. Delivery records are kept for up to 90 days; consent history and your saved newsletter preferences are retained until account deletion is completed. Your data export includes newsletter preferences, consent events and delivery metadata. No open or click tracking is enabled for this sending domain.

Reporting and retention

We measure aggregate account, family and saved-record counts, plan preferences, active paid entitlements and recent record updates. Recent updates are an activity proxy, not a complete history of visits or retention. We store daily aggregate event counts for completed sign-ins, failed sign-in callbacks, new registrations, family creation, successful record saves and selected server errors. These counters contain only a date, fixed event name and count; they do not contain email addresses, user or family identifiers, care content, chat messages or error details. Daily totals older than 90 days are removed on the next recorded event. Optional page-load and feature-preview counts are off by default; you can allow or turn them off on this privacy page. Your choice is saved only in this browser, and supported Do Not Track or Global Privacy Control signals disable these optional counts. No unique visitor tracking is performed. We have not added advertising trackers, session replay or behavioral analytics cookies. We do not sell your family records. Account and family data remain available while your account is active unless you remove them or a deletion request is fulfilled. Hosting, authentication and email providers may retain operational records and backups under their own retention rules; a completed request does not imply that every backup copy disappears immediately.

Optional counts of page loads and feature previews. Off by default; no visitor identifiers.

Childcare plans

Babysitter, daycare and preschool plans are private to the parent who saves them, within their selected family workspace. They are included in that parent’s data export and can be cleared in Childcare. They are not automatically sent to providers, shared with other workspace members or included in AI workspace context. Childcare updates, questions and tasks are separate from private plans. Shared posts and their replies are visible to active family parents and the named recipient while their plan and permissions allow access. Tagged caregivers need care access and can respond only in threads shared with them. The notification bell shows mentions and replies; it does not send texts or email. Authored posts and replies that remain accessible are included in your export. You can remove your shared post and its replies; downloaded or copied information cannot be recalled. These communication records are not included in AI workspace context. Copying or printing a care sheet creates a copy under your control; clearing a saved plan cannot recall copies you have already shared.

Calendar connections

Parents on Plus or Premium can create a private, read-only calendar subscription for their selected family workspace. You choose whether it includes upcoming appointments (titles, dates, times and locations) and your dated checklist tasks (assigned to you, or your own unassigned tasks). Notes, care logs, chats and private notebooks are excluded. We do not request access to your Google, Apple or Microsoft account or read your other calendars. Your calendar provider receives the items when it fetches the subscription.

The private link acts as an access key: anyone who has it can read its selected items. Store it only in calendar services you trust. Each parent manages their own link. You can change its contents, replace it or disconnect it in Settings → Connections. Replacing or disconnecting stops the old link; loss of parent access or an eligible plan also prevents new reads. Calendar apps control refresh timing and may keep copies already downloaded. Remove the subscribed calendar from that app to clear its copies. Changes made in an external calendar do not update Baby Hub. This feature does not schedule email or text reminders.

Optional Google Calendar connection

Each parent on Plus or Premium can separately authorize their own Google account in Settings → Connections. Google sign-in and calendar authorization are separate. Connections belong to the individual account and do not give co-parents or helpers access. Google grants event access on calendars you own; this version uses only the primary calendar. Client secrets and user access and refresh tokens are encrypted on the server and never returned to the browser.

Select Use Google Calendar for this question to include up to 30 events in the next seven days in a Companion answer. Their titles, start and end times, and locations go to OpenAI with that question; descriptions, attendees and email addresses are excluded. We do not save a separate raw calendar snapshot in the chat database. Saved answers may contain calendar information, and earlier exchanges may be sent with follow-up questions. The checkbox resets after a successful reply. Start a new chat to leave earlier information behind. Questions use the existing family reply allowance.

Creating a Google event requires a separate review form and explicit confirmation. Only its title, date, time, duration and optional location go to Google. The form creates no attendee invitations, email messages or reminder alerts. Google events and Baby Hub appointments are separate records. Automatic workspace saving does not authorize Google writes, edits or deletions. Disconnecting removes stored user credentials and attempts to revoke the Google grant; if revocation cannot be confirmed, finish under Google Account → Third-party connections. Existing Google events and saved chats remain. Account-deletion fulfillment includes removing stored connection credentials. Google user data is used for the features you request, not advertising or training generalized AI models.

Optional Google Drive and Gmail connections

When configured and available, parents on Plus and Premium can connect Drive or Gmail separately in Settings. These connections belong to each account, not the shared family. Drive uses Google’s file picker and the drive.file permission for selected files. Google Docs, Sheets and Slides are exported through Drive as supported documents. A short-lived Drive token is supplied to Google’s picker in your browser; refresh tokens stay encrypted on the server. The browser will not receive a token with broader Google API scopes for this picker.

Gmail requires read-only mailbox permission to search for and retrieve selected messages. Searches return up to ten message subjects, senders and dates. Message text is retrieved only when you select a result, is limited to 100,000 characters and excludes attachments. Baby Hub does not monitor your inbox or send, delete or change email. Gmail availability depends on Google setup and any required restricted-scope approval.

You review a selected item before attaching it. The attached copy is sent to OpenAI only when you send your Companion question. It follows the existing three-file, 3 MB per-file and 6 MB total limits and reply allowance. Imported content is untrusted reference material and cannot authorize automatic record creation or external actions. Baby Hub does not save a separate imported original; information in your question or answer may remain in private chat history. Original files may need to be reattached for follow-ups. Google data is not used for advertising or training generalized AI models.

Disconnecting Drive or Gmail removes that service’s stored credentials from Baby Hub. To revoke Google’s grant, use Google Account → Third-party connections; this may also disconnect other Google services authorized for this app. Existing chats and originals in Google remain. Account-deletion fulfillment must remove all stored Google service credentials.

Your choices

You can turn AI off in the app. Product-update emails, when sent, will include a way to request removal. Stripe processes payments and stores full payment credentials. Our Baby Hub stores subscription identifiers, plan status, paid-access dates and cancellation details. The family payer can view billing email, payment-method summary and invoice links in Settings. To request deletion of your registration or other account data, contact the owner below. After signing in, your account page lets you download a JSON copy of your public account details and records you authored that remain accessible to you. The export includes your accessible personal import archive and excludes other members’ records, unimported original private-app data and provider security logs. You can also submit an account-deletion request there. Requests are reviewed and fulfilled manually across services; submitting one does not immediately erase your account. Shared-family records may require coordination with other family members.

Questions or removal requests

Email privacy@ourbabyhub.com to ask about your data or request removal from the updates list or deletion of your registered account.