Consumer Health Data Privacy Policy

1. What we treat as consumer health data

• •Your baby's age: as a range of months (4–5, 6, 7–9, 10–12) and, in the longer check, also as months and weeks. Never a date of birth.
• •How your baby is getting milk right now — breast, formula, both, or mostly solids.
• •How many solid meals happen on a normal day, and how mealtimes are going — for example a few bites, or turning away.
• •How many different foods your baby has tried, as a range.
• •Which of the nine common allergens have already been introduced.
• •Whether your baby has ever had a reaction to a food that you noted.
• •Which signs of readiness you have noticed, if we asked (4–6 months).
• •What the pediatrician said at the last visit, if we asked (7–12 months).
• •Whether there is a food allergy in the family. We keep the consequence of that answer, not the answer: it becomes a flag that says “start the first doses more slowly”, because the answer itself is information about people who never spoke to us.
• •What is hardest for you about feeding at the moment.
• •Not your baby's name. We stopped asking for one, so there is none to store, none on your files and none on the page behind the QR code on your fridge sheet.

2. How we collect it

Only from you, and only from the quiz. We do not buy health data, we do not infer it from other sources, and we do not collect it from a device sensor or a health app.

Only after you agree. The first question that asks about feeding carries that agreement under its answers, and the answer is not accepted until you tick the box — so nothing on this page is collected before you have agreed to it. We record when you agreed and which version of that text you saw.

In three lines, that agreement is this:

• •Only the option you tap. It is kept as a short code, never as free text.
• •Never for advertising. No advertising platform receives these answers, in any form.
• •You can take it back. Write to us and we delete it — see sections 6 and 7.

Before the screen that asks for your email, we keep only which option you tapped, as a short code such as “allergens_tried: none”, in our own event log against a random session number. Not the sentence you read on screen, not anything you typed, and not your email — at that point we do not have one. Those codes stay in our own database: no advertising pixel and no analytics company receives them.

From the moment you enter your email, the same answers are saved next to it, in one row, so we can build the right version of the plan and so we can find and delete your data when you ask. Nothing else changes: the answers still go nowhere else.

If you leave before the email screen, what is left is a session number and a handful of option codes with no name, no email and no way for us to contact you.

3. Who this is written for

It is written for healthy, full-term babies eating by mouth; if your baby has a diagnosed allergy, reflux under treatment or was born preterm, follow your pediatrician's plan. We do not ask which one applies, and we do not store it.

4. Why we collect it

• •To choose which version of the plan you receive — the age, the allergen order and the troubleshooting section change with your answers.
• •To write the summary you see before the paywall.
• •For nothing else. It is not used to target advertising, and it is not used to build audiences or lookalikes.

5. Who we share it with

One company sees these answers: the provider that hosts our database, which stores them on our behalf as a processor and does nothing else with them.

The other companies we work with do not. So that this is a fact and not a policy, here is what each of them gets:

• •Hosting and database — stores the answers on our behalf. This is the only category that receives them.
• •Email delivery — your email address and the contents of the emails we send you. Never your answers.
• •Payments — your email address and what you bought, handled by the merchant of record. Never your answers.
• •Product analytics — which question was answered at which step, so we can see where people stop. For the questions on this page it never receives the answer itself, in any form.
• •Advertising platforms — an order id, an amount and a hashed email when you buy. Never your answers, in any form.

6. Your rights

• •Confirm whether we hold consumer health data about you and get a list of everyone it was shared with.
• •Withdraw your consent to its collection and to its sharing.
• •Have it deleted, including from our backups on their normal cycle, and have our processor delete it too.
• •Appeal if we refuse a request; if the appeal is refused you may complain to your state Attorney General.

7. How to exercise them

Write to support@wellfedbabies.com from the address you used, or by post to TBD LLC, TBD, United States. We answer within 45 days and may extend once by another 45 days, telling you why.

An authorised agent may act for you with written permission that we can verify.

8. Geofencing

We do not use a geofence around any health care facility, and we do not use location data to identify or advertise to you.

9. Employees and contractors

Only the founder has access to the database in the normal course of running the service. Contractors get access only when a specific task requires it, under a written confidentiality obligation, and it is removed when the task ends.

10. Changes and contact

We post material changes here and, for buyers, by email before they take effect. TBD LLC, TBD, United States. support@wellfedbabies.com.