Consumer Health Data Privacy Policy

1. What we treat as consumer health data

• Your baby's age, as the tile you tap first: 6, 7, 8+ or 10+ months. Never a date of birth. See section 2 for when we keep it.
• How your baby is getting milk right now: breast, formula, both, or mostly solids.
• How many solid meals happen on a normal day, and what happens at the table, for example refusing the spoon or spitting food out.
• How many different foods your baby has tried, as a range.
• Which of the nine common allergens have already been offered.
• Whether your baby has ever had a reaction to a food that you noticed.
• Which signs of readiness you have noticed (6-month tile), or what the pediatrician said at the last visit (7, 8+ and 10+ tiles).
• Whether there is a food allergy in the family. We keep the consequence of that answer, not the answer: it becomes a flag that says "start the first allergens more slowly", because the answer itself is about people who never spoke to us.
• What is hardest for you right now, what matters most by the end of the month, how the allergen month feels and what you picture at the end of it. These are about your planning rather than your baby's health, but we keep them under the same rules.
• Not your baby's name or date of birth: the quiz never asks for them.

2. How we collect it

From you: your answers in the quiz, and anything you choose to tell us in an email or a refund reason. We do not buy health data, infer it from other sources, or collect it from a device sensor or a health app.

We keep these answers only after you agree, with one exception (below). The agreement is a checkbox under the first feeding question, how your baby gets milk; you cannot go on until you check it. The exception is the age tile on the first screen: tapping it is how you ask for the planner for that age, and it decides which questions you see. We record when you agreed and which version of the text you saw.

In three lines, that agreement is this:

• What. Only the option you tap, kept as a short code, never as free text.
• Why, and who gets it. To show you the planner for your baby's age and the summary before you buy, and to count answers in totals inside our own database. Only the provider that hosts our database stores these answers. No advertising platform receives them in any form; product analytics receives only the age tile, and our email provider sees which planner you got (section 4).
• You can take it back. Write to us and we stop and delete; see sections 5 and 6.

Before the screen that asks for your email, we keep only which option you tapped, as a short code such as "allergens_tried: none_yet", in our own event log against a random session number. Not the sentence you read on screen, not anything you typed, and not your email: at that point we do not have one.

From the moment you enter your email, the same answers are saved next to it, in one row, so we can show you the right planner and so we can find and delete your data when you ask. Nothing else changes: the answers still go nowhere else.

If you leave before the email screen, what is left is a session number and a few option codes with no name, no email and no way for us to contact you. Those are deleted after 90 days.

If you write to us about your baby's health, by email or in a refund reason, we use it only to answer you or to handle the refund.

3. Why we collect it

• To show you the planner for your baby's age and to tell you where you start.
• To write the summary you see before you buy.
• To count answers in totals, inside our own database only, against finishing the quiz, buying and the ad that brought the visit, so we can improve the quiz.
• For nothing else. It is not used to target advertising, and it is not used to build audiences or lookalikes.

4. Who we share it with

One company stores these answers: the provider that hosts our database. It works only on our instructions and does nothing else with them. Here is exactly what each of the others gets:

• Hosting and database: the answers themselves. This is the only category that stores them.
• Site hosting and delivery: the requests that draw the pages, not the answers.
• Email delivery: your email address and whatever is printed in our messages, including which planner you got, and so its age. Never the answers themselves.
• Payments: Paddle, the merchant of record, learns which age's planner you bought, because that is the purchase you asked for, together with your email address. Never your answers.
• Product analytics: which question was answered at which step, and the age tile you tapped. For every other question on this page it never receives the answer itself, in any form.
• Advertising platforms, when you visit, leave your email, see your result, start checkout, buy or are refunded: the event, the page address, an order ID, the amount and currency, a product code that is the same for every age, a hashed version of your email address, the Meta click ID and, through the pixel in your browser, your IP address and browser details. Never your answers, in any form.
• Inbound support mail: if you write to us about your baby, that message passes through our mail routing provider and lands in our mailbox provider.
• Meta's pixel can collect information about your visits to our site and to other sites over time. On our pages it learns that you visited, left an email, saw a result, started checkout or bought, never your answers.
• We do not sell consumer health data. Besides the service providers above, who work only for us, only Paddle, the merchant of record, learns any of it: which age's planner you bought. We share it with no one else, so we never ask for consent to share it; if that changes, we will ask first, separately. Washington law would require your signed authorization for any sale; we have never asked for one and do not intend to.

5. Your rights

• Confirm whether we collect, share or sell consumer health data about you, get a copy, and get a list of every company that received it, with an email address or web form for contacting each.
• Correct it, or change an answer.
• Withdraw your consent at any time: we stop collecting and delete what we hold.
• Have it deleted: from our database, from any files stored for your order, from our weekly offline copy and from any export we took for our own analysis. The one exception is the order record (what you bought and when), which we keep for seven years for our tax and accounting records. Our database provider's backups expire within 7 days, and deleted answers do not come back from them. We tell our service providers to delete it too.
• Appeal if we refuse a request. If we refuse the appeal, we tell you how to contact your state Attorney General to file a complaint.

6. How to exercise them

Write to support@wellfedbabies.com, from the address you used if you have one with us. That is the channel for every request on this page, and it is the one we monitor.

We answer within 45 days and may extend once by another 45 days, telling you why. To appeal, reply to our answer; we decide within 45 days, in writing, with our reasons.

An authorized agent may act for you with written permission that we can verify.

7. Geofencing

We do not use a geofence around any health care facility, and we do not use location data to identify you, to collect data from you or to advertise to you. The only location signal we use is the two-letter country code of your visit, which decides whether an advertising tag may load.

8. Who has access

Pavlo Zabavskyi is a sole proprietor: in the normal course of running the service one person has access to the database. Contractors get access only when a specific task requires it, under a written confidentiality obligation, and it is removed when the task ends.

9. Changes and contact

We post material changes here and, for buyers, by email before they take effect. If a change would let us use your answers for anything new, we ask for your agreement first. Pavlo Zabavskyi is a sole proprietor (FOP) registered in Ukraine. Questions and requests: support@wellfedbabies.com.