Privacy Policy

1. What we collect

• Your email address, and whether the box for tips and offers by email was checked when you continued. In the US it starts checked, and you can uncheck it.
• Your baby's age: the tile you tap on the first screen (6, 7, 8+ or 10+ months). Never a date of birth.
• Answers about feeding: how milk is given right now; how many different foods your baby has tried; which signs of readiness you have noticed (6-month tile) or what the pediatrician said at the last visit (7, 8+ and 10+ tiles); how many solid meals happen on a normal day and what happens at the table; which of the nine common allergens have already been offered; whether there is a food allergy in the family; and whether your baby has ever had a reaction to a food.
• Answers about your week: how you feed solids today (spoon, pieces or both), how often you cook from scratch on a weekday, how much time baby food takes, who else feeds your baby, what runs out first, what is hardest right now, when you plan to start (today, tomorrow, this weekend or when your baby is ready), what matters most to you by the end of the month, how the allergen month feels and what you picture at the end of it. We never ask for your baby's name.
• Order data: what you bought, the amount, the time, the email address you paid with and a reference from the payment provider. We never see or store your full card number.
• After a purchase: your one-click answers to the short questions we email you, such as whether you have started; and, if you ask for a refund, the reason you give, if any.
• Technical data: our own cookies (a session ID, which version of the quiz and which test arm you were served, an A/B letter, the two-letter country code of your visit, a marker that a purchase was already counted, and a flag that remembers an opt-out), a browser and device class, the page you came from, the address you landed on and the advertising click IDs and campaign tags in it (fbclid, gclid, ttclid, utm_source and the rest).
• Your browser also keeps your quiz progress, including your answers and email address, and the campaign tags in its own storage on your device, so the quiz can pick up where you left off. Clearing your browser data removes them. The Meta pixel sets its own cookies (section 4).
• We do not store your IP address. To stop abuse of a form, we turn it into a scrambled code that changes daily and is forgotten within an hour. Your IP address does reach Meta through the pixel (section 4).

2. Why we use it

• To show you the planner for your baby's age and the summary before you buy, and to deliver what you bought.
• To email you a link back to your results once you give your email address (sent whether or not the tips box is checked) and, after a purchase, your files and the messages that go with them, including the short questions.
• If the tips box is checked, to email you tips and offers, which you can stop from the link in each one.
• To take payment, handle refunds and answer your support email.
• To count, in totals only, how many people reach each step and how many buy, and which answers go with finishing the quiz and buying, so we can improve the quiz.
• To measure and run our ads, as described in section 4.
• We do not collect, use or sell personal data to train large language models.

3. Data about your child

The quiz asks about a child's age, milk and meals, allergens already offered, any reaction to a food, family history and what is hardest at the table. That is health-related information, so we hold it to a tighter rule than the rest, and it has a page of its own: the Consumer Health Data Privacy Policy.

We keep it to the minimum. Age is kept as the tile you tapped (6, 7, 8+ or 10+ months), never as a date of birth. When you plan to start is kept as the choice you tapped, not as a date. We never ask for a name or a photograph. We do not store the family-allergy answer itself, only a flag that says to start the first allergens more slowly.

It is used to show you the planner for your baby's age and the summary you see before you buy, and, inside our own database only, it is counted in totals to improve the quiz. It is not used for advertising or to build advertising audiences.

Your answers never leave our own database as text. Product analytics receives the age tile, which question was answered at which step, and the six routine answers listed in section 5. Advertising platforms receive none of your answers.

4. Cookies, tags and advertising

We set our own cookies so the site remembers your visit, so an order can be matched to it, and so we know whether to load a tag at all. None of them is an advertising cookie.

We use Google Tag Manager to load the Meta pixel and nothing else: no session replay, no heatmap, no chat widget, no second advertising tag. We will not add one without saying so here first. The pixel tells Meta when you visit and when you reach key steps (leaving your email, seeing your result, starting checkout, buying), with the page address, Meta's cookie, your IP address and browser details. It never receives your quiz answers.

We do not load the tag manager at all for visitors in the European Economic Area, the United Kingdom or Switzerland.

If your browser sends a Global Privacy Control signal, we treat it as your opt-out: the tag manager does not load, and we send no server event about you.

On the checkout page, our payment provider's own script runs, because the card form is theirs, not ours. It sets its own cookies and can see that page. It does not see your quiz answers.

Events our server sends to Meta carry an order ID, the amount and currency, a product code that is the same for every age, a hashed version of your email address and the Meta click ID from your link; if you are refunded, a second event says so. They never carry your quiz answers, your IP address or your browser details.

Some state laws, including Connecticut's, may treat these pixel and server events as a "sale" of personal data or as "targeted advertising", because Meta can link them to your Meta account to measure our ads and choose who sees them. We are not paid for your data, and quiz answers are never part of it. You can opt out at any time. Turn on Global Privacy Control or use "Your privacy choices" at the bottom of any page, and the tag manager no longer loads in that browser. Or email us, and we stop sending server events linked to your email address.

5. Who we share it with

• Hosting and database: the provider that stores everything described above, including your quiz answers and the files for your order.
• Site hosting and delivery: the provider that runs this website and keeps short-lived request logs.
• Email delivery: the provider that sends our emails. It gets your email address and whatever is printed in them, including which planner you got.
• Payments: Paddle, the merchant of record for the sale. It takes the payment, adds any sales tax, issues the receipt and holds your email address, your payment details and what you bought.
• Product analytics: which question was answered at which step; the age tile you tapped; and the option you picked for six questions about your routine rather than your baby's health (how you feed solids, time, who else feeds your baby, how often you cook, what runs out first, when you plan to start). For every question covered by our Consumer Health Data Privacy Policy, it never receives the answer itself, in any form.
• Advertising platforms: the pixel and server events described in section 4.
• Domain, DNS, inbound mail routing and our mailbox: the providers that carry email you send to our support address. If you write to us about your baby, that message passes through them.
• Error monitoring, when it is switched on: the page address and the error, never an answer and never your email address.
• Contractors get access only when a specific task requires it, under a written confidentiality obligation, and it is removed when the task ends.
• We are not paid for personal data. The advertising events in section 4 may count as a "sale" or "targeted advertising" under some state laws; section 4 says how to opt out.
• Pavlo Zabavskyi is a sole proprietor (FOP) registered in Ukraine and runs the service from there; the providers above operate in the United States and the European Union.

6. How long we keep it

Quiz answers, including the option codes in our event log, are deleted 12 months after your last visit. If you never bought, your email address and the record that held them go at the same time. A visit that never reached the email screen leaves only a session number and a few option codes, deleted after 90 days; the session of a visit that did is kept as long as the email record it belongs to. Other funnel events are kept for up to 14 months.

Order records hold your email address and what you bought, never your quiz answers. They are kept for seven years for our tax and accounting records. Support emails and refund reasons are kept as long as we need them to answer you and account for the refund.

Our database provider keeps backups that expire within 7 days, and we keep a weekly offline copy so orders can be restored if something breaks. When we delete your data, we delete it from that copy too; provider backups expire on their own.

You can ask us to delete anything sooner, and we will, except what the law requires us to keep.

7. Your choices and rights

• Unsubscribe from marketing email at any time using the link in any of them. The email with your files is always sent.
• Ask whether we hold personal data about you, get a copy in a portable format, correct it, or delete it.
• Opt out of targeted advertising and any sale (section 4), and ask for a list of third parties we have sold your data to, if any.
• These rights apply wherever you live in the US. Rights over the answers about your baby are in our Consumer Health Data Privacy Policy.
• An authorized agent may act for you with written permission we can verify.
• We answer a request within 45 days and may extend once by another 45 days, telling you why. If we refuse, you may appeal by replying to our answer; we decide an appeal within 45 days, in writing, and if we still refuse we tell you how to contact your state Attorney General.
• To use any of these rights, write to support@wellfedbabies.com from the address you gave us.

8. Children

Our service is for adults and is not directed to children. We do not knowingly collect personal information from anyone under 13. What we hold is information about a baby, given by their parent, and it is treated as described in section 3.

9. Security

Data is stored in a managed database that is not readable from the public web. Access is limited to the service itself, the person who runs it and, for a specific task, a contractor as described in section 5. No system is perfect; tell us at once if you think something is wrong.

10. Changes and contact

We update this policy as the service changes. The date at the top changes with it, and we email buyers before a material change takes effect. If a change would let us use your answers for anything new, we ask for your agreement first. Pavlo Zabavskyi is a sole proprietor (FOP) registered in Ukraine. Write to support@wellfedbabies.com with any question, request or complaint.