Privacy Policy

Sheng Thanh, a sole trader established in France, operates easyMommy under the trading name KlaroBuild and is responsible for the personal data described here. French business registration (SIRET): 100 904 606 00017. Business address: 60 rue François 1er, 75008 Paris, France.

This policy covers the easyMommy app, website and support. easyMommy currently markets its service to the United States. The French page is a translation of the policy for this offering; the language of a page does not determine where the service is marketed. EU GDPR applies to processing carried out in the context of our French establishment, including when users are in the United States. UK and US protections also apply when their respective conditions are met.

Contact us at contact@easymommy.fr. Read our separate Consumer Health Data Privacy Policy for health-data categories, sharing and US requests. Lire cette politique en français.

You provide account and profile details, sign-in identifiers, country and unit preferences, household roles, invitations and support correspondence. Apple or Google can provide sign-in information; subscription platforms provide purchase and entitlement status. A phone number is used only if a phone-based account feature is offered and used.

Parents and authorized household members enter children’s names, dates of birth, feeding preferences, care records and optional photos or videos. Records may include feeds, sleep, diapers, growth, foods and reactions, medicines, first words, potty training, milestones and tasks.

Personal wellbeing information includes moods, journal entries and support signals inferred from entries. Historical records, including those from earlier features or offerings, remain covered by this policy and subject to access and deletion rights if retained.

We process dictation text, saved task or care content, consent choices, notification tokens and technical information such as app and operating-system versions, error reports and product events. Network providers receive connection information such as an IP address when processing requests. Pseudonymous identifiers are still personal data.

Sources are you, authorized household members, your device, sign-in and subscription providers, and calculations based on saved records. Growth charts, rhythm summaries and support signals can reveal or infer health information.

Account administration, requested tracking, household coordination, subscriptions and related support are used to deliver the service under our contract with you. We retain records needed to meet applicable legal duties.

Where information concerns health, we request explicit consent for that processing, including child-care records and personal wellbeing. The person providing child information must be authorized to do so. Online AI for baby dictation, spoken tasks and meal plans has a separate optional choice for each user. Safety Net sharing is controlled by its activation, contact and threshold settings.

Our legitimate interests include protecting the service, investigating technical incidents and improving usability through limited usage measurement. This does not replace any prior consent required for device tracking or sensitive information. Agreeing to health tracking is not an agreement to advertising or unrestricted analytics.

You can turn off online AI and continue manual entry and supported local baby-dictation interpretation. Withdrawing health consent stops new health entries and disables Safety Net; it does not itself delete stored records. Missing information needed for a requested feature may prevent that feature from working.

Apple or Google speech recognition first turns your voice into text using device permissions. Depending on the device and language, recognition can use their servers; voice recognition is not guaranteed to remain entirely on the device.

The app tries to interpret common baby-tracking dictation locally. When online AI is authorized, text not understood locally and meal-plan requests may be sent to Anthropic. Task dictation also requires this authorization before sending its transcription to Anthropic. Manual entry remains available.

Anthropic receives text and the context needed for the requested feature, not microphone audio from easyMommy. Known names and database identifiers are replaced with request-specific aliases where supported. Free text may still contain identifying or health information. This reduces disclosure but does not anonymize the request.

Records you choose to save are stored in your account even if the dictation was interpreted locally. Local interpretation does not mean that the resulting care record stays only on your phone.

We use providers for the purposes below. Access is limited according to the service and data involved. Household sharing and Safety Net are described separately below.

• Supabase: account authentication, database, uploaded files and server-side processing of the records you save.
• Anthropic: the text and context needed for optional online AI processing.
• Apple or Google: sign-in and device speech services; Google Calendar receives task content when you choose to enable an available calendar-export feature.
• RevenueCat, Apple App Store and Google Play: account-linked subscription status and purchase information. Store payment details are handled by the stores; easyMommy does not store payment-card details.
• Resend: transactional emails, such as account confirmation, password recovery and household invitations. These can contain an email address, the inviter’s name, an invitation role and account or invitation links.
• Expo, Apple and Google: device tokens and notification content for delivery. Notification text may contain family information as explained in the next section.
• PostHog: pseudonymous product events; Sentry: minimized technical error reports. See the analytics section for their content and controls.
• Website hosting and support providers: connection and security logs, authentication-page requests and correspondence needed to serve the website or answer your request.

Information may also be disclosed where a binding legal obligation requires it. We do not sell personal information or share it for cross-context behavioral advertising. We do not use child-care or personal health records for advertising.

Child and household records are accessible to accepted members according to their role. Your personal mood journal is not made available as a shared journal to other household members. Authorized service operations may process them to provide the features you request.

With Premium, you can enable Safety Net and select a trusted household member. The current mood-based rule uses three or five consecutive days with sadness, tiredness or exhaustion, according to your setting, and a seven-day interval between signals. It depends on recorded entries and scheduled processing; it is not an emergency service.

The recipient can receive a notification identifying the sender and indicating a need for support. When available, the message can also include the child’s first name and a summary of consecutive short nights. The private journal text is not included. A reference identifier in notification metadata does not make the visible message anonymous.

Push providers process that notification content, and it may appear on the recipient’s lock screen depending on their device settings. You can disable Safety Net or change its contact and threshold in the app. Withdrawal stops future sharing; it cannot recall a notification already delivered.

PostHog measures actions such as creating a record, using voice entry and interacting with subscriptions. Events are linked to a pseudonymous account identifier and may include the Free/Premium plan and coarse action outcomes. Notes, dictation text, names, mood scores, care-event types and unrestricted screen or paywall-source values are excluded from these events. Session replay is disabled. Our PostHog project is hosted in EU Cloud and configured not to store client IP addresses with events.

Sentry receives minimized error information to help identify and fix bugs. The app removes error text, user context and breadcrumbs from the reports it submits; performance tracing and native error collection are disabled in this configuration. Server-side scrubbing, default scrubbers and prevention of IP address storage are also enabled in Sentry. These protections do not retroactively delete earlier data. Providers still receive network information needed to handle requests.

In the updated app, these integrations can start after account preferences load, if configured, unless an earlier refusal is recorded. There is no separate in-app activation switch for them. They are distinct from the health and online-AI choices; a previous refusal continues to be respected.

To request that analytics, diagnostics or both stop, email contact@easymommy.fr, or use Profile → Privacy and data → Access my data. Specify the account concerned and which collection you want stopped. This request is handled by support, rather than by an instant in-app switch. Using a health-related app can itself be sensitive, even when event content is minimized.

Account, child-care and journal records are kept to provide your ongoing account history, subject to deletion requests and applicable legal duties. The Free plan’s 30-day browsing limit is not a promise that older records are erased after 30 days.

Successful account deletion removes the account and private records. Shared household records may remain available to other authorized members; removing an author identifier does not necessarily anonymize their content. A shared household may require an ownership transfer or support-assisted deletion. An individual erasure request is assessed separately; sharing is not a blanket exemption from deletion rights.

Voice diagnostic logs exclude raw dictation and model output. Minimized voice-operation metadata is scheduled for deletion after 30 days. Completed or inapplicable provider-deletion tracking records are removed after 90 days; unresolved requests remain until resolved. Administrative security audit records are retained for up to 365 days.

Our free PostHog plan provides a one-year event-history window, which PostHog enforces through a gradual rollout. This window is not a guarantee that every copy is erased after one year. Erasure requests are handled separately. Sentry report retention depends on the plan and data category. Those periods do not describe every provider’s own logs or our support correspondence. Their retention depends on the purpose, the configured provider period, an unresolved request or incident, and applicable legal duties. Contact us for the periods applicable to your data and for an erasure request. Accounting documents we are legally required to retain may be kept for 10 years.

Account deletion is not an instant erasure of every backup or provider copy. Applicable deletion requests must also be followed up with recipients and providers. The separate consumer health policy explains state-law deadlines. If a backup is restored, completed deletion requests must be reapplied before the restored data returns to ordinary use.

Our Supabase database is hosted in Europe and our PostHog project uses EU Cloud. This does not mean that all processing stays in France or the European Union. Providers may process information in other countries, including the United States. A regional database or analytics endpoint does not by itself establish where every support operation or subprocessor handles data.

Supabase processing is covered by its Data Processing Addendum incorporated into its terms. We have signed a DPA with PostHog and accepted Sentry’s DPA. These agreements govern provider obligations; they do not certify the app’s compliance. Transfers subject to EU or UK restrictions require an applicable transfer mechanism, such as an adequacy decision or contractual safeguards with any necessary supplementary measures. You may contact us for the destinations, applicable safeguards and a copy or description of those safeguards. This policy does not claim that every provider has been independently certified for health-data hosting.

The app uses encrypted network connections, database access rules, restricted server credentials and measures to minimize exported information. This is not end-to-end encryption: authorized server processing and providers can process information needed for the service. We do not promise absolute security or a particular audit or certification that has not been established. Where required, affected people and authorities will be notified of a personal-data breach.

Contact contact@easymommy.fr or use the privacy and account-deletion controls in the app. You can request access, correction, deletion, restriction, portability or object where the relevant law provides those rights. Consent may be withdrawn without affecting earlier lawful processing.

We may request proportionate information to verify identity and authority over a child’s data. You do not need to create a new account to send a request. Do not email passwords or a complete health history to identify yourself.

For GDPR requests, the usual response period is one month, with an explained extension where legally permitted. You may complain to the CNIL or your competent authority; UK users may contact the ICO where UK law applies.

Where applicable, state law may provide rights to know or access, correct, delete or obtain a copy of information, and to opt out of specified processing. California rights apply when the CCPA covers the processing; they are not assumed solely because the app is available in the United States.

The categories described above include identifiers, account and subscription records, internet/app activity, user-provided media and text, health-related entries and inferences. Sources, purposes and recipients are set out above. We do not sell personal information or share it for cross-context behavioral advertising.

Send requests or authorized-agent requests to contact@easymommy.fr. If we deny a request, you can reply with “Privacy appeal” for review, where available under applicable law. We do not unlawfully discriminate for exercising privacy rights. The separate health-data policy explains Washington and Nevada requests and appeals.

The website uses browser storage and session mechanisms for account confirmation, recovery and other requested functions. The website code does not include advertising pixels or product-analytics SDKs. Hosting providers still process connection and security logs.

The mobile app uses local storage and SDKs, including the analytics and diagnostic tools described above. A lack of browser cookies does not mean an app has no tracking or data transmission. Device permissions for the microphone and notifications can be changed in device settings.

easyMommy is intended for adults managing their own wellbeing and children they are authorized to care for. It is not offered as an account service for children. Information entered by a parent about a child is still personal information; it is not anonymous merely because the child has no account. Contact us if a child has used the service directly or information has been entered without authority.

easyMommy provides consumer tracking and family-support features. It does not provide a diagnosis, treatment or emergency response. Health-related content does not by itself establish HIPAA coverage: applicability depends on the entities and relationships involved. This policy is not a claim of HIPAA certification.

The revision date is shown above. Material changes will be brought to your attention through the app or another appropriate channel before they take effect. Where law requires a new consent for additional data, purposes or sharing, publishing revised wording alone does not provide that consent.