Privacy Policy

Last updated September 2026. This policy describes how NuzzleNotes collects, uses and protects your information.

What we collect

We collect only information you provide and information necessary to run the service:

• •Event log: Every feed, diaper, attempt, pumping, formula, opened item and custom event you log, with timestamps and optional notes.
• •Baby information: Baby’s name (optional, defaults to "Baby"), birth date and time (optional, asked when first needed), and timezone.
• •Account information: If you sign in, your email address, name (optional), preferred language and theme preference.
• •Device and access information: Coarse device type (mobile, tablet, desktop), approximate location (country or state level only), hashed IP address for abuse control.

What we never do

• •No ads, ever. We don’t show ads, use ad networks, run retargeting campaigns, or sell to ad companies.
• •No selling or sharing. We never sell your data, share it with third parties for their use, or trade it with other companies.
• •No third-party analytics scripts. We don’t use Google Analytics, Mixpanel, Segment or other third-party tracking. Our analytics are first-party only and stored in our own database.

Data processors

Your data is processed by service providers under contract. They are bound by confidentiality agreements and may not use your data for their own purposes:

• •Convex: Database and backend services
• •Vercel: Web hosting and deployment
• •WorkOS: Staff SSO for hospital users (if your hospital uses the paid tier)
• •Email sender: Transactional email for magic links (optional, only if you sign in)

Hospital sharing

When you share your baby’s log with a hospital, the hospital’s staff can see your events and add staff-only fields. Here’s how it works:

• •Your code, your choice. Sharing happens only when you tap Allow in response to the hospital’s scan of your QR. The scan alone shows the hospital nothing.
• •Hospital’s copy. When the link ends (at discharge or when you stop sharing), the hospital keeps a frozen copy of your baby’s events and their staff entries. You keep your tracker.
• •Stop any time. You can stop sharing with the hospital from your phone at any time. The hospital keeps the data from before you stopped.
• •Business Associate Agreement. Before any hospital can link a baby, we sign a BAA that covers HIPAA compliance.

App-wide statistics

We may use anonymized, aggregated statistics to improve the app and understand newborn care patterns. This is only with your consent:

• •Opt-in only. You choose whether to include your data in app-wide statistics. It’s off by default.
• •Aggregates only. We compute summaries like median feeds per day by day of life, or wet diaper counts. We never share individual data.
• •Small-cell suppression. Any figure computed from fewer than 11 babies is never produced or shared.
• •No hospital data. Hospital staff fields and care records are excluded from statistics unless a hospital’s BAA explicitly permits it.

Data retention and deletion

How long we keep your data depends on your account status:

Your privacy rights

You have the right to control your data:

• •Export: Export your full log as a JSON or CSV file at any time from your Settings.
• •Delete: Delete your account and all your data within 30 days. Hospital care records are not deleted.
• •Revoke access: From Settings, revoke individual devices, caregivers, or hospital links at any time.
• •Update your profile: Change your name, email, language and privacy settings any time.

Security and breach notification

We encrypt data in transit and at rest, hash sensitive tokens, and maintain audit logs.

If a data breach occurs, we will notify you as required by law:

• •FTC Health Breach Notification Rule: If you use the free app without a hospital link, we follow the FTC’s health breach rules and notify you if your data is compromised.
• •Washington My Health My Data Act: If you’re in Washington state, we follow MHMD rules for breach notification and your rights to control health data.

Contact us

If you have privacy questions or concerns, please reach out:

Email: hello@nuzzlenotes.com