Goldie Privacy Policy

1) Who We Are (and What This Policy Covers)

This Privacy Policy applies to information we collect through the Services, including when you:

• create an account,
• use Goldie's chat and logging features,
• subscribe or make purchases,
• contact support,
• use our website or app.

This Privacy Policy does not apply to third-party websites, apps, or services that you access through links or integrations from Goldie. Their privacy practices are governed by their own policies.

2) Important Note About Health Information (HIPAA)

Goldie is not a "covered entity" or "business associate" under the U.S. Health Insurance Portability and Accountability Act of 1996 (HIPAA). HIPAA generally applies to healthcare providers, health plans, and certain healthcare clearinghouses, and it does not automatically apply just because health-related information may be involved.

Even though HIPAA may not apply, we treat information about your and your baby's health and feeding as sensitive and apply heightened safeguards and restrictions as described in this Privacy Policy.

3) Information We Collect

We collect information in three main ways: (A) information you provide, (B) information we collect automatically, and (C) information from third parties.

A. Information You Provide

Account Information

Name (optional), email address, password (or single sign-on token), and account preferences.

Baby + Family Context (Sensitive)

Baby's date of birth/age, feeding method (breast/bottle/combo), pumping details, growth/feeding concerns you share, allergies/intolerances, solids status, and other context you enter to personalize your experience.

Conversation Data (Sensitive)

Messages you send to Goldie and the responses you receive, including any information you include in chat.

Logs & Tracking You Enter

Feeding logs, pumping sessions, solids logs, symptoms, diapers, and other tracking data you choose to enter.

Payments

If you purchase a subscription, payments are processed by third-party payment processors (e.g., Apple, Google, Stripe). We typically receive limited purchase metadata (e.g., plan type, renewal status) and do not store full payment card numbers.

Support Communications

If you contact us (email, in-app support), we collect the content of your messages and any info you choose to share.

B. Information We Collect Automatically

When you use the Services, we may automatically collect:

• IP address, device identifiers, device type, operating system, browser type, app version
• usage data (screens viewed, features used, session duration, clicks/taps)
• approximate location (e.g., city/region), derived from IP (not precise GPS unless you explicitly enable it)

We also use cookies or similar technologies on our website (see Section 9).

C. Information From Third Parties

If you sign in using Apple/Google, we may receive basic account information (e.g., email, name, avatar) depending on the provider and your settings.

4) How We Use Information

We use information to:

Provide, personalize, and maintain the Services

• create and manage your account
• personalize responses based on baby context and your preferences
• generate feeding guidance and educational content
• maintain chat history, summaries, and memory features where enabled

Improve safety and quality

• troubleshoot, monitor performance, prevent abuse/fraud
• improve features and user experience
• run internal quality assurance, including safety reviews and testing

Communicate with you

• send service-related messages (e.g., onboarding, account, receipts)
• send optional marketing communications (you can opt out)

Research and product development (with safeguards)

We may use aggregated, de-identified, or anonymized data to understand trends and improve the Services.

5) AI, Model Improvement, and Your Choices

Goldie uses AI to provide responses. This may involve processing your Conversation Data and baby context.

Default: limited internal use for operations and safety

We may review a small subset of conversations and logs only as needed for:

• customer support and troubleshooting,
• safety monitoring,
• quality assurance (e.g., investigating errors or harmful outputs),
• improving prompts, rules, and product behavior.

Optional: "Help Improve Goldie" setting (Opt-In)

If you enable a setting like "Help Improve Goldie", you authorize Goldie to use your Conversation Data and related inputs to improve the Services (e.g., improving system prompts, retrieval content, evaluations, and other AI quality improvements). If enabled, we apply safeguards such as:

• limiting access to trained personnel,
• minimizing and removing direct identifiers where feasible,
• applying technical and organizational controls.

No sale of sensitive conversation data

We do not sell your Conversation Data, baby data, or other sensitive health-related data.

You can withdraw

You may turn off the "Help Improve Goldie" setting at any time in settings (or by contacting us). Turning it off affects future use; we may retain prior data as required for legal, security, or integrity reasons, or where already incorporated into aggregated/de-identified analyses.

6) How We Share Information

We do not sell your personal information. We share information only as described here:

Service Providers

We share information with vendors who help us operate the Services (e.g., hosting, analytics, customer support tooling, error monitoring, payment processors). They are permitted to use personal information only to provide services to us and must protect it.

Legal and safety

We may disclose information if we believe in good faith it is necessary to:

• comply with law, regulation, subpoena, or legal process,
• protect the rights, safety, and security of Goldie, users, or the public,
• investigate or prevent fraud, abuse, or harmful activity.

Business transfers

If we are involved in a merger, acquisition, financing, insolvency, or sale of assets, information may be transferred as part of that transaction, subject to continued protection.

With your direction

If you choose to connect Goldie to third-party services or share content, we share information as directed by you.

7) Your Choices and Rights

Account settings

You can access and update certain information through your account settings.

Opt out of marketing

You can unsubscribe from marketing emails via the link in the email or by contacting us. You may still receive transactional/service messages.

Delete your data / close your account

You can request account deletion and deletion of associated personal information by:

• using in-app deletion tools (if available), or
• contacting us at: sarah@goldiebaby.com

We may retain certain information as required by law, for security, fraud prevention, or to maintain the integrity of our systems.

Privacy rights by region

Depending on where you live, you may have rights to:

• request access to your personal information
• correct inaccuracies
• delete information
• object to certain processing
• receive a copy/portable version of your data
• limit use of sensitive personal information
• opt out of "sharing" for cross-context behavioral advertising (where applicable)

We will verify requests as required by law.

8) Data Retention

We retain personal information only as long as necessary to provide the Services and for legitimate business purposes (e.g., security, dispute resolution, enforcing agreements, complying with law).

Typical factors include:

• whether you maintain an active account,
• whether you request deletion,
• whether we must keep certain records for legal or security reasons.

9) Cookies and Tracking Technologies

We use cookies and similar technologies to:

• keep you logged in,
• remember preferences,
• measure site performance and usage,
• understand which pages/features are helpful.

You can control cookies through browser settings. If you block cookies, some features may not function properly.

We may use analytics tools (e.g., app analytics, website analytics). Where required by law, we provide consent mechanisms and opt-outs.

10) Security

We use administrative, technical, and organizational safeguards designed to protect your information, such as:

• encryption in transit and at rest (where applicable),
• role-based access controls,
• multi-factor authentication for internal access (where applicable),
• monitoring and logging,
• vendor review and contractual safeguards.

No security system is perfect; we cannot guarantee absolute security.

11) Children's Privacy

Goldie is intended for use by adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will take steps to delete it.

12) International Transfers

If you access the Services from outside the United States, your information may be processed and stored in the United States or other jurisdictions. These locations may have different privacy laws than your location.

13) Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version and revise the "Last Updated" date. If changes are material, we may provide additional notice in the app or by email.

14) Contact Us

Email: sarah@goldiebaby.com