Consumer Health Data Privacy Policy

Why this policy exists

Some US laws treat reproductive and health information as a special category called consumer health data, and require a separate, clearly-signposted policy. Because BumpTribe handles pregnancy and fertility information, we publish this dedicated policy. It applies to everyone, but is written to meet these US requirements in particular.

What we mean by consumer health data

For BumpTribe, consumer health data means information you choose to give us that relates to your reproductive or physical health, including:

• Pregnancy status, due date, and last-period or conception dates
• Menstrual-cycle and fertility information (e.g. cycle length)
• Contraction-timer and kick-counter sessions
• Information about children you add to your profile
• Baby-care logs — feeding, diaper and sleep records for your child
• Developmental milestones you mark for your child
• Journal entries and photos about your pregnancy or child (including bump and baby photos), stored privately
• Any health-related content you save, and your health-data consent choices

Information you record about a child is the child’s consumer health data. We collect the minimum a feature needs, use it only to provide the tools you choose, never sell it, and never use it for advertising or profiling.

How we collect it

We collect consumer health data directly from you when you enter it into a feature — never by buying it, and never by tracking you across other apps or websites. We do not derive health data from your device or location.

Consent comes first

We ask for your separate, explicit, opt-in consent before we collect or process any consumer health data — distinct from accepting our general terms. Nothing in this category is stored until you have given that consent. There are no pre-ticked boxes.

Why we use it (purposes)

• To power the features you ask for — the tracker, calculators, timers, and counters.
• To show your personalised week-by-week information.
• To let you save and revisit your own entries.

We use it only to provide these features to you. We do not use consumer health data for advertising, cross-context behavioural advertising, or profiling.

Our no-sale commitment

We do not sell your consumer health data, and we never will. We also do not share it for advertising. There is no path in our systems that sells or shares this data for those purposes, so there is no “valid authorization to sell” to sign — because we don’t sell it at all.

Who can access it

Access is limited to the service providers that operate BumpTribe’s infrastructure (our database/authentication provider, Supabase, and our hosting provider, Vercel), acting on our instructions under contract, and to the small number of people who need it to run and support the service. We may disclose data if compelled by valid legal process; we minimise what we hold so there is less that can be compelled.

Your rights over consumer health data

• Withdraw consent at any time. When you do, we stop processing your health data and offer to delete what we already hold. You can do this in Profile & settings.
• Delete your consumer health data, or your whole account, at any time.
• Access & download the health data we hold, in a structured JSON file.
• Not be discriminated against for exercising these rights.

Retention

We keep your consumer health data for as long as your account is open, so your pregnancy and your child’s history are there when you want to look back — unless you delete it sooner. Specifically:

• Pregnancy, cycle, contraction and kick data: kept while your health-data consent is active; if you withdraw consent we stop processing it and offer to delete it.
• Baby feeding, diaper and sleep logs, and milestones: kept for as long as your account is open, or until you delete them.
• Journal entries and photos: kept until you delete them or close your account — when you do, we delete the entry and remove the photo files from storage.

When you withdraw consent or delete an item or your account, we remove the data promptly and do not keep it afterwards.

A note on reproductive-health sensitivity

We know reproductive-health information can be sensitive, especially in the current legal climate in parts of the US. Our approach is to collect as little as possible, keep it only as long as needed, never sell or share it for advertising, and give you easy, immediate control to withdraw and delete.

Not HIPAA

BumpTribe is a direct-to-consumer service and is not a healthcare provider, health plan, or their business associate. HIPAA does not apply to BumpTribe, and we do not claim to be “HIPAA compliant.”

Contact

To ask a question or exercise a right, use Profile & settings or contact hello@bumptribe.co. You may also see our main Privacy Policy and your US State Privacy Rights.