Plain-English summary. The full legal text is in our Privacy Policy.
Your email and password are stored on our database server (Supabase, hosted in the United States). Passwords are hashed using bcrypt — even we can never read your password. Only YOU can see your own data; the database enforces this with row-level security.
The entry stays on our database server. We never share it with any third party. You can export or delete every entry from Settings → Your Data.
Your question and relevant context (e.g., your baby's age, today's feed and sleep logs) are first stripped of personal identifiers, then sent to Google Cloud Vertex AI — Gemini 2.5 Flash (primary), with Gemini 2.5 Pro as fallback, then Anthropic Claude (direct) — for a response. What these providers keep is set by their own terms. According to Google Cloud's data-governance documentation, Google does not use customer data to train or fine-tune its models without the customer's prior permission, its Gemini models cache what they receive for up to 24 hours by default, and, if its automated safety checks flag suspicious activity, Google may log the prompts for up to 90 days to check for policy violations (Google's abuse-monitoring documentation). According to Anthropic's documentation, Anthropic does not use inputs or outputs from its API to train its models by default, and deletes them from its systems within 30 days of receipt or generation, except in the cases it lists, such as enforcing its Usage Policy or a legal requirement. We do NOT store your prompt or the AI's reply unless you save it to your journal, apart from the exceptions described in our Privacy Policy: the Insurance Advisor conversation, and questions kept for review after personal details are removed.
HushBaby briefly accesses your microphone to detect your baby's cry level. The audio recording is discarded immediately — only the derived distress score is stored. No audio is ever sent to our servers or to any third party.
The image is sent to our server, run through OCR (text extraction), and only the extracted values are saved. The image itself is discarded immediately after extraction.
Apple Health stores your data on your iPhone. When you allow our app to read activity, sleep, and heart rate, your phone sends only those numbers to our app — Apple itself does NOT see what we read. You can revoke access in iPhone Settings → Privacy & Security → Health → The Perfect Start. Apple does not see the data we read.
We send through Resend. Email triggers: account verification, password reset, caregiver access link. Subject lines are generic; we never include health details in the subject or body of automated emails.
The web version is hosted by Vercel. Vercel logs your IP address, the URL you requested, and your browser type for 90 days for security and performance. Vercel does NOT see any health data — that lives in our database, not in the page URL.
Payments go through Apple's In-App Purchase system. We never see your credit card number. RevenueCat receives the subscription receipt only — no health data.
When you generate a narrated audio story, your story text is sent to OpenAI for voice synthesis (Text-to-Speech). When you generate a cover image, a short image prompt — the story theme you typed, the names of up to three story characters and your baby's name, not your story text — is sent to OpenAI for image generation. OpenAI may keep what we send, and the audio or image it sends back, in its abuse-monitoring logs for up to 30 days (longer if the law requires it or it is reasonably necessary to protect against harm), according to OpenAI's API data-controls documentation. That documentation also says data sent to its API is not used to train OpenAI's models unless the customer opts in. We do not store the audio file on our servers — it is streamed directly to your device. The cover image is stored in your account. Your story text is stored in our database under your account only if you save the story.
When you generate a caregiver access link, we send them a one-time code. They see ONLY: your baby's feeds, sleep, and growth entries. They do NOT see your PHQ-9 scores, lab results, payment info, or account email. Every access is logged and you can revoke any time from Settings → Caregiver Access.
Last updated: 2026-11-03 | Full Privacy Policy | Questions: support@thetrulyperfect.com