Partner Terms & Privacy Notice

1. About This Agreement

When the primary account holder ("primary") invites you to connect as a partner, you gain access to their family's data within The Perfect Start application ("the App"). This document constitutes an agreement between you ("partner") and The Truly Perfect LLC ("we," "us," "our") governing that access.

By checking the consent boxes and tapping Accept & connect in the App, you acknowledge that you have read, understood, and agree to this document in its entirety. Your consent is recorded electronically together with a version identifier (2026-05-19) so that any future changes to this text can be clearly identified and re-disclosed to you.

This agreement supplements — and does not replace — the primary's Privacy Policy & Terms of Service. Both documents apply to your use of the App.

2. What You Will See

As a partner, you will have access to the primary's family data, which may include all of the following categories of personal health data (special-category data under GDPR Art. 9) and other personal data relating to the primary's child(ren):

• Feeding logs — nursing sessions, bottle feeds, solid food introduction
• Sleep logs — sleep and wake times, sleep environment notes
• Diaper / EC logs — elimination timing and patterns
• Growth measurements — weight, height, head circumference, percentiles
• Developmental milestones — observed and logged milestones by age
• Vaccine records — immunization history and upcoming schedule
• Lab results — uploaded lab documents and OCR-extracted values
• Medical photos — photos uploaded via the document scanner
• AI conversation history — queries submitted to the in-app AI assistant about the child's health and development
• Story Builder content — family stories and memories created in the App
• Curriculum progress — learning activity tracking and completion
• Notification history — app alerts and reminders

You will also have access to the primary's account preferences to the extent necessary to deliver a consistent in-app experience (e.g., locale, feature toggles). You will not have access to the primary's billing information, payment methods, or Stripe customer records.

3. What You Can Do

As a partner you have full write parity with the primary. Specifically, you may:

• View all family data listed in Section 2.
• Create, edit, and delete log entries (feeds, sleep, EC, milestones, growth, vaccines).
• Upload lab documents and medical photos (subject to the designated-uploader preference described below).
• Submit queries to the AI assistant about the child's health and development.
• Create and edit Story Builder entries.
• Track curriculum activities.
• Receive App push notifications on your own device.
• Export your own account data from Settings → Account → Export My Data.
• Disconnect yourself from the family at any time from Settings → Partner → Disconnect.

Designated document uploader. The primary may designate one person (either themselves or you) as the preferred uploader of medical documents. If you are designated, the App will indicate this. If you are not designated, you will see a soft advisory when uploading; you are still permitted to upload if needed. This preference is a coordination tool only — it is not a hard access restriction.

4. What You Cannot Do

The following actions are prohibited and technically restricted or contractually forbidden:

• Billing and payments. You cannot view, modify, or initiate payments on behalf of the primary. All billing is managed exclusively by the primary.
• Account deletion. You cannot delete the primary's account, their children's profiles, or any baby record they did not themselves create. You may delete only entries you personally created (where the App permits deletion).
• Sharing access further. You cannot invite additional users, share your login credentials, or transfer your partner access to any third party.
• Exporting for commercial purposes. You may export family data only for personal use. Using exported data for commercial purposes, research, or any purpose other than the direct care of the child is prohibited.
• Re-identification. If you receive a data export, you may not combine it with other data sources to re-identify information that has been de-identified.
• Circumventing revocation. If the primary revokes your access, you must not attempt to access family data through any other means, including cached data or expired tokens.

5. Audit Logging

As part of our security program (GDPR Art. 32) and to provide the primary with transparency into how their child's personal health data is accessed and modified, every action you take within the App is recorded in a secure, append-only audit log. This includes:

• Creating, editing, or deleting any log entry
• Uploading any document or photo
• Submitting a query to the AI assistant
• Viewing certain sensitive data categories

The audit log records your partner account identifier, the action type, the target data record, the timestamp, and relevant metadata (e.g., locale, input size). Raw personal health data is never stored in the audit log itself.

The primary can view a summary of your audit activity. You can view your own full audit log from Settings → Partner → My Activity Log (GDPR right of access, Art. 15). The audit log is retained for the duration of the family relationship plus seven (7) years for security and accountability purposes (Art. 5(2)) ([retention period — provided on request]), even after you disconnect.

6. Revocation and Disconnection

Primary revocation. The primary can revoke your access at any time from Settings → Partner → Manage Partners. Upon revocation, your session is invalidated immediately and you will no longer be able to view or modify family data. You will receive an in-app notification and, if you are currently signed in, you will be redirected to your own account's home screen.

Partner disconnection. You can disconnect yourself at any time from Settings → Partner → Disconnect. Disconnecting has the same effect as primary revocation: your access is removed immediately.

What happens to data. Disconnection (by either party) does not delete data you contributed to the family account. Log entries, uploads, and AI interactions you created remain in the primary's account. Your own separate account, well-being logs, and profile remain fully intact and under your control. If you wish to delete your own The Perfect Start account, you may do so from Settings → Account → Delete My Account.

What happens to your consent records. Your consent records (this agreement's acceptance) are retained for audit purposes for seven (7) years post-disconnection, for security and accountability purposes (Art. 5(2)) ([retention period — provided on request]).

7. AI Processing

When you submit a query to the in-app AI assistant about the primary's child, the query may include context about the child's health data. This context is processed by the same AI providers used for the primary's queries:

• Google Cloud Vertex AI (Gemini) — primary provider (US-hosted, us-central1)
• Anthropic Claude, accessed directly — complex / low-confidence fallback (US-hosted)

The Perfect Start is a direct-to-consumer service and is not a HIPAA covered entity or business associate; HIPAA does not apply to this service. Google and Anthropic process data as our processors under their respective Data Processing Agreements (GDPR Art. 28), on paid-API terms under which your data is not used to train their models.

A deflection-first architecture is used: the majority of responses are served from an on-device knowledge base without any third-party API call. Live API calls are made only when the local knowledge base cannot adequately answer the query.

You can opt out of AI features entirely from Settings → AI Features → Off. Opting out does not affect the primary's ability to use AI features.

HushBaby cry detection, if you use it, operates 100% on-device. No audio is ever transmitted to any server.

8. Data Sharing Acknowledgment

The Truly Perfect LLC maintains appropriate administrative, physical, and technical safeguards as part of our security program (GDPR Art. 32). These safeguards protect the personal health data you access through the App.

9. GDPR Notice (EEA and UK Residents)

Data controller. The Truly Perfect LLC (Texas, USA) is the data controller for personal data you provide through the App. Contact: support@thetrulyperfect.com.

What personal data we process about you as a partner.

• Your email address and display name (from your account).
• Your consent records (consent types, version, timestamps, hashed IP, hashed User-Agent).
• Your audit log entries (action types, timestamps, metadata — no raw personal health data).
• Your locale preference and App settings.

Your rights under GDPR (Art. 15–22).

• Art. 15 — Right of access. You may request a copy of all personal data we hold about you, including your consent records and audit log.
• Art. 16 — Right to rectification. You may correct inaccurate personal data from Settings → Account.
• Art. 17 — Right to erasure. You may request deletion of your account and personal data from Settings → Account → Delete My Account. Note: audit log entries and consent records are retained for security and accountability purposes (Art. 5(2)) as described above; they are not covered by erasure requests during the retention period.
• Art. 7(3) — Right to withdraw consent. You may withdraw your consent to this partner access at any time by disconnecting from Settings → Partner → Disconnect. Withdrawal does not affect the lawfulness of processing before withdrawal.
• Art. 20 — Right to data portability. You may export your personal data from Settings → Account → Export My Data.
• Art. 21 — Right to object. You may object to processing by contacting support@thetrulyperfect.com.
• Art. 77 — Right to lodge a complaint. You may lodge a complaint with your local supervisory authority (e.g., the ICO in the UK, or the relevant EEA DPA).

International data transfers. Your data is processed on servers in the United States. Transfers from the EEA are made under the EU–U.S. Data Privacy Framework and/or Standard Contractual Clauses (SCCs) as incorporated into our agreements with processors (Supabase, Vercel, Anthropic, Google). A full list of processors is available in our main Privacy Policy.

10. Liability

Your access to family data through this App is provided on an "as is" and "as available" basis. The Truly Perfect LLC's liability to you as a partner is subject to the same limitations set out in the primary's Terms of Service, including the disclaimer of warranties and the limitation of liability to the maximum amount permitted by applicable law.

The App is not a medical device and does not provide medical advice. Nothing you see in the App — including AI responses — constitutes medical advice or replaces the judgment of a licensed healthcare provider. See the full Medical Disclaimer.

You are responsible for any actions you take within the App using your partner access. The Truly Perfect LLC is not liable for any harm arising from your misuse of family data or violation of Section 4 (prohibited acts).

11. Changes to This Document

When we make material changes to this document, we will update the version date in the header and in the data-version attribute of this page. The App will detect the new version and prompt you to review and re-acknowledge the updated terms before your next session begins. The version you consented to is stored in your consent records; you can view it from Settings → Partner → My Consent History.

Non-material changes (typo corrections, formatting, clarifications that do not change your rights or obligations) may be made without re-prompting.

12. Contact

For questions about this document, your rights, or your partner access:

• Email: support@thetrulyperfect.com
• Mailing address: The Truly Perfect LLC, Texas, USA
• In-app: Settings → Help → Contact Support

For GDPR-specific requests, please include "GDPR Request" in the subject line. We will respond within 30 days.