Consumer Health Data Notice

Last updated November 4, 2026

Some U.S. states, including Washington, Nevada and Connecticut, have laws that protect “consumer health data”: personal information that is linked or reasonably linkable to a person and identifies their past, present or future physical or mental health. A baby’s log can be consumer health data. This notice explains how CuddleCozy handles it and how to use your rights. It adds to our Privacy Policy and applies to everyone who uses CuddleCozy, wherever they live.

The consumer health data we collect

Only if you create an account, we collect and keep:

• the entries you make about your child’s care and health: feeds (breast, bottle and solids), sleep, diapers and stool colours, pumping, temperatures, medicines and the doses you write down, growth measurements, appointments and their notes, activities, milestones and notes;
• your child’s profile: name or nickname, birth date, sex (used to choose the right growth charts) and a photo if you add one; and
• any other health-related information you type into a note.

Without an account, this information stays on your iPhone and we do not collect it.

Where it comes from

From you, and from the people you let sign in to your account. We do not buy consumer health data or get it from anyone else, and we do not infer health information from other data.

Why we collect it and how we use it

Only to provide the service you asked for: to store your log, show it back to you as entries, calendars, summaries and charts, and keep it in step on the phones signed in to your account. We also use it, as needed, to keep the service secure and to comply with the law.

We do not use consumer health data for advertising or marketing, research, profiling or training artificial intelligence, and we never sell it.

Your consent

We collect consumer health data only with your consent. Before your log is first kept in your account, CuddleCozy asks for your permission on a screen of its own; you can say no and keep using the app on your phone alone. You can withdraw your consent at any time by deleting your account (Settings → Account → Delete account) or by writing to us. We will then stop collecting it and delete what we hold, as described below.

Who we share it with

We do not sell consumer health data, and we do not share it with third parties or with affiliates. We have no affiliates.

Our processor, Google (Firebase Authentication and Google Cloud Firestore), stores and processes it on our behalf, under a contract that lets Google use it only to provide its services to us. We would disclose consumer health data to anyone else only if you ask us to, or if the law requires it (for example a valid court order), and then only what is required.

Your rights

You have the right to:

• confirm whether we hold consumer health data about you, and access it: everything is shown in the app, and Settings → Export as CSV gives you a copy;
• get a list of all third parties and affiliates with whom we have shared or sold it, with their contact details: there are none today, but you can always ask;
• withdraw your consent, as explained above;
• have it deleted: delete single entries in the app, or your whole account with Settings → Account → Delete account. We delete it from our database right away and our processor removes any remaining copies from its systems and backups within 180 days at most; and
• not be discriminated against for using any of these rights.

How to make a request

Use the tools in the app, or write to support@cuddlecozy.ca with “Consumer health data” in the subject, preferably from your account’s email address. We may ask you to confirm it’s you (for example by signing in) before we act on a request, so that nobody else can see or delete your information. We answer within 45 days. If we need more time, we may extend this once by another 45 days when it is reasonably necessary, and we will tell you why within the first 45 days. Requests are free, up to twice a year.

Appeals

If we decline to act on your request, we will explain why. You can appeal our decision by replying within 45 days with “Appeal” in the subject. We will answer your appeal within 45 days and explain the result. If you are not satisfied, you can contact the Attorney General of your state; in Washington, the Washington State Office of the Attorney General.

How we protect it

Consumer health data is encrypted in transit and at rest, our database rules let a signed-in account read and change only its own data, and only a very small number of people at CuddleCozy can technically access it, only to run the service, to help you when you ask, or when the law requires it.

Contact

Privacy officer, CuddleCozy, support@cuddlecozy.ca. Our Privacy Policy describes all our practices.