Baker Baby Privacy Policy

Effective Date: 05/02/2026

Last Updated: 05/02/2026

At Baker Baby, your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your information when you visit our website or use our app and services, including 24/7 secure chat and telehealth consultations with board-certified pediatricians provided in partnership with Baker Health, a licensed medical practice.

The Services are intended for parents and guardians 18 or older. Children may not create their own accounts.

1. Information We Collect

We may collect the following types of information:

Personal information you provide, such as name, email address, phone number, password, and billing details.
Health-related information you provide about yourself or your child, such as due date, date of birth, weight, feedings, sleep, milestones, symptoms, photos, and messages exchanged with clinicians during chat or telehealth visits.
Payment information processed by our payment providers (Stripe, Apple, Google). We do not store full card numbers.
Usage information, such as pages visited, features used, time spent, and interactions with the app.
Device and browser information, such as device model, OS version, app version, IP address, crash logs, and approximate (city-level) location, to improve functionality and security.
Permissions you grant on your device, such as Camera, Microphone, Photo Library, and Notifications, used only for the feature you enabled.

2. How We Use Your HIPAA-Protected Information

Information you provide for receiving care from Baker Health clinicians is "protected health information" (PHI) under the Health Insurance Portability and Accountability Act (HIPAA), and is governed by Baker Health's Notice of Privacy Practices.

We use your information to:

Provide and improve our services, including tracking, secure chat, and telehealth.
Coordinate care with Baker Health clinicians and, with your authorization, other providers.
Respond to your inquiries and communicate important updates.
Personalize your experience on our platform.
Process payments and manage your subscription.
Ensure the safety and security of our website, app, and users.
Comply with legal obligations.

We do not use child health data, clinical chat, or telehealth content for advertising, profiling, or training general-purpose AI models.

3. Sharing Your Information

We do not sell or rent your personal information. We may share information:

With Baker Health clinicians, so they can deliver care to you and your child under HIPAA.
With trusted service providers who assist us in delivering our services, including cloud hosting, telehealth infrastructure, payment processing, messaging, analytics, and customer support. HIPAA Business Associate Agreements are in place where applicable.
When required by law or to protect our legal rights.
In connection with a merger, acquisition, or sale of assets, with notice where required.
With your consent or at your direction.

4. Data Security

We implement reasonable technical, administrative, and physical measures to protect your information from unauthorized access, use, or disclosure. These include TLS encryption in transit, encryption at rest for sensitive data, role-based access controls, audit logging, vendor diligence, and staff privacy and HIPAA training. No system is perfectly secure; we will notify you and applicable regulators of breaches as required by law.

5. Data Retention

We keep personal information only as long as needed for the purposes described in this policy or as required by law. Clinical records (PHI) are retained by Baker Health for the period required by medical recordkeeping laws (typically at least six years for adults, and longer for records of minors). Account, payment, and log data are retained for the periods required for fraud prevention, tax, and legal recordkeeping, then deleted or de-identified.

6. Children's Privacy

Baker Baby is designed for parents and guardians. Children may not create accounts, and all information about a child is provided by a parent or guardian for the purpose of tracking and care. We comply with the Children's Online Privacy Protection Act (COPPA): child health information is collected only from a verified parent or guardian, used only to provide the Services, and parents may review or request deletion of that information at any time. We do not market to children and do not knowingly collect personal information directly from children under 13.

7. Your Choices

You may:

Update or correct your personal information.
Opt out of marketing communications at any time.
Request access to, a copy of, or deletion of your personal data, subject to legal obligations such as medical recordkeeping.
Withdraw consent you previously provided.
Manage device permissions (Camera, Microphone, Photos, Notifications, Location) in your device settings.

California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and similar state residents, as well as residents of the EEA, UK, and Switzerland, have additional rights under applicable law, including the right to appeal a denied request. To exercise any right, email privacy@bakerbaby.com.

8. International Data Transfers

Baker Baby is operated from the United States and stores data primarily on U.S. servers. If you access the Services from outside the United States, your information will be transferred to and processed in the United States. Where required, we use appropriate safeguards for cross-border transfers.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. For material changes, we will notify you in the app, by email, or by other reasonable means before they take effect.

10. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, contact us at:

Baker Baby

Email: member@bakerbaby.com

For HIPAA-related complaints, you may also contact the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate for filing a complaint.