Privacy Policy
Effective Date: [DATE]
2.1 Summary
- We do not collect your child's health information.
- We collect the minimum needed to run your account.
- Family Plan data is end-to-end encrypted on your device — we can't read it.
- We never sell your data to third parties.
- We are subject to the FTC Health Breach Notification Rule and will notify you within 60 days of any breach affecting your data.
2.2 What we collect
| Category | Purpose | Storage |
|---|---|---|
| Email address | Account, login, transactional email | Encrypted at rest |
| Password hash (Argon2id) | Authentication | Hashed only |
| Display name (self-chosen) | Personalize UI | Encrypted at rest |
| First 3 digits of ZIP | Directory search radius | Encrypted at rest |
| Anonymous usage telemetry | Product analytics | Aggregated |
| Billing (via Stripe) | Family Plan subscription | Stripe (we hold customer ID only) |
| Encrypted vault ciphertext blobs | Cross-device sync of Family Plan data | Encrypted at rest; we cannot decrypt |
2.3 What we do NOT collect
- Child names, DOB, sex, addresses, phone numbers, or medical information.
- Photos of any kind.
- Any content of intake forms you submit via participating practice widgets — that data goes directly to those practices.
- Precise geolocation.
- Health app data linked from Apple Health or Google Fit (Phase 1 does not integrate these).
2.4 How we use it
- To operate your account and the directory search.
- To bill you for Family Plan.
- To send transactional email (receipt, password reset, service notices).
- To send marketing email only if you opt in — you can unsubscribe from every message.
- To improve the product via aggregated, non-identifying analytics.
2.5 Who we share it with
- Stripe — subscription billing.
- Resend — transactional and (opt-in) marketing email.
- Emergent Cloud / Cloudflare — hosting and CDN.
- Law enforcement only under valid legal process.
- Never sold to any third party for advertising or any other purpose.
2.6 FTC Health Breach Notification Rule
Because we are a consumer health application, we are subject to the FTC's Health Breach Notification Rule (expanded 2023). If we discover a security breach involving unsecured personal health information, we will notify each affected consumer, the FTC, and (if the breach involves 500+ consumers) prominent media outlets, within 60 days.
2.7 Your rights
- Access, correct, or delete your account at any time from Settings → Account → Delete.
- If you're in California, Virginia, Colorado, Connecticut, or Utah, you have additional rights under state privacy law — email privacy@kidsstitches.com to exercise them.
- Illinois residents: we do not collect biometric information as defined by BIPA.
2.8 Data retention
- Account data: kept while your account is active; deleted within 30 days of account deletion.
- Anonymous telemetry: aggregated, kept indefinitely (no identifier).
- Backups: overwritten within 90 days.
2.9 Children's privacy (COPPA)
KidsStitches™ is not directed to children under 13. Only a parent or guardian may create an account. We do not knowingly collect information from children.
2.10 Changes
We will notify you by email at least 15 days before any material change.
2.11 Contact
Questions or requests? Get in touch via our contact form.