Last Updated: 04/01/2026
Your privacy is important to us at Heartful Sprout Inc. (“Company,” “we,” “us,” or “our”), and we are committed to safeguarding, preserving, and respecting your privacy rights. This online privacy statement (the “Statement” or “Notice”) describes how we collect, use, disclose, and secure the personal information we gather about you through our website and our related applications (collectively, the “Platform”) or otherwise. It also describes the choices available to you regarding our use of your personal information and how you can access and update this information.
For purposes of this Statement, personal information means data that classifies as personal information, personal data, personally identifiable information, or similar terms under applicable data privacy and security laws and regulations. It does not include data excluded or exempted from those laws and regulations, such as deidentified, anonymized, or aggregated data. Nothing in this Statement will constitute an admission or evidence that any particular data privacy or information security law or regulation applies to the Company generally or in any specific context.
You should read this Statement carefully. We recommend printing and retaining a copy for your future reference. By accessing, browsing, or otherwise using the Platform, you confirm that you have read, understood, and agreed with this Statement. If you do not agree to this Statement, you may not use this Platform.
This Statement applies regardless of how the Platform is accessed and will cover any technologies or devices by which the Company makes the Platform available to you.
If you have any questions or concerns about our personal information policies or practices, you can contact us via the methods described in the “How to Contact Us” section below.
We collect the information you voluntarily provide directly to us, such as when you complete a form or submit information to us. We also collect information when you interact with the Platform, for example, through our use of cookies. We may collect the following information that you provide to us:
We automatically collect certain information as you use the Platform, such as the following:
We may send one or more Cookies to your computer or other device. We may also use other similar technologies such as tracking pixels, tags, or similar tools when you visit our Services.
Cookies are small files created by websites, including our Services, that reside on your computer’s hard drive and that store information about your use of a particular website. When you access our Services, we use Cookies and other tracking technologies to:
You can manage your Cookies preference as described in the “Managing Your Cookies” section below.
Our mobile applications do not use advertising cookies or cross-app tracking identifiers.
The following chart lists the different types of cookies that we and our service providers use on the Services, examples of who serves those cookies and links to the privacy notices and opt-out information of those cookie servers. Because the specific cookies we use may vary over time, as well as differ by the specific URL or app page you are browsing, the below chart is illustrative only.
Essential
These Cookies are required for the operation of the Services and enable you to move around the Services and use its features. Disabling these Cookies can negatively impact the performance of Services.
Functionality
These Cookies are used to recognize you when you return to the Site. This enables us to personalize content for you and remember your preferences. These Cookies also enable your interactions with the Services such as emailing us.
Analytics, Performance, and Research
These Cookies, beacons, and pixels allow us to analyze activities on the Services. They can be used to improve the functioning of the Services. Analytics Cookies also help us measure the performance of our advertising campaigns to help us improve them and to optimize the content on the Services for those who engage with our advertising.
Social Networking
These Cookies are used to enable you to share pages and content that you find interesting on our Services through third-party social networking and other websites. These Cookies may also be used for advertising purposes.
Advertising
These Cookies and pixels are used to deliver relevant ads, track ad campaign performance, or track email marketing.
Types of Cookies. Purpose. and Who Serves Provide you with more personalized content that is most relevant to your interest areas; and
We do not use any cookies, pixels, or other tracking that discloses to any third party information that identifies a person as having viewed specific video materials.
Some Cookies operate from the time you visit the Services until the end of that particular browsing session. These Cookies, which are called “Session Cookies,” expire and are automatically deleted when you close your Internet browser.
Some Cookies will stay on your device between browsing sessions and will not expire or automatically delete when you close your Internet browser. These Cookies are called “Persistent Cookies” and the length of time they will remain on your device will vary from Cookie to Cookie. Persistent Cookies are used for a number of purposes, such as storing your preferences so that they are available for your next visit and to keep a more accurate account of how often you visit the Services, how your use of the Services may change over time, and the effectiveness of advertising efforts.
It may be possible to block Cookies by changing your Internet browser settings to refuse all or some Cookies. If you choose to block all Cookies (including Essential Cookies), you may not be able to access all or parts of the Services.
You can find out more about Cookies and how to manage them by visiting www.AboutCookies.org.
At this time, our Site does not respond differently based on a user.
We use personal information we collect about you or that you provide to us in the following ways:
We do not use your personal information or your child’s health data to serve advertisements. We do not sell your personal information. For details on how we use child health data specifically, see the “COPPA — Children’s Data” section below.
Caregivers you invite. You may invite other adults as caregivers for a child profile. Accepted caregivers can view that child’s tracking data and create new entries. You control who is invited and can revoke access at any time within the app.
Clinicians you connect. You may connect a healthcare provider using the clinician connection feature. Before connection is established, the app displays an explicit disclosure of what data the clinician will be able to view through the provider portal, and you must accept this disclosure to proceed. You can disconnect a clinician at any time.
Service providers (data processors). We share data with the following third-party service providers, each acting as a data processor on our behalf. They are not permitted to use your data for their own purposes.
Supabase
All user and child health data
Database and authentication backend
United States
PostHog
Anonymized event names and pseudonymous user ID only - no health values
Post analytics
United States
Sentry
Error stack traces, device info, user ID, email (20% sampled)
Crash reporting
United States
RevenueCat
Email address and subscription/purchase status
In-app purchase management
United States
Hasura GraphQL
Clinician invite codes and email addresses
Clinician connection
United States
Database and authentication backend
All user and child health data
Supabase
We do not sell your data to any of these providers or any third party.
Legal disclosures. We may disclose your information if required by law, legal process, or a valid governmental request, or to protect the rights, property, or safety of Heartful Sprout applications, our users, or others.
If you do not want to receive marketing communications or would like to understand more about other unsubscribe options, please contact us as set out in the “How to Contact Us” section below.
For marketing email communications, you can opt-out and/or manage your preferences by clicking on the unsubscribe link provided at the bottom of any email you receive from us. If we call you with information you do not want to receive, you can advise us of this during the telephone call.
The Platform may contain links to third-party websites. When The Company provides links, it does so only as a convenience and does not endorse any products or services and is not responsible for any content of any third-party website or any links contained within. It is important to note that this Notice only applies to this Platform. We are not responsible and assume no responsibility for any personal information collected, stored, or used by any third party as a result of you visiting third parties' websites via links on the Platform. We also advise that you read the privacy notice of any third-party websites you choose to visit carefully.
The Company retains your personal information to the extent it is necessary for the purpose for which it was collected. The Company will delete your personal information when it is no longer necessary for the purpose for which it was collected, or upon your request, subject to exceptions as discussed in this Statement or under applicable law, contract, or regulation.
When you delete a tracking entry or your account, your data is deleted instantly. Anonymized analytics events are retained for up to 24 months, and crash reports are retained for 90 days. These same retention timelines apply across all the applications. For children's data retention specifically, see the "COPPA — Children's Data" section below.
You may request a full export of all your personal data in JSON format at any time from within the app.
The security of your personal information is important to us. We take various reasonable organizational and technical measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. If required by law to do so, we will notify you and/or the relevant supervisory authority in the event of a data breach.
However, we cannot and do not guarantee complete security, as no method of transmission over the Internet, or method of electronic storage is 100% secure.
We use industry-standard security measures including encryption of data in transit and at rest, secure authentication, and strict access controls ensuring each user can only access their own data.
Protecting the privacy of the very young is especially important. Although parents may enter information about their children, this Platform is not intended for children under 13 years of age, and we do not knowingly collect personal information from children under 13. In the event that we learn that we have collected personal information from a child under age 13 without verification or parental consent, we will immediately delete that information. If you believe that we might have any information from or about a child under 13, please contact us using the information provided in the “How to Contact Us” section below.
Our collection and use of children’s personal information across all Heartful Sprout applications is governed by the Children’s Online Privacy Protection Act (COPPA). The complete details of what we collect, how we use it, who it is shared with, your parental rights, and our data retention practices for children’s data are all set out in the “COPPA — Children’s Data” section below.
This section provides the disclosures required under the Children’s Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq., and the FTC’s implementing regulations (16 C.F.R. Part 312), as amended effective 2025. It applies to all Heartful Sprout applications. The Platform is directed to parents and legal guardians aged 18 or older. All personal information about a child is entered by the parent or legal guardian as the account holder. Children are not direct users of the Platform.
When you use our applications, you may enter the following categories of personal information about your child:
We use your child’s personal information solely to provide the tracking and logging features of the app, calculate growth percentiles, display developmental milestone progress, generate food introduction and allergen records, enable data sharing with caregivers and clinicians you explicitly invite, and generate data exports at your request. We do not use your child’s personal information for targeted advertising, behavioral profiling, or any commercial purpose unrelated to providing the app’s features to you.
Your child’s personal information is disclosed only in the following circumstances:
We do not disclose your child’s personal information to any third party for targeted advertising or other non-integral purposes. You may consent to our collection and use of your child’s data without consenting to any such third-party disclosure, because we do not make any.
By creating an account and entering your child’s information, you, as the parent or legal guardian, are providing consent for us to collect and process that data for the purposes listed above. At signup, you are required to confirm that you are 18 years of age or older. If we learn that a child under 13 has used the Platform as a direct user, or that an account was created by someone under 18, we will delete that account and all associated data immediately.
To revoke consent, delete your child’s profile within the app or contact us at hello@heartfulsprout.com. Revocation will result in immediate deletion of your child’s data.
We retain your child’s personal information only for as long as necessary to fulfill the specific purposes for which it was collected. When you delete a tracking entry or your account, your child’s data is deleted instantly. We do not retain children’s personal information indefinitely.
As the parent or legal guardian, you have the right to review, correct, export, or delete your child’s personal information at any time through the app. You may also request a full JSON export of your child’s data from within the app. To exercise any of these rights or with any COPPA-related questions, contact us at hello@heartfulsprout.com. We will respond within a reasonable time and at no charge.
We use automated algorithms to generate growth percentile results, developmental milestone progress summaries, food introduction recommendations, and other informational insights. These outputs are for your personal reference only. No automated processing produces a decision with legal or similarly significant effects on you or your child.
We may use aggregated, de-identified data to train and improve our AI models. This data cannot identify you or your child. We do not use individually identifiable health data to train AI models without separate explicit consent. To request exclusion from AI training use, contact us at hello@heartfulsprout.com.
We track your consent separately for each of the following, with versioned timestamps: terms of service, this Privacy Statement, analytics tracking (EU users opted out by default; non-EU opted in by default), push notifications, medical disclaimer, age confirmation (18+), and clinician data sharing (recorded at the time of each connection).
You may withdraw any consent at any time through app settings or by contacting us. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
Our applications provide tracking tools and general informational guidance based on publicly available sources, including CDC developmental milestones, WHO and CDC growth charts, and standard vaccine schedules. Nothing in the Platform constitutes medical advice, diagnosis, or treatment. Always consult a qualified healthcare professional — including your child’s pediatrician — regarding any health concerns or medical decisions. Do not delay or disregard professional medical advice based on anything you see in this Platform. In the event of a medical emergency, contact your local emergency services immediately.
Depending on your jurisdiction, you may have the following rights regarding your personal data:
To exercise your rights, please contact us at hello@heartfulsprout.com.
Should you have other questions or concerns about these privacy policies, please feel free to contact us at hello@heartfulsprout.com.
This Statement may change from time to time. We will post any changes to the Statement on this page. You are advised to review this Privacy Policy periodically for changes.