Privacy policy

PumpKin Baby Inc., a public benefit corporation, operates the PumpKin app, which helps parents track pumping, feeding, and milk storage. This policy covers the app at app.pumpkin.baby and the iOS app built from the same codebase. It explains what information we collect, how we use it, and the choices you have. The PumpKin User Agreement also applies. Research studies you join have their own consent forms, which this policy does not replace.

We collect information you provide or create in PumpKin, including:

• Account details, such as your email, phone number, display name, and settings.
• Household details, such as child names or labels and the people you invite.
• The pumping, feeding, storage, reminder, and note records you enter.
• Photos and analysis results, when you choose to use an image feature.
• Technical information needed to run the app, such as sign-in cookies, app version, error details, IP address, and device or browser type.

We use your information to:

• Create and secure your account.
• Save, sync, and organize your records and calculate things like milk freshness.
• Support household sharing according to the roles you choose.
• Run optional reminders and image features. Reminders are scheduled on your device and can be turned off in Settings.
• Create aggregate usage reports that help us improve the app. These reports are never used for advertising.
• Respond to support requests, fix errors, keep the app reliable, and meet legal requirements.

We do not sell your personal information. We do not use it for behavioral advertising, and the app contains no advertising or tracking SDKs.

We share information only to run PumpKin or when you choose to share it:

• With household members you invite, according to their role.
• With service providers that run the app: Supabase for authentication, database, and storage; Vercel for hosting; Sentry for error reporting; and the email or SMS providers that deliver sign-in codes and account messages.
• With the specialist AI image services behind Milk Measure and the test strip scanner when you use an image feature, as described below.
• With the PumpKin research platform when you join a study, as described below.
• When required to meet legal obligations, protect users or the app, enforce our terms, or handle a company transaction.

Milk Measure and the test strip scanner are optional. Each asks for your permission on your device before any photo leaves it, separately for each feature and account. Photos you submit are processed by the specialist AI image services behind each feature, or by our own strip analyzer, to produce your result, and a copy of any saved result is stored privately with your records. These requests route through an AI gateway that does not store your photos, and the services receive nothing about you beyond the photo itself: no contact information, child details, or PumpKin log fields. They may retain what you submit under their own terms.

Keep people, personal documents, and identifying labels out of analysis photos. You can reset image-analysis permission in Settings at any time. Resetting stops future transmissions but does not delete images or results already stored or processed.

The PumpKin research platform at studies.pumpkin.baby is separate from the app and has its own consent process covering consent forms, eligibility, questionnaires, and study records. When you join or link a study, the app stores a small study status record, along with any test-strip results and verification images you create in its scanner.

• You can update your contact methods, child labels, household sharing, reminders, and image-analysis permission in the app, and remove invited household access from the Family page.
• You can delete individual records or your whole account in the app.
• You can request access to, correction of, or deletion of your personal information by contacting us, and we will never treat you differently for exercising a privacy right.
• Depending on where you live, you may have additional rights under local law, including the right to opt out of the sale or sharing of personal information. We do not sell or share personal information in those senses.

We keep your information while your account is active or as needed to run PumpKin, resolve issues, and meet legal requirements. You can delete your account in Settings, which removes your account data from active systems, including stored images and results. Some information may remain for a limited time in backups, provider logs, or records we must keep, and service providers retain information under their own terms.

PumpKin is for adults, and children cannot create accounts. A parent or guardian may enter child information, such as a name or date of birth, to organize milk and feeding records. If you believe a child created an account, contact us so we can review and delete it.

We protect your information with safeguards such as authenticated access controls and private storage for app images. No app can promise perfect security, but we work to keep your information protected.

We may update this policy as PumpKin changes. When we do, we will update the effective date and post the new version at app.pumpkin.baby/privacy.

Questions or privacy requests can be sent to hello@pumpkin-baby.com.

You can also read the User Agreement.