Doulie

Privacy Policy

Effective September 1, 2026

Plain-English Summary

• You're the parent or caregiver — Doulie is for you, not your baby. • We collect only what's needed to make Doulie work: your email, your baby's profile, and the logs you choose to enter. • We don't sell your data. We don't share it with advertisers. • AI personalization is opt-in. With it off, we don't send your logs to our AI provider. • You can delete your data anytime from Settings.

1. Who We Are

Doulie ("we", "us", "our") provides a sleep companion app for parents and caregivers of babies in their first year. Contact: [email protected].

2. Information We Collect

Account: your email address and caregiver name, used for sign-in (email code, sign-in link, or Sign in with Apple) and account notices. If you use Sign in with Apple's private relay, we only ever see the relay address. Baby profile: name or nickname, birth date or age, feeding method preference, sleep philosophy preference, and night sleep goal. Logs: feed, solids, nap, sleep, wake, diaper, bedtime, milestone, and medicine entries you create — including timestamps, durations, ounces, time-to-settle, medicine names and doses as you record them, and notes. Chat: messages you send to Doulie's chat feature. Device & diagnostics: standard app analytics and crash reports (no advertising identifiers). Subscription: Apple processes your payment; we receive a confirmation that you have an active subscription, but we never see your payment details.

3. How We Use Your Information

To run Doulie's core features: showing your logs, computing sleep windows, generating insights, and answering chat questions. To improve the app: aggregated, de-identified analytics tell us which features are used and where the app crashes. To send you operational email: sign-in links and important account notices. We do not send marketing email without your opt-in consent.

4. AI Personalization

Doulie's AI features are powered by a third-party language model provider (currently OpenAI). When you opt in to personalized AI guidance: • Your baby's profile, your recent logs, recent chat messages, and your chat question may be sent to the AI provider to generate a response. • The provider returns the response to Doulie, which displays it to you. • Per our agreement with the provider, your data is not used to train their models. The provider may retain API inputs for a limited period (typically up to 30 days) for abuse monitoring before deletion. Doulie's daily insight (one short AI-written note per day) is cached on our backend under your account so it loads instantly; deleting your account removes it. With AI personalization OFF, Doulie still works — it uses on-device statistical models instead. No baby profile or log data leaves your device for AI generation.

5. Data Storage and Security

Your data is stored on your device and on our backend, hosted by Supabase. When you're signed in, your baby profile and logs sync to our backend so they're backed up and available if you change phones. Chat history stays on your device — it is processed to generate responses but is not stored on our servers. We use industry-standard encryption in transit (HTTPS/TLS) and at rest. Database-level access controls restrict each user's data to that user. No security system is perfect. We will notify you in a timely manner if a breach affecting your data is discovered.

6. Children's Privacy (COPPA)

Doulie is intended for use by adults — parents and caregivers. It is not designed for or directed at children under 13, and children do not use the app directly. Doulie collects information about a baby (name or nickname, birth date, logs) as content entered by a caregiver, on behalf of that baby, for the caregiver's own use. We treat this information with extra care: we do not sell it, we do not share it with advertisers, and we restrict access to the caregiver's account. If you believe a child has somehow accessed Doulie directly without parental involvement, contact us at [email protected] and we'll investigate.

7. Data Sharing

We share data only with the service providers we need to operate the app: • Supabase — backend storage and authentication • Apple — payment processing and analytics (via App Store Connect) • OpenAI — AI inference, only when you have personalization enabled With people YOU choose: if you invite another caregiver by invite code (or join a household with one), both accounts can read and add to the same baby profile and logs. Only share a code with someone you trust to see everything in the record. Either side can stop sharing at any time in Settings → Caregiver sharing, which cuts the other account's access immediately. We do not sell data, share with advertisers, or use it for cross-app tracking.

8. Your Choices

Opt out of AI personalization: Settings → AI personalization toggle. Stop caregiver sharing: Settings → Caregiver sharing → Stop sharing / Revoke partner access. Export your logs: Settings → Export your logs → share CSV. Delete your account and data: Settings → Delete account & data. This permanently removes your account, baby profile, and logs from our servers and your device. You can also email [email protected] and we'll process the request within 30 days. Cancel your subscription: Apple ID settings → Subscriptions.

9. Data Retention

Active accounts: we keep your data as long as your account is active. Inactive accounts: data tied to an account that has been inactive for 24 months may be deleted automatically. Deleted accounts: we delete personal data within 30 days of an account-deletion request, except where we're legally required to retain it.

10. Your Rights

Depending on where you live, you may have the right to access, correct, or delete the personal information we hold about you, and to object to or restrict certain processing. To exercise these rights, contact us at [email protected]. We'll respond within 30 days. California residents: see the CCPA notice below. EU/UK residents: our lawful basis for processing your data is contract (to provide the service you've signed up for) and your consent (for AI personalization).

11. California Privacy (CCPA)

We do not sell your personal information as the term "sell" is defined under California law. California residents have the right to know what personal information we collect, request deletion, and not be discriminated against for exercising these rights. Email [email protected] to make a request.

12. Changes to This Policy

We may update this policy from time to time. We'll post the updated version in-app and at douliesleep.com/privacy. Material changes will be communicated via email or in-app notice.

13. Contact

Questions about this policy or your data? Email [email protected].