Privacy Policy

ParentFlow is a baby and family care application and related service provided by Kindred Care AI, Inc. (“Kindred Care,” “ParentFlow,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use the ParentFlow mobile application, website, and related features and services (collectively, the “Service”). It also explains the choices and rights that may be available to you. ParentFlow is designed for adult parents, legal guardians, and other authorised adult caregivers.

1. Information We Collect

1.1 Information You Provide

• Account Information: Your name or display name, email address, authentication information, profile settings, and communications preferences.
• Child and Care Information: Information an adult user chooses to record about a child under their care, such as a name or nickname, date of birth or age, sex or gender if provided, sleep, feeding, pumping, diaper, growth, temperature, routines, development, allergies, foods, symptoms, notes, and other care-related entries.
• User Content: Notes, messages, photos, images, audio, voice samples, scanned materials, and other content you choose to upload or create through available features.
• AI Interactions: Prompts, questions, images, and other information you submit to AI-enabled features, together with relevant information from your account or care records when you ask us to use that information as context.
• Caregiver and Family Sharing: Invitations, sharing permissions, relationship labels, and activity associated with people you invite to a shared child or family profile.
• Subscription Information: Product, transaction, subscription status, and entitlement information received from Apple or another authorised app marketplace or payment provider. We do not receive or store your full payment-card number for App Store purchases.
• Support and Communications: Information you provide when you contact us, respond to surveys, report a problem, or otherwise communicate with us.

1.2 Information Collected Automatically

• Device and Technical Information: IP address, device type, operating system, app version, language, time zone, device or app identifiers, and network information.
• Usage and Diagnostics: Feature interactions, session information, log data, performance data, crash reports, and error information used to operate, secure, and improve the Service.
• Approximate Location: We may infer a general region or time zone from your IP address or device settings. We do not collect precise GPS location unless a feature clearly requests it and you grant permission.
• Website Technologies: Cookies and similar technologies used for essential website functions, security, preferences, and analytics.

1.3 Information from Other Sources

We may receive limited account information from services you use to sign in, such as Apple or Google, and transaction or subscription information from an app marketplace. We may also receive information from another adult who invites you to a shared ParentFlow profile.

2. How We Use Information

We use personal information for the following purposes:

• Provide, personalise, maintain, and synchronise the Service, including trackers, planners, insights, reminders, family sharing, and AI-enabled features.
• Authenticate users, manage subscriptions and entitlements, provide support, and communicate about accounts, security, and service changes.
• Generate requested summaries, recommendations, plans, and responses based on information you choose to provide.
• Monitor performance, diagnose errors, protect the Service, prevent fraud or misuse, and enforce our Terms of Use.
• Understand how the Service is used and improve product functionality, safety, accessibility, and user experience.
• Comply with legal obligations, respond to lawful requests, and protect the rights, safety, and property of users, children, Kindred Care, and others.

We do not sell personal information. We do not use Child and Care Information for targeted or cross-context behavioural advertising, and we do not create advertising profiles of children.

3. AI-Enabled Features

Some ParentFlow features use artificial intelligence to organise entries, generate summaries, answer questions, analyse user-submitted content, or provide educational suggestions. When you use these features, the information you submit and relevant context you direct us to use may be processed by Kindred Care and by service providers that supply AI infrastructure.

• Purpose Limitation: AI inputs and related context are processed to provide, secure, maintain, and improve the requested feature and the Service.
• Provider Controls: AI providers process information under applicable commercial terms and data-protection commitments. We do not authorise them to use Child and Care Information for advertising.
• Model Training: We do not use Child and Care Information to train a publicly available general-purpose AI model unless we first provide additional notice and obtain consent where required by law.
• Human Review: A limited number of authorised personnel may review selected interactions when reasonably necessary for support, abuse prevention, safety, or quality assurance, subject to access controls and confidentiality obligations.

AI outputs may be inaccurate or incomplete and are not medical advice. Please review our Disclaimer before relying on any AI-generated content.

4. How We Disclose Information

We may disclose personal information in the following circumstances:

• Service Providers: To vendors that provide cloud hosting, data storage, AI processing, authentication, analytics, diagnostics, subscription management, communications, security, and customer-support services. They are permitted to process information only for authorised purposes and subject to appropriate obligations.
• People You Authorise: To family members or caregivers you invite, according to the permissions and sharing features you select. Shared users may be able to view, add, edit, or delete information associated with the shared profile.
• Legal and Safety Reasons: When reasonably necessary to comply with law or legal process, protect rights or safety, investigate fraud or misuse, or address conduct that may endanger a child or another person.
• Business Transactions: In connection with a merger, financing, acquisition, reorganisation, bankruptcy, or sale of assets, subject to applicable confidentiality and data-protection requirements.
• At Your Direction: When you request or consent to a disclosure.

We do not disclose personal information to data brokers or third-party advertisers for their own targeted advertising purposes.

5. Family and Caregiver Sharing

If you invite another adult to a shared profile, information associated with that profile may become visible to that person. You are responsible for inviting only people who are authorised to access the information and for reviewing or revoking access when appropriate. Other authorised users may make changes that affect shared records. ParentFlow does not determine custody, guardianship, or family access rights and may restrict access while a credible ownership or safety dispute is reviewed.

6. Legal Bases for EEA and UK Processing

Where the laws of the European Economic Area or United Kingdom apply, we process personal information as necessary to perform our contract with you, based on your consent where consent is required, to comply with legal obligations, and for legitimate interests such as operating, securing, supporting, and improving the Service, provided those interests are not overridden by your rights. Where information is treated as health data or another special category of personal data, we rely on explicit consent or another condition permitted by applicable law.

7. Data Retention

We retain personal information for as long as reasonably necessary to provide the Service, maintain your account, fulfil the purposes described in this Policy, comply with legal and accounting obligations, resolve disputes, and protect the Service. Retention periods vary based on the type of information, the feature involved, your account status, legal requirements, and security needs. When information is no longer required, we take reasonable steps to delete, de-identify, or securely isolate it. Residual copies may remain for a limited period in backups or records maintained for legal, security, or fraud-prevention purposes.

8. Security

We use reasonable administrative, technical, and organisational safeguards designed to protect personal information, including access controls, encryption in transit and at rest where appropriate, logging, and security monitoring. No system or transmission method is completely secure, and we cannot guarantee absolute security. If a security incident requires notice, we will notify affected individuals and authorities as required by applicable law.

9. International Data Transfers

Kindred Care is based in the United States, and ParentFlow primarily processes and stores information in the United States. Our service providers may also process information in the United States or other countries. These countries may have privacy laws that differ from those where you live. Where required, we use recognised contractual, organisational, or other safeguards for international transfers, such as applicable standard contractual clauses or comparable transfer mechanisms.

10. Your Choices and Privacy Rights

Depending on your location and subject to applicable exceptions, you may have the right to access, correct, delete, restrict, or obtain a portable copy of personal information; object to certain processing; withdraw consent; or appeal a denied request. You may also manage certain information and sharing settings in the Service.

• Account and Content: You may update or delete certain information through available in-app controls.
• Account Deletion: You may request account deletion through the Service where available or by contacting us. Deleting an account does not automatically cancel an App Store subscription.
• Marketing Communications: You may unsubscribe from marketing emails using the link in the message. We may continue to send service, security, and transaction-related communications.
• Consent: Where processing is based on consent, you may withdraw consent prospectively, although this may prevent use of the related feature.

To submit a privacy request, email contact@parentflow.io. We may need to verify your identity and authority before completing a request. We will not discriminate against you for exercising a privacy right.

11. Regional Privacy Information

11.1 United States

Residents of certain U.S. states may have rights to know, access, correct, delete, or obtain a copy of personal information and to opt out of certain sales, sharing, targeted advertising, or profiling. ParentFlow does not sell personal information or share it for cross-context behavioural advertising. These rights apply only where the relevant law covers Kindred Care and may be subject to verification and legal exceptions. Certain consumer health data laws may provide additional rights and disclosures; where required, an additional consumer health data notice will apply.

11.2 EEA, United Kingdom, and Switzerland

You may have rights to access, rectify, erase, restrict, object, and receive portable data, and to withdraw consent at any time without affecting prior lawful processing. You may lodge a complaint with your local data-protection authority. Some rights are subject to legal conditions and exceptions.

11.3 Canada, Australia, New Zealand, and Other Jurisdictions

Depending on applicable law, you may have rights to request access or correction, withdraw consent, complain to a privacy regulator, or exercise other local privacy rights. We will honour valid requests where required by applicable law.

12. Children’s Privacy

ParentFlow is directed to adults and is not intended for children to create accounts or use independently. Information about a child is provided and managed by an adult parent, legal guardian, or authorised caregiver. We do not knowingly collect personal information directly from a child under 13. If we learn that a child has created an account or directly submitted personal information without appropriate adult involvement, we may suspend the account and delete the information as appropriate. Adult users represent that they have the authority to provide and manage information about the children and other individuals whose information they submit.

13. Health Information and HIPAA

ParentFlow is a consumer parenting and wellness service, not a healthcare provider. Kindred Care generally is not a “covered entity” or “business associate” under the U.S. Health Insurance Portability and Accountability Act (“HIPAA”) when providing ParentFlow directly to consumers. Information recorded in ParentFlow may nevertheless be sensitive and may be protected by other privacy and consumer health data laws. We handle that information as described in this Privacy Policy and any additional notice that applies.

14. Third-Party Services

The Service may link to or integrate with third-party services. Their privacy practices are governed by their own policies, not this Privacy Policy. We encourage you to review those policies before providing information to a third party.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in the Service, our practices, or applicable law. We will post the updated version and revise the “Last Updated” date. Where required, we will provide additional notice or request consent before a material change takes effect.

16. Contact Us

Kindred Care AI, Inc. is responsible for the personal information processed through ParentFlow, except where otherwise stated. For privacy questions, requests, or complaints, contact us at:

Email: contact@parentflow.io