Consumer health data privacy policy

Effective November 2, 2026

This section is our consumer health data privacy policy under Washington's My Health My Data Act, Nevada's consumer health data law (SB 370) and similar laws.

• What we collect. We designed Sunbaby so that pregnancy, birth and baby information stays on your devices and in your iCloud, which we can't access. The one exception is the family gift page, if you create one. A gift page holds no medical information: no due date, no symptoms, no health records. But the items on it (for example a breast pump or nursing pads) could suggest that someone is expecting or has a new baby, and these laws define consumer health data broadly, so we treat gift page content as consumer health data to be safe. A gift page holds only the items, their store links, the nickname you choose, any cash fund and registry links you add, and which items guests reserved, with a first name if a guest adds one. A guest's reservation says nothing about the guest's own health, but we give guests the same rights described here.
• Sources and purposes. This content comes from you when you create or update the page, and from guests who reserve an item. We use it only to show the page to the people you give the link to, and to delete it when you ask.
• Who receives it. Cloudflare, Inc., which hosts the page for us under a written agreement and may use it only to provide that service. We don't sell consumer health data and don't share it with any other third party or affiliate. No third party collects consumer health data about your activities over time and across apps or websites through Sunbaby.
• Consent. We collect gift page content only after you choose to create a page and confirm it in the app. You can withdraw consent at any time by deleting the page in the app (pausing only hides it), or by emailing us the link. A guest's first name is collected only if the guest types it, after the page says who will see it; a guest can withdraw it by undoing the reservation or by emailing us.
• Your rights. You can ask whether we hold any consumer health data about you, ask for a copy, ask us to correct or delete it and withdraw consent, by emailing junior@brito.ai. Include your gift page link so we can find it. We answer within 45 days. If we deny a request, you can appeal by replying to the email that gives our decision; we decide the appeal within 45 days and tell you how to contact your state attorney general.

Contact and changes

brito.ai, junior@brito.ai. If we change this policy, we will update this page and the date at the top before the change takes effect, and tell you in the app. Our full app privacy policy explains everything else.