A small-data privacy promise

1. Information collected

Depending on which features someone chooses to use, the site may collect or process:

• Village Listener: conversation text is processed in the current browser tab and is not intentionally transmitted to The Village After Birth, saved to our database, or written to browser storage. It may remain visible on the device until it is cleared or the page session ends. Browser features, extensions, screenshots, or another person with access to the device may expose it. No person monitors or reviews Listener conversations.
• Support-update information, if previously submitted: email, optional first name or nickname, state, broad support categories, age confirmation, and update consent.
• Professional interest: professional name and email, profession, license number and state, license expiration, authorized states, optional professional URL, general availability, perinatal-experience category, and required confirmations.
• Basic technical data: hosting and security providers may process standard request logs such as IP address, device/browser details, and timestamps to deliver and protect the site.

2. Why it is used

Information is used to provide requested updates, review professional interest, operate site features, prevent abuse, and secure the service. It is not used to diagnose, profile health conditions, determine eligibility for care, or make automated clinical decisions.

3. What we do not do

• We do not sell personal information.
• We do not intentionally add advertising pixels or third-party behavioral advertising trackers.
• We do not ask for a medical chart, a child's information, or crisis details.
• We do not claim this site is a HIPAA-covered clinical record system.

HHS explains that health information entered into many consumer apps is not protected by HIPAA when the app is not offered by a regulated entity, while other federal and state laws may still apply. The FTC's Health Breach Notification Rule can apply to certain health apps and nonprofits outside HIPAA.

4. Sharing and service providers

Data may be processed by infrastructure providers needed to host the site, store form submissions, prevent abuse, and maintain security. They receive only what is needed for those functions. Information may also be disclosed when legally required or necessary to protect someone from serious harm.

5. Retention and deletion

Support-update records are retained for no longer than 12 months unless a person remains opted in or a shorter period is required. Professional verification records may follow a different documented schedule. The site does not currently offer user accounts or a self-service deletion tool, so forms should never be used for sensitive health information, medical records, government identification, or information about a child.

6. Security and incidents

No system can promise perfect security. We use data minimization, restricted access, encryption in transit, and hosting security controls designed to reduce risk. If a law requires notice after a breach, we will follow the applicable notice process.

7. Children, state rights, and changes

The forms are for adults 18 and older and should not be used to submit information about children. U.S. state privacy rights vary. Material policy changes will be dated and explained on this page rather than silently applied to previously collected information.