Privacy Policy

This Privacy Policy applies to Ozie’s mobile application, website at ozie.io, and related services (together, the “Service”). In this policy, “Ozie,” “we,” “us,” and “our” refer to the team responsible for the Service.

Ozie supports parents and caregivers through breastfeeding, pumping, infant feeding, and postpartum wellbeing. Because some information entered in Ozie can be sensitive, we design the Service to collect only what it needs and to give you meaningful choices about how your information is used.

• Account information. Your email address, account identifier, display name, sign-in method, and authentication records.
• Google Sign-In information. If you choose Google Sign-In, Ozie receives the basic account information you authorize Google to provide, such as your name, email address, profile image, and a unique Google account identifier.
• Family and feeding information. Information you choose to enter about yourself, your baby, and your care team, which may include names, birth date, sex at birth, feeding and pumping activity, bottle and diaper activity, growth measurements, symptoms, mood, reminders, and notes.
• Website and communications information. If you join the waitlist or contact us, we collect the information you submit, such as your name, email address, feeding stage, reason for contacting us, and message.
• Technical information. Our systems and service providers may process limited device, network, log, and security information needed to deliver, protect, and troubleshoot the Service. If you enable notifications, we may also process a device push token.
• Optional analytics. Ozie analytics is off until an eligible, non-test user chooses to opt in. When enabled, analytics uses a pseudonymous identifier and limited product events. We do not send names, email addresses, baby identifiers, health values, free-text entries, or session recordings to analytics.

We use information to:

• create and secure accounts, authenticate users, and maintain sessions;
• provide, personalize, synchronize, and improve Ozie’s features;
• store and display the records you choose to enter;
• send service messages, sign-in codes, reminders, and waitlist or support communications;
• respond to questions and requests;
• detect abuse, protect the Service, debug failures, and meet legal obligations; and
• understand coarse product usage when you have opted in to analytics.

We do not sell your personal information or use your health and feeding records for targeted advertising.

Google account information is kept with your Ozie authentication record and is not combined with your Google content because Ozie does not request that content. We share this information only with service providers that help us operate authentication and the Service, or when required by law. We do not sell Google user data, use it for advertising, or allow humans to read it except when necessary for security or support with your permission, to comply with law, or when the data has been aggregated and de-identified.

Ozie handles information received from Google APIs in accordance with the Google API Services User Data Policy, including its Limited Use requirements. You can stop using Google Sign-In, revoke Ozie’s access in your Google Account, or request deletion of your Ozie account as described below.

Ozie stores authentication information through Supabase. Application and care data is stored through Ozie’s application backend and database infrastructure. The mobile app also keeps an encrypted local copy of records needed for offline use. Website waitlist and contact submissions are stored through our website database provider.

We use administrative, technical, and organizational safeguards appropriate to the sensitivity of the information. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

We may share information in the following limited circumstances:

• With service providers. Vendors that support authentication, cloud hosting, databases, email delivery, security, customer support, and optional analytics process information for us under their own contractual and security obligations. Current providers include Supabase, Neon, Vercel, Resend, PostHog, Google, and Apple, as applicable.
• With people you authorize. If you use care-team or sharing features, the people you invite may access only the information the Service makes available to their role.
• For legal and safety reasons. We may disclose information when we reasonably believe it is required by law or necessary to protect rights, safety, security, or the integrity of the Service.
• In a business transaction. Information may be transferred as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate protections and notice where required.

We retain information while your account is active and for as long as reasonably needed to provide the Service, meet legal obligations, resolve disputes, prevent abuse, and enforce agreements. Retention may vary by the type of information. Backup copies may remain for a limited period before being overwritten.

You may request access, correction, export, or deletion of your information by emailing hello@ozie.io. We may need to verify your identity before completing a request. Deleting your Ozie account removes the Ozie data tied to that account, subject to limited records we must retain for legal, security, or fraud-prevention purposes. Revoking Google access alone does not automatically delete your Ozie account.

• You can use email sign-in instead of Google Sign-In.
• You can opt in to or out of product analytics in the app when that option is offered.
• You can change notification permissions in your device settings.
• You can unsubscribe from non-essential email using the instructions in the message or by contacting us.
• You can manage Google connections in your Google Account’s security settings.

Depending on where you live, privacy law may give you additional rights. We will respond to valid requests as required by applicable law.

Ozie accounts are intended for adults and are not directed to children. Parents and authorized caregivers may enter information about a baby to use the Service. Do not create an account or submit a child’s information unless you are legally permitted to do so.

Ozie and its service providers may process information in Canada, the United States, and other jurisdictions. Privacy laws in those places may differ from those where you live. We use appropriate safeguards where required by applicable law.

We may update this policy as the Service changes. We will post the updated version here and revise the date above. If a change materially affects how we use personal information, we will provide additional notice or seek consent when required.

Questions or privacy requests can be sent to hello@ozie.io. For general inquiries, you can also use our contact form.