Privacy Policy

FASA Daddy, LLC ("FASA," "we," "us," or "our") operates fasadaddy.com and the FASA mobile application (collectively, the "Services"). This Privacy Policy describes how we collect, use, disclose, retain, and protect information about you when you use our Services.

By using the Services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of information in accordance with it. If you do not agree with this Privacy Policy, please do not use the Services.

1. Information We Collect

1.1 Information You Provide Directly

When you register for and use the Services, we collect information you provide, including:

• Account information: your name, email address, and password
• Pregnancy and family information: due date, birth date, and current pregnancy week
• Partner information: your partner's name (optional, used to personalize content)
• Profile and preference data: notification settings, content preferences, and onboarding responses
• Community content: posts, replies, reactions, and other interactions in the Locker Room
• Reflection and check-in responses: your answers to daily reflections, weekly prompts, and Cap check-ins
• Cap conversations: messages you send to and receive from the Cap AI coaching feature
• Tool and planning data: hospital bag checklists, birth plan content, name lists, appointment notes, and financial checklist entries
• Communications: emails or messages you send to our support team
• Payment information: billing details submitted through our payment processor, Stripe (we do not store full card numbers on our servers)

1.2 Information Collected Automatically

When you access and use the Services, we and our service providers may automatically collect:

• Device information: device type, model, operating system version, unique device identifiers, and mobile network information
• Browser information: browser type, version, and language settings
• Usage data: features accessed, content viewed, time spent in the app, tap and click patterns, and search queries within the Services
• Log data: IP address, access timestamps, referring URLs, and error reports
• Push notification data: whether notifications are enabled, delivery status, and open rates
• Cookie and tracking data: session identifiers, preference cookies, and similar technologies as described in Section 9

1.3 Information from Third-Party Services

We may receive limited information from third-party services integrated with the platform:

• Stripe, Inc.: payment confirmation, subscription status, and billing history (not full card details)
• OneSignal: push notification delivery and engagement data
• Supabase: authentication tokens and data storage infrastructure logs

2. How We Use Your Information

We use the information we collect for the following purposes:

• To create, maintain, and manage your account
• To personalize and deliver weekly educational content based on your pregnancy week and stage
• To power the Cap AI coaching feature and generate personalized responses
• To send push notifications including daily check-ins, weekly content updates, and appointment reminders
• To process subscription payments, manage billing, and send receipts
• To enable community features including posting, replying, and interacting in the Locker Room
• To provide, maintain, and improve the tools and features of the Services
• To analyze usage patterns, diagnose technical issues, and improve the Services
• To communicate with you about your account, subscription, updates, and support requests
• To send marketing communications where you have consented to receive them
• To enforce our Terms of Use, protect the safety of our community, and prevent fraud and abuse
• To comply with applicable legal obligations and respond to lawful requests from authorities

3. Legal Basis for Processing

Where required by applicable law, we process your personal data under the following legal bases:

• Performance of a contract: processing necessary to provide the Services you have requested and to fulfill our obligations to you
• Legitimate interests: improving and securing the Services, preventing fraud, and communicating about service-related matters, where such interests are not overridden by your rights
• Consent: where you have provided explicit consent, such as for marketing communications or push notifications
• Legal obligation: where processing is required to comply with applicable laws and regulations

4. How We Share Your Information

4.1 Service Providers

We share information with carefully selected third-party service providers who assist us in operating the Services. These providers are authorized to use your information only as necessary to provide services to us and are contractually required to protect your information:

• Stripe, Inc. — payment processing and subscription management
• Supabase — database hosting, authentication infrastructure, and data storage
• OneSignal — push notification delivery and management
• Anthropic, PBC or other AI providers — powering the Cap AI coaching feature

4.2 Community Content

Content you post in the Locker Room community, including your display name and posts, is visible to other registered users of the Services. Please exercise caution and do not share sensitive personal information about yourself or others in community posts.

4.3 Aggregate and De-Identified Data

We may share aggregate, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, analysis, marketing, or other purposes.

4.4 Business Transfers

If FASA Daddy, LLC undergoes a merger, acquisition, reorganization, bankruptcy, or sale of all or substantially all of its assets, your information may be transferred as part of that transaction. We will provide notice of any such change in ownership or control of your information and the choices available to you.

4.5 Legal Compliance and Protection

We may disclose your information when we believe disclosure is necessary or appropriate to: (a) comply with applicable law, regulation, legal process, or governmental request; (b) enforce our Terms of Use; (c) protect the rights, property, or safety of FASA, our users, or others; or (d) detect, prevent, or address fraud, security, or technical issues.

4.6 With Your Consent

We may share your information with third parties when you have provided explicit consent for us to do so.

4.7 What We Do Not Do

We do not sell your personal information to third parties for their own marketing or commercial purposes. We do not share your personal information with advertisers for ad targeting. We do not use your Cap conversations or personal reflection responses for advertising purposes. We do not share your pregnancy or family information with insurance companies, employers, or data brokers.

5. Data Retention

We retain your personal information for as long as your account remains active or as otherwise necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements.

If you request deletion of your account, we will delete or anonymize your personal information within 30 days of the request, except where we are required to retain certain information for legal, regulatory, or legitimate business purposes, such as to comply with tax laws or resolve pending disputes.

Community content you have posted may be retained in anonymized form after account deletion to preserve the continuity and integrity of community conversations. Cap conversation data and personal reflection responses will be deleted upon account deletion.

6. Data Security

We implement and maintain reasonable and appropriate technical and organizational security measures designed to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using Transport Layer Security (TLS)
• Encryption of sensitive data at rest
• Access controls and authentication requirements for personnel who access personal data
• Regular review of our data collection, storage, and processing practices
• Contractual data protection obligations with our service providers

Despite our efforts, no security system is impenetrable and no method of transmitting data over the Internet is completely secure. We cannot guarantee the absolute security of your information. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you as required by applicable law, including the North Carolina Identity Theft Protection Act (N.C. Gen. Stat. § 75-65) and any other applicable breach notification requirements.

7. Your Rights and Choices

7.1 Access and Correction

You may access and update your account information at any time through your account settings. If you need assistance accessing or correcting information we hold about you, contact us at privacy@fasadaddy.com.

7.2 Data Portability

You may request a copy of the personal information we hold about you in a structured, machine-readable format. To make this request, contact us at privacy@fasadaddy.com. We will respond within 30 days.

7.3 Account Deletion

You may request deletion of your account and associated personal information at any time by contacting privacy@fasadaddy.com or through your account settings. We will process deletion requests within 30 days, subject to our retention obligations described in Section 5.

7.4 Marketing Communications

You may opt out of receiving marketing emails from us at any time by clicking the unsubscribe link in any marketing email or by contacting us at support@fasadaddy.com. Please note that even if you opt out of marketing emails, we may still send you transactional or service-related communications regarding your account.

7.5 Push Notifications

You may enable or disable push notifications at any time through your device settings or within the app. Disabling push notifications will not affect your access to the Services but may limit the functionality of time-sensitive features such as Cap's daily check-ins and weekly content delivery.

7.6 Cookies

You may adjust your browser or device settings to refuse cookies or alert you when cookies are being sent. If you disable cookies, some features of the Services may not function properly.

7.7 North Carolina Residents

As a North Carolina-based company, we are committed to compliance with North Carolina privacy laws. North Carolina residents may contact us at privacy@fasadaddy.com to request access to, correction of, or deletion of their personal information. We will respond to all requests within 30 days.

7.8 California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act and California Privacy Rights Act provide you with the following rights:

• The right to know what personal information we collect, use, disclose, and share
• The right to delete personal information we have collected from you, subject to certain exceptions
• The right to correct inaccurate personal information we maintain about you
• The right to opt out of the sale or sharing of your personal information (we do not sell or share personal information as defined under CCPA/CPRA)
• The right to limit the use and disclosure of sensitive personal information
• The right to non-discrimination for exercising your privacy rights

To exercise your California privacy rights, contact us at privacy@fasadaddy.com. We will not discriminate against you for exercising any of your CCPA/CPRA rights.

7.9 European Economic Area and United Kingdom Residents (GDPR/UK GDPR)

If you are located in the EEA or UK, you have the following rights under the General Data Protection Regulation:

• Right of access: to obtain a copy of your personal data
• Right to rectification: to correct inaccurate personal data
• Right to erasure: to request deletion of your personal data in certain circumstances
• Right to restriction of processing: to limit how we use your personal data
• Right to data portability: to receive your data in a structured, machine-readable format
• Right to object: to object to processing based on legitimate interests
• Rights related to automated decision-making: not to be subject to solely automated decisions that significantly affect you

To exercise these rights, contact us at privacy@fasadaddy.com. You also have the right to lodge a complaint with your local data protection authority.

8. Children's Privacy

The Services are intended solely for individuals who are 18 years of age or older. We do not knowingly collect, solicit, or maintain personal information from children under the age of 13. If we learn that we have inadvertently collected personal information from a child under 13, we will promptly delete that information. If you believe we may have collected information from a child under 13, please contact us immediately at privacy@fasadaddy.com.

9. Cookies and Tracking Technologies

We and our service providers use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your interactions with the Services. We use the following types of cookies:

• Essential cookies: necessary for the Services to function properly, including authentication and session management
• Preference cookies: used to remember your settings and preferences
• Analytics cookies: used to understand how users interact with the Services and to improve functionality

We do not use advertising or third-party tracking cookies for ad targeting purposes. You can control cookies through your browser or device settings, though disabling certain cookies may affect the functionality of the Services.

10. Sensitive Information

The Services collect and process information related to pregnancy, family planning, and personal emotional wellbeing, which may be considered sensitive personal information in certain jurisdictions. We are committed to handling this information with heightened care. We do not use pregnancy or family information for advertising targeting, do not sell this information to third parties, and do not share it with insurance companies, employers, or data brokers under any circumstances.

11. Third-Party Links and Services

The Services may contain links to third-party websites, applications, or services that are not operated by us. This Privacy Policy does not apply to third-party services. We encourage you to review the privacy policies of any third-party services you access through the Services. We are not responsible for the privacy practices or content of third-party services.

12. International Data Transfers

Your information may be transferred to, stored, and processed in the United States and other countries that may have different data protection laws than your country of residence. When we transfer personal data from the EEA or UK to countries not recognized as providing an adequate level of data protection, we implement appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, to protect your information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. We will notify you of material changes by posting the revised Privacy Policy on the Services and updating the effective date at the top of this document. For changes that materially affect your rights, we will provide more prominent notice, such as an in-app notification or email. Your continued use of the Services after the effective date of any updated Privacy Policy constitutes your acceptance of the changes.

14. Contact Us

If you have questions, concerns, requests, or complaints regarding this Privacy Policy or our privacy practices, please contact our privacy team:

FASA Daddy, LLC State of North Carolina Privacy Inquiries: privacy@fasadaddy.com General Support: support@fasadaddy.com Website: fasadaddy.com

We take all privacy inquiries seriously and will respond within 30 days of receipt.