privacy policy

01scope

this policy applies when you visit fledji.app, when you use the fledji app on iOS, and when you communicate with us by email. it covers information about you, your child, and anyone you invite as a caregiver.

02who we are

fledji is a product of Luminary Management Group LLC, a New Jersey limited liability company that owns and operates the fledji brand (“fledji”, “we”, “us”, “our”). we are located in Wayne, New Jersey, USA. you can reach us at steve@fledji.app.

03a plain-language summary

before the details, the short version:

• we collect what we need to run fledji for you, and nothing else.
• we do not sell your information, ever.
• we do not show you ads inside fledji, and we do not let advertisers target you outside fledji using what you give us.
• we do not track your behavior inside the app today. one day we will, in a limited way, to understand what is working. we will tell you before that changes and we will give you a way to turn it off.
• we use a small number of trusted vendors to run the service (hosting, email, AI features). they see only what they need, they are bound by contract, and the categories of vendors we use are listed in section 09.
• your information lives on servers operated by those vendors, not on hardware we own.
• you can correct your information, you can ask us for a copy of it, and you can delete your account from inside the app.

the rest of this policy is the long version.

04information you give us

when you sign up

you sign in with Apple. we receive a stable, per-app identifier from Apple and, optionally, a display name you choose. we do not create or store a password, and we do not ask for one. if you use Apple’s “Hide My Email,” we never see your real email address.

when you join the private beta

fledji is currently invitation-only. to take part in the private beta, you give us your name, email address, and phone number so we can send you your invitation and reach you about the beta (for example, scheduled cohort calls). there is no automatic unsubscribe for these beta messages yet; to stop them, email steve@fledji.app and we will take you off the list.

about your child

your child’s first name or chosen name, date of birth (or due date, before birth), and whatever else you choose to enter: feeds, sleep, growth measurements, medications, milestones, photos, videos, notes, plans, preferences, routines, and the meal and nap timing fledji learns from what you log.

when you chat or speak with fledji

fledji includes a chat assistant and an optional voice mode. when you use them, we store the text of your conversations so the assistant can keep context and so you can return to it later. if you use voice, a third-party voice provider is involved in two directions: your spoken audio is sent to it to be turned into text, and the assistant’s written reply is sent to it to be turned into spoken audio. that reply text can include context about your child. see section 09. you can delete a conversation from inside the app.

about your household

names and email addresses for any caregivers (a partner, a grandparent, a nanny) you invite into your fledji account, and the level of access you grant them.

when you contact us

the email address you write from, the content of your message, and any information you choose to include. for beta calls, brief notes about what you told us, used to improve the product.

personal information

fledji is not a medical service, and nothing you enter becomes a clinical health record. what we store about your child is whatever you choose to type in: feeds, sleep, a weight you read off a scale at home, a milestone, a note you want to bring to a pediatrician visit. some of it may feel personal even though you control all of it. we treat anything in this category with extra care: it travels over encrypted connections and is encrypted at rest on our servers, it is not used for marketing, it is not shared outside the vendors that operate the service for you, and it is deleted with the rest of your data when you ask. your photos get a stronger protection still (see section 15).

05information we collect automatically

when you use fledji, our servers receive standard technical information that any modern service receives: your device type and operating system version, the app version you are running, timestamps, and the requests the app makes. our servers briefly see your IP address when you sign in and when your account registers, and we use it only to rate-limit and protect against abuse. we do not turn your IP address into a location, and we do not use any of this to build a profile of you for advertising.

if you opt in to push notifications, your device’s push token. fledji does not run a crash-reporting tool of its own; if you have turned on Apple’s “share with app developers” setting, Apple may give us anonymized crash diagnostics through the App Store, which you control from your device settings.

06in-app behavior tracking

today, fledji does not track what you do inside the app. we do not record which screens you visit, which buttons you tap, or how long you spend on any particular feature. we do not run a third-party analytics SDK inside the app.

this will likely change in the future. as fledji grows, we will need to understand which features help families and which do not. when that happens, here is what we commit to:

• we will update this policy and tell you before we start.
• we will collect the minimum that lets us answer the question.
• we will not link product analytics to advertising platforms.
• we will give you a clear setting to turn it off, and turning it off will not affect what fledji can do for you.

07how we use information

we use the information you provide and the information we collect to:

• operate fledji for you: store your content, sync it across your devices, deliver features, and back it up;
• show you and your invited caregivers your own content;
• send you the messages that are part of the service: the email that delivers a caregiver invitation, and (if you are in the private beta) email or text about your beta participation;
• generate the personalized output the app produces (briefings, plans, summaries, prep documents for handoffs to a pediatrician, a grandparent, a nanny). some of this work is performed by AI services we license from third parties. those services are configured for zero data retention: they process what we send only long enough to return a result, do not keep it afterward, and are contractually barred from training their models on it; see section 09;
• improve the product: when you tell us something works or does not work, we use that feedback;
• keep accounts secure, detect abuse, and meet our legal obligations.

we do not use your information for advertising purposes. we do not build a profile of you to sell, license, or rent.

08how we share information

fledji does share information, in a limited set of cases. each is described below.

with the caregivers you invite, and the circles you join

when you invite a partner, a grandparent, or a nanny into your fledji account, they see the content you grant them access to. you control who is invited and what they can see. you can revoke access at any time.

fledji lets you belong to more than one care circle (for example, your own family’s circle and a circle you were invited to). each circle’s content is kept separate, and switching between circles does not mix one circle’s information into another. when you switch to a different circle, fledji clears the previous circle’s content from your device and loads the active circle’s content in its place.

if the owner of a circle has a paid subscription, the other members of that circle may receive paid features while they are in that circle, funded by the owner. the owner can see that a circle has paid features active; the owner does not see the personal billing details of any other member, and no member is charged for features the owner funds.

with vendors that run the service

fledji is hosted on, and supported by, third-party infrastructure. that means the servers that store your information, the email service that delivers transactional messages, the AI provider that powers parts of the experience, and the analytics service that counts visits on the marketing site are not owned by us. they hold or process your information on our behalf. each is bound by a contract that limits what they can do with it. the third-party services we use are described in section 09.

for legal reasons

we will share information if we are required to by a valid legal process (a subpoena, court order, or similar), to protect the rights, property, or safety of fledji, our users, or the public, or to prevent fraud or security incidents. when we can, we will tell you about a request before we comply.

in a business transfer

if fledji is acquired, merged, or sold, the information we hold may be transferred to the acquiring entity. that entity will be bound by this policy or by a policy at least as protective, and you will be notified.

with your consent

any other sharing only happens when you specifically ask for it or agree to it (for example, exporting a pediatrician handoff to a clinician you choose).

09third parties we use

fledji is operated with the help of a small number of third-party services. each is bound by a contract that limits what it can do with your information to providing the service to fledji. by category, they are:

• hosting and sync: a cloud infrastructure provider that hosts your account and content and syncs it across the devices in your care circle.
• AI text features: an AI provider that powers the chat assistant and generated content (briefings, plans, summaries). your conversations and the relevant context about your child are sent to this provider to produce a response. it is configured for zero data retention: it does not keep what we send once it has returned a result, and it is contractually barred from training its models on it.
• AI voice features: a voice provider used in two directions when you use voice mode: your spoken audio is sent to it to be turned into text, and the assistant’s reply text is sent to it to be turned into spoken audio. like the text provider, it is configured for zero data retention and does not train on your data.
• email: a service that delivers the caregiver-invitation email and any private-beta email.
• website security and analytics: a bot-protection service that guards the fledji.app signup form, and a privacy-respecting analytics service that counts visits to fledji.app without identifying you.

some of these providers may process your information on infrastructure located outside the United States. where that happens, we rely on the contractual protections described in section 16. if you would like the current list of the specific named vendors in each category, email steve@fledji.app.

10what we do not do

to be specific:

• we do not sell your personal information for money or for anything else of value.
• we do not share your personal information with advertisers, ad networks, or data brokers.
• we do not use your content to advertise to you, on fledji or anywhere else.
• we do not embed advertising trackers (Facebook Pixel, TikTok Pixel, Google Ads tags) in the app.
• we do not let any AI service we use retain your content after it returns a result, and we do not let it train its models on your content.
• we do not let cloud providers use your content for anything beyond storing and processing it on our behalf.
• we do not show ads inside fledji.

11information about your child

fledji is a tool for parents and caregivers. children’s information that appears in the app is entered and controlled by the parent or caregiver who owns the account. fledji does not knowingly collect personal information directly from anyone under the age of thirteen (13). if you believe a child under thirteen has provided information to us directly, please email steve@fledji.app and we will delete it.

information about your child that you choose to enter (name, birth date, photos, growth, sleep, feeds, medications, milestones, and anything you say to the chat or voice assistant about them) is treated as part of your account. it is yours to keep, export, or delete. it is never used for advertising. it is not shared outside the vendors in section 09 that operate the service for you.

12caregivers you invite

when you invite another adult (a partner, a grandparent, a nanny) into your fledji account, you are choosing to share your content with them under the access level you grant. fledji does not control what an invited person does with what they can see. you can revoke an invitation at any time from inside the app.

if you invite someone, please make sure they want to be in the account. forward them a link to this policy if it helps.

13your choices and rights

you can:

• access the information fledji has about you, by viewing it in the app or by emailing us;
• correct information that is inaccurate, by editing it in the app;
• get a copy of your information: you can export your child’s data history as a PDF from inside the app, and you can email us for a copy of the rest;
• delete your account from inside the app (Settings, then Delete Account). your access ends right away, and your account and the content in any care circle you alone own are permanently removed from our live systems within seven (7) days; see section 14 for the details and for what happens to backups;
• opt out of private-beta messages by emailing steve@fledji.app, and opt out of any non-essential communication at any time;
• revoke caregiver access at any time, from inside the app.

to make any of these requests, email steve@fledji.app from the address associated with your account. we will respond within thirty (30) days, and usually much sooner.

if we deny a request, you may appeal by replying to our response within thirty (30) days. we will review your appeal and respond within sixty (60) days of receiving it. if your state provides a way to contact a regulator about the outcome, we will include that information in our response.

14how long we keep information

we keep your information for as long as your account is active. while it is active, you can delete individual records (a log, a note, a photo), and that deletion syncs across your devices and to anyone in your care circle.

when you delete your account (Settings, then Delete Account), we end your access right away and revoke the connection to your Apple sign-in, then permanently delete your account and the content in any care circle you alone own: the babies, logs, notes, and photos, and every member’s access to that circle. that deletion completes across our live systems within seven (7) days. we give ourselves this short window so that if any part of the deletion fails, we can catch it and finish the job rather than leave data half-removed. a circle you only joined (one someone else owns) is left in place for its owner.

two things to know about backups. our database provider keeps short-term, point-in-time backups so we can recover from an outage or mistake; these roll off automatically after thirty (30) days, after which the deleted information is gone from them too. your photos are stored only as encrypted files in our live system and are not separately backed up, so deleting them removes them.

some information may be retained longer if we are required to keep it by law, by a legal hold, or to enforce these policies (for example, a record that an account was closed at a particular date). that information is held only for that purpose.

15security

we use industry-standard practices to protect your information: encrypted connections for data in transit, encryption at rest for stored content, and scoped access controls for our team and our vendors. your photos get a stronger protection still: they are end-to-end encrypted, stored only as encrypted files, with the keys kept on your devices, so our servers and storage provider only ever hold scrambled content.

no service is perfectly secure. if a security incident affects your information, we will notify you and the appropriate authorities as required by law.

your part: because you sign in with Apple, the security of your fledji account rests on your Apple ID. keep it protected, and keep two-factor authentication turned on for it.

16international transfers

fledji is operated from the United States, and your account and content are stored in the United States. some of the third-party providers in section 09, in particular the AI text and voice providers, may process your information on infrastructure located outside the United States; that processing is transient, with zero data retention, so nothing you send to them is stored abroad once a result is returned. if you use fledji from outside the United States, you understand that your information is transferred to and stored in the United States, where data protection laws may differ from those in your country.

where required by law, we use appropriate safeguards (such as standard contractual clauses or equivalent mechanisms) before personal information moves across borders.

17state-specific rights

residents of certain US states (including California, Colorado, Connecticut, Utah, Virginia, and others as state laws evolve) have additional rights under state privacy laws: the right to know what categories of information we collect, the right to access and delete that information, the right to correct inaccuracies, and the right not to be discriminated against for exercising these rights.

fledji does not sell personal information and does not share personal information for cross-context behavioral advertising as those terms are defined under California law. there is no “do not sell or share” toggle to expose because there is no selling or sharing of that kind happening.

to exercise any state-specific right, email steve@fledji.app with the subject line “privacy request” and the state where you reside. we will verify your identity by confirming information already associated with your account.

18cookies and tracking on fledji.app

the fledji marketing site (fledji.app) does not set advertising or tracking cookies. our analytics provider counts page views without identifying you, without setting cookies, and without tracking you across sites.

your browser’s “do not track” signal is respected by default, because we do not run cross-site tracking in the first place.

19changes to this policy

when we change this policy in a material way, we will update the “last updated” date at the top, post a notice on fledji.app, and, if you have an account, send you an email. continuing to use fledji after a change takes effect means you accept the updated policy.

20how to contact us

privacy questions, requests, and feedback can all go to steve@fledji.app. you can also write to us at:

Luminary Management Group LLC
attn: privacy
155 Willowbrook Blvd, Ste 110 #8186
Wayne, New Jersey 07470
USA