Who we are
Cradld is a Canadian company. We built this app to support parents through every chapter of the family-building journey, from planning and fertility to pregnancy, postpartum, and loss. Your trust matters more than anything else to us.
What we collect
- Account info - your email address, name, and profile details you provide during onboarding (parent type, baby name, challenges, journey stage, cultural background).
- Chat messages - what you share with the AI companion so it can support you in context.
- Mood entries - mood scores, sleep hours, tags, and optional notes you log.
- Usage data - basic analytics like which features you use, so we can improve the app.
- Payment info - processed securely through Stripe. We never see or store your card number.
Sensitive health and wellness data
Some of what you share with us is deeply personal. We treat it that way.
- Encrypted profile fields - sensitive details like your journey stage, loss history, and wellness notes are encrypted before being stored. They are decrypted only when you access your own account.
- Loss data sensitivity - if you have experienced pregnancy or infant loss, any information you share about that experience is treated with the highest level of care. It is never used for marketing or analytics.
- Consent-based collection - we only collect sensitive health and wellness details when you choose to share them. You can skip or update any field at any time from your profile.
How we protect your data
We take data protection seriously, especially given the sensitive nature of what you share with us.
- Encryption at rest - all chat messages, mood notes, and crisis logs are encrypted with AES-256-GCM before being stored. Even with direct database access, your content is unreadable.
- PII filtering - personal details like names, emails, and phone numbers are stripped from your messages before they reach our AI provider. The AI responds using only your profile, not your raw messages.
- Row-level security - every database query is scoped to your user account. You can only access your own data.
- Audit logging - we log access to sensitive data for compliance and security monitoring.
- Secure connections - all data is transmitted over HTTPS/TLS.
Partner data sharing
Cradld has features that let you optionally share parts of your experience with a partner or support person. Here is how that works.
- Opt-in only - partner sharing is never on by default. You choose to enable it, and you choose what is shared.
- Mood trends only - partners can see aggregated mood trends (like weekly averages), not your individual entries, notes, or chat messages.
- Revocable at any time - you can turn off partner sharing from your profile settings at any time, and any shared access is immediately removed.
Voice features
Cradld includes voice-based support features. Voice processing happens in real time to generate responses. We do not record, store, or retain your voice audio. Once your session ends, no audio data is kept.
AI and your data
Our AI companion is powered by Anthropic's Claude. When you chat, your messages are filtered to remove personal identifiers before being sent to the AI. Anthropic does not use your conversations to train their models. The AI does not have access to your raw message history between sessions.
Third parties and cross-border transfers
- Supabase - database and authentication (hosted in North America).
- Anthropic - AI processing (PII-filtered data only).
- ElevenLabs - voice synthesis for real-time voice features (no audio is stored).
- Resend - transactional email delivery (US-based).
- Stripe - payment processing. See Stripe's privacy policy.
- Vercel - hosting and deployment.
Some of our service providers are based in the United States. By using Cradld, you consent to your data being processed in the US as described in this policy. We take reasonable steps to ensure these providers protect your data under standards consistent with Canadian privacy law.
We do not sell your data. We do not share your data with advertisers. We do not use your data for any purpose other than providing and improving the service.
Your rights (PIPEDA)
As a Canadian company, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to:
- Access - download a copy directly from profile settings, or request a full copy of all data we hold about you.
- Correction - update or correct your personal information at any time through your profile.
- Deletion - permanently delete your account and all associated data from your profile settings. This is immediate and irreversible.
- Withdraw consent - unsubscribe or stop using the service at any time.
To exercise any of these rights, email support@cradld.com.
For US residents
If you are a California resident, the California Consumer Privacy Act (CCPA) gives you additional rights.
- Right to know - you can request details about the categories of personal information we collect and how we use it.
- Right to delete - you can request that we delete your personal information, subject to certain exceptions.
- Right to opt out - we do not sell your personal information. There is nothing to opt out of.
- Non-discrimination - we will not treat you differently for exercising your privacy rights.
To exercise any CCPA rights, email support@cradld.com.
Data retention
We keep your data for as long as your account is active. If you delete your account, all data is permanently removed within 30 days. Audit logs may be retained for up to 12 months for compliance purposes.
Children
Cradld is designed for adults (parents and caregivers). We do not knowingly collect data from anyone under 18.
Changes to this policy
We may update this policy from time to time. We will notify you of significant changes via email or an in-app notice.
Contact
Questions about privacy? Reach us at support@cradld.com.