Privacy Policy

Goosery Company, a Delaware corporation, runs getgoosery.com and the Goosery app. In this policy, “we” and “us” mean Goosery Company.

Goosery “opens” on the day the app is available to everyone on the App Store. Before then, only people we invite can use the app, through Apple's TestFlight. Where this policy describes the app, it describes what the app does with your information when you use it.

We treat your baby's due date or date of birth, whether there is more than one baby from the same birth, and your baby's stage as consumer health data under Washington, Nevada and Connecticut law, and as sensitive data under Connecticut law. Our Consumer Health Data Privacy Policy covers them separately, and Nevada residents also have our Nevada Consumer Health Data Privacy Policy.

Questions about this policy or about your information go to info@getgoosery.com.

When you visit

Vercel, which hosts this site, processes standard request data to deliver pages to you: your IP address, your browser type, the pages you ask for, and the page that sent you here.

The site sets no cookies. It runs no analytics and no advertising, and it carries no tracking pixels. Everything a page loads, including its fonts and images, comes from getgoosery.com, so no other company receives a request from your browser when you read it.

Some links we share with partners carry a short label in the address, after ?src=. If you came from a link a pediatric practice shared, the label names that practice. If you arrive through one of these links, the site saves the label in your browser's session storage when the page loads, whether or not you sign up, and holds it until you close the tab. Nothing else goes into your browser's storage. The label is part of the address you followed, so Vercel receives it with the rest of the request.

If you ask for the launch email

When you submit the email form, we store your email address, the source label (or “direct” if you came without one) and the date and time you signed up. The form's server also sees your IP address. To stop the form being flooded, our code keeps a scrambled form of the address in the server's working memory, which clears when the server restarts, and never writes it anywhere. Vercel's own request logs record the address, as they do for every visit.

If you email us

We receive your message, your email address, and anything else you choose to include.

When you use the app, it collects the following.

Your account

Your email address and a password. Supabase stores only a scrambled, one-way form of the password, which can't be turned back into it. Each time you sign in, Supabase records your IP address and your device and browser details with the session, and keeps a security log of account events such as sign-ins, which also records IP addresses. The app keeps you signed in by storing a session key on your phone.

Your baby

Your baby's exact due date or date of birth, and whether you are expecting or have more than one baby from the same birth. If you have more than one child in Goosery, the same for each. If you change your baby's stage, the app stores the change, and when the app checks in about a stage, it stores your answer (for example, whether your baby has started crawling). The app asks your consent before it asks for the date.

Your home

Your answers to the app's questions about your home: the type of home, whether you rent or own, floors and stairs, heating and water, pets, where your baby sleeps, whether there are older children, who else looks after your baby and where, the budget and tools you have for fixes, and, only if you choose to answer it, whether there are firearms in the home.

Your photographs

The photographs you take of your rooms and your baby's sleep space, which room each one shows, and whether you took it standing or at crawling height. What happens to them has its own section below.

What your photographs show, and your plan

For each photograph, the list of hazards found in it: the type of hazard, how confident the reading is, where in the photograph it is, and a short note of what was seen, which we use to check the results and never show in the app. Your plan: its items, which ones you have marked done, and when.

Your choices

A record of each consent you give or withdraw in the app, the wording you saw, and when.

If you test the app through TestFlight

Apple sends us the crash reports and usage data TestFlight collects from the app on your phone, which TestFlight doesn't let you turn off, and any feedback you send through TestFlight, including your comments and screenshots. Feedback you email us arrives in our inbox. We use all of it to find and fix problems in the app. We read it in App Store Connect, Apple's site for app developers, where Apple makes crash reports available to us for 120 days.

If feedback shows a photograph of a room, a person, a document or your baby's date or stage, we delete it, the comment and the image, within 15 days, from App Store Connect, our email and our own computers. We may first copy the written comment, without the image, into our own notes. Apple keeps its own copy under its own privacy policy. Deleting your Goosery account doesn't delete feedback or crash reports. Email info@getgoosery.com to have your feedback deleted.

When you accept the Goosery Early Access Agreement, the app records when you accepted it and which version, and we keep that record with your account.

How you use the app

PostHog records events such as the screens you open and the buttons you tap, with a random identifier for the app on your phone and, once you sign in, your Goosery account ID. With them it receives the kind of phone you use, its operating system, the app version, your language and your time zone. Like any service your phone connects to, it receives your IP address; we set PostHog to discard it and not to use it to estimate where you are. PostHog never receives your baby's date or stage, whether you have more than one baby, your answers about your home, or your photographs.

You can turn this off in the app's Settings, under Privacy and terms. The app then sends PostHog nothing more.

Notifications

If you allow notifications, your phone gives the app a token for sending them, and the app stores it with your account. Expo and Apple carry each notification to your phone. A notification never contains your baby's date or stage. When the app checks in about a stage, the notification says only “Goosery has a question about your plan.” and the question itself appears inside the app.

Purchases

Apple takes payment for the one-time purchase that unlocks the full plan. We receive a record that the purchase was made and which babies it covers. We never receive your card or payment details.

What your phone's date is used for

Each time the app works out your baby's stage, it sends your phone's current date so the plan matches your day. We use it for that calculation and don't store it.

• Your email address on the launch list: to send one email, when Goosery opens. We won't add it to any other list.
• Source labels: to see which links, including a pediatric practice's, bring people to the site.
• Messages: to read and answer them.
• Your account: to sign you in, keep your plan with you, and send account emails such as a sign-up confirmation or a password reset.
• Your baby's date, stage and check-in answers: to place your baby on the plan, to choose what the plan raises at each stage and for each baby, and to time the app's stage check-ins.
• Your answers about your home: to choose which hazards apply to your home and which fixes suit it.
• Your photographs: to find the hazards in each room and build your plan, and, only if you agree, to test and improve how Goosery finds hazards.
• Usage events: to see how the app is used and to find and fix problems.
• Notification tokens: to send the notifications you allowed.
• Purchase records: to unlock the full plan for the babies a purchase covers.
• Consent records: to show which choices you made, under which wording, and when.
• TestFlight crash reports, usage data and feedback: to find and fix problems in the app.
• The record that you accepted the Goosery Early Access Agreement: to show that you accepted it, which version, and when.
• Session details and the security log: to keep your account secure and to look into problems.

We won't use information we already hold for a new purpose without first telling you and getting your agreement.

Reading them

When you take a photograph in the app, the app uploads it to Supabase, which stores it for us in private storage where no other account can reach it. We then send it to Amazon Bedrock, an image-analysis service run by Amazon Web Services, which reads it and returns a list of the hazards it finds. The image-analysis service is third-party AI. The app asks your permission before it sends your first photograph. You can withdraw that permission at any time in Settings. After you do, the app sends no more photographs to be read, and a scan waits until you allow it again. A photograph already being read is finished.

With each photograph, the service receives everything the photograph shows, the room's name, five of your answers about your home (floors and stairs, heating, water, pets, and whether you rent or own) and a list of the hazard types to look for. It never receives your baby's due date or date of birth, your baby's stage, whether you have more than one baby, or your email address, and the list it receives doesn't depend on any of them.

Amazon Web Services reads photographs for us, in the United States. Under its terms with us, it uses them only to provide the service, so it doesn't use them to train its systems or for advertising or marketing. Under the terms Amazon Web Services publishes for the service Goosery uses, it doesn't keep a copy after reading a photograph, except one its automated checks flag as illegal content, which it may keep to review and to report to the authorities, or where the law requires it. Those terms are Amazon Web Services' own, and it can change them.

Your choice about keeping them

Until Goosery opens, the app asks whether we may keep your photographs and use them to improve how Goosery finds hazards. Neither answer is chosen for you, and every part of the app works whichever you pick.

• If you choose to have them deleted, we delete each photograph within 24 hours of the service reading it.
• If you choose to let us keep them, we keep each photograph for up to 365 days from the day you take it, then delete it. While we keep it, people at Goosery look at it, note which hazards it shows, and run it through the image-analysis service again to test Goosery and to adjust the instructions Goosery gives the service. We never use your photographs to train or fine-tune any system, ours or the service's.

You can change your answer in Settings at any time. If you change it to delete, we stop keeping new photographs and delete the ones we kept within 15 days.

If we change what this section says about keeping photographs, the app asks you again. Until you agree to the new wording, we keep no new photographs. Photographs you let us keep under the old wording stay until their 365-day limit, unless you change your answer or ask us to delete them. Updating this section to say that Goosery has opened doesn't count as a change to it.

When Goosery opens, we stop keeping photographs to improve Goosery. From then on we delete each photograph as soon as the service has read it, unless you've asked the app to keep it for your own record. Photographs you let us keep before then stay until their 365-day limit, unless you change your answer or ask us to delete them.

This section, and the app's notice about keeping photographs, are version demo-2026-09-24. The app records which version you agreed to.

Photographs you keep for your own record

If you ask the app to keep a photograph for your own before-and-after record, we keep that photograph until you turn the setting off, and then delete it. That setting on its own does not let us use the photograph to improve Goosery. Only your answer above does.

When you delete your account

If you let us keep your photographs, deleting your account in the app does not delete them unless you tick a box. The account-deletion screen has a box labelled “Also delete the photos I let Goosery keep”, and it starts unticked. If you tick it, we delete those photographs with your account.

If you leave it unticked, we keep the photographs you let us keep that are still within their 365-day limit and still covered by your consent, linked to no account. We go on using them to improve how Goosery finds hazards until each one reaches its limit, then delete it. With them we keep the date each was taken, the version of this section you agreed to, the record of your consent, and a scrambled, one-way form of your email address that can't be turned back into the address. We don't keep the address itself or your account. We delete the consent record and the scrambled address with the last of those photographs.

If your account has no email address, we delete them with your account even if the box is unticked, because we could never find them for you later. If you ask us by email to delete your account, rather than deleting it in the app, we delete every photograph with it, including any you let us keep.

To have them deleted at any time, before or after you delete your account, email info@getgoosery.com from the address your account used. We write back to that address first, to confirm the request comes from whoever holds it. Then we find the photographs that match and delete them within 15 days.

Every other photograph is deleted with your account.

What stays after a photograph is deleted

The list of hazards found in a photograph is part of your plan. It stays in your account after the photograph is deleted, until you delete your account.

What we never do with a photograph

We don't sell your photographs, publish them, or use them for advertising or marketing. We don't use them to work out who anyone is. We don't give them to anyone except the companies named in this policy that store or read them for us, unless the law requires it.

Photograph the room, not the people in it. If a photograph does show a person or a document, we handle it like any other photograph.

Before the app asks for your baby's due date or date of birth, it asks for your consent to collect it, separately from anything else you agree to. We use the date, whether there is more than one baby, and your baby's stage and check-in answers only to place your baby on the plan, choose what the plan raises at each stage and for each baby, and time the stage check-ins.

We never share this information with any other company. Supabase stores it for us as part of the app's database. It never goes to the image-analysis service, to PostHog, or into a notification.

You can withdraw your consent in Settings by removing that baby from Goosery, or by emailing info@getgoosery.com. We then stop using the date and delete it within 15 days, and from our backups within six months. Goosery needs the date to build a plan, so removing it removes that baby's plan too.

The Consumer Health Data Privacy Policy sets out what we collect, why, and how to use your rights over it.

We don't sell your information. We don't use it or share it for targeted advertising, and we don't give it to anyone for their own marketing.

Neither the website nor the app follows what you do on other companies' websites or apps, and no other company collects information through either of them about what you do across other sites over time. Because we don't sell your information or use it for targeted advertising, a Do Not Track or Global Privacy Control signal has nothing to switch off here. We treat one as a request not to, all the same.

Goosery does not collect, use or sell personal data for the purpose of training large language models. When you let us keep your photographs to improve Goosery, we use them only to test Goosery and to adjust the instructions it gives the image-analysis service. We never use them to train or fine-tune any system, ours or the service's.

Goosery does not use your photographs or anything else you give us to identify people, and it takes no measurements of anyone's face or body.

Nevada residents can direct us not to sell their information by emailing info@getgoosery.com. We don't sell it, and we'll write back to confirm that.

Photographs follow the rules in the photographs section above. For everything else, on the website and in the app, we keep it for as long as you have an account or are on the launch list, and for 10 years at the most. If you delete your account, or ask us to delete your information, we delete it sooner.

When you delete your account in the app, we delete your account and the information in it from our systems within 45 days, and from our database backups within six months. If you let us keep photographs and leave them to be kept after your account is gone, we also keep, with them, the record of that consent and a scrambled form of your email address, as the photographs section says, and delete both with the last of those photographs.

When we delete an address from the launch list, we also empty Airtable's trash. Airtable's record history can still show the deleted record for up to two weeks.

Vercel keeps its request logs for the period its own service sets. Cloudflare keeps a record of each email's sender and recipient for the period its own service sets. Messages you send us stay in our inbox until you ask us to delete them, and for 10 years at the most.

Wherever you live, you can ask us to:

• confirm whether we hold information about you, and give you a copy of it, including what we have worked out from it, such as your baby's stage, your plan and the hazards found in your photographs;
• correct information that is wrong;
• delete your information;
• give you your information in a common format you can take elsewhere;
• stop using information you gave us with your consent, by withdrawing that consent.

How to do it

In the app, you can delete your account, change your answer about keeping photographs, withdraw your permission to send photographs to be read, turn off usage analytics, change your baby's date and stage, and remove a baby, all in Settings. For anything else, email info@getgoosery.com and tell us which address or account the request is about. You don't need to create an account to make a request, and we don't charge for it.

To be sure a request comes from you, we write back to the email address the request is about, or ask you to confirm it from inside the app, before we show, change or delete anything.

Withdrawing a consent is as easy as giving it, and we act on it within 15 days. We answer every other request within 45 days. If we need longer, we tell you why within those 45 days and take at most 45 more.

If we say no

If we turn down all or part of a request, we tell you why. You can appeal by replying to our answer, or by emailing info@getgoosery.com with “Appeal” in the subject line. We answer an appeal within 45 days and tell you what we did and why. If we still say no, you can complain to your state's attorney general. Washington residents can use the Washington Attorney General's complaint page, and Connecticut residents the Connecticut Attorney General's complaint page.

The launch email

To take your address off the launch list, email info@getgoosery.com, or use the unsubscribe link in the email itself.

The website and the app send your information over encrypted connections. Your photographs sit in private storage, and the app's database lets each account reach only its own records and any that another account has shared with it. Inside Goosery, only the people who need your information to run the service can reach it.

No system is proof against every attack. If a breach affects your information, we tell you as the law requires.

Goosery is for adults: parents, parents-to-be and the people who help them. You must be 18 or older to use the app. It isn't directed at children, and we don't knowingly collect information from children under 13. The information the app holds about your baby is information you give us about your child. If you believe a child under 13 has given us information, email us and we'll delete it.

Goosery is offered in the United States, and this policy is written for people who live there. We run Goosery from the United States.

If we change this policy, we post the new version on this page and update the dates at the top. If a change is material, we also tell you in the app before it takes effect.

A change never puts information we already hold to a new use without your agreement. If a change would affect information we already hold, we tell you first and give you the chance to withdraw your consent before it applies.

Goosery Company. Email info@getgoosery.com for any question or request about your information.