Privacy Policy

Last updated: May 11, 2026

Milk and Moon (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, retain, and delete your information when you visit our website or use the Milk and Moon app.

Information We Collect

We collect personal information that you voluntarily provide when you subscribe to our email list, purchase a guide, contact us, or create an account in the Milk and Moon app. This may include:

  • Contact details — your name, email address, and (optionally) your due date or pregnancy/postpartum phase.
  • Account information (app only) — the profile you create, your baby’s profile, preferences, and caregiver relationships.
  • Tracking and health-related entries (app only) — feeding, bottle, diaper, pumping, pain, mood, and growth data you log.
  • Purchase information — order history. Card numbers and payment details are handled directly by Stripe and are never stored on our servers.
  • Technical information — standard analytics such as device type, browser, IP address, and pages visited, used to operate and improve the site and app.

How We Use Your Information

We use the information we collect to:

  • Deliver products and services you’ve purchased.
  • Send educational content, product updates, and transactional emails you’ve opted into (such as a welcome email after signing up for the free guide, or a confirmation email after a purchase).
  • Operate and improve our website, app, and services.
  • Respond to your questions and provide customer support.
  • Comply with our legal obligations, including financial recordkeeping.

How We Share Your Information

We do not sell your personal information. We share data only with trusted third-party services that help us operate Milk and Moon, and only the data necessary for each service to perform its function:

  • Stripe — payment processing for paid guides and subscriptions.
  • Supabase — application database and authentication.
  • Resend — transactional and marketing email delivery.
  • Vercel — website hosting and basic analytics.

Each service has its own privacy policy governing how they handle your data.

Data Retention

We retain your personal information only as long as necessary to provide the services you’ve requested or as required by law.

  • Marketing email signups (your email and any details you provided when subscribing to the free guide, our blog, or a waitlist) are retained until you unsubscribe or request deletion.
  • Account data inside the Milk and Moon app (your profile, your baby’s profile, feeding and tracking logs, growth measurements, saved articles) is retained for as long as your account is active. Accounts that remain inactive for 24 consecutive months may be deleted after we send a notification email to the address on file.
  • Contact-form submissions are retained for up to two years so we can reference our prior correspondence with you.
  • Purchase and billing records (handled by Stripe on our behalf) are retained for up to seven years to meet financial and tax recordkeeping requirements.
  • De-identified, aggregate usage data — patterns we use to improve the product, with no link back to you individually — may be retained indefinitely.

Data Deletion

You have the right to request deletion of your personal information at any time. We offer two ways to do this:

  1. Delete from inside the app. Open the Milk and Moon app, tap Settings, scroll to the bottom, and tap “Delete Account.” A full walkthrough is available at milkandmoon.io/terms/delete-account.
  2. Request by email. Submit a deletion request through our contact page with the subject “Delete my account.” Please send the request from the email address associated with your account so we can verify your identity. We’ll confirm the deletion within 7 business days.

Most deletions complete within 7 days of your request. In rare cases, backups may take up to 30 days to fully cycle out. Once deletion is complete, your data cannot be recovered.

Deleting your account also removes you from our marketing email list. If you only want to unsubscribe from emails — without deleting your account — use the unsubscribe link at the bottom of any email we send.

We may retain a limited subset of information after deletion when required for legal, accounting, fraud-prevention, or audit purposes (such as Stripe transaction records for tax compliance). Retained data is not used for marketing or analytics.

Your Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you.
  • Correct information that is inaccurate or incomplete.
  • Request deletion of your personal information.
  • Opt out of marketing communications at any time.
  • Object to or restrict certain types of processing of your data.

To exercise any of these rights, please contact us from the email address associated with your account.

Children’s Privacy

Milk and Moon is intended for adults — parents, expecting parents, and caregivers. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

Security

We use industry-standard safeguards to protect your information, including TLS encryption in transit and encryption at rest through our infrastructure providers. No method of transmission or storage is 100% secure, but we work to maintain the integrity and confidentiality of your data and notify you in the unlikely event of a breach affecting your personal information.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes will be communicated via email to active subscribers or through an in-app notice.

Contact Us

If you have questions about this Privacy Policy or how we handle your data, please reach out through our contact page or on Instagram @milkandm00n.