Privacy Policy

Last updated: 15 February 2026

This Privacy Policy explains how Calm Mum (also known as The Calm Mum) collects, uses, and protects information when you use our website and app. This is not legal advice — sections marked [Legal review required] should be reviewed by a qualified data protection adviser before relying on them.

1. Who we are

The data controller is [Company legal name], registered at [Company address]. For any privacy question, contact [Contact email] or our data protection contact at [Data protection contact].

2. What personal data we collect

  • Parent account details (name, email, password hashed)
  • Email address
  • Baby name (optional)
  • Baby date of birth and / or expected due date
  • Baby pronouns and prematurity status (optional)
  • Baby feeding notes, sleep notes, nappy logs (optional)
  • Mood check-ins (optional)
  • Saved concerns and appointment notes (optional)
  • App usage analytics (only with your consent)
  • Payment and subscription status (handled by our payment processor)

3. Why we collect it

To provide a personalised, calm and useful experience — to remember your baby's age so we can show relevant guidance, to help you track feeds and nappies, to send you the content you have asked for, to take payment for paid plans, and to keep your account secure.

4. Legal basis for processing

  • Contract — to provide the service you sign up for.
  • Consent — for analytics, marketing emails, and any non-essential cookies.
  • Legitimate interests — to keep the service safe, secure, and improving.
  • Legal obligation — for tax and accounting records.

[Legal review required]

5. How we use baby information

Baby data is private by default. We do not publicly display baby names. We do not use baby data for advertising profiling. We do not sell baby data. We do not share baby data with third parties except essential service providers needed to run the service (such as our hosting provider).

6. How we use mum wellbeing information

Mood check-ins and wellbeing notes are private to your account. They are never used to profile you for advertising and are never sent to analytics tools.

7. How we use tracker / log information

Feed logs, nappy logs and similar tracker data are stored against your account so we can show your 24-hour totals and let you export a clear summary for your GP or health visitor. This information is not used for advertising.

8. How we use analytics

If you give consent, we use a privacy-conscious analytics provider ([Analytics provider]) with IP anonymisation. We only send generic events such as page views and feature opens. We do not send baby names, baby dates of birth, mood text, health notes, feeding notes, nappy notes or any free-text the user has entered.

9. How we use marketing emails

We only send marketing emails to people who have opted in. You can unsubscribe at any time via the link in any marketing email or by updating your preferences in Settings. Transactional emails (such as password reset, payment receipt, gift redemption) are separate and may be sent without marketing consent.

10. Payment processing

Payments are handled by our payment processor [Payment processor]. We do not store full card details on our servers. We do retain a record of subscription status, customer ID and transaction reference for accounting purposes.

11. Who we share data with

Only the essential providers needed to run the service — see our Cookie Policy and our DATA_PROTECTION_NOTES (available on request) for a current list. We do not sell personal data. We do not share baby or wellbeing data with advertisers.

12. Where data is stored

Data is stored on managed cloud infrastructure provided by [Hosting provider]. Where appropriate, transfers outside the UK / EEA use appropriate safeguards. [Legal review required]

13. How long we keep data

  • Account data — while your account is active.
  • Baby logs, mood check-ins, appointment notes — until you delete them, or after [X months/years] of inactivity.
  • Marketing consent records — retained as legally required.
  • Payment records — retained as legally required for tax and accounting.
  • Analytics data — retained for [X months].

[Legal review required]

14. Your rights

Under UK and EU GDPR, you have the right to access, correct, delete, restrict, object to and port your personal data, and to withdraw consent at any time. You can use our Privacy Request form or contact us directly.

15. How to delete your account

Go to Settings → Delete account. We will explain what will be removed before you confirm. Some information may need to be retained for legal or accounting reasons.

16. How to contact us

Email [Contact email] or use our Privacy Request form.

17. How to complain

If you are in the UK, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk. You have a right to complain to your local data protection authority.

Calm Mum is educational support, not medical advice. If you are worried about your baby's health, your recovery or your wellbeing, contact your GP, midwife, health visitor, pharmacist, paediatrician, maternity unit, emergency services or local healthcare provider.

Made with Emergent