Legal

Privacy Policy

Last updated September 17, 2026

Section 1Who we are

BIRTH WAVE LLC (“BirthWave”, “we”, “us”) is the controller of the personal information described in this policy.

Privacy contact

support@mybirthwave.com

EU / UK representative

Prighter Group with its local partners. Privacy-rights portal: https://app.prighter.com/portal/11034305555

Representative

We value your privacy and your rights as a data subject and have therefore appointed Prighter Group with its local partners as our privacy representative and your point of contact for the following regions:

• United Kingdom (UK)
• European Union (EU)

Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative, Prighter, or make use of your data subject rights, please visit: https://app.prighter.com/portal/11034305555.

Section 2What this policy covers

This policy applies to the BirthWave mobile app, the website at mybirthwave.com, and any email we send you. It does not cover Apple's or Google's own handling of your data, which is governed by their privacy policies.

Some of what we collect can indicate that you are pregnant or have recently given birth. That information gets extra protection under several laws, and is described separately in our Consumer Health Data Privacy Policy.

Section 3Information we collect

Information you give us

• Account details: your name and email address, and the password credential handled by our authentication provider.
• Profile details: anything you choose to add to your profile — first name, the mother’s date of birth and the baby’s due date. All three are optional — you can create an account and use the app without providing them.
• Messages: what you write to us at support@mybirthwave.com, including any attachments.

Information we collect automatically

• Listening and app activity: tracks played, categories browsed, favourites saved, session length, features used, and in-app screens viewed.
• Subscription status: whether you have an active trial or subscription, the plan, its renewal date, and purchase and restore events. We receive this as a confirmation from Apple, Google and our subscription provider.
• Device and technical data: device model, operating system version, app version, language, time zone, coarse region, and a device or installation identifier.
• Diagnostics: crash reports, error logs and performance data.

Section 4Health-related information

BirthWave is built around pregnancy, labour and early motherhood. Because of that, the fact that you use the app at all — and certainly what you listen to and what you put in your profile — can reveal or suggest that you are pregnant, preparing for birth, or recovering from one.

We treat that as sensitive information. We do not sell it, we do not use it for advertising, we do not use it to build profiles for anyone else, and we share it only with the service providers listed in Section 7 so the app can function.

Our Consumer Health Data Privacy Policy sets out, in the form required by Washington's My Health My Data Act and similar laws, exactly what health-related data we collect, why, who receives it, and how to exercise your rights over it.

Section 5How we use your information

• To create and maintain your account and let you sign in.
• To deliver the music library, playback, categories, favourites and your profile.
• To verify and manage your subscription, free trial and restore-purchases requests.
• To respond to your support messages.
• To diagnose crashes, fix bugs and improve performance and reliability.
• To understand, in aggregate, which content and features are used, so we can improve the library.
• To send you service messages about your account, subscription or important changes.
• To detect and prevent fraud, abuse and unauthorised access, and to enforce our Terms of Use.
• To comply with legal obligations and to establish, exercise or defend legal claims.

We do not use your information to make decisions about you by automated means that produce legal or similarly significant effects.

Section 6Legal bases, if you are in the EU or UK

• Performance of a contract — running your account, delivering the library, managing your subscription, and providing support.
• Legitimate interests — keeping the Service secure, preventing fraud, fixing crashes, and understanding aggregate usage so we can improve. We balance these against your rights.
• Consent — optional analytics or other optional processing where consent is required. You can withdraw consent at any time.
• Explicit consent under Article 9 UK/EU GDPR — before BirthWave processes pregnancy or other health information for EU/UK users where explicit consent is required. The due-date field is optional, and BirthWave does not currently use it for recommendations or reminders.
• Legal obligation — where we must keep or disclose information by law.

Section 7Who we share your information with

We share personal information only with service providers used to operate BirthWave, and only as needed for the purposes described in this policy.

Google Firebase

Authentication, Cloud Firestore, Cloud Storage and Hosting — account sign-in, profile and favourites storage, and audio delivery.

Google Analytics for Firebase

Aggregate app usage and feature analytics.

Firebase Crashlytics

Crash and error reporting.

RevenueCat

Subscription status, entitlements and restore-purchases handling.

Apple & Google

Payment processing, billing, renewals and refunds for in-app subscriptions.

Google (Google Workspace)

Business email, support communications and service messages.

Netlify

Hosting mybirthwave.com.

These providers handle data under their applicable service terms and data-protection commitments. We limit what we send to what is reasonably needed to provide the relevant service.

We may also disclose information where we are legally required to, where necessary to protect the rights, safety or property of BirthWave or others, or in connection with a merger, acquisition or sale of assets — in which case we will tell you before your information becomes subject to a different policy.

Section 8We do not sell or share your information

We do not sell your personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under California and other US state privacy laws. We have not done so in the preceding twelve months. We do not use your information for targeted advertising, and we do not run advertising in the app.

Section 9Payments and subscriptions

All payments are processed by Apple or Google. We never receive, see or store your card number or other payment credentials. What we receive is a confirmation of your subscription status — the plan, whether it is active, and when it renews — so the app knows what to unlock. Please see Apple's and Google's privacy policies for how they handle payment data.

Section 10The website

mybirthwave.com is hosted by Netlify. The current public website does not contain a waitlist or contact form and does not collect names or email addresses through a website form. If we add forms, a waitlist, advertising pixels or new website analytics in the future, we will update this policy before using them.

Section 11Cookies and website analytics

Our website does not use cookies, pixels or analytics tools. We do not track you across websites.

Section 12How long we keep your information

Account and profile

For as long as your account is open. Account-linked Firebase Authentication and profile data are deleted through our account-deletion workflow when you delete your account.

Favourites and playback state

Account-linked favourites and playback state are deleted with the account. Aggregate track play counts that are not tied to a person may be retained.

Backups and version history

BirthWave does not currently maintain scheduled Firestore backups. Firestore point-in-time recovery is currently off; native version history is limited to approximately one hour. If our backup configuration changes, we will update this policy to reflect the actual retention period.

Subscription and transaction records

Retained for up to 7 years where required for tax, accounting and fraud-prevention purposes, in a form not linked to your profile where possible.

Support emails

Up to 24 months from the last message in the thread.

Firebase Analytics

User-level and event-level data are retained for 2 months under the current configuration.

Crash and diagnostic logs

Firebase Crashlytics data are retained for 90 days, then deleted automatically.

Cloud Function logs

Standard _Default logs are retained for 30 days; Google-managed _Required logs are retained for 400 days.

Section 13International transfers

We are based in the United States and our service providers store and process information on servers in the United States and other countries. If you are in the EU, UK or another region with different data protection laws, your information will be transferred to and processed in the United States.

Where we transfer personal information out of the EEA or UK, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum or International Data Transfer Agreement, as applicable) together with the additional safeguards our providers apply. You can ask us for details at support@mybirthwave.com.

Section 14Your rights

Depending on where you live, you may have the right to:

• know what personal information we hold about you and get a copy of it;
• correct information that is inaccurate or incomplete;
• delete your information;
• receive your information in a portable, machine-readable format, or have it sent to another provider;
• object to, or ask us to restrict, certain processing;
• withdraw consent at any time, without affecting processing already carried out;
• opt out of marketing emails;
• not be discriminated against for exercising any of these rights.

You can update your profile and delete your account directly in the app, or use our Account deletion page. For anything else, email support@mybirthwave.com. We will verify your identity — usually by confirming control of the email on the account — and respond within 45 days, or within one month if you are in the EU or UK. You may use an authorised agent, in which case we may ask for proof of their authority.

If you are in the EU or UK and you are unhappy with how we have handled your information, you have the right to complain to your local supervisory authority. In the UK that is the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to address it first.

Section 15Additional rights for US state residents

If you live in California, Colorado, Connecticut, Virginia, Texas, Washington, Nevada or another state with a comprehensive privacy law, you have the rights listed in Section 14, plus the right to appeal a refused request. To appeal, reply to our decision with the subject line “Privacy appeal”; we will respond within 45 days and, if we deny the appeal, tell you how to contact your state Attorney General.

California. In the preceding twelve months we collected the categories of personal information described in Section 3 — identifiers, customer records, commercial information, internet or app activity, geolocation limited to coarse region, and sensitive personal information in the form of health-related inferences — from you directly and automatically from your device, for the purposes in Section 5, and disclosed them for business purposes to the categories of recipients in Section 7. We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not use or disclose sensitive personal information for purposes beyond those permitted under the CCPA — so no “limit the use of my sensitive personal information” link is required.

Washington, Nevada and Connecticut consumer health data. See our Consumer Health Data Privacy Policy.

Section 16Children

BirthWave is for adults aged 18 and over. It is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has given us information, contact support@mybirthwave.com and we will delete it.

Section 17Security

We use technical and organisational measures appropriate to the sensitivity of the information, including encryption in transit and at rest with our infrastructure providers, access controls limiting who can reach production data, and authentication handled by an established identity provider rather than passwords we store ourselves. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and any regulator as required by law.

Section 18Changes to this policy

We may update this policy as the app develops or the law changes. We will update the “Last updated” date above, and for material changes we will notify you in the app or by email before they take effect.

Section 19Contact us

BIRTH WAVE LLC
Email: support@mybirthwave.com
Phone: +1 307-278-9283