Privacy Notice

Information we collect

Depending on the features you use, we collect: account information (email, password hash, device labels); Family Space and membership information you enter; sensitive content you choose to record (pregnancy details, due dates, personal notes, child records, newborn logs, provider contacts); device and session facts; and limited operational diagnostics. We collect only what the features you use require.

We do not obtain information from health platforms, advertising networks, or data brokers, and we do not collect donor or genetic details.

How we use information

We use information to operate and secure the Service; provide family sharing, offline sync, educational content, and safety cards; send service and security notices; prevent abuse; comply with law; and maintain or improve the Service using privacy-protective operational information.

We do not sell personal information, use it for cross-context behavioral advertising, or use private user content to train a general-purpose AI model.

How information is shared

We share information only with Family Space members or recipients you authorize; contracted service providers that need it to provide hosting, security, email, or support; and where required by law. A relationship label never determines access — visibility and capability controls do.

Mobile opt-in data and consent will not be shared with third parties or affiliates for marketing or promotional purposes.

Sensitive information and AI

Sensitive pregnancy, child, note, and contact information is private by default and protected with application-level encryption in addition to transport and storage protections. A gestational carrier's personal health information is not automatically visible to intended parents.

If an AI feature is offered, it is grounded in approved content, chats are private by default, and no model-determined emergency status is used. AI output is informational and not medical advice.

Retention, deletion, and security

We retain information only as needed for the purposes described here, legal compliance, dispute resolution, and Service protection. Operational logs are kept 30 days and audit events one year; backups expire on the published schedule.

You may request export or deletion at any time through the Privacy page in the app. Deletion of a shared record does not delete copies another person lawfully owns, and deletion from active systems does not mean immediate removal from security backups.

We use administrative, technical, and organizational safeguards appropriate to the sensitivity of the information. No storage or transmission method is completely secure.

Choices and rights

You can access, correct, export, or request deletion of your data through the Service. You can revoke member access, device sessions, and capability grants in Settings. SMS opt-in is never required to use Harbor+, and you can stop messages at any time by replying STOP.

US-state privacy rights vary. Washington My Health My Data and Nevada consumer health data rights are described on our Consumer Health Data page.

Children

Harbor+ is for adults. Children do not have accounts in the initial release. Adults may create or manage child records only when authorized. If you believe a child created an account, contact [email protected].

Changes and contact

We will post Notice updates and provide additional notice when required by law. Contact TerraKode at [email protected]. TerraKode LLC, United States.