Privacy policy

Agentic Flows(Chamber of Commerce 42075199)is responsible for processing personal data through Postnatal Planner. Send questions or requests to [email protected].

Parents choose what appears on their page and who receives the link. They decide which details and photos of their child to share; we store that content and make it accessible to people with the link.

Parents(people with an account):

• Your email address and a password hash. If you sign in with Google or Apple, we receive your email, name, and an account identifier, never your password for that service.
• Your page content: your child’s name, birth date, time, weight and length, parents’ names, a welcome message, visiting preferences, meal preferences, visiting times, requests, and an optional photo.
• Session information: when you sign in, we store a session with your IP address and browser to keep you signed in and help detect misuse.
• Last activity: the time you last used the planner or app while signed in, updated at most once an hour. We only use this to count internally how many accounts are active, and keep no history.
• Your preferences: the language of the planner and whether you see weight and length in metric or imperial units.
• Managing together: when you invite the other parent, we create a single-use invitation link that expires after seven days. Whoever accepts it can see and edit the same planner, including guests’ sign-ups. We store who sent the invitation and who belongs to the planner.
• Push notifications in the iPhone and Android app: if you turn on notifications, we store the device token Apple or Google provides, whether it is an iPhone or an Android phone, and your app language, so we can let you know when a guest chooses a visiting time, meal, or request.
• If you buy Plus: for which planner, the amount, the date, whether you paid on the website, in the App Store or on Google Play, and the payment number from Stripe or Apple or the purchase token from Google Play. We never see your bank or card details.

The widget of the iPhone and Android app shows your upcoming visits. The app keeps that data only on your own phone, so the widget can show it without signing in.

Guests(people opening a share link):

• What you enter when signing up: your name, number of people, a dish or short message, and the time or request you choose.
• A random guest identifier in a cookie so you can cancel your own bookings on the same device. The identifier does not describe who you are.

Everyone: to prevent overload and misuse, we briefly count requests per IP address. We store a hash of that address for no longer than fifteen minutes.

We use no advertising cookies or trackers. For internal usage insights, we show totals and a summary per planner: a stable reference code, sign-up date, setup status, publication status and booking counts. Authorised administrators can also view the account names and email addresses of the linked parents. This overview contains personal data and is only accessible to authorised administrators. It shows no visitor names, visit dates, messages or planner content.

For each planner, we also store when a baby name or photo was first added, when the page was first published and when a guest made the first booking. Administrators only see counts and median lead times per sign-up week.

We count how often a shared page is opened anonymously, as a single number per planner per day, without cookies, IP addresses or browser details. For new accounts, we also record how they arrived: via a shared page, an invitation, the iPhone or Android app, or directly. Only authorised administrators see these counts, and the source only as a total.

• Providing the service(performance of the agreement): your account, page, share link, and guest bookings.
• Security and preventing misuse (legitimate interests): sessions, IP-based limits, and the guest cookie identifier.
• Contact(legitimate interests or legal obligation): we use your email only to contact you about your account or the service. We do not send newsletters.
• Payments(performance of the agreement and legal obligation): delivering Plus, refunding when needed, and keeping our records.

Guests provide their own name and message to arrange something with the parents. Parents can see this information; other guests only see that a visit, meal, or request is taken, not by whom.

We do not profile parents or guests, and we do not make decisions about you based solely on automated processing.

• Uploaded photos are checked, resized to at most 1600 by 1600 pixels, and stripped of camera metadata such as location and time.
• Photos are stored in our database, not with a photo service or at a public address. Guests can view them through the share link while the page is published.
• When you replace a photo, the previous one is deleted within a day.

We use cookies needed to operate the service.

Session cookies (kraamtijd…)

Keep parents signed in. Valid for 30 days and renewed daily while you use the service.

Guest cookie (kp_guest)

A random identifier that lets guests cancel their own bookings. Valid for 180 days.

If you sign in with Google or Apple, those services set cookies on their own domains under their own privacy policies.

• Hosting: the app and database run on our own server in the Netherlands. We do not use a hosting company for this.
• Network: traffic to the server passes through Cloudflare, which sees your IP address and secures the connection.
• Google and Apple: only if you choose to sign in with them.
• Apple’s and Google’s push services: in the iPhone app, notifications reach your phone through Apple’s push service; in the Android app, through Google’s Firebase Cloud Messaging. Apple or Google receives the device token and the notification for this. Notifications contain your child’s name, the guest’s name, and what they chose. Guests who bring a gift stay anonymous in notifications too.
• Your calendar: when you add a visit to your calendar, we create a calendar file or a Google Calendar link with the date, time, and name of the visit. Once it is in your calendar, it falls under the calendar app or service you use.
• Stripe: if you buy Plus on the website, Stripe handles the payment. Stripe receives your email address and payment details for this and is itself responsible for them, under its own privacy policy.
• Apple: if you buy Plus in the iPhone app, Apple charges your Apple Account. We only receive proof of the purchase from Apple.
• Google Play: if you buy Plus in the Android app, Google charges your Google Account through Google Play. We receive a purchase token from Google, which we store and use to verify the purchase with Google.

We do not sell data or share it with advertisers. We disclose data to a competent authority only when legally required.

Cloudflare, Google, Apple, and Stripe are US companies and may process data outside the European Economic Area. They do so under the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

Account and page

While your account exists. After a deletion request, we delete the data within 30 days.

Guest bookings

Until the parents remove them or the account is deleted.

Sessions

Up to 30 days after the last sign-in.

Invitations for the other parent

Seven days, or less if the invitation is accepted or revoked sooner.

Device tokens for push notifications

Until you sign out of the app or Apple or Google reports that the token is no longer valid.

Last activity

As long as your account exists; overwritten on each use.

IP-based limits

Up to fifteen minutes, stored as a hash.

Replaced photos

Deleted within a day.

Plus purchases

Seven years, because of the statutory retention period for our records. If you delete your account earlier, only the purchase itself is kept, without a link to your account.

Backups

We keep database backups for 7 days; they then expire automatically.

• All connections use HTTPS.
• Passwords are stored as hashes; we cannot read the original passwords.
• Share links are long and random and are not indexed by search engines.
• Guests’ names and messages are not sent to other guests.
• The database is backed up and is not publicly accessible over the internet.

You have rights to access, correct or delete your data, restrict or object to processing, and receive your data in a commonly used format. Parents can change most details in the planner. Guests can cancel their bookings on the device they used to sign up.

For other requests, email[email protected]. We respond within one month. If you are unhappy with how we handle your data, you can complain to the Dutch Data Protection Authority.

If our data processing changes, we update this policy and its date. We also announce significant changes through the service. This policy accompanies our terms of service.