Privacy Policy

Effective date: July 20, 2026

This policy explains what data LambKin collects, how we use it, who we share it with, and the choices you have.

1. Introduction

LambKin ("we," "us," or "our") is operated by Everwood Ventures LLC. We respect your privacy and are committed to protecting the personal information you and your family share with us. This Privacy Policy explains what we collect, how we use it, who we share it with, and the choices you have. This Privacy Policy applies to the LambKin mobile application, the LambKin website, and all related services (the "Service"). It is incorporated into our Terms of Service by reference.

2. Information We Collect

Account information — your email address, display name, authentication identifiers, and account preferences (e.g., timezone, theme). Child profile information — names, dates of birth, sex (optional), premature-birth flag (optional), and any other details you choose to add about the children you track. You decide what to enter; nothing is required beyond a name. Activity logs — sleep, feeding, diapers, milestones, medication, growth, mood, activities, and any free-text notes you add. Includes timestamps, durations, and amounts where applicable. Sleep logs may include an optional quality rating and notes. Voice command data — when you use Siri Shortcuts or iOS App Intents (iPhone), or the in-app voice microphone (any device), to interact with LambKin, we receive the resulting text or structured intent. We process this only as needed to perform the requested action (e.g., starting a timer or saving a log). Speech-to-text is handled on your device by Apple (iOS) or your device's speech recognizer (Android, provided by Google) according to their privacy policies; raw audio is not stored by LambKin. Photos — when you use AI Food Logging, photos you take are sent to our AI processing provider for recognition; the original photo and its inferred labels are saved to your log only if you confirm the entry. Schedule context — schedules and routines you create, accept, or modify. Live Activity state — when an active sleep timer is running, the current state (child name, log type, elapsed time) is shared with iOS by your device for display on the lock screen and Dynamic Island. This is a system feature; we do not separately track Live Activity views. Device & diagnostic data — basic device model, OS version, app version, and crash/error reports used to diagnose problems and improve reliability. Health and vitals data (optional) — if you log parent vitals such as blood pressure, mood, glucose, or weight, we store the values you enter. On iPhone, you can also connect Apple Health to import your own weight, blood pressure, and blood glucose readings into your LambKin logs so you don't have to type them twice. LambKin's access to Apple Health is strictly read-only: we read only the specific data types you approve on the Apple Health permission screen, we never write, change, or delete anything in Apple Health, and data imported from Apple Health is never used for advertising or marketing and is never shared with third parties for those purposes. You can turn off Apple Health access at any time in the iOS Settings app or in LambKin, and you can delete any imported reading from your logs.

3. How Our Smart & AI Features Use Your Data

LambKin's intelligent features differ in how — and whether — they involve third-party AI providers. • Smart Day predictions (next-sleep window, bedtime window, guidance level). These are computed by our own server-side code using your child's age, the times they slept and woke in the last 14 days, and your timezone. NO large language model is involved. Data does not leave LambKin's infrastructure for this feature. • AI Food Logging (Premium). The photo you take is sent to our third-party AI provider for recognition (via the Vercel AI Gateway — Google, OpenAI, or Anthropic); the inferred items are returned to you for confirmation. The original photo and recognized labels are saved to your log only if you confirm the entry. • Voice commands. On iPhone, Siri can perform hands-free invocation; on any device, the in-app microphone uses your device's speech-to-text (Apple on iOS, Google on Android) per their own privacy policies. LambKin receives the resulting text and first tries to interpret it entirely on your device. If the text is ambiguous, the text (never the audio) may be sent through the Vercel AI Gateway to one of our AI providers (Google, OpenAI, or Anthropic) to help classify it into the correct log — the same providers described for AI Food Logging above. We do not use any of your data — your logs, your child's profile, your voice intents, or your photos — to train third-party AI models. We do not sell your personal data.

4. How We Use Your Information

We use the information we collect to: • Provide the core tracking features of LambKin (logs, timelines, schedules) • Power Smart Day predictions and the optional AI features you opt into (AI Food Logging) • Sync data in real time between you and the caregivers you invite • Maintain account security and prevent abuse • Provide customer support • Send you essential service notifications (e.g., re-acceptance of updated Terms, optional sleep-window alerts) • Improve, debug, and develop new features We do not sell your personal data. We do not use your children's data for advertising. We do not display third-party advertising in the LambKin app.

5. Third-Party Service Providers

LambKin relies on a small number of vetted service providers to deliver the Service. These providers process data only on our behalf and are bound by confidentiality and data-processing obligations: • Supabase — application database, authentication, storage, and serverless functions (data hosted in the United States) • RevenueCat — subscription and entitlement management for LambKin Pro • Vercel (AI Gateway) — the routing layer through which our AI features (AI Food Logging, and classification of ambiguous voice logs) reach the model providers below • Google (Gemini), OpenAI (GPT), and Anthropic (Claude) — large language model inference for our AI features (AI Food Logging and ambiguous voice-log classification); each request is routed to one of these providers (Google by default, OpenAI and Anthropic as fallback) • Apple and Google — on-device speech-to-text for voice logging (Siri on iOS / device speech recognizer on Android), Apple Health (HealthKit) read access on iPhone for importing your own vitals, and platform-level features (Live Activities, push notifications) • Sentry / crash-reporting providers — diagnostic and crash data We do not share your data with advertisers, data brokers, or social networks.

6. Data Retention

We retain your account data and child logs for as long as your account is active. You may delete individual logs, child profiles, or your entire account at any time from the Settings screen of the mobile app. When you delete your account, your account data and child profile data are removed from our active database within 30 days, subject to any backup retention windows and any legal obligations to preserve specific records. Voice transcripts produced by Siri or your device's speech recognizer are processed only to create the resulting log; we do not retain raw transcripts separately. When a voice log is ambiguous and its text (never audio) is sent to an AI provider (Google, OpenAI, or Anthropic) via the Vercel AI Gateway for classification, that request is governed by the provider's API data-handling terms, and LambKin retains only a short-lived audit log used for debugging. Photos you submit for AI Food Logging are transmitted via the Vercel AI Gateway to the provider handling the request (Google, OpenAI, or Anthropic) and are governed by that provider's API data-handling terms; LambKin saves the photo and its recognized labels only if you confirm the entry, and does not retain a separate copy of the request beyond a short-lived audit log used for debugging.

7. Your Rights & Choices

You have the right to: • Access the personal data we hold about you and your children • Correct inaccurate or incomplete data (you can edit most fields directly in the app) • Delete your account and associated data • Export your data — contact support@lambkin.app to request an export • Withdraw consent for optional features (e.g., voice shortcuts, Live Activities, AI Food Logging) at any time from your device or LambKin settings — Smart Day predictions can be hidden from the home screen at any time without losing your data • Object to or restrict certain processing, where applicable under your local law Depending on your jurisdiction (e.g., EU/UK GDPR, California CCPA/CPRA), you may have additional rights. To exercise any of these rights, contact us at support@lambkin.app and we will respond within applicable legal timeframes.

8. Children's Data

LambKin is intended for use by parents and caregivers (18+) who are tracking information about their own children. The app is not directed to or intended for use by children themselves, and we do not knowingly create accounts for children. The child profile data you enter (such as names, dates of birth, sex, and activity logs) belongs to you as the account holder and is treated with the same protections as your own personal data. We do not use children's data for advertising and do not share it for any purpose other than providing the Service to you and your invited caregivers.

9. Security

We use industry-standard measures to protect your data, including: • Encryption in transit (HTTPS/TLS) for all communication with our servers • Encryption at rest for stored data • Row-level security in our database to ensure only you and your invited caregivers can access your records • Access controls and audit logging for our team No system is 100% secure. If we ever become aware of a breach affecting your data, we will notify you in accordance with applicable law.

10. International Data Transfers

LambKin operates from and stores data in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Effective date" at the top of this page reflects the latest version. If we make material changes, we will notify you in-app or by email. Continued use of the Service after changes take effect constitutes your acceptance of the updated policy.

12. Contact Us

For questions, requests, or complaints about this Privacy Policy or your data, contact us at: Email: support@lambkin.app Please include "LambKin — Privacy" in the subject line. We aim to respond within 3 business days, and within applicable statutory timeframes for formal data-rights requests. LambKin is operated by Everwood Ventures LLC.

Data Controller

LambKin is operated by Everwood Ventures LLC, which acts as the data controller for personal data processed through the LambKin app and related services.

This Privacy Policy was last updated on July 20, 2026. For privacy questions or data requests, contact support@lambkin.app. Reference "LambKin — Privacy" in the subject line.