Privacy Policy

Effective date: May 2, 2026

This policy explains what data LambKin collects, how we use it, who we share it with, and the choices you have.

1. Introduction

LambKin ("we," "us," or "our") is operated by Everwood Ventures LLC. We respect your privacy and are committed to protecting the personal information you and your family share with us. This Privacy Policy explains what we collect, how we use it, who we share it with, and the choices you have. This Privacy Policy applies to the LambKin mobile application, the LambKin website, and all related services (the "Service"). It is incorporated into our Terms of Service by reference.

2. Information We Collect

Account information — your email address, display name, authentication identifiers, and account preferences (e.g., timezone, theme). Child profile information — names, dates of birth, sex (optional), premature-birth flag (optional), and any other details you choose to add about the children you track. You decide what to enter; nothing is required beyond a name. Activity logs — sleep, feeding, diapers, milestones, medication, growth, mood, activities, and any free-text notes you add. Includes timestamps, durations, and amounts where applicable. Sleep logs may include an optional quality rating and notes. Voice command data — when you use Siri Shortcuts or iOS App Intents (iPhone), or the in-app voice microphone (any device), to interact with LambKin, we receive the resulting text or structured intent. We process this only as needed to perform the requested action (e.g., starting a timer or saving a log). Speech-to-text is handled on your device by Apple (iOS) or your device's speech recognizer (Android, provided by Google) according to their privacy policies; raw audio is not stored by LambKin. Photos — when you use AI Food Logging, photos you take are sent to our AI processing provider for recognition; the original photo and its inferred labels are saved to your log only if you confirm the entry. Schedule context — schedules and routines you create, accept, or modify, plus any free-text "context notes" you provide when generating a Sleep Schedule Optimization plan (e.g., "recovering from a cold," "travel this week"). Live Activity state — when an active sleep timer is running, the current state (child name, log type, elapsed time) is shared with iOS by your device for display on the lock screen and Dynamic Island. This is a system feature; we do not separately track Live Activity views. Device & diagnostic data — basic device model, OS version, app version, and crash/error reports used to diagnose problems and improve reliability.

3. How Our Smart & AI Features Use Your Data

LambKin's intelligent features differ in how — and whether — they involve third-party AI providers. • Smart Day predictions (next-sleep window, bedtime window, guidance level). These are computed by our own server-side code using your child's age, the times they slept and woke in the last 14 days, and your timezone. NO large language model is involved. Data does not leave LambKin's infrastructure for this feature. • Sleep Schedule Optimization (Premium). When you ask LambKin to generate or refine a sleep schedule from the Schedule tab, we send the following to a third-party large language model provider — accessed via the Vercel AI Gateway, which routes to Google's Gemini by default and may fall back to OpenAI or Anthropic: your child's first name (truncated), an age description (e.g., "infant", "toddler"), sex (if you have provided it), your timezone, the configured nap-window times, your current accepted schedule, the last 14 days of sleep logs (start/end times classified as nap or night, plus optional quality ratings and notes you wrote), aggregated baseline metrics (typical bedtime, average wake window, etc.), any free-text context notes you provide for that request, and selected predefined situational tags (e.g., "sleep regression", "recent illness"). We do not send your email, account identifiers, child IDs, photos, or unrelated logs (feeds, diapers, etc.). The model returns a candidate schedule; you remain in control and must accept or modify it before it takes effect. • AI Food Logging (Premium). The photo you take is sent to our third-party AI provider for recognition (via the Vercel AI Gateway — Google, OpenAI, or Anthropic); the inferred items are returned to you for confirmation. The original photo and recognized labels are saved to your log only if you confirm the entry. • Voice commands. On iPhone, Siri can perform hands-free invocation; on any device, the in-app microphone uses your device's speech-to-text (Apple on iOS, Google on Android) per their own privacy policies. LambKin receives only the resulting text or structured intent and processes it to create the log you requested. We do not use any of your data — your logs, your child's profile, your voice intents, your photos, or your schedule context — to train third-party AI models. We do not sell your personal data.

4. How We Use Your Information

We use the information we collect to: • Provide the core tracking features of LambKin (logs, timelines, schedules) • Power Smart Day predictions and the optional AI features you opt into (AI Food Logging, Sleep Schedule Optimization) • Sync data in real time between you and the caregivers you invite • Maintain account security and prevent abuse • Provide customer support • Send you essential service notifications (e.g., re-acceptance of updated Terms, optional sleep-window alerts) • Improve, debug, and develop new features We do not sell your personal data. We do not use your children's data for advertising. We do not display third-party advertising in the LambKin app.

5. Third-Party Service Providers

LambKin relies on a small number of vetted service providers to deliver the Service. These providers process data only on our behalf and are bound by confidentiality and data-processing obligations: • Supabase — application database, authentication, storage, and serverless functions (data hosted in the United States) • RevenueCat — subscription and entitlement management for LambKin Pro • Vercel (AI Gateway) — the routing layer through which our Premium AI features (Sleep Schedule Optimization, AI Food Logging) reach the model providers below • Google (Gemini), OpenAI (GPT), and Anthropic (Claude) — large language model inference for Premium AI features; each request is routed to one of these providers (Google by default, OpenAI and Anthropic as fallback) • Apple and Google — on-device speech-to-text for voice logging (Siri on iOS / device speech recognizer on Android) and platform-level features (Live Activities, push notifications) • Sentry / crash-reporting providers — diagnostic and crash data We do not share your data with advertisers, data brokers, or social networks.

6. Data Retention

We retain your account data and child logs for as long as your account is active. You may delete individual logs, child profiles, or your entire account at any time from the Settings screen of the mobile app. When you delete your account, your account data and child profile data are removed from our active database within 30 days, subject to any backup retention windows and any legal obligations to preserve specific records. Voice transcripts produced by Siri or your device's speech recognizer are processed only to create the resulting log; we do not retain raw transcripts separately. Data sent for Sleep Schedule Optimization is transmitted via the Vercel AI Gateway to the provider handling the request (Google, OpenAI, or Anthropic) and is governed by that provider's API data-handling terms; LambKin does not retain a separate copy of the request payload beyond the resulting saved schedule and a short-lived audit log used for debugging.

7. Your Rights & Choices

You have the right to: • Access the personal data we hold about you and your children • Correct inaccurate or incomplete data (you can edit most fields directly in the app) • Delete your account and associated data • Export your data — contact support@lambkin.app to request an export • Withdraw consent for optional features (e.g., voice shortcuts, Live Activities, Sleep Schedule Optimization, AI Food Logging) at any time from your device or LambKin settings — Smart Day predictions can be hidden from the home screen at any time without losing your data • Object to or restrict certain processing, where applicable under your local law Depending on your jurisdiction (e.g., EU/UK GDPR, California CCPA/CPRA), you may have additional rights. To exercise any of these rights, contact us at support@lambkin.app and we will respond within applicable legal timeframes.

8. Children's Data

LambKin is intended for use by parents and caregivers (18+) who are tracking information about their own children. The app is not directed to or intended for use by children themselves, and we do not knowingly create accounts for children. The child profile data you enter (such as names, dates of birth, sex, and activity logs) belongs to you as the account holder and is treated with the same protections as your own personal data. We do not use children's data for advertising and do not share it for any purpose other than providing the Service to you and your invited caregivers.

9. Security

We use industry-standard measures to protect your data, including: • Encryption in transit (HTTPS/TLS) for all communication with our servers • Encryption at rest for stored data • Row-level security in our database to ensure only you and your invited caregivers can access your records • Access controls and audit logging for our team No system is 100% secure. If we ever become aware of a breach affecting your data, we will notify you in accordance with applicable law.

10. International Data Transfers

LambKin operates from and stores data in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Effective date" at the top of this page reflects the latest version. If we make material changes, we will notify you in-app or by email. Continued use of the Service after changes take effect constitutes your acceptance of the updated policy.

12. Contact Us

For questions, requests, or complaints about this Privacy Policy or your data, contact us at: Email: support@lambkin.app Please include "LambKin — Privacy" in the subject line. We aim to respond within 3 business days, and within applicable statutory timeframes for formal data-rights requests. LambKin is operated by Everwood Ventures LLC.

Data Controller

LambKin is operated by Everwood Ventures LLC, which acts as the data controller for personal data processed through the LambKin app and related services.

This Privacy Policy was last updated on May 2, 2026. For privacy questions or data requests, contact support@lambkin.app. Reference "LambKin — Privacy" in the subject line.