Privacy Policy

• About you: your first name and your email address.
• About your baby: their first name, age and pronoun, and your answers to our sleep assessment. That covers how they fall asleep, how often they wake and what settles them, their naps, bedtime and wake-up time, where they sleep and what the room is like, what you've tried, how you feel about crying, and what a good night would look like for you.
• In the app: the nights and naps you log (when your baby fell asleep, woke, fed and got up) and your messages with your coach.
• When you pay: Stripe handles your card, and we never see or store your full card number. We keep a reference to your Stripe customer record and saved card, and a record of what you bought and when.
• If you buy the handbook, coaching or the app on its own: we keep a record of what you bought and when. For coaching, you also give us your first name and your baby's first name and age, on Stripe's checkout page, so your coach knows who they're helping. For the app, you give us the same three, so the app can show the schedule for your baby's age.
• How you use our site: the pages you visit, the buttons you tap, your device and browser, and your rough location from your internet address. See "Cookies and analytics" below.

When you go to checkout, we keep your answers to the assessment, your first name and the email you give us there, so we can write your baby's plan if you buy it.

• To show your assessment results, write your baby's plan and send it to you.
• To run your account and the app, and so your coach can read your nights and reply.
• To email you about your plan: your plan itself, links to log in, and messages while you follow it, including invitations to our camp.
• If you gave us your email at the end of the assessment (we stopped asking on October 1, 2026) and didn't buy: to email you a copy of your results, then up to two more emails about your baby's plan over about a day, including a limited-time offer. Every one has an unsubscribe link.
• To take payments and give refunds.
• To see which pages work, and to fix problems.
• To see which of our ads lead to a purchase.
• To meet our legal duties, like keeping tax records.

We don't sell your information. We never use what you tell us about your baby's sleep or health to target ads.

Some of what you tell us about your baby counts as health information under privacy law: how they sleep, and anything you tell your coach, like reflux, allergies or being born early. We only have it because you give it to us, and we use it only to write your baby's plan and to coach you through it.

If you live in the US, our Consumer Health Data Privacy Policy explains more.

• Our sleep coaches and our small team, so they can support your family.
• Companies that run parts of our service for us. They may use your information only to do that job for us.
• Anyone the law requires us to tell, for example if a court orders it.
• A buyer, if Cradletot is ever sold. They would have to keep the promises in this policy.

The companies that run parts of our service are:

• Stripe, which takes payments
• Supabase, which holds our database, your login and your plan
• Vercel, which hosts our website and app
• Resend, which sends our emails
• Inngest, which schedules our emails
• Google Workspace, which holds our inbox when you email us
• PostHog, which tells us how our site is used
• Google Ads, which tells us which of our ads led to a purchase

The companies above mostly store data in the United States. We choose providers that protect data to a high standard, and we stay responsible for your information under Australian privacy law.

Our site stores small files on your device (cookies and similar). We use them to keep your assessment answers while you go, keep you logged in, protect payments from fraud (Stripe), and measure how the site is used (PostHog).

PostHog shows us things like which pages people visit and where they leave. It may also record some visits, such as clicks, scrolls and the screens you see, so we can fix problems. Anything you type into a form is hidden in those recordings.

When you finish the assessment, buy, or join the camp, our Google tag tells Google Ads that it happened, so we can see which ads work. We don't send Google your answers about your baby.

You can block or delete cookies in your browser settings. Some parts of the site, like staying logged in, may not work without them.

We keep your information while you have an account with us. If you ask us to delete it, we'll delete it within 30 days. The exception is payment records, which tax law requires us to keep, usually for five years.

If you don't buy, we keep the answers, first name and email you gave us. Ask us and we'll delete them.

If you buy the handbook on its own, we keep that order so the download link in your email keeps working. Ask us and we'll delete it.

Everything travels over encrypted connections. Your account can only see your own family's information. Card details stay with Stripe. If a data breach ever affects your information, we'll tell you, and the regulators, as the law requires.

Cradletot is for parents and guardians aged 18 and over. We collect information about babies only from their parent or guardian, never from children themselves. If you think a child has given us information, email us and we'll delete it.

Wherever you live, you can ask us to:

• show you the information we hold about you and your baby
• correct it
• delete it
• stop sending you camp invitations (you'll still get emails about your plan)
• stop the emails about a plan you haven't bought (or use the unsubscribe link in any of them)

Email hello@cradletot.com. We'll reply within 30 days, and we may need to check it's really you first. If your US state gives you privacy rights by law, you have those too, and we won't treat you differently for using them.

Email us first and we'll do our best to put it right. If you're not happy with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au, or, in the US, to your state attorney general.

If we change this policy, we'll update the date at the top. If a change is important, we'll email you before it applies.

Machitis Pty Ltd, trading as Cradletot. Email: hello@cradletot.com.