Privacy Policy

Limitless Parenting, also known as Limitless Babies (limitlessbabies.com), is an early-learning and family app for parents of babies and young children (the "App"). It is designed and operated by AMEOS LLC ("we," "us"). This policy explains what we collect, why, who we share it with, and how to control your data.

What we collect

Required to create an account:

• Your email address (used to sign you in). If you sign in with Apple and choose "Hide My Email," we receive only Apple's private relay address.

Depending on how you sign in:

• Email code: we send a one-time code to your email address.
• Sign in with Apple: Apple passes us a token, your email (real or private-relay, your choice) and, on your first sign-in only, your name.
• Sign in with Google: Google passes us a token, your email address and your name.

We do not receive your Apple or Google password, and we don't store passwords of any kind.

Optional, only if you provide it:

• Your full name, caregiver role (Mom, Dad, Nanny, etc.), country of origin, photo, bio, birthday, and city/region/country

Created as you use the App:

• Children's profiles you add (names, birthdates, languages, learning levels)
• Curriculum progress (sets completed, session counts, streaks) and an activity log of which family member did which session
• Photos you upload (for flashcards, milestones and the storybook)
• Milestones you log (the milestone, its date, your note, any photo)
• Baby logs: feeding (nursing and bottle), diapers, sleep and naps, pumping, potty, introduced foods, growth measurements, medicine, and notes, each with a timestamp. This includes health information about your child; see Consumer Health Data.
• Stories, voice recordings and transcripts for your family's storybook (see Microphone, recordings and transcripts)
• Family Meals information, including household members' names, ages, allergies and diet notes (see Family Meals)
• If you use caregiver features: hiring details (such as an hourly rate), schedules, shift clock-in/clock-out times and hours
• If you contact a caregiver: your inquiry message and a snapshot of your name and email, shared with that caregiver
• If you review a story time: your rating, comment and the first name on your profile, which other parents can see
• If you vote to expand a language: which language (others see only totals)
• If you tap "notify me when this launches": your email and which course
• If you turn on notifications: a push token or push subscription for your device, and your notification preferences
• If you send a bug report or suggestion (see Bug reports)
• If you buy or redeem a gift code (see Gift codes)
• Usage and error information (see Product analytics and Crash and error reporting)

Health and baby-tracking information

Baby logs, milestones, growth, medicine and Family Meals allergies and diet notes can be health information about your child. We treat it as sensitive. We use it only to provide the tracking, reminders, predictions (such as next-nap windows), meal planning and sharing you ask for. We never sell it or use it for advertising. It is shared only with the family members and caregivers you invite and with the service providers that run the App. The full details are in our Consumer Health Data Privacy Policy below.

Limitless is not a healthcare provider and is not covered by HIPAA.

Microphone, recordings and transcripts

• When we use the microphone: only when you (or a storyteller you invite) tap to record, for example a story memory for your family's storybook, or your own voice saying your child's name on their first flashcard. Your device asks for microphone permission first; you can say no and type instead.
• Story recordings are uploaded to a private storage area for your family. Only members of your family who may tell stories, and the storyteller who recorded it, can reach it through the App.
• Transcription: to turn a story recording into text, we send the audio to ElevenLabs, our speech-to-text provider. The transcript comes back to you to edit before it's saved. Recordings may include the voices of other people in the room, including children; please record only people who are happy to be recorded.
• Name-card recordings (your voice saying your child's name) stay on your device and are not uploaded.
• "Listen" QR codes: if you print or share your storybook, each recorded story can carry a QR code. Anyone who holds the printed book or the PDF can scan the code and play that one recording, without an account. The code unlocks only that recording, through a link that expires after an hour, but the code itself keeps working while the story exists. Delete the story (or its recording) to switch its code off.
• Read-aloud: flashcards are read aloud by your device's own text-to-speech engine or by pre-recorded audio we ship with the App. That doesn't use the microphone.
• Siri, Google Assistant and widgets: if you use a voice shortcut to log something, your device's assistant handles the speech and hands the App only the action (for example "log a bottle"). We don't receive the audio.

AI features

A few features use AI models run by outside providers. We send them only what the feature needs, from our servers, and never your password or payment details.

• Family Meals meal plans: Anthropic (Claude). To plan a week, we send Anthropic a summary of your household: household and member first names, roles, ages, allergies, diet notes, ZIP code, the stores you shop at, kitchen equipment, foods to use up, your meal ratings and notes, and children's first foods to introduce. Anthropic returns the menu, recipes and grocery list.
• Storyteller page translation: Anthropic (Claude). When a storyteller picks a language, we send the words of the storyteller page itself (buttons and instructions) to be translated. We don't send their stories, recordings or personal details for this.
• Story transcription: ElevenLabs. Story audio, as described above.

Training: under Anthropic's commercial API terms, Anthropic does not train its models on the data we send. ElevenLabs processes audio under its own terms and privacy policy; we use it only to return a transcript to you. We do not use your family's data to train AI models ourselves.

AI output can be wrong. Meal plans and transcripts are generated automatically. Check them, especially ingredient labels for allergies. See our Terms of Use.

Family Meals

• What we store: your household's name and ZIP code, stores and memberships, shopping trips and budget preferences, household members (names, roles, ages or birthdates, allergies and diet notes), kitchen equipment and pantry items, weekly plans, recipes, grocery lists, favorites and your meal ratings and notes.
• Why: to plan meals that fit your family, keep listed allergens out, and build a shopping list for the stores you use. Allergy and diet information is health information; see Consumer Health Data.
• Who sees it: members of your family in the App, and Anthropic as described in AI features.
• Shopping links and affiliates: product and grocery links (for example Amazon, Instacart, Walmart) go through our own link page first. We log which link was opened, when, and from which screen. That record does not include who tapped it. Some links are affiliate links (for example through the Amazon Associates program), which means we may earn a commission if you buy something. The retailer receives your visit under its own privacy policy once you leave the App.

Storytellers and the storybook

You can invite relatives or friends ("storytellers") to add memories to your family's storybook, either inside the App or through a private invite link that needs no account.

• What we keep about a storyteller: the name and relationship you give them, an email address if you add one, the language they choose, and the stories, recordings and transcripts they create.
• Weekly questions: if you turn on weekly questions for a storyteller, we email them one question a week about a moment in the book. Every email has a "stop" link, and you can turn questions off for them at any time.
• Their invite link lets them see the moments and photos in your book that they're invited to tell stories about. You can turn a link off at any time.
• If you invite someone, please let them know and point them to this policy.

Bug reports and suggestions

• What's sent: your message; the App version and platform; the last few screens of the App you visited (for example "reading" then "home"); your account (or, if you're signed out, a reply email if you leave one); and any screenshots you choose to attach.
• Screenshots can show whatever was on your screen, including children's photos or names. Look before you attach. Screenshots go to a private storage area that only our team can read.
• We deliberately don't attach your children's names, ages or logs to a report automatically.

Gift codes

If you buy a gift subscription, we store your email, the recipient's name and email, your gift message, the plan and length, the Stripe payment references and amount, and when it was delivered and redeemed. We use these to email the gift, let the recipient redeem it, and handle support or refunds.

What we DON'T collect

• We do not use advertising IDs, ad networks or cross-app tracking, and we do not sell or "share" personal information for targeted advertising
• We do not collect your location in the background (see Location)
• We never see your full payment card details: billing is handled by Apple, Google or Stripe
• We do not access your phone's contacts, calendar or other apps
• We do not use the microphone except while you are recording (see above)
• We no longer collect mailing addresses

Product analytics and usage

We want to know which parts of the App families use so we can decide what to build.

• HeyCatch (product analytics) receives page views, taps and screen changes in the App, along with device and browser information. When you're signed in, it also receives your account ID, email and name so events can be tied to your account.
• Our own usage log records short event names (for example "the Reading tab was opened"), the time and sometimes a small detail such as which course, stored against your account if you're signed in.
• We don't send your children's photos, baby logs, milestones or stories to analytics. We don't use analytics for advertising, and we don't sell it.

Crash and error reporting

When something breaks, we send an error report to Sentry: the error message, the technical stack trace and basic device information (such as OS and App version). Sentry's personal-data collection is turned off (no IP address, cookies or authentication headers), we strip the signed-in user's identity, links to family photos are scrubbed out, and we don't use Sentry's session replay, so your screen is never recorded. Sentry's privacy policy: https://sentry.io/privacy/.

Location

• When we ask: only when you tap "use my location." Your device shows its own permission prompt, and every search also works with a typed ZIP code, city or address.
• What happens to it: the coordinates are used as the center of that one search and are sent to our backend to run it. For the farmers market finder, our server passes the search area to Google Places to look up markets. We don't save coordinates to your profile or keep a location history.
• Location you type: the city, region and country on your profile and the ZIP or place you type into a search are self-entered and area-level. Typed places are turned into map coordinates by OpenStreetMap Nominatim. If you list yourself as a caregiver, your city/region/country is shown on your public profile.
• Family Meals uses the ZIP code you enter to suit stores and seasonal food.

Where your data lives

• On your device: profiles, progress, logs and photos are cached locally so the App works offline. If you use the Apple Watch app or home-screen widgets, a small summary is shared with them on your devices.
• In our backend (Supabase): when you sign in, your data is stored in our cloud backend, hosted in the United States, so it syncs across your devices and with family members you invite. It is encrypted in transit (TLS) and at rest.
• Our website and server functions are hosted by Vercel.

Reminders and notifications

• On-device reminders: some reminders are scheduled by your device itself as local notifications.
• Push notifications from our servers: if you allow notifications, our servers also send push notifications, for example a feeding-gap or long-timer alert, a family member's new log, or a caregiver shift starting or ending. To do this, our server checks your family's recent logs and schedules and sends a short message, which can include your child's first name and what was logged (for example "Bottle · logged by Dad").
• Who delivers them: push messages pass through your device's push service: Apple (APNs), Google (Firebase Cloud Messaging) or your browser's push service (for example Apple, Google or Mozilla).
• Turning them off: in the App's notification settings or your device's settings, at any time.

How we store your photos

• Family photos are stored in a private storage bucket (family-photos). There is no public link. The App shows a photo only to members of your family, through a signed link that expires after at most 7 days.
• Story recordings and bug-report screenshots are also in private storage, as described above.
• Caregiver profile photos are public, because caregiver profiles are meant to be found. Caregiver credential documents (such as safety certifications, background checks and degrees) are private and shown only to families the caregiver has chosen to talk with.
• The printed or PDF storybook contains your photos and stories. Once you share or print it, anyone with the copy can see them, and scan its QR codes (see above).
• We do not index your photos for search, share them with advertisers, or use them to train AI.
• Deleting photos: tap a photo in your Photo Library to delete it. This removes the stored file and its record.

Who we share data with

We don't sell or rent your data. We share it with the people you choose (your family members, caregivers you contact, storytellers you invite, and other parents for reviews you post) and with these service providers, only as needed to run the App:

We may also disclose information if required by law, to protect someone's safety, or as part of a merger or sale of our business (in which case this policy continues to apply to your data).

Staff support access

To fix bugs that only show up for a particular account, an authorized member of our team can view the App as a specific user. While doing so they see what that user sees, including family data. This is:

• limited to named staff accounts, enforced on our server;
• used only for support, debugging and testing, never for marketing;
• logged each time it starts (who, which account, when).

Outside of this, our team accesses personal data only when needed to run the service, answer your requests, or meet legal obligations.

Phone numbers and SMS messaging

The only texts we send are sign-in codes. You can add a phone number to your account (Account → Add a phone number) and then sign in with either your email or that number. We do not send account notifications, invitations or marketing by text.

• What we send (via Twilio Verify): a one-time code when you add or change your phone number, and when you ask to sign in with it. No marketing texts.
• Frequency: one SMS each time you request a code. Message and data rates may apply.
• Opt-out: reply STOP to any SMS, or remove your number in the App. Reply HELP for help.
• Family invitations by text are sent by you, not us. When you choose “Text it from my phone,” the App opens your own messaging app with your invite link filled in, and you send it from your own number. We do not receive or store the recipient’s phone number.
• If we ever send invitation texts from a Limitless Parenting number, we will update this policy first, and any recipient number stored for that purpose will be deleted after 90 days.
• Non-sharing of mobile information: we do not share, sell or rent your mobile number or SMS opt-in status with third parties or affiliates for marketing or promotional purposes. Mobile information is shared only with Twilio, to deliver the codes above.

Family sharing

When you invite a co-parent, caregiver or other family member to your family:

• They can see and add to your children's profiles, progress, photos, milestones, baby logs, storybook and Family Meals, and the activity log of who did what (some caregiver roles see less)
• They do not see your private profile fields, such as your phone number
• You can see who is in your family at any time in Parent Profile → Your family
• You can leave a family at any time in the App (Parent Profile → Leave this family). If you are the only member, leaving deletes the family and its data

Caregiver discovery and inquiries

Limitless includes an optional marketplace that helps parents and professional caregivers find one another.

• If you list yourself as a caregiver: the profile details you provide (name, role, general location, photo, bio, listed degrees) are discoverable by parents. Credential documents stay private until you open an inquiry with a family.
• If you contact a caregiver: they receive what you include, typically your name, email and the family details you choose to share.
• Inquiries and bookings: we store inquiries, bookings and their status so both sides see the same thing, and we email both sides when they change (via Resend). A caregiver's private contact details are released to a family only after the caregiver approves that family's booking.
• Payment: we record agreed rates and hours for timesheets. We do not process payments between parents and caregivers.
• Important: we do not employ, screen or background-check anyone. See our Terms of Use.

Story times

• Searching works by typed place or "use my location"; the search area isn't saved to your profile.
• Reviews you write (rating, comment, and your profile's first name) are visible to other parents. You can edit or remove your review at any time. We may remove reviews that break our Terms.
• Event listings come from venues' own public websites and calendars.

Watching on a TV

There is no Limitless app for TVs. If you mirror your screen (AirPlay, Chromecast, HDMI), your operating system does it on your own network, and we receive nothing about it.

Consumer Health Data Privacy Policy

This section is our consumer health data privacy policy for the purposes of Washington's My Health My Data Act, Nevada's consumer health data law (SB 370), Connecticut's consumer health data provisions, and similar laws. It also describes "sensitive personal information" under the California Consumer Privacy Act.

• Health data we collect: information you enter about your child's (or household members') health, such as feeding, sleep, diapers and potty, pumping, growth measurements, medicine, introduced foods and reactions, milestones, food allergies, and diet notes. We don't infer health conditions from other data.
• Sources: you, and the family members and caregivers you invite, who enter it in the App.
• Why we collect and use it: only to provide the features you ask for: tracking and sharing logs, reminders and alerts, predictions such as nap windows, progress views, and meal plans that avoid listed allergens.
• Who we share it with: the family members and caregivers you invite to your family, and the service providers that process it on our behalf to run those features (Supabase and Vercel for storage and processing, Anthropic for Family Meals plans, and push services for notifications you turn on). We do not sell it, and we do not share it with anyone else unless the law requires it.
• Consent: we ask for your separate, opt-in consent in the App before you first record this kind of health information or add allergies, and that consent covers sharing it with the family members you invite. You can withdraw consent at any time by deleting the information, leaving the family, or deleting your account, or by emailing us; once withdrawn, we stop collecting it.
• Your rights: you can confirm whether we hold your consumer health data, see it, and get a list of the third parties and affiliates we've shared it with (with their contact details); delete it; and withdraw consent. Use the App or email hello@limitlessbabies.com. If we decline a request, you may appeal by replying to our answer with "Appeal" in the subject; if we deny the appeal, you can contact your state attorney general.
• CCPA sensitive personal information: we use health information, and account sign-in information, only to provide the services you request, which is a permitted purpose. We do not use it to infer characteristics about you.

Children's privacy (COPPA)

Limitless is designed for parents and caregivers to use on behalf of babies and young children. The parent or guardian is the user. Children do not have accounts, and we do not knowingly collect personal information directly from children.

Information about children (names, birthdates, photos, logs, progress) is provided by the parent or guardian, or by family members and caregivers they invite, who choose what to share. If a recording made by you or a storyteller includes a child's voice, we treat it as content the parent provided for the family and handle it like the rest of your family's content: kept in private storage, transcribed only to create the story, and deleted when you delete the story or your account.

If you believe a child has given us information directly, email hello@limitlessbabies.com and we will promptly delete it.

Your rights and choices

• See and edit your data: everything we store about your family is visible and editable in the App.
• Turn things off: notifications, weekly storyteller questions, storyteller invite links and location permission can each be turned off at any time.
• Export your data: email hello@limitlessbabies.com from your account email, and we'll send a copy of your profile, family information and activity within 30 days.
• Delete your account: in the App, go to Settings → Delete my account. This deletes your account and profile right away. Any family where you are the only member is deleted too, with its children's profiles, logs, photos, story recordings and Family Meals data. In a family you share with others, your membership ends and the family's shared information stays with the remaining members (delete anything you want removed first, or email us). Remaining copies (such as backups) are purged within the periods in Data retention. If you can't sign in, see app.limitlessbabies.com/delete-account or email us from your account email.

If you are in the EU/UK (GDPR)

You have the right to access, correct, delete, restrict, port and object to the processing of your personal data. We rely on performing our contract with you (to provide the App), your consent (for health information, the microphone, location and notifications, which you can withdraw at any time), and our legitimate interest in keeping the App secure and improving it. Your data is processed in the United States. Email hello@limitlessbabies.com to exercise your rights. You may also complain to your local data protection authority.

If you are in California (CCPA / CPRA)

You have the right to know what personal information we collect, use and disclose; to delete it; to correct it; to limit the use of sensitive personal information (we already use it only to provide the services); to opt out of sale or sharing for targeted advertising (we do neither); and to non-discrimination for exercising these rights. The categories we collect are listed in this policy: identifiers (name, email, account ID), personal details you enter, children's information, health information, audio recordings, photos, commercial information (subscriptions and gift purchases), app activity, approximate location you type or search with, and inferences such as nap predictions. Email hello@limitlessbabies.com to make a request. An authorized agent may make a request on your behalf.

Subscriptions and payments

• iOS and Android apps: billing is handled by Apple's App Store or Google Play. They share subscription status with us (through RevenueCat) so we can turn features on or off. We never see your card number.
• Web and gift purchases: billing is handled by Stripe, which stores your payment details. We receive the plan, status, renewal date and amount. Stripe's privacy policy: https://stripe.com/privacy.

Data retention

Anonymous, aggregated statistics (for example total sessions completed) may be kept indefinitely.

Security

• All connections use TLS encryption (HTTPS), and data is encrypted at rest
• Database row-level security means a family's data is readable only by its members
• Photos, recordings and screenshots are in private storage
• Keys for our AI, email and payment providers stay on our servers, never in the App

No security is perfect. If a data breach affects your information, we will notify you as required by law.

Changes to this policy

When we change this policy, we update the date and revision number at the top and summarize what changed in the box there. For material changes (for example a new kind of data or a new way of sharing it), we will also tell you in the App and by email before the change takes effect, and ask for your consent again where the law requires it.