Privacy Policy

Last Updated: 10/16/2026

We respect your privacy and are committed to protecting your personal and health information. This Privacy Policy explains how we collect, use, share, and safeguard information when you use our mobile application and related services. By registering for an account, you agree to this Policy.

1. Who We Are

Droplet is operated by Droplet Health LLC. Droplet is a platform designed for parents to track baby activities and maternal health, access educational content, and connect with approved healthcare providers. We are a HIPAA-aware service and handle health information in compliance with applicable privacy and security laws.

Droplet is not a healthcare provider. Users remain in control of the information they choose to record and share.

2. Information We Collect

We may collect the following categories of information:

  • Account Information: such as your name, email, and login credentials.
  • Health Information: information you choose to record about yourself or your child, which may include sensitive health-related data.
  • Provider Information: professional credentials and documents submitted by healthcare providers who register on the platform.
  • Mobile Phone Number (Providers): If a provider chooses to receive text message alerts, we collect the mobile number they provide for that purpose.
  • Usage & Technical Information: device type, operating system, IP address, and general usage patterns.
  • Subscription & Transaction Information: We receive and store subscription status information such as whether you have an active subscription, trial status, or expiry date. We do not directly collect or store your payment card details. All payments are processed by Apple App Store or Google Play.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the platform and its services.
  • Facilitate secure communication and connections between parents and approved healthcare providers.
  • Support secure scheduling, record-keeping, and viewing of logs as authorized by you.
  • Review certain health-related entries (such as EPDS screenings) for safety and oversight.
  • Protect the security and integrity of our systems.
  • Comply with legal and regulatory requirements.

We do not sell your information to third parties.

4. Data Sharing

We may share information in the following ways:

  • With Providers: Only the information you choose to share is accessible, and providers have view-only access. Providers cannot alter or add to your records.
  • With Platform Administrators: Limited access may be provided for account management, compliance, or oversight purposes. May access certain health data (e.g., EPDS screenings) for oversight and safety purposes.
  • With Service Providers: Third-party vendors (e.g., hosting, communications) who support our platform under confidentiality and security obligations.
  • When Required by Law: We may disclose information as necessary to comply with legal obligations or valid requests.

5. Text Messages (SMS)

Droplet sends text messages only to providers who opt in, to alert them to consultation requests and booking updates. Message frequency varies. Message and data rates may apply. Reply STOP at any time to unsubscribe, or HELP for help. Consent to receive text messages is not a condition of using Droplet. Text messages never contain health information. Full details are at droplet.baby/sms.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors in support of our services, such as the messaging providers that deliver our texts, is permitted. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

6. HIPAA Compliance & Data Security

We treat personal health information (PHI) in accordance with HIPAA where applicable. This includes:

  • Encrypting PHI in transit and at rest.
  • Restricting access to authorized individuals only.
  • Maintaining audit logs and security safeguards.

If a breach of PHI occurs, we will notify you in accordance with HIPAA’s Breach Notification Rule.

7. Your Rights

You may have rights under HIPAA and other privacy laws, including the right to:

  • Access and review your information.
  • Request corrections to your data.
  • Request deletion of your account and associated data (subject to retention requirements).
  • Request an accounting of disclosures of your PHI.
  • Request restrictions on certain uses or disclosures.

To exercise these rights, contact us at admin@droplet.baby.

8. Data Retention

We retain information only as long as needed to provide services, comply with laws, or fulfill legitimate business purposes.

9. Children’s Privacy

This platform is intended for use by adult parents/caregivers and licensed providers. We do not knowingly collect information directly from children under 13.

10. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted with a revised “Last Updated” date. Significant changes may also be communicated via email.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us: admin@droplet.baby

Start My Free Trial