Your family’s information is not our product.

Depending on the parts of Beyond Mom you use, this may include:

• account details such as email address, name, timezone, notification preferences, and an optional verified phone endpoint;
• family profiles, relationships, schedules, routines, chores, lists, reminders, goals, and notes;
• optional care information such as diagnoses, sensory needs, medications, behavior observations, safety plans, providers, insurance, benefits, daily logs, and handoff packets;
• documents and links you place in the private family vault;
• community posts, comments, reactions, group membership, and reports;
• manual wallet entries such as bills, planned amounts, spending, income, and savings goals; and
• questions, brain dumps, approvals, standing instructions, text replies, and other content you give Bea.

The wallet does not connect to a bank, hold funds, initiate transactions, or receive bank credentials. Payment card details for a Beyond Mom subscription are collected by Stripe, not stored by Beyond Mom.

We receive basic technical records needed to operate and protect the service, such as sign-in state, request timing, error and security events, device/browser information, usage counts, and approximate network information. We also keep audit records for sensitive actions such as handoff opens, billing events, data exports, and account deletion. We do not use third-party advertising trackers and do not build advertising profiles.

We use information only to:

• provide, personalize, secure, troubleshoot, and improve Beyond Mom;
• show the right family information to authorized family members and caregivers;
• generate Bea responses, proposals, and work performed inside a narrow standing instruction you can pause or revoke;
• send reminders, invitations, security notices, and subscription messages you request or need;
• process subscriptions, prevent fraud or abuse, and meet legal obligations; and
• produce aggregated operational measures that do not identify a family.

We do not sell personal information or sensitive family information. We do not use it for targeted advertising.

A family owner controls the household and can invite guardians, teens, or caregivers. Shared family records are visible according to role and scope; records marked private stay limited to the person or guardian allowed to see them. Handoff links expose only the fields the guardian selected and are protected by an expiring link and PIN. Community content is visible according to the group or feed where you post it. Never put emergency secrets or private child records in a community post.

An account holder must be at least 13. A parent or legal guardian may create and manage a profile for a child, including a child under 13, and may enable a guardian-controlled Kid Mode. Children under 13 may not create their own account or independently submit information to us. The adult is responsible for having authority to add a child’s information and to grant access to other caregivers. A guardian can correct or delete the child profile or delete the family account.

If you believe a child submitted information without the required parent or guardian involvement, contact us so we can investigate and remove it. More information about parental-consent standards is available from the U.S. Federal Trade Commission.

Beyond Mom is a consumer family-organization service, not a healthcare provider, health plan, emergency service, or medical-record system. Using care tools does not create a clinician-patient relationship, and you should confirm medical information with a qualified professional. The HIPAA Privacy Rule generally does not apply to a consumer app that is not acting for a HIPAA covered entity or business associate. Other privacy and breach-notification laws may still apply, and we protect care information under this policy regardless.

See the U.S. Department of Health and Human Services guidance on health apps and the FTC Health Breach Notification Rule.

We use service providers to host the app and database, authenticate users, store files, deliver email and opted-in text messages, process subscription payments, provide configured AI models, and protect the service. They receive only the information needed for their job and process it under their own contracts and security obligations. We may also disclose information when required by law, to address a credible safety or security threat, or as part of a business transaction with notice and continued protection. We do not disclose family data to data brokers or advertisers.

We keep active-account data while you use the service. Some audit, billing, backup, fraud-prevention, or legal records may remain for a limited period after deletion where necessary. Beyond Mom uses per-family database access controls, private file storage, scoped caregiver grants, hashed guest credentials, encryption in transit, rate limits, and audited privileged operations. No service can promise perfect security. If a breach affects information covered by notification law, we will investigate and notify affected people and regulators as required.

Family owners can export a copy of family data and delete the family account from Settings. Many records can be corrected or removed directly in the app. Depending on where you live, you may also have rights to access, correct, delete, restrict, or receive a portable copy of personal information, or to appeal a privacy decision. We will not discriminate against you for using a privacy right.

If you connect Bea by text, we store an encrypted phone endpoint, a keyed lookup value, the last four digits for display, verification and consent history, preferences, suppression state, bounded message content, open questions, delivery events, and truthful action receipts. The keyed lookup routes a signed inbound webhook to one verified person and family without placing the full number in client-readable tables. Disconnecting closes future work; a carrier-level STOP remains suppressed until a valid START.

Quo (formerly OpenPhone), mobile carriers, and their subprocessors handle message routing and may retain provider-side conversation and delivery records under their own notices. Text messages can appear on a lock screen or shared device, so neutral content is the default and sensitive details stay in the app. Unknown or unlinked numbers receive no family facts. We distinguish queued, provider-accepted, delivered, answered, and completed states because none proves the next.

If you join moms.win, we keep your legal name, adult-attestation time and version, terms acceptance, opaque share link, direct attribution and commission receipts, ledger and payout history, and identity, tax, payout-onboarding, and risk statuses. A date of birth submitted with the adult attestation is checked during that request and is not stored in the affiliate database. An attestation is not identity verification.

Public link visits create a short-lived, one-time click proof and a keyed request fingerprint used for attribution and abuse limits; raw network address and browser details are not stored in that proof. Hosted identity/KYC, tax, and payout providers may collect information under their own notices before payout. We retain financial, tax, fraud, and audit records as required to operate the program and meet legal obligations.

If this policy changes materially, we will update the effective date and provide notice in the app or by email when appropriate. Privacy questions and requests can be sent to privacy@beyondmom.app. We may need to verify your identity and family authority before returning or changing records.