Privacy Policy
Effective date: September 12, 2026
Who Holds Mom is operated by Neuvant Creative LLC, a United States company (“we,” “us,” or “our”). This policy explains how we handle personal information through the Who Holds Mom website, accounts, guide and customer support.
Privacy contact: support@whoholdsmom.com
Business mailing address: Neuvant Creative LLC, 131 Continental Drive, Suite 305, Newark, DE 19713, United States
1. Information we collect
Account and access information. We collect your email address, account identifier, authentication records, and information needed to provide and secure access. We maintain purchase-linked access status and records of invitations, acceptance, cancellation, and approved account or purchase-recovery changes.
Purchase information. Our payment provider, Paddle, processes checkout as merchant of record. We receive transaction information needed to fulfill purchases and manage access, such as transaction and customer identifiers, purchase email, product, amount, currency, payment status, refund or dispute status, and timestamps. Paddle collects payment and billing information under its own privacy notice. We do not ask you to send full card numbers or security codes to us.
Supporter invitations. If a buyer invites a supporter, we process the email address provided by the buyer, the invitation’s status and expiry, and its connection to the purchase. The recipient can contact us about an unwanted invitation. Buyers should invite only people who have agreed to receive an invitation. Invitation administration may show the buyer whether an invitation has been accepted; it does not provide access to the supporter’s worksheet entries or reading activity.
Support communications. If you email us, we receive your message, contact details, and any attachments you choose to send. Please do not send worksheet entries, medical records, card details or other sensitive information unless necessary to resolve your request. Support is for product and account questions, not clinical advice or crisis response.
Technical information. Hosting, authentication, email and security services may process information such as IP addresses, browser/device information, request timestamps, delivery records and security events. Our operational logs record IP addresses, browser and device information, request timestamps, and sign-in and email delivery events. We do not retain a per-account history of the lessons or pages you read.
2. Private worksheets and reading status
The guide’s worksheet entries are designed to remain in the current browser session’s memory. They are not submitted to our account or purchase database, and we do not monitor or respond to them. Refreshing clears these drafts. Some linked tools retain the same draft while you move between approved views or pages during the same visit; other navigation may discard it. Follow the notice on the tool you are using.
Mother and supporter entry sections remain separate. Reading status is kept for the open session and resets on refresh; it is not a clinical record or assessment.
If you deliberately copy, print, download or share selected information using an available feature, the resulting copy may be stored or handled by your device, browser, printer, chosen application or recipient. Our in-page clear control cannot erase those external copies. Anyone with access to your open browser or device may be able to see entries. Separate sections are not a substitute for securing a shared device.
We cannot recover browser-only drafts through account recovery. If you independently email an entry to support, that email becomes a support communication covered by this policy.
3. Why we use information
We use personal information to authenticate users; fulfill purchases; administer buyer and supporter access; send requested sign-in and invitation messages; address support and recovery requests; process payment status changes; maintain and secure the service; prevent fraud and misuse; and meet legal, accounting and recordkeeping obligations.
We do not use worksheet entries to assess health, deliver personalized medical recommendations or provide emergency monitoring.
4. Who receives information
We use providers for hosting, databases, authentication, transactional email, payment processing and operational security. They receive information needed for their services, subject to applicable arrangements. Current providers are:
- Lovable Cloud: application hosting, database, authentication and transactional email delivery.
- Paddle: checkout, transaction administration and merchant-of-record services. See paddle.com/legal/privacy.
We may disclose information when reasonably necessary to comply with law or valid legal process, protect rights and security, or investigate fraud. If the business is involved in a merger, acquisition or asset transfer, relevant information may be transferred with appropriate legal safeguards and notices.
We do not provide a buyer or supporter with the other person’s private entries. Access and invitation administration necessarily connect the two seats to the same purchase.
5. Cookies, analytics and tracking choices
Authentication uses essential cookies or comparable browser storage to keep you signed in and secure the service. This differs from worksheet entries, which remain in memory. Restricting necessary cookies may prevent sign-in or other essential functions.
We do not use analytics or advertising trackers, and we do not sell or share personal information for targeted advertising. Because we do not track activity across sites, the site does not respond differently to Do Not Track or Global Privacy Control signals.
6. Retention and security
We retain account and access records while needed to administer your access. Purchase and associated records may need to remain longer for tax, accounting, fraud prevention, disputes and legal obligations. Support correspondence is kept while needed to resolve your request and for up to 24 months afterward. Expired invitations, recovery records and security logs are retained for up to 12 months, and backup copies cycle out within 30 days.
We use reasonable technical and organizational safeguards. No online service, email system or device can be guaranteed completely secure. Never share sign-in links or verification codes with another person.
7. Your requests and choices
Contact support@whoholdsmom.com to ask about access to, correction of, or deletion of personal information we hold. Depending on your location and applicable law, you may also have rights to portability, restriction, objection, withdrawal of consent, an appeal, or a complaint to a privacy regulator. We verify identity appropriately and respond as required by applicable law. Some records must be retained, and deleting an account may affect paid access; we will explain relevant consequences when handling your request.
We cannot retrieve, correct or delete browser-only worksheet entries on your behalf. Use the page’s clear control and manage any external copies separately. Paddle handles information it controls under its own procedures.
8. Location and international processing
We operate from the United States. Providers may process information in other countries where they operate; where required, such transfers rely on contractual safeguards such as standard contractual clauses.
If applicable law requires legal bases for processing, our activities rely, as appropriate, on providing the contracted service, compliance with legal obligations, legitimate interests in operating and securing the service where permitted, and consent for optional activities requiring it. The service is currently directed to customers in the United States; if you access it from elsewhere, you do so subject to applicable local law.
9. Children
Paid accounts are intended for adults aged 18 or older. The service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has provided account or support information, contact us so we can investigate and take appropriate action. Public emergency and care information remains accessible without an account.
10. Changes
We will post changes on this page and update the effective date. Where required, we will give additional notice or request consent before a material change takes effect.