Loomio Privacy Policy

1. Who we are

Loomio, Inc. is an early-stage Delaware corporation building tools to support early childhood development. We collect contact details and survey responses for market research and to keep interested people informed about our progress.

We also offer a parent portal, which any parent may create an account to use. In the portal, a parent answers questions about their child, follows a multi-day plan of activities, and can record what they notice along the way. This means we hold information a parent has chosen to tell us about their child, stored against their account. Section 2 sets out exactly what that is, and Section 10 explains how we treat it.

If you have any questions about this Policy, contact us at hello@loomiohealth.com.

2. Information we collect

Information you give us directly. This includes information you provide when you:

• Join our waitlist, subscribe to updates, or enter your email address;
• Complete a survey, questionnaire, screener, or interest form;
• Contact us, respond to outreach, or participate in an interview or research session.

Depending on what you choose to share, this may include:

• your name and email address;
• your role (for example, parent, caregiver, or clinician);
• your child's developmental milestone data;
• transcriptions of speech samples;
• responses and results from any speech or developmental check you complete with us;
• assessment responses and scores from previous evaluations or providers that you share with us;
• your responses to our questions; and
• any other information you include in your messages.

Information you give us in the parent portal. If you create an account and use the portal, we store the following against that account:

• your first name and email address, which we use to sign you in by emailing you a link;
• your child's first name, birth month and year, and the gender option you select;
• your answers to the developmental snapshot questions, and the scores calculated from them;
• your daily activity log: which activity you did, which skills you marked as going well, anything you noted got in the way, and any free-text note you add;
• your progress record: the gestures, sounds, words, phrases and sentences you record your child using; and
• the skills you mark as achieved.

You choose what to enter, and you can leave any of it blank. We ask that you do not enter more detail than the portal asks for, and in particular that you do not enter medical records, diagnoses, or other sensitive information about your child in free-text notes.

Information we collect automatically. When you visit our website or forms, we (and our service providers) may automatically collect limited technical information such as your device type, browser, general location (derived from IP address), pages viewed, and how you arrived at our site (for example, from an ad or social media link). This may be collected using cookies and similar technologies (see Section 8).

Information from third parties. If you reach us through a social media platform (such as Instagram or Meta) or an advertising or form tool, we may receive information from that platform consistent with its own policies and your settings — for example, an email address you submit through a lead form.

We do not collect financial or biometric information, and we do not ask for medical records or clinical reports. The developmental snapshot and progress record do describe a child's communication and development, which some laws treat as sensitive. We handle that information as described in this Policy, and we ask that you not add anything beyond what the portal requests.

3. How we use your information

We use the information we collect to:

• Respond to your inquiries and communicate with you;
• Conduct market research, customer discovery, and product development;
• Provide the parent portal: produce your child's snapshot, choose the activities in your activity plan, and keep your saved entries so they are there when you sign back in;
• Test and improve our product, including by analyzing de-identified developmental information that families choose to share;
• Send you updates, waitlist news, and (where permitted) marketing communications about Loomio;
• Operate, measure, and improve our website, ads, and Services;
• Maintain the security and integrity of our Services;
• Comply with legal obligations and enforce our terms.

If you are in a region that requires a legal basis for processing (such as the EEA or UK), we rely on: your consent (for example, to send marketing emails); our legitimate interests (for example, to conduct research and improve our Services); and compliance with legal obligations, as applicable. You may withdraw consent at any time.

4. How we share your information

We do not sell your personal information. We share information only in these limited circumstances:

• Service providers. We use trusted third parties to operate our Services — for example, email and survey tools, form builders, hosting, and analytics providers. They may process your information only on our behalf and under obligations of confidentiality. The main ones are Supabase, which hosts our database and signs you in; Vercel, which hosts our website and provides traffic analytics; Resend, which delivers our sign-in emails; PostHog, which tells us which parts of the portal are used; and Beehiiv, which sends our email updates.
• Advertising and analytics platforms. We may use platforms (such as Meta/Instagram and website analytics) to measure and improve our campaigns. These platforms may process limited information as described in their own policies.
• Legal and safety. We may disclose information if required by law, regulation, legal process, or to protect the rights, safety, or property of Loomio, our users, or others.
• Business transfers. If Loomio is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction.

5. Marketing communications

If you opt in to receive updates or marketing emails, you can unsubscribe at any time using the link in any such email or by contacting us at hello@loomiohealth.com. We will honor opt-out requests promptly. We may still send you non-promotional messages related to your requests or our relationship (for example, responses to your inquiries).

6. Data retention

We keep your information only for as long as needed for the purposes described in this Policy — for example, to maintain our waitlist, conduct and analyze research, and meet legal obligations — and then delete or de-identify it. You may ask us to delete your information at any time (see Section 9).

Two things about the portal are worth knowing, because they may not be what you expect. Your daily activity log keeps one entry per day: if you fill it in again on the same day, the new entry replaces the earlier one. By contrast, your progress record and your marked skills are kept as a history: when you remove an entry it stops counting and stops being shown to you, but we retain a record that it was added and removed, so we can see how a child's communication changed over time.

If you would rather we did not keep that history, ask us to delete your account and we will remove it along with everything else.

7. Data security

We use reasonable administrative, technical, and organizational measures designed to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Cookies and tracking technologies

Our website may use cookies and similar technologies to remember your preferences, understand how the site is used, and measure our advertising. You can usually control cookies through your browser settings. Some features of the site may not function properly if cookies are disabled.

What our analytics sees. PostHog records which screens you open and which steps you finish, so we can tell where the portal is confusing. It receives no names, no birth dates, no snapshot answers and no notes — only counts and the names of screens. You are identified to it by an account number, never by your email, and we do not record your screen or your typing.

The parent portal also uses your browser's local storage to keep you signed in and to hold your place in your activity plan. This stays on your device rather than being a cookie sent to us, and clearing your browser data will sign you out. Your saved information remains in your account, and comes back when you sign in again.

9. Your rights and choices

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access / know what information we hold about you;
• Correct inaccurate information;
• Delete your information;
• Opt out of marketing communications;
• Withdraw consent where processing is based on consent;
• Data portability and the right to object to or restrict certain processing.

California residents (CCPA/CPRA). You have the right to know, access, correct, and delete your personal information, to opt out of the “sale” or “sharing” of personal information, and to not be discriminated against for exercising your rights. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. To exercise any of your rights, contact us at hello@loomiohealth.com.

EEA / UK residents (GDPR). You have the rights listed above and the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, email us at hello@loomiohealth.com. We may need to verify your identity before responding. We will respond within the timeframe required by applicable law.

10. Children's privacy

Our website and forms are intended for adults (such as parents, caregivers, and professionals) and are not directed to children. We do not knowingly collect personal information from children under 13 (or the age defined by your local law). If you believe a child has provided us personal information, please contact us at hello@loomiohealth.com and we will delete it.

Information about your child. The parent portal holds information about a child, and this Policy covers it. That information is given to us by a parent or legal guardian, not collected from the child. Children do not create accounts, are not asked to use the portal, and are never contacted by us.

When you enter information about your child, you confirm that you are their parent or legal guardian and that you agree to our handling it as described here. We use it to give you your child's snapshot and activity plan, and in de-identified, aggregated form to understand how the portal is used and to improve it. We do not use it to advertise to you or to your child, and we do not sell it.

You can ask us at any time to show you, correct, or delete everything we hold about your child. Write to hello@loomiohealth.com and we will act on it.

11. International data transfers

We are based in the United States. If you access the Services from outside that country, your information may be transferred to, stored in, and processed in a country whose data protection laws may differ from those of your country. Where required, we put appropriate safeguards in place for such transfers.

12. Third-party links

Our Services may contain links to third-party websites or platforms that we do not control. This Policy does not apply to those third parties, and we encourage you to review their privacy policies.

13. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Services after changes take effect means you accept the updated Policy.

14. Contact us

If you have questions or requests regarding this Policy or your information, contact us at:

hello@loomiohealth.com