Privacy Policy
Effective September 17, 2026
MyBaberz is operated by MyBaberz LLC, an Illinois limited liability company ("MyBaberz", "we", "us"). MyBaberz is a private hub for groups of people: families, friends, teams. This policy explains what we collect, why, and the choices you have. It applies to mybaberz.com and related apps (the "Service").
What we collect
- Account information: name, email address, and authentication data (passwords are stored only as hashes by our identity provider, Amazon Cognito; passkeys and MFA secrets are stored in encrypted form).
- Date of birth: asked when you create an account, or before your first Coinz purchase if your account was created earlier. We use it only to apply our age rules: accounts are for people 13 and older, and buying Coinz needs you to be 18 or to have a parent's or guardian's approval. We record when you gave it, and it cannot be changed from your account afterwards; if it is wrong, contact us.
- Profile information you choose to add: photo, phone, birthday, gifting preferences such as sizes and interests, and a "don't buy" list.
- Group data: groups you create or join, invitations you send, messages you post, calendar events, and gift lists, including reservations and purchases recorded by shoppers.
- Managed profiles: if you create a profile for someone without an account (for example a child), we store the name, birthday and list you enter. You are responsible for having the right to share that information.
- Product links: when you paste a product URL we fetch that page or query the retailer's API to read the product name, image and price, and we may send the page's text to an AI provider (Anthropic) to extract those fields. We do not send your personal information with it.
- Payment information: if you buy Coinz, our payment processor Stripe collects your card or wallet details directly in its own secure fields; MyBaberz never receives or stores your card number. We receive the amount, the payment status, the card brand and last four digits, and a Stripe customer identifier linked to your account. If you tick "save for next time" at checkout, Stripe stores that payment method for your future purchases; you can remove it at your next checkout or by emailing us.
- Technical data: IP address, browser type, device type and server logs, retained for security and debugging.
How we use it
- To provide the Service: accounts, groups, calendars, gift coordination and notifications you have enabled (in-app, email, push).
- To keep surprises: gift reservation and purchase details are hidden from the list owner by design until an occasion is archived.
- To secure and improve the Service and to comply with law.
We do not sell personal information and we do not show advertising.
Sharing
- With your groups as the Service is designed (for example, group members can see lists shared with their occasion).
- Service providers that process data on our behalf: Amazon Web Services (hosting, storage, email), Stripe (payment processing, see Stripe's privacy policy), Anthropic (product-data extraction), and retailers/affiliate networks when you click a product link (they receive a referral identifier, not your MyBaberz account data).
- Legal: when required by law or to protect the Service and its users.
Children
Accounts are for users 13 and older. Parents may create managed profiles for younger children; those profiles have no login and are controlled by the parent. Contact us to review or delete a child's information.
Retention and deletion
We keep data while your account is active. You can delete items, lists, and your account from Settings; deletion removes your personal data from active systems within 30 days, with backups expiring on their normal schedule. Content you shared with a group may remain visible to that group where it forms part of the group's record (for example, a message thread).
Security
Data is encrypted in transit and at rest. Access is limited to what the Service needs. No system is perfectly secure; tell us at the address below if you believe your account has been compromised.
Your choices
Edit your profile and notification preferences in Settings. Email us to access, correct, export or delete your data. California and EU/UK residents have additional rights under CCPA/GDPR and may exercise them by contacting us.
Changes
We will post updates here and change the effective date. Material changes will be announced in the app.