Section 1 — What This Policy Covers
Cookies are small text files placed on your device when you visit a website. Apps do not use cookies in the same way, but they use comparable technologies that serve similar purposes. This Policy covers all of them, referred to together as “cookies and tracking technologies.”
1.1 The Technologies We Are Describing
Browser cookies: Small text files stored by your web browser. They may be first-party (set by promptlymom.com directly) or third-party (set by a service provider). Browser cookies have a defined expiry and are removed when they expire or when you clear your browser data.
Local storage and session storage: Browser-based storage that lets a site keep information on your device. Session storage clears when you close your browser; local storage persists until cleared.
Mobile device identifiers: Identifiers assigned by the operating system or by an app. Some are shared with advertisers; others are used only by the app that created them. Section 3 states precisely which ones the Promptly Mom App uses and which it does not.
SDK analytics: Code libraries built into the App that record how the App is used and send that information to a service provider. The Promptly Mom App uses Google Firebase for this, including Firebase Crashlytics for crash reports (Sections 3.3 and 3.4). You can turn both off in the App (Section 6.3).
Pixel tags and web beacons: Small images or code snippets embedded in a web page or an email that signal when the page or message has been opened. We may use these in marketing emails to see whether a message was opened (Section 6.5).
Section 2 — Categories We Use
Every technology described in this Policy falls into one of four categories. Where the Site shows a consent banner, it uses these categories, so that you can accept or decline by category.
| Category | What it does | Consent |
|---|---|---|
| Strictly necessary | Required for the Site and App to work: signing in, keeping your session, security protections, remembering your consent choices, and preventing abuse. Cannot be disabled. | Not required |
| Analytics and performance | Helps us understand how the Services are used — which screens are visited, where people encounter errors, how long sessions last, which features are returned to — and when crash reporting is turned on, to receive reports about crashes and technical faults. These reports will default to being active unless you disable them. Instructions to do so can be found in “Help improve Promptly Mom” (Section 6.3). | Required |
| Functionality and personalization | Remembers your preferences and settings. These settings include: language, display choices, saved profile settings, which Mom Circles you have joined. These settings are required in some jurisdictions. | Jurisdiction dependent |
| Marketing and measurement | Measures the effectiveness of our own marketing and tracks how people arrive at the Site. | Required |
These category descriptions are written to accommodate additional tools of the same kind. If we add a technology within an existing category, we will update the tables in Section 3 and the Last Updated date. If we add a technology that does something these categories do not describe, we will revise this Policy and, where required, ask for your consent again.
Section 3 — What We Actually Use
The tables below state present status. Where a technology is commonly used by apps of this kind but we do not use it, that is stated rather than omitted.
3.1 First-Party Cookies and Browser Storage (Website)
| Name | Category | Purpose | Duration |
|---|---|---|---|
| __cf_bm | Strictly necessary | Set by Cloudflare, which delivers and protects the Site, to tell people apart from automated traffic | 30 minutes |
| Firebase Authentication sign-in record (browser storage) | Strictly necessary | Keeps you signed in to your Promptly Mom account on the Site after you sign in, for example to Mom Academy. The Delete Account page signs you out when it finishes. | Until you sign out or clear your browser data |
| wpEmojiSettings (session storage) | Functionality | Remembers whether your browser can display emoji, so the check is not repeated on each page | Session |
If we add other first-party cookies to the Site; for example, to remember your language or display preferences, or your cookie choices, we will add them to this table.
3.2 Google Analytics, Tag Manager and Google Sign-In (Website)
Our website does not currently use Google Analytics 4 or Google Tag Manager. If we add them, they set the analytics and marketing cookies in the table below, and we will ask for your consent first where the law requires it.
If you choose to sign in to the Site with your Google account, Google sets its own cookies on google.com, such as NID and CONSENT below, under Google’s own privacy policy. Google’s data practices are described at policies.google.com/privacy.
| Name | Category | Purpose | Duration |
|---|---|---|---|
| _ga | Analytics | Assigns an identifier used to distinguish visitors across sessions | Up to 2 years |
| _ga_<ID> | Analytics | Stores session state for our specific analytics property | Up to 2 years |
| _gid | Analytics | Groups activity within a single 24-hour period | 24 hours |
| _gat / _dc_gtm | Analytics | Limits the rate of requests sent to Google Analytics | 1 minute |
| _gcl_au | Marketing | Links ad clicks to conversions. Set only if Google Ads is active. | 90 days |
| NID | Functionality | Set by google.com where Google sign-in or embedded Google content is used | 6 months |
| CONSENT | Strictly necessary | Records your consent status for Google services | 2 years |
3.3 iOS App
| Technology | Category | Status and purpose | Duration |
|---|---|---|---|
| IDFV (Identifier for Vendor) | Strictly necessary / Analytics | In use. An Apple-assigned identifier shared across Promptly Mom apps only, used for first-party analytics. Does not require tracking permission and is not shared with advertisers. | Persists while the App is installed; reset on uninstall |
| IDFA (Identifier for Advertisers) | Marketing | Not used. The App does not collect the advertising identifier and does not use it for any purpose. | Not applicable |
| App Tracking Transparency prompt | Marketing | Not used. Because we do not collect the advertising identifier and do not track you across other companies’ apps or websites, the App does not present Apple’s tracking permission prompt. | Not applicable |
| Firebase installation identifier | Analytics | In use. Identifies this installation of the App so that usage events can be grouped into sessions. | Persists while the App is installed |
| Firebase Analytics events | Analytics | In use while “Help improve Promptly Mom” is on. Records automatic events (first launch, session start, screen views) and our own product events, described in Section 3.6. | Held by Google per its retention settings |
| Firebase Crashlytics (crash reports) | Analytics and performance | Included in the App. It sends nothing unless we have turned crash reporting on and you have left “Help improve Promptly Mom” on. Then, at the next launch after a crash, the App sends Google a report of the fault: the technical details of the error, your device model, operating system and app version, free memory and storage, a Crashlytics installation identifier, and the last few product events before the crash. A report does not include your name, email address or account ID, and it is designed not to include what you write. Otherwise, reports waiting on your device are deleted. | Kept by Google for 90 days |
| Apple App Attest / Firebase App Check | Strictly necessary | In use. Asks Apple to confirm that a request comes from a genuine copy of the App rather than an automated script. This is about the App, not about you, and carries no personal information. | Per request; the attestation key stays on your device while the App is installed |
| App Store attribution (SKAdNetwork) | Marketing (aggregated) | [Not currently used. If install-attribution measurement is adopted, this row describes Apple’s privacy-preserving, aggregated attribution, which transmits no personal data.] | Aggregated; no persistent identifier |
3.4 Android App
| Technology | Category | Status and purpose | Duration |
|---|---|---|---|
| GAID (Google Advertising ID) | Marketing | Not used. Advertising-identifier collection is switched off in the App. We do not use it for analytics, attribution or advertising. | Not applicable |
| Firebase installation identifier | Analytics | In use. Identifies this installation so that usage events can be grouped into sessions. | Persists while the App is installed |
| Firebase Analytics events | Analytics | In use while “Help improve Promptly Mom” is on. Records automatic events (first launch, session start, screen views) and our own product events, described in Section 3.6. | Held by Google per its retention settings |
| Firebase Crashlytics (crash reports) | Analytics and performance | Included in the App. It sends nothing unless we have turned crash reporting on and you have left “Help improve Promptly Mom” on. Then, at the next launch after a crash, the App sends Google a report of the fault: the technical details of the error, your device model, operating system and app version, free memory and storage, a Crashlytics installation identifier, and the last few product events before the crash. A report does not include your name, email address or account ID, and it is designed not to include what you write. Otherwise, reports waiting on your device are deleted. | Kept by Google for 90 days |
| Play Integrity / Firebase App Check | Strictly necessary | In use. Sends Google a token confirming that a request comes from a genuine installation of the App rather than an automated script. This is about the App, not about you, and carries no personal information. | Per request; not stored |
| Consent status record | Strictly necessary | In use. Records your consent choices so the App respects them in later sessions. | Persists while the App is installed |
3.5 Technologies We Do Not Use
| Technology | Status |
|---|---|
| Advertising identifiers (Apple IDFA, Google GAID) | Not collected on either platform. |
| Cross-app or cross-site tracking | Not performed. We do not track you across other companies’ apps or websites. |
| Third-party advertising networks or data brokers | None. We do not share data with advertising networks and we do not sell data. |
| Session replay or screen recording | Not used. We do not record your screen or replay your sessions. |
| Fingerprinting | Not used. We do not construct a device fingerprint to identify you across contexts. |
3.6 Product Events We Record in the App
In addition to automatic analytics events, the App records events of our own. They are grouped by a per-installation identifier, not your account, and none of them carries anything you typed or said:
- Screens and first-time setup — which screens are viewed, and which setup steps were shown, finished or skipped, including how you signed in (Google, Apple, email or as a guest) and whether the account is new.
- Studios opened — which studio was opened, and from where (for example, home, favorites or a notification). Opening our health studios (Health Studio and FitFlow) is not recorded as an event; it is only added to an anonymous daily count with no identifier.
- Voice assistant use — which mode was used, how long the session lasted, how many and what kind of actions were taken, and which assistant skill was used; a skill about a sensitive topic is recorded only as “sensitive”. Never the content of the conversation.
- Answers — whether you copied, saved, shared, acted on or rated an AI answer. Never the answer itself.
- Notifications — which kind of notification you opened. Never its text.
- Subscription and purchase events — including which screen prompted an upgrade.
- Content generation events — the category of content requested, the processing route used, and whether a safety stop occurred. Not the content itself.
- Your settings — your plan (free or Premium), whether the voice assistant is on, and whether you use your own AI key.
You can turn these events off at any time with “Help improve Promptly Mom” in Account → Data & Privacy. While it is off, the App sends no analytics events and no crash reports, and it stops adding to the anonymous daily counts of assistant skills and health-studio opens. Anonymous counts of how often each prompt is run, which carry no identifier, continue either way (Privacy Policy Section 5.10).
Section 4 — What We Use These Technologies For
Cookies and tracking technologies allow us to:
- Keep you securely signed in and prevent unauthorized access to your account;
- Remember your preferences, settings and Mom Circle memberships between sessions;
- Understand how the Services are used — what helps, where people get stuck, which features they return to — so we can improve them;
- Diagnose technical faults and, when crash reporting is turned on and you have left “Help improve Promptly Mom” on, understand why the App crashed;
- Measure the effectiveness of our own marketing and understand how people find us;
- Protect the security and integrity of the Services by detecting unusual activity, automated traffic and fraud; and
- Comply with legal obligations, including recording your consent choices.
We do not use cookies or tracking technologies to:
- Build advertising profiles, or sell or share data with third-party advertising networks or data brokers;
- Track your activity across other companies’ apps or websites;
- Record your screen or replay your sessions; or
- Make automated decisions producing legal or similarly significant effects.
Section 5 — Third-Party Providers
| Provider | Role | More information |
|---|---|---|
| Google LLC — Analytics and Tag Manager (only if we add them; Section 3.2) | Website analytics and performance measurement. Not used on the Site today. | policies.google.com/privacy — opt out at tools.google.com/dlpage/gaoptout |
| Google LLC — Firebase | Mobile analytics and installation identifiers for the App; crash reports (Crashlytics) when crash reporting is turned on; sign-in to your account in the App and on the Site (Firebase Authentication); hosting and database services | firebase.google.com/support/privacy |
| Google LLC — Play Integrity / App Check | Confirms Android requests come from a genuine installation. No personal information. | policies.google.com/privacy |
| Apple Inc. — App Store and App Attest | App distribution and purchase processing. App Attest confirms iPhone requests come from a genuine copy of the App; no personal information. We do not use Apple’s advertising or attribution frameworks. | apple.com/privacy |
| Cloudflare, Inc. | Delivers and protects the Site; sets the __cf_bm cookie described in Section 3.1 | cloudflare.com/privacypolicy |
| WP Engine, Inc. | Hosts the Site (WordPress) and receives the requests your browser makes to it | wpengine.com/legal/privacy |
These providers act on our behalf and are bound by contractual confidentiality and data protection obligations. A full list of the parties with whom personal information is shared, including AI providers, is in Section 6 of the Privacy Policy.
Section 6 — Your Choices
6.1 Consent Banner (Website)
The Site does not currently use analytics or marketing cookies, so it does not show a consent banner. If we add them, a consent banner will let you accept all cookies, reject all non-essential cookies, or set your preferences by category, and you will be able to change your choices at any time using a Cookie Settings link in the footer of any page.
6.2 Browser Settings
- Google Chrome: Settings → Privacy and security → Third-party cookies
- Apple Safari: Settings → Safari → Privacy & Security
- Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
- Microsoft Edge: Settings → Privacy, search, and services → Cookies
Blocking strictly necessary cookies will prevent parts of the Site from working, including signing in.
6.3 App Settings
Because the App does not collect advertising identifiers, there is no advertising opt-out to make. You can control what the App collects and shares in Account → Data & Privacy, which includes the AI processing controls described in the Privacy Policy and the Help improve Promptly Mom switch. Turning that switch off stops the App’s analytics events and crash reports (Section 3.6); it is on unless you turn it off. On Android you can additionally delete your advertising ID system-wide in Settings → Privacy → Ads; this has no effect on the Promptly Mom App, which does not use it.
6.4 Google Analytics Opt-Out
To opt out of Google Analytics across all websites, install the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout.
6.5 Email Tracking
Marketing emails may include a tracking pixel that tells us whether the message was opened. To avoid it, disable automatic image loading in your email client, or unsubscribe using the link in any marketing email.
Section 7 — Do Not Track and Global Privacy Control
There is no universal standard for how websites must respond to browser “Do Not Track” signals, and our Site does not alter its behaviour in response to them.
We do honour Global Privacy Control (GPC) signals from supported browsers as a valid opt-out of the sale or sharing of personal information under the California Consumer Privacy Act and comparable state laws. As stated in the Privacy Policy, we do not sell or share personal information in any event.
Section 8 — Jurisdiction-Specific Disclosures
8.1 United States
We do not sell personal information and we do not share it for cross-context behavioural advertising, as those terms are defined under the California Consumer Privacy Act as amended and comparable laws in other states. We honour Global Privacy Control signals. Residents of California, Colorado, Connecticut, Virginia, Texas, Montana, Oregon, Washington, Nevada and other states with comprehensive privacy laws have the rights described in Section 12 of the Privacy Policy.
8.2 If You Are Outside the United States
The Services are currently offered in the United States only. The following applies if availability is extended.
EEA, Switzerland and the United Kingdom. We would not set any non-essential cookie without your prior, freely given, specific, informed and unambiguous consent. Our legal basis for strictly necessary cookies is legitimate interests under Article 6(1)(f) GDPR; for all others, consent under Article 6(1)(a).
Canada. For users in Canada we obtain meaningful consent before setting non-essential cookies. Quebec’s Law 25 requires disclosure of the parties to whom personal information may be communicated through cookies; that disclosure is in Section 5.
Section 9 — Updates to This Cookie Policy
We may update this Policy from time to time. If we add a technology within a category already described in Section 2, we will update the tables in Section 3 and revise the Last Updated date. If we add a technology that does something Section 2 does not describe, we will revise this Policy and, where the law requires it, present you with a refreshed consent banner. Your continued use of the Services after an update takes effect constitutes acceptance of the revised Policy.
Section 10 — Contact Us
Promptly Mom, LLC
Attn: Privacy Officer
4211 South Nano
Mesa, Arizona 85212
United States
Email: admin@promptlymom.com
Cookie Settings: in the footer of promptlymom.com, when the Site shows a consent banner (Section 6.1)
Website: www.promptlymom.com
Thank you for being part of this circle. We built Promptly Mom for you — and together, we’ll keep it a place worth coming back to.