Privacy Policy: My Bump Hub

Effective date: October 17, 2026
Last updated: October 18, 2026

Your privacy matters to us, especially when you are sharing something as personal as a pregnancy or a new baby. This Privacy Policy explains what information My Bump Hub collects, how we use and share it, and the choices and rights you have. It applies to mybumphub.com and the related forms, pages and services we offer (the "Hub").

The Hub is operated by My Bump My Baby LLC, doing business as My Bump Hub ("My Bump Hub," "we," "us" or "our"). Questions? Email info@mybumphub.com.

1. Information we collect

We collect information you give us through our forms, information collected automatically when you visit, and limited information from others, such as our payment processors, our identity verification provider (Stripe Identity) and the licensing boards and registries we check when verifying providers and partners. Most of our forms send the information you submit to our customer relationship management (CRM) system hosted at crm.mybumphub.com. Some forms are processed by our website host's form service or by Google Forms.

1.1 Contact and demo requests

Your name, email address, phone number (if you provide it), organization, and the content of your message or request.

1.2 Doula onboarding

Your name, business name, contact details, profile information, bio, services offered, service area, credentials you choose to list, verification information (see Section 1.13), photos, video links, your typed-name electronic signature, the date and time you submitted, and your choices on our consent checkboxes (agreeing to our Terms, acknowledging this Privacy Policy, authorizing us to publish your profile, and consenting to receive communications). Information you submit for your public profile will be published on the Hub and can be seen by anyone.

Some onboarding pages use Google Forms. Information you submit through a Google Form is also processed by Google.

1.3 Doula Ambassador Circle

Your name, contact details, professional background, community and service area, and your answers to the application questions.

1.4 Organization and nonprofit partner applications

Your name and role, organization name, organization type and details, website, contact details, the communities you serve, and your answers to the application questions.

1.5 Family and friends signups

Your name, email address, mobile number, who you are supporting and your relationship to them (for example, "my sister" or "my partner"). Please only tell us about someone else if they are comfortable with you doing so.

1.6 Join the Village

Your name, email address, phone number, ZIP code and journey stage (for example, trying to conceive, pregnant or postpartum). If you choose, and only with your separate consent, your due date or your baby's birth date. See Section 2. After you sign up, we email you a link to your ID check through Stripe Identity, which you must pass before you get access to the village. See Section 3.

1.7 App waitlist

Your name, email address and any other details you choose to share (for example, your journey stage or ZIP code).

1.8 Partner tier purchases and other payments

Payments on the Hub, including partner tier plans, are processed by our third-party payment processors (currently PayPal, with Stripe coming soon). Today, partner payments are made on PayPal's checkout page. Our payment processors receive your payment card or account details directly. We do not receive or store your full card number. Each processor handles your payment information under its own privacy policy, and may also use information about your device and connection to help prevent fraud.

From our payment processors, we receive information such as your name, email address, billing address details, the tier purchased, the amount, payment method details such as card brand and last four digits where provided, transaction and subscription IDs and status, your renewal date, any cancellation, and any record that you accepted our Terms at checkout, including the date and time.

1.9 Accounts

The Hub does not offer user accounts or passwords today, and we do not offer Sign in with Google. If we add accounts, we will update this policy before we do, to explain what information we receive and how we use it.

1.10 Events

The Hub does not sell event tickets today. If we offer ticketing, we will update this policy before tickets go on sale.

1.11 Information collected automatically

When you visit the Hub, we and our service providers collect information such as your IP address, browser and device type, pages you visit, how you got to the Hub (including referring sites and campaign tags), links you click (including outbound partner links, which may carry UTM tracking tags), approximate location derived from your IP address, and the date and time of your visit. We collect this using cookies and similar technologies, including Google Analytics 4. See Section 7.

1.12 Embedded videos

Some pages include embedded YouTube videos, which we show in YouTube's privacy-enhanced mode. When you view a page with a YouTube video, or play it, Google (which owns YouTube) may collect information about you and set cookies, under Google's privacy policy.

1.13 Provider and partner verification

We verify providers and partners before they are listed. To do this, we collect and check information that may include license numbers and states, certification numbers and issuing organizations, National Provider Identifier (NPI), copies of licenses, certificates and insurance certificates, government-issued ID, business registration or nonprofit status, and references. We also record the results of checks we make against public registries and with issuing organizations, which may include state licensing boards, certifying organizations, the federal NPPES registry and the federal OIG exclusion list, including the date of each check. Some of this information (such as license status) is public. We use verification information only to verify and re-verify listings, keep records of our checks, protect families and the Hub, and meet legal duties. We publish only the parts you agree to show on your profile, such as your credentials and the date of our most recent check. We do not publish ID documents, insurance documents or ID numbers. When we check your government-issued ID through Stripe Identity, Section 3 explains what is collected and how it is handled.

1.14 ID verification

Everyone who enters the village, including families, supporters, doulas, providers, app and technology partners, product brands and other partners, must pass an ID check through Stripe Identity before they get access. After you sign up, apply or pay, we email you a link to your check. For a business or organization, this is the person who manages the listing or account, and anyone else we ask. Stripe collects images of your government-issued photo ID and, if your check includes a selfie, photos of your face. We receive the result of the check and certain details from your ID. Section 3 explains this in full.

Some information you may share with us, such as your journey stage, due date or your baby's birth date, can reveal that you are pregnant, trying to conceive or recently gave birth. We treat this information as sensitive and handle it with extra care:

We collect it only when you choose to give it to us and give your separate, express consent. Sharing it is always your choice.
We use it only to personalize the resources and updates you asked for (for example, sending information that fits your stage), and for no other purpose without asking you first.
We do not sell it. We do not use it for targeted advertising. We do not share it with providers, partners or advertisers unless you ask us to.
You can withdraw your consent and ask us to delete it at any time by emailing info@mybumphub.com.

About HIPAA. My Bump Hub is a directory and information service. We are not a health care provider, health plan or health care clearinghouse, and we do not believe we are a "covered entity" or "business associate" under the federal Health Insurance Portability and Accountability Act (HIPAA). This means HIPAA may not apply to information you share with us. Other privacy laws may still apply, and we protect your information as described in this policy. Information you share directly with a provider you find on the Hub is handled under that provider's own privacy practices.

3. ID verification and biometric information

This section is our ID Verification and Biometric Information Policy. It explains how ID checks work on the Hub, what is collected, who handles it, how long it is kept and when it is destroyed.

3.1 Why we check ID

Everyone who enters the village passes an ID check first, so that we can keep out bots and fake accounts, confirm that people are who they say they are, and help keep the village safe for families and partners. Passing an ID check is required to enter the village, and no one gets access until they pass. Browsing the public pages of the Hub does not require an ID check.

3.2 When the ID check happens

The ID check is your first step into the village. It is not part of our sign-up or payment forms. After you sign up, apply or pay, we email you a secure link to your ID check. We send village access and login links only after Stripe confirms that your check is complete. Until then, your signup or application is pending and you do not have access to the village.

If you are not ready yet, that is fine. We will keep sending you reminders with your link until you complete your check. These reminders are service messages about your signup, and you can ask us to stop them and close your signup at any time by emailing info@mybumphub.com. If you are a paying partner, paying does not give you access before your check is complete, and the 30-day verification window and full refund terms in your Partner Terms apply.

You must be at least 18 years old to complete an ID check, and you may only verify your own identity with your own valid government-issued photo ID.

3.3 Who runs the check: Stripe Identity

ID checks on the Hub are performed by Stripe Identity, a service of Stripe, LLC and its affiliates ("Stripe"). You complete the check on Stripe's secure screens, which Stripe shows on our behalf. Stripe Identity is separate from payments. Payments on the Hub are currently processed by PayPal.

Stripe acts as our service provider when it runs your check for us. Stripe is also an independent controller of personal information, which means Stripe also uses some of the information it collects for its own purposes, such as detecting and preventing fraud, keeping its services secure, meeting its legal obligations and improving its verification services, as described in Stripe's Privacy Policy at stripe.com/privacy. We use Stripe for risk and identity verification services. We share personally identifying information with Stripe, which analyzes and uses it to operate and improve the services it provides to us, including for risk evaluation and identity verification. To confirm your identity, Stripe may check the information you provide against government and other third-party data sources, and Stripe may process your information in the United States and other countries where Stripe and its service providers operate.

Stripe will show you its own notices and ask for your permission on its own screens before the check starts. Stripe may also ask, separately, whether it may use your images to improve its verification technology. That choice is optional, and you can say no and still complete your check.

3.4 What is collected

Depending on the type of check, Stripe collects:

Images of the front and back of your government-issued photo ID, such as a driver's license, state ID card or passport.
If your check includes a selfie, one or more photos of your face, which Stripe uses to confirm that a real person is present and that your face matches the photo on your ID.
Information from your ID, such as your name, date of birth, ID number, issuing state or country, issue date, expiration date and, where shown, your address.
Information about the device and connection you use, such as your IP address and browser type, which Stripe uses to protect the check from fraud.

From Stripe, we receive the result of your check (for example, verified, or not verified and the reason), the date and time, a reference number for the check, and the information Stripe reads from your ID. We can view the ID images and selfie photos Stripe stores for us, but we access them only when we need to, for example to review a check that did not go through or to respond to a fraud concern. We do not receive or store the biometric identifiers Stripe creates to compare your face with your ID.

3.5 Biometric information

If your check includes a selfie, Stripe uses technology that measures the features of your face, such as face geometry, in your selfie and in the photo on your ID, and compares them. These measurements are biometric identifiers, and they and the information based on them are "biometric information." Some state laws, including those of Illinois, Texas, Washington and Colorado, and general state privacy laws such as the California Consumer Privacy Act, treat this as sensitive information. We handle it as follows:

Your consent first. Before your selfie step begins, we tell you in writing what biometric information will be collected, why, and how long it will be kept, and we ask for your written consent. You give it by checking a box and continuing, which serves as your electronic signature and written release. No selfie or biometric information is collected without that consent.
One purpose only. Biometric information is used only to confirm that you are the person shown on your ID, and to detect fraud in your check. We do not use it for any other purpose, such as advertising or marketing, and we do not use ID checks to decide anyone's eligibility for credit, insurance, housing or employment.
No sale and no sharing. We do not sell, lease, trade or otherwise profit from biometric information, and we do not share it with anyone other than Stripe for your check, unless you consent or the law requires it (for example, a valid subpoena or court order).
Care in storage. Biometric information and ID images are stored and sent using reasonable safeguards that are at least as protective as those we use for our other most sensitive information, including encryption in transit and limited, role-based access.
Destruction. Our retention and destruction schedule is in Section 3.8. In all cases, biometric information collected for the Hub is permanently destroyed when the purpose for collecting it has been met, and no later than one year after your last interaction with us, whichever comes first.

3.6 If you do not want to use a selfie

You do not have to use a selfie or share biometric information to join the village. If you prefer not to, choose the option to verify without a selfie, or email info@mybumphub.com with the subject line "ID Verification." We will offer you an ID check that does not use biometric information, such as a check of your ID document without a selfie, or a short live review of your ID with a member of our team (we do not record these reviews). Once your alternative check is complete, you get the same access to the village as everyone else, although the check may take a little longer.

3.7 How we use ID verification information

We use ID verification information only to:

Confirm that you are who you say you are, and that you are at least 18.
Keep bots, fake accounts and duplicate accounts out of the village, and investigate fraud or misuse.
Show an "ID verified" badge on your profile or account once your check is complete, if your profile is visible to others.
Keep records of our checks and of your consent, and meet our legal obligations.

We do not publish your ID images, selfie, date of birth, ID number or address from your ID, and we do not share ID verification information with families, providers, partners or advertisers. The only thing others may see is the "ID verified" badge.

3.8 How long ID verification information is kept

ID images and selfie photos stored by Stripe for us: we instruct Stripe to delete them within 30 days after your check is complete, or within 30 days after a check that did not go through, was abandoned or expired. Stripe's deletion process can take up to a few more days to finish.
Biometric identifiers: we never receive them. Stripe states that biometric identifiers are removed from its systems within one year, or sooner if you withdraw your consent by contacting Stripe at privacy@stripe.com.
Date of birth and ID number: we use them only during your check and to confirm you are at least 18. We do not copy them into our own records, and they are deleted along with your images.
The result of your check: we keep the result, the date, the Stripe reference number, the name as verified, and a record that you are at least 18, for as long as your membership or listing is active, plus 3 years.
Your consent records: we keep a record of the notice you saw and the consent you gave for the life of your membership plus 6 years, so that we can show what you agreed to.
Stripe's own records: Stripe keeps some information it collects as an independent controller for the periods described in Stripe's Privacy Policy, which can be longer, for example for fraud prevention and legal compliance. You can ask Stripe directly about its records at privacy@stripe.com.

3.9 Your choices and requests

You can ask us to access or delete your ID verification information, withdraw your consent, or ask for an alternative check at any time, by emailing info@mybumphub.com with the subject line "ID Verification Request," or by writing to us at 290 Madison Ave, New York, NY 10017. If you withdraw your consent before your check is complete, we stop the check and delete your images. If you ask us to delete your information after your check is complete, we will delete it as described in this section, and you will no longer be shown as ID verified, so your access to the village will end unless you complete an alternative check. Section 12 explains the rest of your privacy rights and how we handle requests.

Because Stripe also holds verification information as an independent controller, you can also contact Stripe directly at privacy@stripe.com to ask about, delete or withdraw consent to Stripe's use of your information, including biometric information.

4. How we use information

We use information to:

Run the Hub, publish directory listings you authorized, and process applications, signups and purchases.
Verify and re-verify providers and partners, and keep records of those checks.
Confirm the identity of village members through ID checks, as described in Section 3.
Respond to your questions and requests, including demo requests.
Connect you with a provider or partner when you ask us to.
Send you updates, newsletters and information you signed up for, and, with your consent, resources that fit your journey stage.
Understand how the Hub is used and improve it, including measuring visits to partner sites from the Hub.
Keep the Hub safe, prevent fraud and abuse, and enforce our Terms.
Keep records of consents and electronic signatures.
Follow the law and respond to lawful requests.

We share information only as described here:

Service providers. Companies that help us run the Hub, under contracts that limit how they can use your information. These include our CRM host, website and email providers, Google (Google Analytics, Google Forms and YouTube), our third-party payment processors (currently PayPal, with Stripe coming soon), Stripe Identity for ID checks, and any verification service we use to check licenses and registries.
Stripe, for ID checks. Stripe runs ID checks as our service provider and also uses some information as an independent controller under its own privacy policy, as described in Section 3. We do not share ID verification information with anyone else, except as the law requires.
Providers and partners, only when you ask. If you ask to be contacted by or connected with a provider or partner, we share the information needed to do that. We do not otherwise share family information with providers or partners.
Public profiles. If you are a provider or partner and authorize us to publish your profile, your Profile Content is visible to anyone who visits the Hub.
Legal and safety reasons. When we believe it is required by law, legal process or a government request, or needed to protect the rights, safety or property of our users, the public or My Bump Hub.
Business changes. If My Bump Hub, or the Hub business, is reorganized (for example, moved into a new company), merged, sold or transferred, information may be transferred as part of that change, and it will remain subject to this policy or one at least as protective. Sensitive health-related information will be transferred only as the law allows.
With your permission. In any other case where you ask us to or agree.

6. No sale of personal information and no targeted advertising

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising (targeted advertising). We have not done so in the past 12 months. We do not knowingly sell or share the personal information of anyone under 16. We do not sell, lease, trade or otherwise profit from biometric information or ID verification information.

7. Cookies and analytics

We use cookies and similar technologies to keep the Hub working, remember your preferences and understand how visitors use the Hub. We use Google Analytics 4 to see things like which pages are popular and how visitors find us. Google collects information through its cookies under its own privacy policy, and you can learn how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites.

Your choices:

Google Analytics opt-out. You can stop Google Analytics from collecting data about your visits by installing the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout.
Browser settings. Most browsers let you block or delete cookies. If you do, some parts of the Hub may not work as expected.
Do Not Track. Browsers' "Do Not Track" signals have no common standard, so we do not respond to them. We do honor Global Privacy Control as described in Section 12.

8. Emails and text messages

Email. If you consent, we will send you emails about the Hub and the topics you signed up for. You can unsubscribe at any time using the link at the bottom of any marketing email. We may still send you messages about your listing, application or purchase.

Text messages (future). We do not send automated text messages today. If we start, we will ask for your separate, express written consent before sending you any marketing texts, and consent will never be a condition of buying anything. Message frequency will vary, and message and data rates may apply. You can reply STOP at any time to opt out, or HELP for help. We will not share your mobile number or text message opt-in information with third parties or affiliates for their marketing purposes. Mobile numbers may be shared only with service providers that help us send messages.

9. Children

The Hub is for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us information, please contact us and we will delete it. ID checks are only for adults 18 and older, and we do not run ID checks on anyone under 18.

When a parent or caregiver shares a baby's birth date with us, that information is about the user's child and is provided by the adult user. We use it only to tailor the resources the parent or caregiver asked for, treat it as sensitive as described in Section 2, and will delete it on request.

10. How long we keep information

We keep personal information only as long as needed for the purposes in this policy, unless the law requires or allows us to keep it longer. Our current guidelines are:

Contact and demo requests: 24 months after our last contact with you.
Doula, provider, ambassador and partner applications and profiles: while your listing or relationship is active, plus 3 years.
Electronic signature and consent records: the life of the agreement plus 6 years.
Family and friends, Join the Village and app waitlist signups: until you unsubscribe or ask us to delete it, or after 24 months of inactivity.
Due date and baby birth date: until you withdraw consent or ask us to delete it, and no later than 12 months after the due date or birth date you gave us.
Partner tier purchase records: 7 years, for tax and accounting.
Verification records (documents, registry check results and dates): while your listing is active, plus 3 years. Copies of ID documents we receive directly: deleted within 30 days after verification is complete; we keep only the result and date.
ID checks through Stripe Identity: ID images and selfie photos deleted within 30 days after the check is complete or ends; biometric information destroyed when its purpose has been met, and no later than one year after your last interaction with us; the result of the check kept while your membership or listing is active, plus 3 years. See Section 3.8.
Account information, if we offer accounts: while your account is open, and deleted within 30 days after you close it, unless we need to keep it for the reasons above.
Checkout terms acceptance and automatic renewal consent records: at least 3 years, or 1 year after the plan ends, whichever is longer.
Analytics data: up to 14 months (our Google Analytics 4 data retention setting).

11. Security

We use reasonable administrative, technical and physical safeguards to protect personal information, such as encrypted connections (HTTPS), access controls and limiting who can see sensitive information. No method of storing or sending information is completely secure, so we cannot promise absolute security. If we learn of a security incident affecting your information, we will notify you as the law requires.

12. Your privacy rights

Depending on where you live, state law may give you rights over your personal information. These include California (CCPA, as amended by the CPRA), Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island and other states with similar laws. Because we believe everyone deserves these protections, we offer the following rights to all U.S. users, wherever they live:

Know and access. Ask what personal information we have about you and get a copy.
Correct. Ask us to fix information that is inaccurate.
Delete. Ask us to delete your personal information.
Opt out. Opt out of the sale of personal information, targeted advertising and certain profiling. (We do not sell your information or use it for targeted advertising, but you may still submit a request.)
Limit or withdraw consent for sensitive information. Withdraw your consent to our use of sensitive information, including pregnancy and health-related information, and ID verification and biometric information (see Section 3.9).
Appeal. If we deny your request, you can appeal our decision.
No discrimination. We will not treat you differently, deny you services or charge you a different price because you used your privacy rights.

Global Privacy Control. We honor Global Privacy Control (GPC) signals. If your browser sends a GPC signal, we will treat it as a request to opt out of the sale or sharing of your personal information and targeted advertising for that browser, and, if we know who you are, for your account or record.

How to make a request. Email info@mybumphub.com with the subject line "Privacy Request," or write to us at 290 Madison Ave, New York, NY 10017. Please tell us what you are asking for and how to reach you. We will respond within the time the law requires, usually within 45 days.

Verification. To protect you, we will ask for information to verify your identity, such as confirming the email address you used with us. We will only use that information to verify your request.

Authorized agents. You can have someone else make a request for you. We may ask the agent for proof that you gave them signed permission, and we may ask you to verify your identity directly with us, unless the agent has a valid power of attorney.

Appeals. If we decline your request, we will explain why. You can appeal by replying to our decision or emailing info@mybumphub.com with the subject "Privacy Appeal" within 45 days. We will respond to your appeal within the time the law requires. If you are not satisfied, you may contact your state attorney general.

Washington, Connecticut and Nevada residents. These states give you additional rights in consumer health data, which in Washington includes biometric data. We collect biometric information only with your consent, only for your ID check, and share it only with Stripe to run that check. You can use the rights in this section, including withdrawing consent and asking us to delete health-related or biometric information, by emailing info@mybumphub.com.

California residents. In the past 12 months we have collected the categories of personal information described in Sections 1 and 3: identifiers (such as name, email, phone and IP address); customer records; characteristics of protected classifications (such as age, shown on an ID you submit for an ID check); professional information (for providers and partners, including license and certification details we verify); commercial information (partner tier purchases); biometric information (if your ID check includes a selfie); internet activity; approximate geolocation (from ZIP code or IP address); and sensitive personal information (health-related information you choose to share; government ID information such as your driver's license, state ID or passport number collected in an ID check; biometric information processed to confirm your identity; and, for partners, account or transaction details). We collect it from you, your device, licensing boards and registries (for verification), Stripe (for ID checks) and our service providers, for the purposes in Section 4, and disclose it to the categories of recipients in Section 5. We use sensitive personal information only for purposes the law allows without a "right to limit," such as verifying identity, preventing fraud and keeping the Hub secure, so we do not offer a right to limit. We do not sell or share personal information. Retention is described in Sections 3.8 and 10.

13. Visitors outside the United States

The Hub is intended for people in the United States. If you visit from elsewhere, your information will be processed in the United States, where privacy laws may differ from those where you live.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will change the "Last updated" date above, and if we make important changes we will let you know, for example by email or a notice on the Hub. We will ask for your consent before using sensitive information in a materially new way.

15. Contact us

Questions or concerns about your privacy? We would love to hear from you.

My Bump My Baby LLC, doing business as My Bump Hub
Email: info@mybumphub.com
Mail: 290 Madison Ave, New York, NY 10017

My Bump Hub Privacy Policy