Privacy by restraint

How we limit the data we use

1. Information collected

Depending on which features someone chooses to use, the site may collect or process:

  • Village Listener: text in the in-tab writing space remains in the current browser tab and is not intentionally transmitted to The Village After Birth, saved to our database, or written to browser storage. The tool does not read, analyze, screen, or respond to that text. It may remain visible until it is cleared or the page session ends. Browser features, extensions, screenshots, the clipboard, or another person with device access may expose it.
  • Interactive care guides and planning tools: choices and text entered into care-plan, first-year, combined-circumstance, Build My Village, message, food, rest, recovery, and other builders are processed in the current browser tab and are not intentionally sent to us or saved in an account. Sensitive circumstance selections are not written into page addresses. Reloading or leaving the page clears those entries.
  • Pantry photos: a selected pantry photo stays on the device and is shown only as a visual checklist. The site does not upload or automatically analyze it. The browser or device may still retain its own recent-file or permission history.
  • Copy controls: copied care phrases and plans are placed on the device clipboard, where they may remain until replaced or cleared and may be available to other apps or people with device access.
  • Device sharing and print/PDF controls: these controls act only when selected. Device sharing opens the device's own sharing interface; The Village does not receive the destination or know whether sharing completed. Printing or saving as PDF can create a file or print record that remains on the device, in a cloud-print account, or with a printer. Do not use these controls for sensitive plans if another person may monitor the device or account.
  • Location finder and care-guide filters: choices are processed in the current tab and are not added to the page address or intentionally submitted to The Village. A person can still copy or share an outside resource after opening it.
  • Public interest intake: no public support-update or professional-interest form is currently active.
  • Records from private founding tests: previously submitted support-update or professional-interest records may remain in restricted project storage while the project establishes a monitored request, opt-out, deletion, review-access, and retention process. They will not be used for outreach before that process is published.
  • Basic technical data: hosting and security providers may process standard request logs such as IP address, device/browser details, and timestamps to deliver and protect the site.

2. Why it is used

Information is used to operate site features, prevent abuse, and secure the service. Public outreach and professional review are paused while the project establishes an operational privacy-request process. Information is not used to diagnose, profile health conditions, determine eligibility for care, or make automated clinical decisions.

3. What we do not do

  • We do not sell personal information.
  • We do not intentionally add advertising pixels or third-party behavioral advertising trackers.
  • We do not ask for a medical chart, a child's information, or crisis details.
  • We do not claim this site is a HIPAA-covered clinical record system.

HHS explains that health information entered into many consumer apps is not protected by HIPAA when the app is not offered by a regulated entity, while other federal and state laws may still apply. The FTC's Health Breach Notification Rule can apply to certain health apps and nonprofits outside HIPAA.

4. Sharing and service providers

Infrastructure providers may process data needed to host the site, retain any records from private founding tests, prevent abuse, and maintain security. Information may be disclosed when legally required or when investigating a security incident. The site is not monitored for care or emergencies and cannot use an entry to recognize danger, contact emergency services, or intervene.

5. Retention and deletion

No new public interest records are being accepted. Records from private founding tests will remain restricted and unused for outreach until a monitored request, opt-out, deletion, reviewer-access, and retention process is established. The site does not currently offer user accounts or a self-service deletion tool. Public intake will not reopen until the project can publish a reliable way to exercise those choices.

6. Security and incidents

No system can promise perfect security. We use data minimization, restricted access, encryption in transit, and hosting security controls designed to reduce risk. If a law requires notice after a breach, we will follow the applicable notice process.

7. Children, state rights, and changes

Village Listener is for adults 18 and older and should not be used to enter information about children. U.S. state privacy rights vary. Material policy changes will be dated and explained on this page rather than silently applied to previously collected information.