Privacy Policy

Information you provide directly

For parents (mobile app users):

• ·Name and mobile phone number (used for authentication)
• ·Pregnancy stage, due date, or baby's date of birth
• ·Your suburb and state
• ·Health and pregnancy tracking data you choose to enter (kick counts, contraction timings, blood pressure readings, feeding logs, sleep logs, nappy logs, weight records, mood check-in responses, and similar)
• ·Baby growth and milestone data

For service providers (web portal users):

• ·Name, business name, and email address
• ·Business description, services, qualifications, and photo
• ·Suburb, service area, and contact details
• ·Payment and billing information (processed by Stripe — we do not store card details)
• ·Enquiry messages received through the platform

Information collected automatically

• ·Device type, operating system, and app version
• ·Usage data and feature interaction (which tools you use, which pages you visit)
• ·IP address and approximate location (suburb-level only)
• ·Push notification token (for app users who enable notifications)

We use the information we collect to:

• ·Provide and operate the First Flutter platform and its features
• ·Personalise your experience based on your pregnancy or parenting stage
• ·Connect parents with local service providers through the directory
• ·Send enquiry notifications to service providers
• ·Process payments for Featured listing subscriptions
• ·Send service-related communications (account updates, listing approval status, enquiry notifications)
• ·Send optional weekly tips and milestone reminders to parents who have opted in
• ·Improve our platform through anonymised usage analytics
• ·Respond to your support requests and enquiries
• ·Comply with our legal obligations

We do not use your information to:

• ·Sell your personal information to third parties
• ·Send you unsolicited marketing from third parties
• ·Make automated decisions that have legal or significant effects on you
• ·Profile you for advertising purposes

Some information you enter into First Flutter's tools — such as blood pressure readings, postnatal mood check-in responses (EPDS), contraction timing, and baby health data — may constitute sensitive health information under the Privacy Act 1988.

We handle this information with particular care:

• ·Health tool data is stored securely in your personal account and is never shared with third parties
• ·Household members you invite to share your account can access shared baby data (feeding logs, sleep logs, nappy logs, growth records) but cannot access your personal health tools (blood pressure, mood check-in, contraction timer, kick counter, weight tracker)
• ·Postnatal mood check-in (EPDS) responses are private to you only and are never accessible to other household members, providers, or any third party
• ·We never use your health data to make inferences about your health status or share it with insurance companies, advertisers, or healthcare systems
• ·You can delete your health data at any time from within the app

We do not sell your personal information. We share information only in the following circumstances:

With service providers (technology partners)

We use trusted third-party services to operate First Flutter. These providers process data on our behalf and are bound by data processing agreements:

With other First Flutter users

When a parent submits an enquiry through the app:

• ·Their name, suburb, due date or baby age, and message are shared with the service provider they contact
• ·Their phone number and email address are included so the provider can respond
• ·Parents are informed of this before submitting their enquiry

Provider profile information (name, business details, suburb, services, photo, rating) is publicly visible to all First Flutter users.

Legal requirements

We may disclose your information if required by law, court order, or government authority, or if we reasonably believe disclosure is necessary to protect the safety of any person.

Your data is stored on servers hosted by Supabase in Australia and the United States (AWS ap-southeast-2 and us-east-1 regions). All data is encrypted at rest and in transit using industry-standard TLS encryption.

We implement the following security measures:

• ·Row-level security (RLS) ensuring users can only access their own data
• ·Encrypted authentication tokens with automatic expiry
• ·Regular security reviews and dependency updates
• ·Limited staff access to production data on a need-to-know basis
• ·No storage of payment card details (all payments processed by Stripe)

Despite these measures, no method of internet transmission is 100% secure. If you become aware of any security issue, please contact us immediately at security@firstflutter.com.au.

We retain your personal information for as long as your account is active or as needed to provide our services.

If you delete your account:

• ·Your profile and personal data is permanently deleted within 30 days
• ·Health tool data (feeding logs, sleep logs, etc.) is permanently deleted immediately
• ·Enquiries you submitted to providers are anonymised (your name and contact details removed) but the enquiry record may be retained for provider records
• ·Provider profiles are deactivated and removed from public search immediately

We may retain anonymised, aggregated data (e.g. total number of enquiries in a region, most-used tools) indefinitely for platform analytics. This data cannot be used to identify you.

Under the Australian Privacy Principles, you have the right to:

• ·Access your information — Request a copy of the personal information we hold about you. We will respond within 30 days.
• ·Correct your information — Request correction of inaccurate or incomplete information. Most information can be updated directly in the app or portal settings.
• ·Delete your information — Request deletion of your account and associated data. See Section 6 for details.
• ·Opt out of marketing — Unsubscribe from optional communications at any time using the unsubscribe link in any email, or through notification settings in the app.
• ·Data portability — Request an export of your personal data in a machine-readable format. Contact us at hello@firstflutter.com.au to make this request.
• ·Make a complaint — If you believe we have mishandled your personal information, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

To exercise any of these rights, contact us at hello@firstflutter.com.au. We will respond within 30 days.

The First Flutter web portal uses cookies and similar technologies to:

• ·Maintain your authenticated session
• ·Remember your preferences
• ·Collect anonymised usage analytics via privacy-respecting analytics (no advertising trackers)

We do not use third-party advertising cookies or cross-site tracking technologies.

You can control cookie settings through your browser. Disabling cookies may affect your ability to use certain features of the portal.

First Flutter is designed for use by adults (parents, caregivers, and professionals). We do not knowingly collect personal information from children under the age of 18.

Baby and child health data (feeding logs, sleep logs, growth records, etc.) is entered by and belongs to the parent or caregiver account holder. This data relates to the parent's caregiving activity and is treated as the parent's personal information.

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email and by displaying a notice in the app or portal.

Continued use of First Flutter after changes take effect constitutes your acceptance of the updated policy.

For any privacy-related questions, requests, or complaints:

For complaints not resolved to your satisfaction, you may contact the Office of the Australian Information Commissioner (OAIC): oaic.gov.au / 1300 363 992