Consumer Health Data Privacy Policy
Last updated: October 25, 2026
This policy describes how Pando Pathways LLC, operator of Moonlatch (“we”), handles consumer health data, as required by Washington’s My Health My Data Act. It applies alongside our Privacy Policy. Contact us at hello@moonlatch.app.
Consumer health data we collect and why
| Category | How we use it |
|---|---|
| Feeding records: nursing, pumping and bottle feeds, including times, durations, side, amounts, milk type and notes, whether a feed was a comfort feed, and how feeds are grouped into a triple-feeding round | To record and show your feeds, calculate totals and averages, sync them across your devices, show that you are feeding now in Feeding Together if you use it, and to calculate Guided Feeds summaries on your phone |
| Infant growth: weight measurements, optional length, dates and notes | To record and chart your baby’s growth, including WHO growth percentiles calculated on your phone |
| Your child’s name or nickname, your baby’s birth date, and, if you choose to add them, birth time, birth weight and sex (girl or boy). The birth date indicates that you are postpartum. | To organize records by child, calculate your postpartum stage (for example, “3 weeks postpartum”), work out your baby’s exact age and weight change since birth, and choose the right WHO growth chart |
| Postpartum stage and current activity (nursing, pumping or bottle feeding) | Your current activity is counted, without identifying you, in the number of parents feeding now. Both are shown to other signed-in parents in Feeding Together only if you turn on Show me in Feeding Together |
| Your own breast and nipple symptoms: cracked or bleeding nipple, milk bleb, shooting pain, strong letdown, latch pain, clogged duct, soreness or damage, engorgement, vasospasm, the side affected, a pain score, and your notes | To record how feeding is going for you, show these entries back to you in your daily log and comfort summary, include them in a report you choose to share, and point you to relevant topics in the app. They are never shown to other users |
| Medications you take: name, dose, and the dosing interval you set | To keep your own record of doses and show you when your next dose is due. We do not recommend, verify or check medications, doses or interactions, and these entries are never shown to other users |
| Your baby’s symptoms during feeds: coughing or choking, noisy breathing, gas, spit up, arched back, fussiness, gulping, sleepiness, refusing; the bottle or nipple type used; and diaper output (wet, dirty or both) | To record how feeds are going, show these entries in your daily log, include them in a report you choose to share, and point you to relevant topics in the app. They are never shown to other users |
| Guided Feeds purchases: which plan you bought (Birth Weight Recovery or Triple Feeding), when, and the store’s transaction details | To unlock the plans you bought on every device signed into your account, and to restore them. Payment details are handled by Apple; we never see them |
| Your consent record: when you agreed to this policy, its version, and when you withdrew consent | To show that we collect health data with your consent, and to honor withdrawal |
We collect consumer health data only with your consent, which you give when you create an account. The account creation screen tells you this, with a link to this policy. You can withdraw your consent at any time in Settings → Health data storage. Without an account, Moonlatch keeps your child’s name, your feed logs, symptom, medication and diaper entries, weights and your units on your phone only, so there is no consumer health data for us to collect and we do not ask for consent. Topics you choose during onboarding stay on your device and are not collected by us. Which Guided Feeds plan is turned on for each child, your plan settings, and your answer about seeing a lactation consultant also stay on your phone.
Sources
All consumer health data comes directly from you, entered in the app. We do not obtain consumer health data from other sources, and we do not infer it from device location or other data.
Consumer health data we share, and with whom
We do not sell consumer health data.
- Service providers (processors) process consumer health data only on our behalf: Supabase (account database, sync and Feeding Together, hosted in the United States), RevenueCat (records your Guided Feeds purchases so they unlock on your account), Apple (processes App Store payments), and Google Workspace (if you include health information in an email to us).
- Other Moonlatch users. Moonlatch shows signed-in parents how many parents are feeding right now. That number includes every signed-in account that has started a nursing, pumping or bottle feed in about the last 30 minutes, or has a timer running, whether or not you turn on Feeding Together, and never identifies anyone. Anything that identifies you is shared only with your separate consent: if you turn on Show me in Feeding Together (which needs a username), other signed-in parents can see your username, that you are nursing, pumping or bottle feeding right now, your postpartum stage, and your location if you choose to show it. This consent is separate from the consent to collect your health data, and choosing a username does not give it. Turning it off hides you right away and doesn’t affect your logs.
- We may disclose consumer health data where required by law.
We have no affiliates with whom we share consumer health data.
Your rights
You have the right to:
- Confirm whether we collect, share or sell your consumer health data, and access that data, including a list of all third parties and affiliates with whom we have shared it or to whom we have sold it, with an email address or other way to contact them.
- Withdraw your consent to our collection and sharing of your consumer health data. Turn sharing off in Settings or on the Feeding Together screen (your live presence is removed right away); withdraw collection consent in Settings → Health data storage.
- Have your consumer health data deleted.
- Not be discriminated against for exercising these rights.
How to exercise them. Withdraw consent in the app at Settings → Health data storage. This deletes your consumer health data from our servers. Your own copy stays on your phone and you can keep logging there, but nothing will back up or sync to another device. You can delete your account in Settings, or, as a guest, choose Delete my data. For any request, email hello@moonlatch.app. We will verify your request and respond within 45 days. If we need more time, we may extend this once by 45 days and will tell you why. When we delete your consumer health data, we delete it from our systems and ask our processors to delete it. Copies held in our daily database backups are replaced within seven days.
Appeals. If we decline your request, you can appeal by emailing hello@moonlatch.app with the subject “Appeal”. We will respond in writing within 45 days, explaining our decision. If your appeal is denied, you can contact the Washington State Attorney General at atg.wa.gov/file-complaint.