Privacy Policy

The Belly Button · Chemmo Holdings, LLC · Last updated: May 11, 2026

This Privacy Policy describes how Chemmo Holdings, LLC ("we," "us," or "Chemmo Holdings") collects, uses, and shares information when you use The Belly Button mobile application (the "App"). The App is a labor-notification tool that lets an expectant mother notify a circle of contacts when labor begins.

If you do not agree with this Policy, please do not use the App.

1. Who this policy covers

The App has three user types and this policy applies to all of them:

• Mothers who create an account, set up notification groups, and trigger labor alerts.
• Care providers (OBGYNs, doulas, midwives) who link to mothers via an invite code and receive priority notifications.
• Recipients (family and friends) who are added by a mother to receive notifications via push, SMS, or email.

This policy also addresses how we handle the contact information of recipients, whose phone numbers, email addresses, and names are added to the App by mothers in order to send them notifications.

2. Information we collect

2.1 Information you provide directly

• Account information: name, email address, password (passwords are stored only in hashed form by Firebase Authentication and are never visible to us).
• Profile information: mother's first name, baby's first name (optional), due date (optional), preferred skin tone for the in-app belly illustration, an optional photo you upload as your belly button.
• Notification group setup: the names, phone numbers, and email addresses of the people you choose to add as recipients; the group they belong to; the order and delay you've configured.
• Notification content: the actual text of any custom notification messages you write to be sent to your contacts.
• Labor event data: the date and time you trigger labor, the status updates you send during labor, the milestones you mark, and the time you mark labor complete.

2.2 Information we collect automatically

• Account identifiers: a Firebase Authentication user ID that uniquely identifies your account on our backend.
• Push notification tokens: the unique device token Apple provides so we can deliver push notifications to you. We do not use this for any other purpose.
• Purchase records: a record that you have purchased the $4.99 lifetime mother unlock, processed through Apple and recorded via RevenueCat. We do not see your payment card or Apple ID password.

2.3 Information from your device, with permission

• Contacts: if and when you ask the App to import contacts (so you can add them to a notification group), the App reads names, phone numbers, and email addresses from your device's contact list. The App requests this access through iOS's permission prompt; you can revoke it at any time in iOS Settings.

2.4 Sensitive information

Because The Belly Button is a labor-notification app, it necessarily collects information that may indicate pregnancy and childbirth, including due date, labor status, and milestone notifications. We treat this as sensitive information and use it only to operate the notification features of the App.

3. How we use information

We use the information described above for the following purposes only:

• To create and maintain your account and authenticate you when you sign in.
• To deliver the notifications you have configured to the recipients you have chosen, via the channels you have selected (push notification, SMS, or email).
• To process your one-time in-app purchase and unlock the mother-tier features.
• To respond to support inquiries you send us.
• To maintain the security, stability, and integrity of the App and our backend.
• To comply with applicable laws and respond to lawful requests from public authorities.

We do not sell your information. We do not share your information with advertisers. We do not use your information for cross-app or cross-website behavioral tracking.

We do not embed any third-party analytics or crash-reporting SDK in The Belly Button. There is no Mixpanel, no Firebase Analytics, no Google Analytics, no Amplitude, no Segment, no Sentry, and no Crashlytics. Server-side error logs from our Cloud Functions are retained only as long as needed to diagnose technical issues and never linked to advertising or marketing systems.

4. Third-party service providers

The App relies on the following service providers, each of which receives the minimum information required to perform its function. Their handling of that information is governed by their own privacy policies, linked below.

5. Recipients of your notifications

When you (a mother) add someone as a recipient, you are confirming that you have a legitimate basis to share their contact information with us for the purpose of contacting them on your behalf when labor begins. We store their name, phone number, and/or email only for as long as they remain in your notification groups. When you remove them, we delete their information.

Recipients who receive notifications from us via Twilio (SMS) may reply STOP to opt out of future SMS messages from The Belly Button at any time, in accordance with U.S. carrier rules. Recipients who receive email notifications from us via SendGrid will see an unsubscribe link in each transactional message; opting out applies to all future Belly Button emails to that address.

For full details on how text-message consent works — including the in-app opt-in workflow, sample messages, and the STOP, START, and HELP keywords — see our SMS / Text Message Notifications page.

6. Data retention

We keep your account information and associated data for as long as your account is active. When you delete your account (see Section 9), we delete your account record and associated profile, notification groups, labor events, and stored photos from our systems within thirty (30) days, except where we are required to retain certain records for legal or accounting compliance.

SMS and email delivery logs maintained by Twilio and SendGrid are retained by those providers according to their own policies (typically 30 to 90 days).

7. Security

Information transmitted between the App and our backend is encrypted in transit using HTTPS/TLS. Information at rest in Firebase is encrypted by Google's infrastructure. We follow industry-standard practices to protect against unauthorized access, but no system is perfectly secure; we cannot guarantee the security of information stored on or transmitted between our systems.

8. Children

The App is not directed to children under 13 and we do not knowingly collect information from children under 13. If you believe a child has provided us with information, please contact us at the address below and we will delete it.

9. Your rights, including account deletion

You have the right to access, correct, export, or delete your personal information.

In-app deletion (fastest path): Open the App, go to Settings → Danger Zone → Delete Account, and confirm twice. This invokes our requestAccountDeletion Cloud Function, which removes your user profile, contacts, notification groups, in-app notifications, labor-event history (including per-event receipts), provider links, partner invites, and — if you registered as a care provider — your provider profile and patient list. Your Firebase Authentication record is deleted at the end. Deletion is irreversible.

Without the App: Follow the instructions at chemmoholdings.com/bellybutton/delete-account. For all other requests, contact us using the information in Section 12.

What survives deletion: Apple retains your purchase receipt regardless of whether you delete your Belly Button account — that's how Restore Purchase works on a new account. Twilio retains message-delivery logs for its own carrier-compliance obligations. We have no control over those records.

Depending on where you live, you may have additional rights under laws such as the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), or similar laws. These rights typically include:

• The right to know what personal information we hold about you.
• The right to request correction or deletion.
• The right to object to or restrict certain processing.
• The right to data portability.
• The right to lodge a complaint with your local data protection authority.

We will respond to verifiable requests within thirty (30) days, or such longer period as the relevant law permits if your request is complex.

10. International transfers

Chemmo Holdings, LLC is based in Florida, USA. Our service providers (Google, Twilio, SendGrid, RevenueCat, Apple) operate globally. By using the App, you understand that your information may be processed in the United States and other countries, which may have data-protection rules that differ from your own.

11. Changes to this policy

We may update this Policy from time to time. If we make material changes, we will update the "Last updated" date at the top of this page and, where required by law, notify you through the App or by email. Continued use of the App after the effective date of an updated policy constitutes acceptance of the updated terms.

12. Contact us

For privacy questions, requests under applicable privacy laws, or any other concern related to this Policy:

Chemmo Holdings, LLC
Attn: Privacy
Email: admin@chemmoholdings.com