Draft — for owner and legal review before launch
Privacy notice
This is a working draft for owner and legal review. It is not a statement of legal or regulatory compliance.
About Latched
Latched is a free, private peer-support community for breastfeeding moms aged 18 and older. Before launch, the owner must identify the legal operator, a contact address, applicable privacy rights and an effective date.
Information we collect
We store an account email for signup confirmation, sign-in and account recovery. Email is not displayed in member profiles. We store a display name, optional profile photo and bio, interests, onboarding acknowledgments and marketing preferences. When you participate, we store posts, photos, comments, replies, reactions and saved-post records. Feeding experiences may contain sensitive health or family information; share only what you are comfortable sharing. We do not request children's names or birth dates.
How information is used and seen
Information supports membership, conversations, account recovery and community moderation. Approved posts and conversations are available to onboarded members; pending posts are available to their author and staff. Member profiles are visible to onboarded members. Saved-post records and consent settings are accessible only to their owner through the app. Administrators and service operators may need privileged access for administration. Anonymous posting is not available yet.
Photos and privacy
Profile and post photos use private storage and temporary signed links. A signed link can be used by anyone who possesses it until it expires. Images are re-encoded in the browser to remove embedded metadata; avoid identifying details in the image itself. Members can still copy content or take screenshots. Private membership cannot guarantee confidentiality.
Optional AI writing assistance
Only after your explicit agreement, the experience text you enter is sent to the AI writing service through Lovable AI Gateway to generate a draft. Photos are not sent by this feature. Review and edit the output; nothing is posted automatically. Leave out names and contact details. Before launch, the owner must verify and describe AI provider retention, training practices, processing locations and any international transfers. No unverified promise of zero retention is made here.
Account storage and service providers
The app uses account session storage in your browser to keep you signed in and service providers to host accounts, data, photos and AI processing. Before launch, the owner must confirm provider details, applicable cookie/storage disclosures, processing locations and data-sharing obligations.
Email preferences
A marketing opt-in preference is stored and defaults to off. This draft does not claim marketing campaigns are currently sent. Before launch, the owner must provide a contact channel and withdrawal process, and confirm which account and marketing messages are sent.
Retention, deletion and rights
You can edit or delete your own posts and comments. Account deletion and consent-setting controls are not available in the app yet. Removing a post does not establish immediate removal of uploaded files, service logs or backups. Before launch, the owner must define retention periods, a deletion process, a privacy-request contact, applicable rights and response procedures. Do not launch with these details unresolved.
Security and changes
Access controls and private storage reduce risk, but no system is perfectly secure. Before launch, the owner must confirm incident-response arrangements and how material changes to this notice will be communicated.