NAPTURED PRIVACY POLICY

Effective Date: March 24, 2026

Company: Naptured, Inc. (“Naptured,” “we,” “our,” “us”)

Applies to: The Naptured website, mobile web app, and all related services (collectively, the “Platform”).

This Privacy Policy explains how Naptured collects, uses, shares, and protects personal information. By accessing or using the Platform, you agree to the practices described in this Privacy Policy.

If you do not agree, you may not use the Platform.

1. ELIGIBILITY AND SCOPE

1.1 Age Requirement.

The Platform is intended solely for individuals 18 years of age or older. Naptured does not knowingly allow minors to create accounts or use the Platform.

1.2 Child Information.

Parents may provide limited child information solely for caregiving purposes. By submitting child information, you represent that you are the child’s parent or legal guardian and have the legal authority to provide such information. If you believe a minor has created an account, contact privacy@naptured.com.

2. INFORMATION WE COLLECT

We collect information in three categories:

(a) information you provide;

(b) information collected automatically; and

(c) information received from third parties.

A. Information You Provide

2.1 Account Information.

When you create or update an account, you provide:

• Full name

• Profile photo

• Email address

• Password (encrypted)

• Phone number (optional)

• Address (home address; city-level location)

• User role (Parent, Angel, Daycare)

2.2 Child Information (Parents Only).

Provided voluntarily to support safe care:

• Child name or nickname

• Age or birthdate

• Allergies, medical notes, routines

• Sensory or developmental needs

• Household conditions (pets, hazards, weapons, environmental concerns)

• Child information is treated as sensitive and used solely for caregiving. Child information is never used for advertising, profiling, behavioral targeting, or algorithmic personalization

2.3 Caregiver Information.

Provided by Angels and Daycares, including:

• Skills, experience, certifications (if any)

• Care preferences and age range preferences

• Bio and profile text

• Availability

• Approximate location

2.4 Messages.

We store:

• Direct messages between users

• Timestamps

• Attachments (if applicable)

• Messages are retained for up to 2 years unless retention is required for safety or legal obligations.

2.5 Haven (AI Companion) Conversations.

We store:

• Chat transcripts

• Hope Card text

• Token usage

• Metadata (timestamps, device type)

• Haven conversations are retained for approximately 18 months, unless deleted earlier by you.

• Haven conversation data is not used to train generalized artificial-intelligence models except where anonymized and where users have affirmatively opted in.

2.6 Payment Information (via Stripe).

We receive:

• Last four digits of your card

• Payment method ID

• Stripe customer ID

• Transaction and payout details

• We do not store full credit card numbers.

2.7 Location Information.

Provided manually:

• Parent home address

• Daycare address

• Angel general location (city/zip)

• Naptured does not collect GPS location.

2.8 Ratings and Kudos.

We store star ratings, kudos badge selections, and aggregate trust indicators. No text reviews exist on the Platform.

2.9 Referral Information.

We track:

• Referral link and QR code interactions

• Who joins through your link

• Tier 1 and Tier 2 attribution

• Associated subscription and booking activity

B. Information Collected Automatically

We automatically collect:

• Device type and operating system

• Browser type

• IP address

• Interaction logs and click paths

• Feature usage

• System performance metrics

• Error diagnostic data

This data is collected through cookies, web beacons, analytics tools (e.g., PostHog or similar), and notification tools (e.g., OneSignal).

C. Information from Third Parties

2.10 Stripe (Payments and Identity Verification).

We receive:

• Payment confirmations

• Payout status

• Stripe Tax calculations

• Verification-complete status

We do not receive ID images or underlying sensitive documents.

2.11 Checkr (Background Checks).

We receive only:

• Completion status

• “Clear” or “Consider” outcome

• Background Check tier

• Checkr handles all disclosures and consents.

2.12 Authentication Providers.

If you sign in with Google or Apple, we may receive your email address, authentication tokens, and public profile information.

3. HOW WE USE YOUR INFORMATION

We use your information to operate, improve, and secure the Platform.

A. Core Platform Functions

• Creating and managing accounts

• Matching parents with Angels or Daycares

• Showing availability, ratings, and trust indicators

• Processing and confirming bookings

• Routing payments and payouts

• Sending system notifications

B. Haven (AI Companion)

• Generating supportive content

• Producing Hope Cards

• Enforcing usage limits

• Improving quality and safety

• Haven is not medical, legal, psychological, or emergency advice.

• Haven may generate inaccurate, incomplete, or fabricated information and should not be relied upon as factual or authoritative

C. Referral Tracking and Rewards

• Attribute referrals

• Pay referral rewards

• Detect fraud, gaming, or misuse

D. Trust and Safety Enforcement

• Detect duplicate accounts

• Prevent rating or referral manipulation

• Investigate reported safety concerns

• Enforce the Terms of Service

E. Analytics and Improvement

• Analyze feature usage

• Enhance performance

• Personalize user experience

• Reduce errors

F. Legal and Compliance

• Respond to lawful requests

• Comply with tax and regulatory requirements

• Protect user safety

• Enforce platform policies

4. HOW WE SHARE YOUR INFORMATION

Naptured never sells personal information. Naptured does not sell or share personal information for cross-context behavioral advertising as defined under the California Privacy Rights Act. We share only as described below.

A. With Other Users

Shared to facilitate caregiving:

Parents may see:

• Angel name, photo, skills, ratings, badges

• Approximate location

Angels may see:

• Parent name

• Child information necessary for care

• Approximate location

We do not share:

• Full addresses or contact information until a booking is accepted

• Sensitive child details beyond what the parent provides

B. With Trusted Service Providers

We share limited information with vendors supporting the Platform, including:

• Stripe (payments, payouts, ID verification)

• Checkr (background checks, full hosted flow)

• OpenAI (Haven message processing)

• OneSignal (notifications)

• PostHog or similar (analytics)

• apitemplate.io or similar (Hope Card generation)

Providers may not use personal data for their own marketing.

C. For Safety, Legal, or Compliance Obligations

We may share information when required with:

• Law enforcement

• Government bodies

• Courts

• Legal counsel

• Only where legally required or necessary to protect safety.

D. Business Transfers

Information may be transferred in connection with a merger, acquisition, restructuring, or asset sale, with notice provided as required.

5. YOUR CHOICES AND RIGHTS

Certain information, including child data and Haven conversation data, may constitute sensitive personal information under applicable privacy laws and is subject to heightened use limitations.

Depending on your jurisdiction, you may have the right to:

Access

Request a copy of your stored personal information.

Correct

Update inaccurate or incomplete information.

Delete

Request deletion of your account or certain data, subject to legal retention requirements.

Cookies

Modify cookie preferences through browser settings.

Marketing

Opt out of marketing communications.

AI Data Rights

You may:

• Delete individual Haven threads

• Request deletion of all Haven conversation data

• Opt out of anonymized data used for optional model improvement

California-Specific Rights

If you are located in the State of California, under the CPRA, you have the additional rights to:

• Limit the use of sensitive personal information

• Opt out, where applicable.

To exercise rights, contact privacy@naptured.com.

6. DATA RETENTION

Naptured retains data only as long as required for legitimate purposes:

• Messages: Up to 2 years

• Haven conversations: ~18 months

• Booking history: 7 years

• Child data: Until parent account deletion

• Referral records: As long as payouts apply

• Payment records: As required by law

• Background checks: Stored only by Checkr

Naptured does not store government-issued IDs or background check documentation.

7. SECURITY MEASURES

We use industry-standard safeguards, including:

• Encryption in transit

• Secure hosting environments

• Access controls

• Rate limiting

• Audit logging

• PCI-compliant payment processing via Stripe

No system is perfectly secure, and users share data at their own risk.

8. CHILDREN’S PRIVACY

The Platform is not intended for users under 18.

The Platform is not directed to children under 13, and Naptured does not knowingly collect personal information directly from children within the meaning of the Children’s Online Privacy Protection Act.

Child information submitted by a parent is used solely for caregiving and not for advertising or profiling.

Concerns should be reported to privacy@naptured.com.

9. INTERNATIONAL USERS

If you are located in the EU, UK, Canada, Australia, or New Zealand, you may have additional rights under applicable privacy laws.

Data may be transferred to the United States for processing.

Our legal bases include:

• Contract performance

• Legitimate interests

• Compliance obligations

10. UPDATES TO THIS PRIVACY POLICY

Naptured may update this Privacy Policy from time to time.

• Material changes: at least 30 days’ notice

• Minor changes: effective immediately

Continued use of the Platform constitutes acceptance of any updates.

11. CONTACT US

Naptured, Inc.

Attn: Privacy Officer

Email: privacy@naptured.com