Consumer Health Data Privacy PolicyLast updated: Oct. 23, 2026
1. Scope and purposeThe Goodnight House LLC (“The Goodnight House,” “we,” “us,” or “our”) recognizes the sensitive nature of information regarding children’s sleep, feeding, and health. This Consumer Health Data Privacy Policy explains how we collect, use, store, and share consumer health data through The Goodnight House Sleep App application (the “Application”) and its related services.
This Policy is intended to provide disclosures regarding consumer health data under applicable laws, including Washington’s My Health My Data Act, Nevada’s consumer health data laws, the Connecticut Data Privacy Act, and other applicable laws governing the collection, use, and disclosure of personal health information.
This Policy supplements our general Privacy Policy and applies specifically to information that qualifies as consumer health data under applicable law.
The Application is intended for use by parents and legal guardians who are 18 years of age or older. Information regarding a child is provided by the child’s parent or legal guardian.
2. Categories of consumer health data collectedDepending on the features that you use, we may collect the following categories of consumer health data:
A. Sleep information. Information regarding your child’s sleep, including but not limited to nap times, bedtimes, night wakings, sleep duration, sleep locations, methods of falling asleep, crying, and related sleep log entries or notes.
B. Feeding and nutrition information. Information regarding your child’s feeding, including but not limited to nursing, bottle feeding, feeding duration, quantities, solid foods, night feedings, and related feeding log entries or questionnaire answers. Certain information may also relate to the parent’s nursing or feeding practices.
C. Birth and development information. Your child’s date of birth, age, gestational age at birth, prematurity, adjusted age, and other developmental information provided through the Application.
D. Sleep questionnaire information. Information provided through the sleep questionnaire, including but not limited to your child’s sleep environment, room sharing, bedsharing, sleep products, pacifier use, childcare arrangements, physical comfort habits, and your family’s sleep goals.
E. Inferences and derived health information. Personalized sleep plans, recommended schedules, plan stages, progress information, calculated sleep data, and other information generated by the Application using the information you provide.
F. Health-related communications. Information regarding your child’s health, sleep, feeding, or development that you voluntarily include in messages to The Goodnight House Sleep Assistant, sleep and feeding log notes, or communications with us.
G. Information associated with consumer health data. Information used to associate health-related records with your account, including but not limited to your name, email address, your child’s first name and gender, internal account or child identifiers, and your device’s time zone.
H. Information from health integrations. The Application does not currently import information from external health applications, wearable devices, or other health data integrations.
We do not currently collect precise GPS location information, genetic data, or biometric information through the Application.
3. Sources of consumer health dataWe may collect consumer health data from the following sources:
(a) Information that you provide directly through the Application, including questionnaire answers, sleep and feeding logs, and other information you choose to enter;
(b) Information generated by the Application using the information you provide, including personalized sleep plans, recommended schedules, calculations, and plan progress;
(c) Messages and other communications that you submit through The Goodnight House Sleep Assistant or to us, including text entered through your device’s speech recognition features; and
(d) Authorized service providers acting on our behalf where necessary to operate and maintain the Application.
We do not currently obtain consumer health data from data brokers, advertising networks, or other independent third-party sources.
4. Purposes for collecting and using consumer health dataWe collect and use consumer health data for the following purposes:
(a) Creating personalized sleep plans and recommended schedules based on information provided through the Application;
(b) Providing sleep and feeding tracking features and maintaining records within your account;
(c) Generating personalized educational responses through The Goodnight House Sleep Assistant using your child’s plan, questionnaire answers, and sleep and feeding records;
(d) Tracking your child’s progress through the stages of the personalized sleep plan;
(e) Providing reminders and other features that you choose to use;
(f) Sending educational or plan-related emails based on your child’s plan stage, with your consent;
(g) Reviewing conversations with The Goodnight House Sleep Assistant for the purpose of evaluating and improving the Application, with your consent;
(h) Administering, maintaining, securing, and troubleshooting the Application;
(i) Preventing fraud, addressing misuse, and protecting the security and integrity of information maintained through the Application;
(j) Complying with legal obligations and responding to valid legal requests; and
(k) Performing other activities disclosed to you, subject to any additional consent or authorization required by applicable law.
We do not use consumer health data to train artificial intelligence or machine learning models, and our AI service providers are not permitted to retain this information or use it to train their models. We do not sell consumer health data or use it for targeted advertising.
5. Categories of consumer health data sharedWe limit the disclosure of consumer health data to the purposes described in this Policy. Depending on the features that you use, the following categories of information may be disclosed or processed by third parties:
A. Information processed by authorized service providers. Consumer health data and associated account information may be processed by providers responsible for hosting, data storage, technical operations, maintenance, security, and support of the Application. This may include the categories of information described in Section 2.
B. Information processed to generate Sleep Assistant responses. When you send a message to The Goodnight House Sleep Assistant, the Application sends relevant information through an AI routing service to an AI model provider for the purpose of generating a response.
This information may include your message, relevant conversation history, your child’s first name, date of birth, age, gender, gestational age, questionnaire answers, personalized sleep plan, plan progress, recent sleep and feeding records, related notes, and device time zone.
Your account name and email address are not intentionally included as separate account information in these requests. However, information that you voluntarily include in messages or notes may be included in the information processed to generate a response.
C. Speech recognition information. If you use your device’s speech recognition or dictation features, your device or its service provider may process speech to convert it into text. Such processing is subject to the applicable provider’s privacy practices. The Application receives the resulting text that you submit.
D. Plan-related email information. With your consent, we may share your first name, email address, and your child’s plan stage with our email service provider for the purpose of sending emails related to your child’s sleep plan.
E. User-authorized disclosures. Information that you specifically authorize us to disclose to another person or entity.
F. Legally required disclosures. Information disclosed when required or permitted by applicable law, subject to applicable restrictions and protections concerning consumer health data.
Information that you enter through the Application is not made available to other users of the Application.
We do not sell consumer health data or disclose it to advertising networks or data brokers for targeted advertising.
6. Categories of third parties and affiliatesDepending on the functionality used and applicable law, the categories of third parties and service providers that may receive or process consumer health data include:
(a) Cloud-hosting and data-storage providers;
(b) Application development, maintenance, technical support, and information-security providers;
(c) AI routing services and artificial intelligence model providers used solely to generate responses from The Goodnight House Sleep Assistant, under settings that prohibit retaining consumer health data or using it for model training;
(d) Device operating system and speech recognition providers when you choose to use dictation or speech recognition features;
(e) Email service providers used to deliver authorized communications;
(f) Product analytics providers, which receive information about how the Application is used, including session recordings configured to mask on-screen text and images, to help us understand and improve the Application;
(g) Other recipients specifically authorized by you; and
(h) Governmental authorities or other recipients where disclosure is required or permitted by applicable law.
Where required by applicable law, we enter into agreements with service providers regarding the processing, confidentiality, and protection of consumer health data.
Specific affiliates. As of the Effective Date, The Goodnight House does not share consumer health data with affiliated entities for their independent purposes. Before implementing such sharing, we will update this Policy and obtain any consent required by applicable law.
Manner of processing. Consumer health data is collected electronically through the Application, stored with our hosting provider in the United States, encrypted in transit, and processed using our systems and authorized service providers. Processing may include automated calculations, generation of personalized sleep plans, and AI-generated responses. Authorized personnel and service providers may access information as reasonably necessary to operate, maintain, support, and secure the Application, subject to applicable legal requirements.
7. Consent to collection, use, and sharingWe collect and use consumer health data for the purposes described in this Policy, including providing the personalized sleep plans, tracking features, and Sleep Assistant responses requested by users.
Where required by applicable law, we will obtain your affirmative, voluntary consent before collecting, using, or sharing consumer health data. Where separate consent is required for sharing consumer health data, we will request such consent separately from consent to collection.
We request separate, optional consent for the following activities:
(a) Using your child’s plan stage to send personalized plan-related emails; and
(b) Reviewing your conversations with The Goodnight House Sleep Assistant for the purpose of evaluating and improving the Application.
Declining consent to these optional activities does not affect your access to the Application’s core features.
Where consent is required, requests for consent will disclose the categories of information involved, the purposes for which the information will be used, the relevant categories of recipients, and the manner in which consent may be withdrawn.
Acceptance of our Terms of Service or acknowledgment of our general Privacy Policy does not constitute consent to additional health data processing where separate affirmative consent is required by law.
We will not collect additional categories of consumer health data, use consumer health data for materially different purposes, or disclose it to additional categories of recipients where additional consent is required without first providing appropriate notice and obtaining the necessary authorization.
You may withdraw previously provided consent by contacting us at privacy@thegoodnighthouse.com. Withdrawal of consent may affect features that depend on the information or processing concerned.
8. Rights regarding consumer health dataSubject to applicable law and appropriate verification, you may have the following rights regarding consumer health data:
A. Right to access. The right to confirm whether we collect, use, share, or sell consumer health data concerning you or your child and to access that information.
B. Right to recipient information. The right to obtain information about third parties and affiliates with whom we have shared consumer health data, including contact information where required by applicable law.
C. Right to withdraw consent. The right to withdraw previously provided consent to the collection or sharing of consumer health data and request that we stop the activities covered by that consent, subject to applicable legal exceptions.
D. Right to deletion. The right to request deletion of consumer health data maintained by us and, where required by applicable law, information maintained by our processors, contractors, affiliates, or other recipients.
E. Right to appeal. The right to appeal our refusal to act on a consumer health data request where such a right is provided by applicable law.
F. Right to review and correction. The right to review available information through the Application and request correction of inaccurate information by contacting us at privacy@thegoodnighthouse.com.
You may exercise applicable privacy rights without purchasing additional products or services or creating a new account solely for the purpose of submitting a privacy request.
9. Exercising your rights and response proceduresYou may submit a request regarding your consumer health data by contacting us at:
The Goodnight House LLC
Email: privacy@thegoodnighthouse.com
Mailing Address: PO Box 813, Bonners Ferry, ID 83805, United States
You may also use applicable account management and deletion features available through the Application.
We may request information reasonably necessary to verify your identity and protect the confidentiality of the information associated with your account.
Where Washington’s My Health My Data Act applies, we will respond to covered access, consent-withdrawal, and deletion requests without undue delay and generally within forty-five (45) days of receipt. This period may be extended by an additional forty-five (45) days where permitted by law and where appropriate notice is provided.
When an account is deleted, we erase its consumer health data from our active systems within thirty (30) days and from backups within ninety (90) days, and in all cases within the period required by applicable law.
Where applicable law requires deletion of consumer health data, we will delete the information from our systems and provide applicable notices to processors and other recipients, subject to legally permitted exceptions. Where Washington law applies, deletion of information maintained in archived or backup systems may be delayed as permitted by law, but not more than six (6) months after authentication of the deletion request.
Where applicable law provides a right to appeal, you may submit an appeal by contacting privacy@thegoodnighthouse.com with the subject line “Consumer Health Data Appeal.”
We will review appeals and provide a written response within the period required by applicable law. Where Washington law applies, we will respond to appeals within forty-five (45) days and provide information regarding how to contact the appropriate Attorney General if an appeal is denied.
We will not unlawfully discriminate against you for exercising your privacy rights. Requests will be processed without a fee except where applicable law permits a reasonable charge.
10. Consumer health data concerning childrenThe Application is intended for use by parents and legal guardians who are 18 years of age or older. Children are not permitted to create accounts or independently use the Application.
Information regarding a child is provided by the child’s parent or legal guardian. A parent or legal guardian may exercise applicable privacy rights on behalf of the child, subject to applicable law and verification of authority.
If we learn that an individual under the age of 18 has created an account, we will take steps to close the account and delete the associated information, subject to applicable legal requirements.
11. Changes to consumer health data practicesWe reserve the right to make changes to this Consumer Health Data Privacy Policy to reflect changes in applicable law, our business operations, or the services provided through the Application.
We will provide notice of material changes as required by applicable law, which may include notice through the Application, email, or our website.
Before collecting additional categories of consumer health data, using such information for materially different purposes, or sharing it with additional recipients where applicable law requires prior consent, we will provide the necessary disclosures and obtain such consent.
We do not currently authorize third parties to collect consumer health data through the Application over time and across unaffiliated websites or online services for the purpose of cross-site tracking or targeted advertising.
The current version of this Policy will remain available through the Application and our website.
12. Contact informationIf you have any questions regarding this Consumer Health Data Privacy Policy, please contact us at:
The Goodnight House LLC
Website: https://thegoodnighthouse.com
Email: privacy@thegoodnighthouse.com
Mailing Address: PO Box 813, Bonners Ferry, ID 83805, United States