Privacy Policy

1. Overview

Bundli (“we”, “us”, “our”) is operated by BundlWorks Inc., Edmonton, Alberta, Canada. We operate the Bundli mobile application and the provider portal at providers.bundli.ca (collectively, the “Services”).

We are committed to protecting your personal information in accordance with PIPEDA (Personal Information Protection and Electronic Documents Act) and applicable Canadian privacy law. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

2. Information we collect

2.1 Information from families (mobile app)

When you use the Bundli mobile app as a family, we collect:

• Account information (email address, display name, profile photo)
• Pregnancy and birth-related information (due date, pregnancy stage, birth setting preferences) used for matching with providers
• Quiz responses (preferences for provider type, language, location, and other matching criteria)
• Location data (city, approximate coordinates) used to show nearby birth workers
• Favourited providers and care team (“village”) selections
• Device tokens for push notifications

Pregnancy status, due dates, and related quiz responses are sensitive health information. We collect this data only to power matching and treat it with additional care — it is never sold, used for advertising, or shared with providers beyond what is needed to facilitate a match.

2.2 Information from providers (provider portal)

When you register as a provider, we collect:

• Profile information (name, contact details, credentials, bio, profile photo)
• Professional information (specialties, birth settings, education, years of experience)
• Payment information (processed by Stripe — we do not store card details)
• Account credentials

2.3 Information collected automatically

• Usage analytics (page views, feature interactions) via PostHog, hosted in the United States
• Device information related to push notification delivery

3. How we use your information

We use the information we collect to:

• Match families with birth and perinatal support providers based on preferences, location, and availability
• Process quiz responses using AI-assisted matching (see Section 5 for details)
• Send transactional notifications (booking updates, account changes)
• Process provider subscription payments
• Improve and maintain our Services
• Respond to support inquiries
• Comply with legal obligations

We do not sell your personal information. We do not use your information for advertising purposes.

4. Third-party services

We work with trusted third-party service providers to operate Bundli:

• Stripe — Payment processing and subscription management (provider subscriptions only)
• PostHog — Product analytics, hosted in the United States

We also use additional service providers for infrastructure (hosting, databases, email delivery, push notifications) and AI-powered matching. These providers process data on our behalf under contractual obligations and do not use your data for their own purposes.

We do not sell your personal information. We do not share your data with third parties for advertising or marketing purposes.

5. AI-assisted matching

Bundli uses AI — including Google Cloud Vertex AI — to generate match suggestions between families and providers. Quiz responses (including pregnancy and health-related information) and provider profile information are processed to produce match scores and recommendations. This processing occurs under contractual data protection terms with our AI provider, which does not use your data to train its own models. AI outputs are informational only and do not constitute medical advice or professional endorsements.

6. Location data

The Bundli mobile app requests location permission to show birth workers near you. Your approximate location (city-level) is stored to enable this feature. Your precise location is never shared with providers. You can deny or revoke location permission at any time through your device settings.

7. Push notifications

We use push notifications to deliver booking updates and other transactional messages. We store a device token associated with your account to enable this feature. You can disable push notifications at any time through your device settings. We do not send marketing or promotional push notifications without your separate, explicit consent.

8. Data retention

We retain your personal information for as long as your account is active or as needed to provide the Services. If you cancel your provider subscription, your profile is hidden from families and account data is retained for 30 days to allow reactivation. After 30 days, data is deleted upon written request. When you delete your account, we delete your personal data within 30 days, except where retention is required by law (e.g., financial transaction records).

9. Your rights

Under PIPEDA and applicable Canadian privacy law, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your account and associated personal data
• Withdraw consent for data processing at any time

You can update your profile information directly in the app or provider portal. You can delete your account and data yourself at any time — see Delete Your Account for instructions. To request data access or correction, or for help with deletion, contact us at the address below. We will respond within 30 days.

10. Data security

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS/HTTPS), secure authentication, and encrypted payment processing. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. International data transfers

Some of our third-party service providers may process data outside of Canada (e.g., in the United States or European Union). Where this occurs, we ensure that appropriate safeguards are in place in accordance with PIPEDA.

12. Children's privacy

Bundli is intended for adults aged 18 and older. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

13. Cookies and tracking technologies

Our website uses essential cookies required for authentication and site functionality. We use PostHog for product analytics, which may use cookies or similar technologies. We do not use cookies for advertising or cross-site tracking. For more information, see our Cookie Policy.

14. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the “Last updated” date at the top of this page and, where appropriate, through in-app or email notification. Your continued use of the Services after changes are posted constitutes acceptance of the updated policy.

15. Contact

For privacy inquiries, data access requests, or complaints, contact:

Preethi Kumar
Founder, Bundli
info@bundli.ca
Edmonton, Alberta, Canada

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.