Last updated: September 20, 2026
HeyDoula is practice-management software for doulas: client onboarding, contracts, invoicing, and visit records. This policy explains what we collect, why, and the choices you have. It applies to doulas who use HeyDoula and to the clients they serve through it.
Doulas own their client data. We store it, keep it isolated per practice, and never sell it. We use a small number of vendors to run the service (listed below) and share only what each one needs to do its job.
From doulas: your name, email, practice details, and the content you create - client records, contracts, invoices, visit notes, and birth logs.
From clients (through a doula's page): the information a client enters on intake forms, contract signatures, and payments. The doula you work with is responsible for this data; we process it on their behalf.
Automatically: basic technical data like log-ins, device and browser type, and product usage events that help us keep the service reliable and improve it.
To run the service: onboarding clients, delivering contracts and invoices, processing payments, sending notifications, and keeping your data backed up and available. We also use usage data to fix bugs and decide what to build next. We do not use your client records to advertise, and we do not sell personal information to anyone.
HeyDoula runs on a small set of infrastructure vendors, each under its own data protection terms:
Supabase (database and authentication), Netlify (hosting), Stripe (payments - card details go directly to Stripe and never touch our servers), Resend (transactional email), and Twilio (SMS notifications). We may update this list as the service evolves; material changes will be reflected here.
Each practice's data is isolated at the database level using row-level security, so one doula's records are never visible to another. Access is authenticated, connections are encrypted in transit, and stored data is encrypted at rest by our database provider. No system is perfectly secure, but we design for the sensitivity of birth work.
We keep account and practice data while the account is active. If you close your account, we delete or de-identify practice data within a reasonable period, except where we must keep records for legal or accounting reasons (for example, payment records).
You can review and correct your account information in the app. To export or delete your data - or, if you are a client, to ask about data a doula holds about you - email us at zev@heydoula.app and we will help.
HeyDoula is a business tool for doulas and is not directed at children. Information about newborns appears in records only because doulas document their work.
If we change this policy in a way that matters, we will post the new version here with a fresh date and, for significant changes, email account holders.
Questions about privacy: zev@heydoula.app.