1. Introduction & Scope
Baby Size Me Inc. d/b/a Baby Sesame ("Baby Sesame," "we," "our," or "us") is committed to protecting the privacy of everyone who uses the Baby Sesame mobile application and any associated website, web-based profile views, and related services (collectively, the "Platform"). This Privacy Policy explains how we collect, use, disclose, share, and protect information about you and the children whose profiles you create on the Platform.
By downloading, registering for, or using the Baby Sesame Platform, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the Platform.
This Privacy Policy incorporates by reference Baby Sesame's Terms of Use. Capitalized terms not defined here have the meanings given in the Terms of Use.
Important Notice — Affiliate & Commercial Partnerships: Baby Sesame earns affiliate commissions and engages in data-sharing arrangements with retail partners as described in Section 5 of this Policy. By using the Platform, you acknowledge and consent to this practice as a condition of your use of the Platform's free services.
2. Who We Are
Baby Size Me Inc. d/b/a Baby Sesame is the data controller for personal information collected through the Platform. We are incorporated in the State of New York and our principal place of business is in the United States.
Contact for privacy matters: legal@babysesame.com
3. Information We Collect
3.1 Information You Provide
Account Registration: Name, email address, phone number, password, and optional profile photo.
Child Profile Information: Child's name, nickname, date of birth, age, gender, photo(s), clothing sizes (tops, bottoms, shoes, diaper), other size notes, interests, favorite colors, favorite characters, favorite books, favorite foods, favorite activities, and wishlist items including product names, categories, URLs, and links to external retailer pages.
Wishlist & Gift Data: Product links, retailer names, item descriptions, and categories you add to a child's wishlist or profile. This data is used to facilitate the gifting features of the Platform and may be associated with affiliate partner programs as described in Section 5.
Events: Event type (e.g., birthday, graduation, party), date, and any notes you enter in connection with calendar or event features.
College Fund Information: If you choose to link or display a 529 college fund or similar savings account reference, we collect only the information you voluntarily provide for display purposes.
Communications: Messages, feedback, or other communications you send us.
Sharing & Follow Data: Information about which other users you follow or are followed by, and any connections or follow requests you send or receive.
3.2 Automatically Collected Information
When you access or use the Platform, we automatically collect certain data, including:
- Device identifiers (device type, operating system, version, unique device ID)
- IP address and approximate geolocation (city/region level)
- App usage data (pages viewed, features used, time and duration of sessions, actions taken)
- Log data (crash reports, error logs, performance data)
- Advertising identifiers (Apple IDFA, Google GAID), subject to your device privacy settings and consent
- Referring URLs or app sources
- Cookies, pixels, and similar tracking technologies (see Section 11)
3.3 Information from Third Parties
We may receive information about you from third parties, including:
- Social login providers (Apple Sign-In, Google Sign-In) if you choose to log in through those services
- Analytics and advertising partners who provide aggregate or pseudonymous data to help us understand Platform usage
- Retail and affiliate partners who confirm conversion events (i.e., completed purchases) associated with links in your child's profile
3.4 Sensitive Information
We do not intentionally collect sensitive personal information such as health or medical data, biometric identifiers, financial account numbers, Social Security numbers, or government-issued ID numbers. To the extent any information you voluntarily provide could be categorized as sensitive under applicable law, we will process it only to the extent necessary for the services you have requested and with your consent where required.
We do not collect information that would be deemed sensitive under Section 1798.140(ae) of the California Civil Code (CPRA) except as described above, and we do not use or disclose such information for purposes other than those permitted by law or for which you have given explicit consent.
4. How We Use Your Information
We use the information we collect for the following purposes:
- To create, maintain, and operate your account and child profiles
- To provide the Platform's core gifting, wishlist, and profile-sharing features
- To generate and deliver shareable, web-based child profile views to family and friends (without requiring app download)
- To send you notifications about events, birthdays, follow requests, and Platform updates
- To facilitate follow and connection requests between users
- To operate affiliate and retail partner programs and earn commissions (see Section 5)
- To recommend tailored gifting options and retail products based on child profile data, in connection with retail partner agreements
- To conduct analytics, improve Platform features, and perform business development
- To send promotional communications where you have opted in
- To prevent fraud, abuse, and enforce our Terms of Use
- To comply with legal obligations and respond to legal process
- To facilitate a business transfer or merger (see Section 14)
5. Affiliate Commissions & Retail Partnerships (Important Disclosure)
FTC Disclosure Notice: Baby Sesame participates in affiliate marketing programs and maintains commercial partnerships with retail brands. This means that Baby Sesame may earn a commission or referral fee when a family member, friend, or other user of the Platform purchases a gift that is listed on a child's profile, added to a wishlist, or otherwise linked to a product or retailer through the Platform. This commission is paid by the retailer or affiliate network—not by the purchaser—and does not affect the price of any item purchased.
By using the Baby Sesame Platform, you agree to the following:
- Baby Sesame may associate products and retailer links you add to a child's profile or wishlist with affiliate tracking links, cookie-based tracking, or other commercially standard affiliate attribution methods.
- Baby Sesame may earn a commission each time a family member or friend purchases a gift through a link associated with your child's profile, whether or not you are aware of the specific transaction.
- Baby Sesame may use the information you enter—including product preferences, wishlist items, retailer associations, sizing data, and interest categories—to establish, maintain, and expand partnerships with retail brands, gift registries, and affiliated e-commerce platforms.
- Baby Sesame may share aggregated or pseudonymized profile and wishlist data with retail partners to receive curated product recommendations, promotional offers, or tailored gifting options to display within the Platform. Any such data-sharing will be conducted under data processing agreements that restrict partners from using the data for purposes other than those described in this Policy.
- Affiliate commission arrangements are a material part of Baby Sesame's business model that enables the Platform to remain free of charge to users. Use of the Platform constitutes your informed consent to this arrangement.
- You may not opt out of affiliate tracking and continue to use the core gifting and profile-sharing features of the Platform, as this tracking is integral to how the Platform's free service is funded. However, you may delete your account and child profiles at any time.
Baby Sesame is not responsible for and does not guarantee the accuracy, availability, pricing, quality, or suitability of any products recommended through affiliate or retail partner programs. All purchasing decisions are made solely by the purchaser at their own risk and discretion.
6. How We Share Your Information
We do not sell your personal information in the traditional sense. However, as described in Section 5, certain data sharing with retail and affiliate partners may constitute a "sale" or "sharing" under some state privacy laws. We disclose information to the following categories of recipients:
- Service providers (hosting, cloud storage, analytics, email delivery, customer support platforms, crash reporting) who process data on our behalf under written agreements
- Affiliate networks and retail partners as described in Section 5
- Other users of the Platform when you share or make a child profile accessible (e.g., when you share a profile link, the recipient can view the information you chose to include)
- Legal and regulatory authorities when required by applicable law, subpoena, court order, or other legal process
- Successor entities in a merger, acquisition, or sale of all or substantially all of our assets (see Section 14)
- Advisors, attorneys, and auditors under confidentiality obligations
We require all third-party service providers and partners to maintain appropriate security standards and to use your information only for the purposes for which it was disclosed.
7. Third-Party Links, External Sites & Purchases
Important Disclaimer — External Links & Purchases: The Baby Sesame Platform enables users to add links to products available for purchase on third-party retail websites (including but not limited to Amazon, Target, Walmart, Pottery Barn Kids, Buy Buy Baby, Cadence Lane, and any other retailer). These external websites are not owned, operated, or controlled by Baby Sesame.
Baby Sesame expressly disclaims any and all responsibility or liability for:
- The content, products, services, pricing, availability, or accuracy of information on any external or third-party website
- Any purchase made through an external link, including issues with product quality, safety, fit, appropriateness for a child's age, delivery, refunds, or returns
- The privacy practices or data collection policies of any third-party website or retailer
- Any loss, damage, or harm arising from your use of or reliance on any third-party website or service
- Any transaction disputes between purchasers and retailers
Inclusion of a product link on a child's profile or wishlist does not constitute an endorsement, recommendation, or guarantee of any product by Baby Sesame. All purchases are made entirely at the risk of the purchaser. Parents and guardians are solely responsible for the accuracy, safety, and appropriateness of the products they add to their child's profile and wishlist. Users are strongly encouraged to exercise caution, conduct independent research, and review the privacy policies of any third-party websites they visit.
8. Children's Privacy
Baby Sesame is designed for use by parents and legal guardians ("Parents") who are 18 years of age or older. The Platform is not directed to children, and we do not knowingly solicit or collect personal information directly from children under the age of 13 (or the applicable age threshold in your jurisdiction).
Parents create and manage profiles for their children on the Platform. Information entered about a child is provided voluntarily by the Parent. Baby Sesame collects and uses this information as described in this Policy under the direction of the Parent, who is responsible for the accuracy and appropriateness of information they enter.
We comply with the Children's Online Privacy Protection Act (COPPA), 15 U.S.C. §§ 6501–6506, and applicable FTC regulations. If we learn that we have inadvertently collected personal information directly from a child under 13 without verifiable parental consent, we will promptly delete such information. If you believe we have collected such information, please contact us at legal@babysesame.com.
In jurisdictions with age-appropriate design requirements (including California's Age-Appropriate Design Code, AB 2273), Baby Sesame maintains policies and controls designed to protect the data of minors whose profiles are created on the Platform, including default privacy settings and data minimization practices.
9. Your Privacy Rights
9.1 Rights Available to All Users
Regardless of your location, you may:
- Access, correct, or update your account information at any time through the Platform settings
- Request deletion of your account and associated data by contacting us at legal@babysesame.com
- Opt out of promotional email communications using the unsubscribe link in any marketing email
- Manage push notification preferences through your device settings
9.2 California Residents (CCPA / CPRA)
California residents have the following rights under the California Consumer Privacy Act of 2018 (CCPA) as amended by the California Privacy Rights Act of 2020 (CPRA):
- Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you in the preceding 12 months, including the sources, business purposes, and third parties with whom we share it.
- Right to Delete: You may request deletion of personal information we hold about you, subject to certain exceptions.
- Right to Correct: You may request correction of inaccurate personal information.
- Right to Opt-Out of Sale/Sharing: You may direct us not to "sell" or "share" your personal information as those terms are defined under CPRA. Note that our affiliate commission activities described in Section 5 may constitute "sharing" for cross-context behavioral advertising under California law. To opt out, contact us at legal@babysesame.com with the subject line "California Opt-Out Request." Note that opting out of sharing may limit certain Platform features.
- Right to Limit Use of Sensitive Personal Information: You may request that we limit the use of sensitive personal information to purposes permitted under applicable law.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.
- Right to Know About Automated Decision-Making: Where applicable, you have the right to know about profiling or automated decision-making that produces legal or similarly significant effects.
California residents may also exercise rights under the "Shine the Light" law (California Civil Code Section 1798.83) by contacting us with "California Shine the Light Request" in the subject line.
To make any California privacy request, contact us at legal@babysesame.com or by mail. We will verify your identity before processing the request.
9.3 Other U.S. State Privacy Rights
Residents of the following states have privacy rights under applicable state laws, which may include rights to access, delete, correct, opt out of sale, and appeal our decisions:
- Virginia (Consumer Data Protection Act – VCDPA)
- Colorado (Colorado Privacy Act – CPA)
- Connecticut (Connecticut Data Privacy Act – CTDPA)
- Texas (Texas Data Privacy and Security Act – TDPSA)
- Montana (Montana Consumer Data Privacy Act)
- Oregon (Oregon Consumer Privacy Act)
- Nevada (Nevada Privacy of Information Collected on the Internet from Consumers Act)
- Florida, New Jersey, Tennessee, Indiana, Iowa, and other states with enacted privacy laws
To exercise rights available to you under your state's applicable privacy law, please contact us at legal@babysesame.com. We will process requests within the timeframe required by applicable law and may verify your identity before doing so. If we deny your request, you may appeal by contacting us and we will respond within the legally required period.
9.4 Global Privacy Control (GPC)
We recognize and honor the Global Privacy Control (GPC) signal where required by applicable law. If your browser or device transmits a GPC signal, we will treat it as an opt-out of sale and sharing of personal information to the extent required by the laws of your jurisdiction.
9.5 European & UK Residents
If you are located in the European Economic Area (EEA) or United Kingdom, you may have rights under the General Data Protection Regulation (GDPR) or UK GDPR, including rights of access, rectification, erasure, restriction, portability, and objection. To exercise these rights, contact us at legal@babysesame.com. Our legal basis for processing is generally (a) contract performance, (b) legitimate interests (balanced against your rights), and (c) consent for direct marketing and certain data sharing activities. You also have the right to lodge a complaint with your local supervisory authority.
10. Data Security
We implement commercially reasonable technical, administrative, and physical security measures designed to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include encryption of data in transit (TLS), access controls, and regular security assessments.
Important Limitation: No method of electronic transmission or storage is 100% secure. Baby Sesame does not guarantee or warrant that your information will be completely secure at all times. You use the Platform and provide information at your own risk. In the event of a data breach that triggers notification obligations under applicable law, we will notify affected users as required.
You are responsible for maintaining the security of your account credentials. You agree to notify us immediately if you believe your account has been compromised.
11. Cookies & Tracking Technologies
We use cookies, pixel tags, software development kits (SDKs), and similar technologies to operate the Platform, remember your preferences, analyze usage patterns, and support affiliate tracking. Categories of cookies and technologies we may use include:
- Essential cookies: required for the Platform to function (login sessions, security tokens)
- Analytics cookies: help us understand how users interact with the Platform (e.g., Google Analytics, Firebase)
- Advertising/affiliate tracking: track conversions and referrals from external product links, including affiliate purchase attribution as described in Section 5
- Preference cookies: remember your settings and customizations
You may control cookies through your browser or device settings. However, disabling certain cookies may impair Platform functionality or affiliate features. We honor opt-out signals including the Global Privacy Control where legally required.
12. Data Retention
We retain personal information for as long as your account is active or as needed to provide the Platform's services. If you delete your account, we will delete or anonymize your personal information within a commercially reasonable period (generally within 90 days), except where we are required or permitted by law to retain certain information longer (e.g., for legal compliance, fraud prevention, or dispute resolution). Aggregate, anonymized data may be retained indefinitely.
Affiliate conversion data (confirming that a purchase was made) may be retained for longer periods as required by affiliate network agreements and tax or accounting obligations.
13. International Data Transfers
Baby Sesame is based in the United States. If you use the Platform from outside the United States, your information will be transferred to and processed in the United States or other countries where our service providers maintain operations. By using the Platform, you acknowledge and consent to this transfer.
For users in the EEA or UK, transfers to the United States or other third countries will be made pursuant to appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission, or other transfer mechanisms recognized under applicable law.
14. Business Transfers
In the event of a merger, acquisition, reorganization, sale of all or substantially all of Baby Sesame's assets, or similar transaction, your personal information may be transferred to or acquired by the successor entity. We will provide notice of any such transfer via the Platform or by email and, where required, obtain your consent or provide opt-out rights.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, applicable laws, or for other operational reasons. If we make material changes, we will notify you through the Platform, by push notification, or via the email address associated with your account, and will update the "Last Updated" date at the top of this Policy. Continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Policy.
16. Contact Us
For questions, concerns, or requests related to this Privacy Policy or your personal information, please contact us at:
Baby Size Me Inc. d/b/a Baby Sesame
Email: legal@babysesame.com
For California residents exercising CCPA/CPRA rights, please include "Privacy Rights Request" in your subject line.
This Privacy Policy was drafted for compliance with U.S. federal law including COPPA and FTC regulations; the California Consumer Privacy Act/California Privacy Rights Act (CCPA/CPRA); applicable U.S. state privacy laws effective as of 2026; and FTC guidelines on endorsements and affiliate marketing disclosures (16 CFR Part 255). It does not constitute legal advice and Baby Sesame recommends periodic review by qualified legal counsel.
