Privacy Policy

Surroget LLC (“we,” “us,” or “our”) operates SurroGet, a platform for intended parents and prospective gestational surrogates to apply, discover one another, express interest, and coordinate the administrative steps of a possible match. This policy applies to surroget.com, the SurroGet iOS and Android apps, applications, eligibility questionnaires, and communications with our team about these services.

SurroGet does not provide medical advice, medical analysis, diagnosis, or treatment. Our eligibility questions apply administrative participation criteria; compatibility scores support matching. Neither is a medical finding, clinical risk assessment, or determination that a pregnancy or surrogacy arrangement is medically suitable. Independent licensed clinicians make medical decisions; independent attorneys provide legal advice. Using SurroGet does not establish a clinician-patient relationship with us.

This policy describes information handling; it is not consent to every use or disclosure of your information. Where separate consent or authorization is required, reading this policy or continuing to use the service does not replace it. A clinic, attorney, payment provider, or other independent service you use has its own privacy responsibilities and notices.

Collection depends on your role, the forms you complete, and the features you use. You may choose not to provide information, although we may be unable to provide the part of the service that needs it. Optional photographs, profile answers, and permission-based device features involve additional choices.

• Account and contact information: name, email, phone number, birth date, address, account identifier, role, sign-in records, and preferences. Passwords are stored as hashes, not readable passwords. An available third-party sign-in option supplies account identifiers and details, which can include a relay email address.
• Eligibility answers and application drafts: answers about age, residency, pregnancy history, health-related participation criteria, and other application requirements; questionnaire session identifiers; results showing which criteria an answer meets; and saved application progress. Browser quiz progress stays in that browser; a completed mobile quiz is sent to SurroGet before registration. Saved steps may be stored before you submit the whole application.
• Reproductive, health, and family information: information you provide about pregnancy and birth history, fertility, medical conditions, medications, lifestyle, mental health, family medical history, and screening; family structure, relationship status, sexual orientation where provided, surrogacy preferences, and household information. These answers and uploaded records can reveal particularly sensitive information.
• Documents and agreements: identity, insurance, financial, or health documents you upload; screening documents or outcomes recorded during coordination; consent selections, signatures, agreement versions, and acceptance records. Submit sensitive documents only through designated upload features.
• Profile and matching information: photographs, biography, prompt answers, motivations, location you provide, preferences, compatibility scores and their factors, interests, saved or hidden profiles, proposals, decisions, and match progress.
• Messages and support: messages, photographs and files you send, participants and timestamps, delivery or read status, inquiries, reports, blocks, and staff responses. Information you include becomes part of that communication.
• Payment and transaction information: customer and transaction identifiers, subscription status, amounts, billing periods, payment status, and fee-agreement records when paid services are enabled. Card details entered in hosted checkout go to the payment processor; our application does not receive your full card number or card security code.
• Technical and activity information: IP addresses, browser and operating-system information, device type, app version, push-notification tokens, session identifiers, authentication and security events, request and error logs, and actions such as application progress or agreement acceptance. Referral information may be recorded when you use a referral feature. We do not treat this information as anonymous merely because it lacks your name.

Our consumer health notice explains which categories may constitute consumer health data. The use, disclosure, and retention sections below apply to the categories described here.

• You, when you complete a questionnaire or form, save a draft, upload a document, make a selection, communicate, or submit a privacy request.
• Your browser or device, when it communicates with the website, app, or supporting services.
• Other members, when they interact with you, send a message, or report a concern.
• Our team, when it records application checks, consent records, coordination activity, or the status of documents and screening steps.
• Service providers, such as sign-in, hosting, communications, and payment providers. Where you authorize an independent professional to supply records for your application, those records can also become part of it.

Provide information about a partner, emergency contact, family member, or other person only when you have authority to do so. Avoid information about others that the application does not request.

• Create and secure accounts, verify sign-in attempts, and save your progress.
• Check application completeness and administrative participation criteria, coordinate document and screening steps, and record selections and agreements.
• Apply matching preferences, calculate compatibility scores, display profiles, and support mutual interest and staff coordination.
• Deliver messages, service emails, notifications, and responses to requests.
• Process enabled payments, administer memberships, and maintain transaction records.
• Investigate reports, enforce platform rules, prevent misuse, troubleshoot errors, maintain reliability, and understand how application flows are used.
• Respond to privacy requests, resolve disputes, and meet applicable legal obligations.

An automated eligibility result reflects the criteria programmed into the questionnaire; a compatibility score reflects matching information and preferences. Neither provides medical advice or medical analysis, guarantees a match, or predicts pregnancy outcomes. Contact us about an incorrect answer or administrative decision. Take clinical questions to a qualified healthcare professional.

We do not sell personal information or use it for cross-context behavioral advertising. We do not use consumer health data to target advertisements.

Matching profiles are shown within the member experience according to application status, privacy settings, and match stage. Depending on your role and settings, a profile may show age, city and state, photographs, biography, family description, motivations, prompt answers, preferences, and compatibility information. Surrogate profiles can include summaries of prior pregnancies, live births, and previous surrogacy journeys. These summaries differ from underlying records or documents.

Identity and photograph visibility can change as a match progresses. Intended-parent privacy settings limit selected fields; they do not remove identifying details you write in a biography, prompt, or message. Review your text and photographs before submitting them. Raw identity documents and application document files are not displayed as part of another member's matching profile.

A conversation shares messages and attachments with its participants. Authorized staff can access communications and reports for support, coordination, and safety investigations. Automated safety checks may flag messages for staff review. Messaging is not an end-to-end encrypted channel available only to participants. Recipients may save or copy information; deleting it from SurroGet cannot remove copies they have kept outside the service.

Authorized internal staff of Surroget LLC access member information for application review, matching coordination, support, privacy requests, and other service responsibilities. We do not sell member information or give it to outside organizations for their own independent marketing or business purposes.

Operating the service still involves the providers and disclosures below. Your member-profile sharing choices and communications determine what other members receive; this policy does not give outside professionals general access to your application or health records.

• Service providers: application hosting, databases, file storage, email, push delivery, authentication, and payment providers. Our service uses Google Cloud for application and file hosting, Neon for databases, Resend for email, and Expo with Apple or Google notification services for mobile delivery. When payments are enabled, Stripe processes checkout and administers billing. Each provider receives information relevant to its function; a payment provider does not need your reproductive history to charge a membership fee.
• Other members: the profile information you consent to share, match information, and messages and attachments you choose to send, as described above.
• People you direct or authorize: for example, a clinic, screening professional, attorney, or other recipient when you request or separately authorize a disclosure. This policy does not itself authorize release of records to those parties.
• Recipients required by law or necessary to protect rights:when required by a valid legal obligation, or where applicable law permits a necessary disclosure to address fraud, security, safety, or a legal claim. We evaluate the request and the information relevant to it; this is not general permission for unrelated access to health data.
• A successor to the service: in a merger, acquisition, or similar transfer, subject to applicable privacy restrictions and required notices or consents. A transfer does not remove consumer health data protections.

We do not provide personal information to advertising networks or data brokers for their own advertising or resale. Following an independent website link or exporting a file brings that activity under the recipient's practices as well. Our responsibility for providers processing information on our behalf is not removed by their involvement.

The website uses cookies and browser storage for sign-in, session security, preferences, questionnaire progress, and application drafts. The mobile app stores sign-in credentials in platform-protected storage and may keep preferences, drafts, and cached content on your device. Clearing browser or app storage does not delete copies already saved on our servers.

Our website and app do not include advertising pixels or third-party behavioral advertising SDKs. We do collect the technical and first-party activity records described above. Blocking cookies or storage may prevent sign-in or saving progress. Browser “Do Not Track” settings do not turn off necessary service logs or storage. We do not sell or share information for targeted advertising regardless of an opt-out signal such as Global Privacy Control.

• Camera, photographs, and files: used when you choose a profile photo, application document, or message attachment, or take a picture. Manage permissions in your device settings.
• Notifications: a device token and delivery information help send enabled notifications. Push alerts omit message bodies and attachment filenames, but can reveal that you use SurroGet or a sender's displayed name. Device settings control lock-screen previews.
• App Lock: the operating system checks your fingerprint, face, or device credential. SurroGet receives the result, not your fingerprint or facial biometric template. Uploaded photos or identity documents are separate.
• Location and contacts: matching uses location you enter, rather than device GPS tracking. The app does not request your address book, microphone, or health-platform records such as Health Connect. Network services still receive your IP address.

We keep member information while your account is active and for up to two years after account closure. For applications or questionnaires that do not lead to an account, we keep server-held information for up to two years after your last interaction with us. Information no longer needed may be deleted sooner. Our team reviews records and carries out deletion under this schedule; closing an account does not itself erase all retained records.

You can request earlier deletion, and we apply any shorter period required by law. The two-year period is our standard policy, not a legal requirement to keep every record or a reason to delay a valid privacy request. A specific legal obligation or documented legal hold may require keeping particular records longer. We limit those records to the relevant purpose and review them for deletion when that reason ends.

Deleting an account does not immediately erase every associated record. Account deletion removes your profile from matching, disables account access and push registrations, initiates session revocation, clears account contact fields and selected profile text, and removes profile photographs from normal use. Stored photo-file removal and subscription cancellation are separate processing steps.

• Application and coordination records: name and date of birth, structured answers (including health information), documents, screening and match history, signatures, and agreements can remain after account deletion.
• Communications and financial records: messages, attachments, reports, payment and fee records, and associated administration records can remain. Messages may remain available to the other conversation participant.
• Security and audit records: activity and deletion-request records can remain, including previous contact details in audit history. Removing an email from the active account is not erasing it from every record.
• Backups and provider copies: separate copies may need additional processing. Any delay or exception must comply with applicable law; backups do not create an unlimited right to retain data.

Request deletion of retained records, or particular categories, through our deletion-request page. We assess the request and any applicable exception for the records concerned. If information must be retained, we will explain the reason and applicable period or criteria, subject to lawful limits on disclosure. Account closure is not a substitute for responding to a data-deletion request.

Successful in-app or website account closure also creates a request for our team to review deletion of retained information. You do not need a second request to start that review. The review and any required provider follow-up must still be completed; a receipt does not mean all records have been erased.

An accepted or active match can prevent immediate self-service deletion while staff coordinate its closure. You can still submit a privacy or deletion request at any time. Uninstalling, signing out, pausing a profile, and canceling a subscription are different actions and do not by themselves delete server-held information.

Settings let you manage available profile, privacy, communication, and security preferences. You can pause matching visibility, use report and block controls, and manage device permissions. Turning off promotional communications does not prevent necessary account, security, or transaction messages.

Contact support@surroget.com to request access, a copy, correction, deletion, or withdrawal of consent, or to ask about a decision affecting your information. You may request deletion without signing in or reinstalling. Tell us your account email, your request, and your state if relevant to your rights. Do not email passwords, full identity documents, medical records, or financial account details.

We may ask for information reasonably necessary to verify identity and authority before disclosing or changing records. An authorized agent may contact us with evidence of permission; direct confirmation may be needed where permitted. We respond within applicable deadlines, explain permitted extensions or denials, and provide an appeal route where applicable. We do not penalize you for exercising rights, although a service requiring deleted information or withdrawn consent may no longer be available.

To appeal, email support@surroget.com with the subject “Appeal of SurroGet privacy decision” and enough detail to identify the request. You may also contact your state attorney general or privacy regulator. Health-specific rights are described in our consumer health notice.

Depending on where you live and whether a law applies to SurroGet and your information, you may have rights to know or access information, receive a portable copy, correct inaccuracies, delete information, withdraw consent, and appeal. Some laws also provide rights to opt out of sale, targeted advertising, or certain profiling, and to limit particular uses of sensitive information.

For California residents, the categories in this policy include identifiers; contact and customer-record information; protected characteristics such as age or family-related information you provide; commercial information; internet or electronic activity; photographs and visual information; and inferences from participation or matching criteria. Sensitive information can include credentials, government identification, health information, sexual orientation, and private messages.

The collection, sources, uses, disclosures, and retention sections describe current service practices. Rights under the California Consumer Privacy Act, where applicable, include requesting information about collection and disclosures in the preceding 12 months. Use the request process above for that information or to request a limitation on a use of sensitive information.

These descriptions do not restrict applicable rights or assert that a law applies solely because you live in a particular state. Consumer health privacy laws can protect information even where HIPAA or a general state consumer privacy law does not.

Safeguards include encrypted network connections, password hashing, authenticated member services, and access controls for staff functions and application documents. No internet service, storage system, or transmission is completely secure. Keep credentials private, use available App Lock controls on shared devices, and contact us if you suspect unauthorized access.

SurroGet is intended for people using our US services. Information is processed in the United States and may be processed in other locations used by providers, where privacy laws can differ. This policy does not represent that all information stays in a particular state or country.

Information is not automatically covered by HIPAA just because it concerns health. This policy is not a HIPAA Notice of Privacy Practices and does not replace any notice or authorization from an independent healthcare provider.

Accounts are intended for adults aged 18 or older. Surrogate applicants must also meet separate participation criteria. We do not knowingly accept accounts from children. Contact us if you believe a child has created an account or submitted information without appropriate authority so we can investigate and take action.

Adult applications may include limited information about children or pregnancy history supplied by a parent or guardian. Avoid unnecessary names, identifying details, or photographs of children. This information receives applicable protections and is not used to create accounts for children.

We update the date when this policy changes. For a material change, we will provide appropriate notice, such as an in-service notice or email, and obtain any new consent required before changed processing begins. Updates do not retroactively authorize a use of health information requiring separate consent or override rights already provided by law.

Surroget LLC's own team handles support and privacy requests. Contact us at support@surroget.com. Include “Privacy request” in the subject. Our contact page also lists support information.

You may also send a written privacy request to: