Privacy Policy

1. Who We Are

MamaMind is a company dedicated to helping families manage their daily tasks and communications. We are committed to protecting your privacy and ensuring you have a positive experience on our platform.

Our Data Protection Officer can be contacted at: privacy@mamamind.ai

2. What Personal Data We Collect

When you use MamaMind, we collect the following types of personal data:

3. How We Use Your Data

We use your personal data for the following purposes, each with a corresponding legal basis under UK GDPR:

4. WhatsApp Data Processing

MamaMind operates through WhatsApp using the Meta WhatsApp Business API. When you send messages to the MamaMind bot, those messages are transmitted through WhatsApp's infrastructure. Meta (WhatsApp's parent company) processes those messages in accordance with their own Privacy Policy and Terms of Service.

MamaMind receives and processes the content of messages you send to the MamaMind bot solely to provide the AI response and to store your events and reminders. We do not sell or share WhatsApp message content with any third party.

For more information about how Meta processes your data, please refer to WhatsApp's Privacy Policy at www.whatsapp.com/privacy.

5. Data Sharing and Third Parties

We only share your personal data with trusted third parties in the following circumstances:

• Stripe (payment processing) — to handle subscription billing securely
• OpenAI (AI processing) — to power natural language understanding in the bot, subject to data processing agreements
• Amazon Web Services (cloud infrastructure) — to store and serve your data with servers located in the EU
• Meta/WhatsApp Business API — to deliver messages through the WhatsApp platform
• Legal authorities — if required by law, court order, or to protect our users from harm

We never sell your personal data. We never share your data with advertising networks or data brokers.

6. Data Retention

We retain your personal data only for as long as necessary to provide the MamaMind service or as required by law:

• Active accounts data retained for the duration of your subscription
• After cancellation: account data retained for 30 days to allow reinstatement, then deleted
• Billing records retained for 7 years to comply with UK tax and financial regulations
• Support correspondence retained for 2 years from the date of last contact
• Anonymised analytics retained indefinitely for service improvement purposes

7. Your Rights Under UK GDPR

As a data subject, you have the following rights regarding your personal data:

• Right of access — Request a copy of the personal data we hold about you
• Right to rectification — Request correction of inaccurate or incomplete data
• Right to erasure (Right to be forgotten) — Request deletion of your data
• Right to restriction — Request we limit how we process your data
• Right to data portability — Receive your data in a structured, machine-readable format
• Right to object — Object to processing based on legitimate interests
• Right to withdraw consent — Withdraw consent for marketing at any time
• Right to lodge a complaint— with the ICO (Information Commissioner's Office)

To exercise any of these rights, please email privacy@mamamind.ai or write to our registered address. We will respond within 30 days.

8. Security Measures

We implement industry-standard security measures to protect your personal data, including:

• AES-256 encryption for all data stored at rest
• TLS 1.3 encryption for all data in transit
• Multi-factor authentication for internal system access
• Regular penetration testing and security audits
• Strict access controls — only staff who need data to do their job can access it
• Incident response procedures compliant with UK GDPR Article 33 breach notification requirements

9. International Data Transfers

Your data is primarily stored and processed within the UK and European Economic Area (EEA). Where we use service providers based outside the UK/EEA (such as OpenAI in the United States), we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved under UK adequacy regulations.

10. Children's Privacy

MamaMind is designed for use by adults (18+) managing family accounts. We do not knowingly collect personal data directly from children under the age of 13. If a parent or guardian adds family members who are children, the parent takes responsibility for those members' data under their account.

If you believe a child has provided us with personal data without appropriate consent, please contact us immediately at privacy@mamamind.ai.

11. Cookies

Our website uses cookies to improve your experience. Please see our Cookie Policy for full details of the cookies we use, why we use them, and how to control your cookie preferences.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. Where changes are material, we will notify you by email at least 14 days before the changes take effect. The "Last updated" date at the top of this page will always reflect the most recent revision.

13. Contact Us

For any privacy-related questions, subject access requests, or complaints, please contact: