Privacy Policy

Last updated: 27 October 2026

MomMemo is a private journal for mothers. It is built so that your writing stays with you: your journal is stored on your phone in an encrypted database, and it leaves your phone only if you explicitly turn on a feature that needs it. To use MomMemo you sign in with Apple or Google; your account holds only your e-mail address and your subscription, not your journal. This policy explains what happens in each case.

Who is responsible: Maroš Kuzemka, sole trader (živnostník), Slovakia – contact [email protected]. We are the data controller under the GDPR.

1. What MomMemo stores on your phone

• Your journal entries, mood check-ins, memories about your child (entries, photos, voice notes, quotes, milestones), tags, time capsules, and your profile (name or nickname, phase of motherhood, children's names or nicknames, birth dates and – only if you choose to add it – whether your child is a girl or a boy, used just to word the app's texts; preferences).
• All of this is stored in an encrypted database on your device. The encryption key is kept in your phone's secure storage and never leaves the device. Photos are re-encoded without location or device metadata.
• Optional app lock (Face ID / fingerprint / device code) protects the screen; the database is encrypted regardless.

This data does not reach us. If you delete the app, use Delete all data, sign out, or delete your account, it is removed from the phone.

1a. Your account (required)

MomMemo requires an account so that your subscription belongs to you and works on a new phone, and so that our server can apply your AI limits. You sign in with Sign in with Apple (iOS) or Google. We do not offer password or e-mail-code sign-in.

• What we store: your e-mail address as provided by Apple or Google (with Apple you can choose a private relay address that hides your real one), a random account ID, the sign-in provider, and timestamps of sign-in. We do not receive your Apple or Google password, name or contacts.
• Where: Supabase Auth in Frankfurt (EU).
• Legal basis: performance of the contract (Article 6(1)(b) GDPR) – the account is needed to provide the service you signed up for.
• Signing out removes your journal from the phone (with backup on, it comes back when you sign in again). Deleting your account (Account and backup → Delete account, or Privacy → Delete account) deletes the account, everything stored for it on our server, and the journal on the phone. An active subscription must be cancelled in the App Store or Google Play.

2. What leaves your phone – only when you turn it on

a) AI features (off by default)

When you ask for a reflection, a summary, a question to your journal, themes, a reframe or a letter, the relevant parts of your entries are sent to our server (Supabase, hosted in Frankfurt, EU) and from there to our AI provider, Anthropic, to generate the answer. With AI turned on, MomMemo also replies when you save an entry (one observation and one gentle question, and up to three short exchanges if you answer); the saved entry (including a photo attached to it) and a few related earlier entries are sent at that moment, never while you are still typing. You can switch off this reply in Settings and keep the other AI features. Apart from that, AI is used only when you tap a button, and the weekly look back runs once a week only if you have turned AI on.

• Your text is processed to produce the answer and is not stored by us. We keep only a usage record without content (which feature, when, how many tokens, estimated cost) to enforce your monthly limits and our cost cap.
• Anthropic processes the text under its commercial API terms; API inputs and outputs are not used to train Anthropic's models.
• Voice transcription (Premium, with AI turned on): when you record a voice note or tap “Turn into text”, the recording is sent through our server to OpenAI, which returns the written text. We do not store the audio or the text on our server; OpenAI processes it under its API terms, does not use API data to train its models and keeps it at most 30 days for abuse monitoring. The original recording always stays on your phone.
• Legal basis: your explicit consent (Article 9(2)(a) GDPR), because a journal can contain information about your health and wellbeing. You can withdraw consent anytime in Settings → Privacy; no further data is sent after that.
• AI requests are made with your account, so your monthly limits and subscription apply; the usage record is linked to your account ID, not to any content.

b) Backup and sync (off by default)

If you turn on backup, your journal content – entries, moods, memories, photos and voice notes – is copied to our server in Frankfurt so you can restore it on another phone.

• Legal basis: your explicit consent (Article 9(2)(a) GDPR). Withdrawing consent in the app deletes the server copy, including photos and voice notes; deleting your account deletes everything stored on the server.
• Only you can read your rows; access is enforced per user on the server (row-level security). Media are stored in a private bucket that is not publicly reachable.
• Data is encrypted in transit (TLS) and at rest on the server. It is not end-to-end encrypted: our infrastructure provider could technically access it, and we access it only for support at your request.

c) Subscriptions

Purchases are handled by Apple App Store or Google Play and by RevenueCat, which tells us whether a subscription is active. Your subscription is linked to your random account ID (not your e-mail); we receive that ID and the subscription status – never your payment details. Legal basis: performance of the contract.

d) Notifications

The daily question is a local notification scheduled on your phone. No notification content goes through our servers. By default, the lock screen shows only "Today's question", not the question text.

3. What we do not do

• No advertising, no ad SDKs, no analytics or tracking SDKs.
• We never sell or share your content with third parties beyond the processors above (Supabase, Anthropic, OpenAI for voice transcription, RevenueCat, the app stores, and Apple or Google as sign-in providers), each bound by a data processing agreement.
• Your journal content is never used to train AI models.
• Export is always free: you can download your full archive (Markdown, JSON, photos, voice notes) at any time from Settings → Privacy.

4. Children

MomMemo is for adults. You may record memories about your child; that information is your content and is treated exactly as described above. We do not knowingly collect data from children themselves.

5. Retention

• On your phone: until you delete it.
• Server backup: until you withdraw consent or delete your account; deleted rows are removed within 30 days from backups.
• AI usage records (no content): 12 months.
• Account (e-mail, account ID, provider): until you delete it in the app; deletion is immediate on our server.

6. Your rights

Under the GDPR you have the right to access, rectify, export (portability), delete and restrict the processing of your data, and to withdraw consent at any time. Almost all of this you can do directly in the app (export, delete data, withdraw consent, sign out, delete account). For anything else, write to [email protected]. You can also complain to the Slovak Office for Personal Data Protection (Úrad na ochranu osobných údajov SR, dataprotection.gov.sk) or your local authority.

7. International transfers

Our servers are in the EU (Frankfurt). Anthropic and OpenAI may process AI requests in the United States; the transfer is covered by the EU–US Data Privacy Framework and/or Standard Contractual Clauses in their data processing terms. Content is sent only when you use an AI feature.

8. Security

Encrypted on-device database (SQLCipher), key in the device's secure enclave/keystore, optional biometric app lock, screenshot blocking while locked, TLS for all network traffic, per-user access control on the server, secrets kept only on the server. No API keys are embedded in the app.

9. Changes

We will update this page and the "last updated" date when something changes. Material changes to how your content is processed will be shown in the app before they apply.

10. Not medical advice

MomMemo, including its AI features, is not therapy and not medical advice, and it never diagnoses. If you are struggling, please reach out to a professional or someone you trust.

11. Contact

Privacy questions: [email protected] · Help with the app: [email protected]