Privacy Policy

Effective date: TBD · Contact: support@umama.ai

This is a placeholder policy for site launch. It will be replaced with the final, counsel-approved text before real users onboard. It describes what Umama plans to collect and how - the substantive commitments here are accurate; the legal precision is not.

Summary

Umama is a mother & baby care app operated as [Legal entity name TBD]. We collect the account and profile data you enter, the tracking data you record (sleep, feeding, water, protein, vitamins, mood, dreams, moments, events), device tokens used to deliver notifications, and the technical data needed to run the service reliably. We work with processors for hosting, email delivery, push notifications (Firebase), chat (Sendbird), and AI assistant features.

What we collect

1. Account: email, password (hashed), verification state, preferred language, admin flag.
2. Mother & baby profile: name, dates, expected due date, notes you choose to enter.
3. Tracking records: sleep, feeding, water, protein, vitamins, mood, dreams, events, routines, reminders, moments (with optional photos).
4. Photos you upload: baby, moment, and dream photos - stored in Cloudflare R2 with unguessable file names.
5. Device data: push-notification device tokens, device identifier, app version.
6. Chat: AI conversations and Sendbird channel messages associated with your account.
7. Diagnostics: minimal logs and metrics needed to keep the service running (no third-party analytics SDKs).

Why we process it

1. Provide app features you asked for (tracking, reminders, chat, AI companion).
2. Sync your data across devices and back it up.
3. Send push notifications you enabled (reminders, events, routines, water).
4. Improve reliability and security of the service.
5. Comply with our legal obligations.

Processors we use

• Hosting & database - Hetzner Cloud (EU).
• Object storage & backups - Cloudflare R2.
• Email delivery - Mailtrap (transactional) and Zoho (support inbox).
• Push notifications - Google Firebase Cloud Messaging.
• Chat - Sendbird.
• AI assistant - OpenRouter / Anthropic (message content sent per request; not used to train models).

Your rights

You can access, correct, export, or delete your account data at any time. Deletion is available in the app under Settings → Account → Delete account, or by emailing support@umama.ai. See our Account & Data Deletion page for the full deletion workflow.

Retention

Account data is retained while your account exists. Encrypted backup snapshots are retained for up to 30 days before rolling off automatically. After deletion, we keep only anonymized aggregates and any records required by law.

Children

Umama is a tool for parents. Baby profiles are entered by an adult on the baby’s behalf. The app is not directed at children under 13.

Changes

We may update this policy. Material changes will be communicated in the app or by email before they take effect.

Contact

Privacy questions: support@umama.ai.