Privacy Policy

1. Who we are

Mamoo is a baby tracker with an optional AI assistant. It is made and run by Kernex LLC (ТОВ «Кернекс»), EDRPOU code 46025162, Bldg. 2m, Zymna Voda village, Lviv region, Ukraine ("we", "us"). We are the controller of the personal data described here.

For anything about your data — questions, requests, complaints — write to zenoviy.burychko@kernex.solutions. We answer every message ourselves.

This policy covers the Mamoo app for iPhone and Android, the website mamoo.space and the emails we send. It applies to everyone who uses Mamoo: parents, and the grandparents, nannies and other caregivers they invite.

2. The short version

We collect what Mamoo needs to work: your account, your family, your baby's profile and the log you keep. Most of it is health information about your baby, so we ask for your explicit consent before you add a baby.
Your data is stored on our own servers in Ukraine (Kernex). It is shared only with the people you invite into your family.
No ads, no advertising or analytics SDKs, no tracking across apps. We never sell your data or share it for advertising.
The AI assistant is off until you switch it on. When it's on, it receives the baby's age, sex and summaries of the log — never names, birth dates or your notes — plus the question you type. It is processed by Anthropic and not used to train AI models.
Voice logging: your phone's own speech recognition turns your words into text — on the device when it can. Mamoo never receives or stores audio, only the text.
You can export all your data (More → Privacy → Export my data) and delete your account (More → Delete account) at any time.

3. What we collect

3.1 Your account

Data	Why	Required?
Email address	Sign-in, account emails (verification, password reset, invitations you send), support	Yes
Password	Sign-in with email. Stored only as a one-way hash; we can't see it	With email sign-in
First name	Shown to your family ("Olena logged a bottle"), used in emails	Optional
Profile photo	Shown to your family	Optional
Language and time zone	App and email language; reminders and daily totals at the right local time	Set automatically, can be changed
Sign in with Apple	Apple's user identifier, the email Apple shares (it can be a private relay address), the name if you choose to share it, and a token we keep only to revoke Apple sign-in when you delete your account	If you use it
Sign in with Google	Google's user identifier, email address and name	If you use it

3.2 Your family

The family's name, who is in it, each person's role (owner, parent or viewer) and relation (mom, dad, grandparent, nanny, other).
Invitations: the invite code, role, relation, who created it, when it expires and was accepted. If you send an invitation by email, the email address you entered.

3.3 Your baby's profile

Name, sex (needed for WHO growth charts), date of birth, due date (only if the baby was born early, for corrected age), and — if you add them — birth weight, length and head circumference, and a photo.

3.4 The log (health information)

Everything you or your family record about the baby, with the time and who logged it:

Feeding: breastfeeding sides and durations, bottle amounts and milk type (breast milk or formula), solid foods and amounts.
Sleep: start and end times and where the baby slept.
Diapers: wet, dirty, stool colour.
Pumping: amounts per side.
Growth: weight, length, head circumference.
Health: temperatures and how they were measured, symptoms, medicines and doses, doctor visits (planned and past) with the reason and your summary.
Vaccines: which doses were given and when, optional brand and batch, and doses you marked as not planned.
Development: milestones you mark as reached (or "not yet"), first-time moments, and notes you write.

Under data protection law most of this is data concerning health — a special category of personal data. We process it only with your explicit consent (see section 5).

3.5 The AI assistant (optional)

If you switch the assistant on, we store your questions, the answers, the sources shown under them and technical safety information about each answer (which model and rules version answered, response time, word counts and the result of our safety checks). We keep this for 90 days so answers can be checked for safety, then delete it automatically. What the assistant receives is described in section 6.

3.6 Voice logging (Premium)

When you tap the microphone, your phone's built-in speech recognition (Apple on iPhone, Google on Android) turns your words into text. Mamoo asks for recognition on the device first, so the audio stays on your phone. If your phone has no offline model for the language (often the case for Ukrainian), the system's online speech service processes the audio instead — Apple or Google under their own privacy policies (on iPhone the same service that powers dictation). Mamoo never receives, records or stores audio. The text, with your baby's age and usual bottle size, is sent to our servers and our AI service (which uses Anthropic's model — see section 6) to suggest log entries, which you confirm before anything is saved. We don't keep the text: we only record that a request was made, how many entries were suggested and its technical cost, for the daily limit.

3.7 Purchases (Premium)

Payments are handled entirely by the App Store (Apple) or Google Play (Google). We never see your card or bank details. From the store we receive the product you bought, the transaction identifiers, purchase, renewal and expiry dates, whether it's a free trial, whether it will renew, billing problems and refunds — so we can switch Premium on for your family.

3.8 Your consents

When you accept the Terms, the Privacy Policy, health data processing and (optionally) the AI assistant, we record what you agreed to, which version, and when. This lets us prove your consent and ask again when the texts change.

3.9 Technical data

Server logs: when the app or website talks to our servers, our servers record the IP address, the time, the address requested, the response and the app or browser version. We use them to keep the service secure and to fix errors. They are overwritten automatically after a short time (normally within a few weeks).
Sign-in tokens that keep you signed in on your phone.
We do not use cookies for tracking. The website sets no cookies at all.

3.10 Messages to support

If you write to us, we keep your email and our reply so we can help you.

3.11 What we don't collect

No location, no contacts, no advertising identifier, no camera access (you choose photos from your library), no recordings of your voice, no analytics or advertising SDKs, and no tracking of what you do in other apps or websites.

4. What stays on your phone

Mamoo works offline, so your phone keeps a copy of your family's log. Some things never reach our servers at all:

Statistics are calculated on the phone.
The doctor report (PDF) is created on the phone and goes only where you share it.
Reminders (feeding interval, medicines, vaccines) are scheduled on the phone as local notifications.
Live Activities and widgets (for example a running sleep timer on the lock screen) are shown from data on the phone.

Signing out deletes the local copy from that phone; your synced data comes back when you sign in again.

5. Why we use your data and on what legal basis

We follow the Law of Ukraine "On Personal Data Protection" and, for users in the European Union and the European Economic Area, the General Data Protection Regulation (GDPR).

Purpose	Data	Legal basis
Create and run your account, sign you in, send account emails	Account data	Performance of our contract with you (GDPR Art. 6(1)(b))
Store and sync your baby's profile and log, share it with your family, show charts, milestones and vaccines	Baby profile, log	Your explicit consent to processing health data (GDPR Art. 9(2)(a) and Art. 6(1)(a); Art. 7 of the Ukrainian law)
Answer your questions with the AI assistant	Assistant data, de-identified log summaries	Your explicit consent, given separately when you switch the assistant on
Voice logging	The text of what you said	Your explicit consent (the assistant consent) and our contract with you
Premium: unlock features, handle renewals and refunds	Purchase data	Performance of our contract (Art. 6(1)(b)); keeping financial records required by law (Art. 6(1)(c))
Keep the service secure, prevent abuse, fix errors	Server logs, technical data	Our legitimate interest in a safe, working service (Art. 6(1)(f))
Prove and manage consents	Consent records	Legal obligation (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f))
Answer support requests	Your messages	Contract (Art. 6(1)(b)) and legitimate interest (Art. 6(1)(f))

Health data consent is required to add a baby, because Mamoo can't keep a baby's log without it. The assistant consent is optional and off by default.

We don't use your data for automated decisions that have legal or similarly significant effects on you, and we don't build advertising profiles.

6. The AI assistant in detail

Off by default. You switch it on in the app after reading what it does, and you can switch it off anytime in More.
What it receives about your baby: age (corrected age if born early) in weeks or months, sex, summaries of the last days of feeding, sleep and diapers, growth percentiles, recent temperatures, symptoms, medicine names (without doses) and types of doctor visits, and milestones reached or coming up. It reads these through limited, read-only access that lasts a few minutes and covers only one baby.
What it never receives: your baby's name or date of birth, your name, email or family members, photos, or your free-text notes.
Your question is sent as you typed it. Please don't type names or other details you don't want to share.
Safety first: messages that describe an emergency are recognised by our own rules and never reach the AI model — the app shows who to call instead.
Who processes it: our AI service (on our servers) sends the request to Anthropic, PBC (USA), which provides the Claude models, as our processor. Under Anthropic's commercial terms, data sent through its API is not used to train models and is deleted from Anthropic's systems within 30 days, except where Anthropic must keep it longer to enforce its usage policy (up to 2 years for flagged content) or by law. Anthropic is bound by a data processing agreement (with the European Commission's Standard Contractual Clauses) that requires it to protect this data to the same standard as this policy.
It isn't a doctor. The assistant gives general information. See the Terms of Use.

We never sell personal data and never share it for advertising.

Your family. Everyone you invite sees the baby's profile and log, the first names and photos of family members, and who logged each entry. Viewers (for example a nanny) can add entries and see the log. You decide who's in the family and can remove anyone.
Hosting. Mamoo runs on servers operated by Kernex — our own company — in Ukraine. No outside hosting provider has access to your data.
Anthropic, PBC (USA) — the AI model behind the assistant and voice logging, only if you switch the assistant on (section 6).
Apple and Google — when you use Sign in with Apple or Google, for payments through the App Store or Google Play, and for your phone's speech recognition when voice logging can't run offline (section 3.6). They act as independent controllers under their own privacy policies.
Our email delivery provider — to send account emails (verification, password reset, invitations). It receives the recipient's email address and the email's content.
Authorities — only when the law requires it and after checking the request is valid. Where we may, we'll tell you.
If our business changes (for example a merger or sale), your data may pass to the new owner, who must keep this policy's promises or ask for your consent.

8. Where your data is stored

Your account, your family and your baby's data are stored on Kernex servers in Ukraine.

If you live in the EU or EEA, please note that the European Commission has not adopted an adequacy decision for Ukraine. By using Mamoo you provide your data directly to us in Ukraine; we apply the safeguards of the GDPR to it in full and give you all the rights described below.

Data sent to Anthropic for the assistant is processed in the United States under Anthropic's Data Processing Addendum, which includes the European Commission's Standard Contractual Clauses.

9. How we protect it

All connections to our servers are encrypted (HTTPS/TLS).
Passwords are stored only as strong one-way hashes.
Access to a baby's data is checked on every request: only members of that baby's family can read it.
Photos are re-encoded when uploaded, with hidden metadata (such as location) removed, and are shown only to family members.
The AI service isn't reachable from the internet, only from our API server, and it receives de-identified data.
The database isn't reachable from the internet; administrative access is limited to our staff who need it.
Nightly backups are kept for 14 days.

No system is perfectly secure. If a breach puts your data at risk, we will tell you and the authorities as the law requires.

10. How long we keep it

Data	How long
Account, family, baby profile and log	Until you delete them or your account
An entry or baby you delete	Hidden at once on every phone; erased from our database 90 days later (kept that long only so the deletion reaches every caregiver's phone)
Assistant conversations	90 days, then deleted automatically
Voice logging text	Not kept
Consent records	Until your account is deleted
Purchase records	While your subscription is active, and afterwards as long as accounting and tax law requires
Server logs	A short time; overwritten automatically, normally within a few weeks
Backups	14 days, then overwritten
Support emails	As long as needed to help you, and no longer than 2 years

11. Deleting your account

You can delete your account in the app: More → Delete account. If you can't use the app, email zenoviy.burychko@kernex.solutions from the address of your account. Step-by-step instructions are on the Delete account page.

What happens:

Your account, profile, photo, consent records, Premium entitlement and assistant conversations are deleted. If you used Sign in with Apple, we revoke Mamoo's access with Apple.
If you're the only parent in the family, the family, its babies, their whole log and photos are deleted too.
If another parent is in the family, the family and the baby's log stay with them (they become the owner), because it is their baby's record too. Entries you logged remain without your name.
Copies in backups disappear within 14 days.
Deleting your account doesn't cancel a subscription — cancel it in your App Store or Google Play settings.

12. Your rights

You have the right to:

access your data and get a copy — the app gives you everything as a file in More → Privacy → Export my data;
portability — the export is a machine-readable JSON file you can take elsewhere;
correct your data — edit it in the app, or ask us;
delete your data — delete entries, a baby or your whole account in the app, or ask us;
withdraw consent at any time: switch the assistant off in More → Privacy; to withdraw consent to health data processing, delete the baby or your account (Mamoo can't keep a log without it). Withdrawal doesn't affect processing before it;
restrict or object to processing based on our legitimate interests;
complain to a supervisory authority: in Ukraine, the Ukrainian Parliament Commissioner for Human Rights; in the EU/EEA, the data protection authority where you live or work.

Write to zenoviy.burychko@kernex.solutions from the email of your account. We answer within one month (we may extend this by two months for complex requests and will tell you why). It's free.

13. Children

Mamoo is for parents and other adult caregivers. You must be 18 or older (or the age of majority where you live) to create an account. Children don't use Mamoo themselves, and we don't knowingly create accounts for anyone under that age.

Your baby's information is entered by you as the baby's parent or legal guardian, or by a caregiver you invited, and you decide what is recorded, who sees it and when it is deleted. Please add a baby only if you have parental responsibility for them, or the permission of someone who does.

14. Permissions on your phone

Mamoo asks only when a feature needs it, never at launch:

Photos — when you choose a picture for the baby or yourself. The app opens only the picture you pick.
Microphone and speech recognition — when you tap the microphone for voice logging. Listening stops when you tap again.
Notifications — when you switch on a reminder.

You can change these anytime in your phone's settings. Mamoo doesn't track you across other companies' apps and websites, so it never asks for that permission.

15. Changes to this policy

If we change this policy in a way that matters, we'll tell you in the app or by email before the change takes effect and, where the law requires, ask for your consent again. The version and date at the top show which text is current; earlier versions are available on request.

16. Contact

Kernex LLC (ТОВ «Кернекс»), EDRPOU 46025162, Bldg. 2m, Zymna Voda village, Lviv region, Ukraine. Email: zenoviy.burychko@kernex.solutions.