Privacy Policy

When you use Mamma Globe, we collect information to provide you with a personalised, safe recovery experience. This includes:

Account Information

• Name, email address, and/or phone number (for account creation)
• Password (stored securely using industry-standard hashing — never in plain text)
• Birth type and recovery stage (to personalise your plan)

Health & Wellbeing Data

• Daily check-in responses including mood scores and labels
• Emotional and physical symptom selections
• Recovery plan progress and milestones
• Personal insights and 7-day window summaries

Device & Usage Data

• Device type, operating system, and app version
• Push notification tokens (for sending personalised tips)
• App usage patterns (to improve the experience)

Payment Information

• Subscription type and billing period
• Payment is processed securely by Stripe — we do not store card details on our servers

• Providing and personalising your recovery plan and daily tips
• Generating 7-day insight windows and wellbeing summaries
• Sending push notifications you've opted in to receive
• Processing subscription payments via Stripe
• Improving app features and diagnosing technical issues
• Complying with legal obligations

Our legal basis for processing your health and wellbeing data is your explicit consent, which you provide when you complete the onboarding setup. You may withdraw consent at any time by deleting your account.

We do not sell, trade, or rent your personal data. We only share data in the following limited circumstances:

• Stripe — payment processing for subscription management
• Firebase (Google) — push notification delivery via FCM
• Twilio — SMS verification (if you use phone login)
• Hosting providers — infrastructure necessary to operate the service
• Legal requirements — where required by law or court order

All third-party service providers are contractually required to protect your data and are prohibited from using it for their own purposes.

We retain your personal data for as long as your account is active. When you delete your account, we permanently delete your data within 30 days, except where we are required to retain certain information by law (e.g. financial records for up to 7 years under UK tax regulations).

• Account data — deleted within 30 days of account deletion request
• Health & check-in data — deleted immediately upon account deletion
• Payment records — retained for up to 7 years for legal compliance
• Anonymised analytics — may be retained indefinitely (cannot identify you)

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of all data we hold about you
• Right to rectification — correct any inaccurate data
• Right to erasure — request deletion of your data ("right to be forgotten")
• Right to portability — receive your data in a machine-readable format
• Right to restrict processing — limit how we use your data
• Right to object — object to specific types of processing
• Right to withdraw consent — at any time, without affecting past processing

To exercise any of these rights, email us at privacy@mammaglobe.com. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We implement industry-standard security measures to protect your data against unauthorised access, disclosure, alteration, or destruction:

• All data is transmitted over encrypted HTTPS connections (TLS 1.2+)
• Passwords are hashed using bcrypt — never stored in plain text
• Authentication uses JWT tokens with expiry and rotation
• Database access is restricted and monitored
• Regular security reviews and dependency updates

While we take all reasonable steps to protect your data, no internet transmission is 100% secure. If you suspect unauthorised access to your account, please contact us immediately.

Mamma Globe is designed for adults who are postpartum or in recovery. Our services are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.

If you believe a child has provided us with personal information, please contact us at privacy@mammaglobe.com and we will take prompt action to delete that information.

If you have any questions about this Privacy Policy, or wish to exercise your rights, please contact our team:

• Email: privacy@mammaglobe.com
• Support: support@mammaglobe.com
• Response time: Within 30 days (UK GDPR requirement)

We may update this policy from time to time. We will notify you of any significant changes via email or in-app notification. Continued use of Mamma Globe after changes constitutes acceptance of the updated policy.