Privacy Policy

Effective 1 October 2026

Core sleep logging and rest planning work without an account. Records stay on your device unless you choose backup or a connected sharing feature. Mama’s, Care circle and Rest Plus use an account. You choose which stories to post and which caregivers to invite.

Who is responsible

Mama, Too is operated personally by Lee Jarvis, 25 Compton Avenue, Luton LU4 9AX, United Kingdom. Lee Jarvis is the data controller. Email leejarvis123@hotmail.com for privacy questions or requests.

Information on your iPhone

Mama, Too stores the child details you enter, sleep records, predictions, feedback, rest plans and sessions, reminders, app preferences and consent choices in a local database. The app uses these records to show history and suggest possible rest times. Speech recognition for Voice tap runs on the iPhone; the app does not send voice audio or transcripts to us. iOS handles local notification delivery.

When you use only local logging and planning, these records are not uploaded to Mama, Too. The connected features described below send the information needed for that feature. The app does not use advertising trackers. Optional usage signals and error reports are off by default and can be switched off again in Settings. No remote usage-analytics service is connected.

Optional error reports

If you enable usage signals and error reports, the app can send a limited technical error report to Sentry in the EU. Before sending, it removes error messages, notes, account and baby details, navigation history, and other arbitrary context. Reports contain a generic error description, app release and environment, and available code locations. Screenshots, session recordings, native crash attachments and automatic activity trails are disabled. Sentry is configured not to store IP addresses. Our basis for these optional reports is your consent; switching the setting off stops future reports.

Optional account and backup

If you create an account, Supabase processes your email address and authentication data. Google Gmail delivers account confirmation, recovery and password-change emails from mamatoosupport@gmail.com and processes the recipient address and email content. When you choose Back up now, Mama, Too sends your app records to your account's private database tables. This includes child and sleep records, predictions and feedback, rest plans and sessions, reminders, and saved Rest Plus routines and possible support times. A helper's name or note and your answer to whether a break helped stay only on your iPhone. Backups are encrypted in transit and by the hosting service at rest, but they are not end-to-end encrypted. The primary backup database is in London, UK.

You can export your local data in Settings. You can delete the local copy with Delete everything. If you have an account, use Delete account & backup in Backup to remove the account and its server records. Deleting only the local copy does not delete an existing server backup.

Mama’s community

Mama’s is for members aged 18 and over. When you join, we store your chosen community name, account ID, age declaration and acceptance of the community rules. Other members can see your published stories, replies and community name. We store the circles you follow, reactions, saved posts, reports and blocks to provide these features. Private sleep and personal rest records are not automatically published to Mama’s. Do not post information that identifies a child or another person without permission.

Stories and replies are checked before publication. Supabase stores this content. Text submitted for publication is sent to OpenAI’s moderation service after local checks and contact-detail filtering; ordinary members cannot see pending or held content. Authorised moderators can review held content and reports, remove content and restrict accounts. We keep moderation outcomes and audit records to handle abuse and complaints. Automated checks can make mistakes; contact us to challenge a moderation decision. Voice drafting uses on-device recognition; only text you choose to submit is sent for moderation.

Moderator review alerts use Expo Push. Expo receives a device push token and a generic review reference, without the post text. OpenAI and Expo may process data outside the UK. We use these providers to deliver and protect the community. Our basis for community features is the service you request; our basis for abuse prevention and moderation is our legitimate interest in protecting members. Please avoid sharing sensitive health details publicly; sharing them is optional and is not required to use the app.

Care circle and helper reply links

Care circle lets you share one baby’s sleep records with caregivers you invite or whose invitation you accept. Members can view and log sleep for that baby. Membership and shared records are stored in Supabase; personal parent-rest records stay separate. Treat an invite code as private. Revoking access prevents future authorised access but cannot erase copies another person already kept.

When you prepare a helper reply link, Supabase stores the proposed time window, time zone, request state and hashed access tokens. The page shows no parent, baby or helper name. Anyone with the link can view the request and respond, so share it only with your intended helper. The token stays in the URL fragment and is sent to the reply service in a request body. A device push token may be used for generic reply alerts through Expo. A salted network-address hash is used for rate limiting. Request records are subject to the service’s seven-day cleanup. A reply does not confirm a physical handover of care.

Rest Plus purchases

When you sign in on a Rest Plus enabled build, RevenueCat receives a random account ID to check subscription status. If you buy or restore a subscription, Apple and RevenueCat process product, transaction and entitlement details. Mama, Too keeps a limited entitlement record to control access. We do not receive your payment card number. Buying Rest Plus does not itself upload your sleep records; backup is a separate choice.

RevenueCat stores customer data in the United States. Its data processing agreement includes the UK transfer addendum for restricted transfers. Apple handles App Store billing under its own privacy terms. Deleting a Mama, Too account does not cancel an Apple subscription; you can cancel it in Apple subscriptions.

Support and website

If you email us, we receive the address and information you choose to send; please avoid sending baby sleep records unless needed for support. Microsoft handles the Hotmail mailbox. Cloudflare serves these public pages and may process basic request and security logs. The pages do not require an account or set Mama, Too advertising cookies.

Why we use data and how long we keep it

We use account and backup data to provide the optional service you request, and transaction data to provide and verify Rest Plus. Our UK GDPR lawful basis for these core services is performance of a contract. We use basic service and security logs for our legitimate interest in keeping the service reliable and protecting accounts. Local records stay until you delete them or the app. Account records stay until you delete the account. Subscription records at Apple and RevenueCat may remain under their own retention and legal obligations; contact us for a RevenueCat data deletion request. Published community content remains available until removed through the app or account deletion. Automated moderation checks, accepted moderator-alert records and moderation audit events are deleted after 30 days. Open reports remain in the moderator queue until they are closed; closed reports are deleted 30 days after closure. Account references are removed when the account is deleted. Restricted, encrypted recovery backups may retain earlier records after deletion from the live service. They are used only for recovery, and deletion requests must be reapplied before restored data is reopened.

Your choices and rights

You can use the free app without an account, turn optional features off, export local records, and delete local or account data in the app. Depending on the circumstances, UK privacy law also gives you rights to access, correct, erase, restrict or move personal data, and to object to processing based on legitimate interests. Contact us at the email above. You can complain to the UK Information Commissioner's Office.

Changes

We will update this page when our data practices change and show the new effective date. Material changes will also be communicated in the app where appropriate.