MomManager

Privacy Policy

Last updated: 23 May 2025  ·  Effective date: 23 May 2025

1. Who We Are

MomManager is operated by SoldOut Digital Ltd, a company registered in England and Wales, with its registered office at:

SoldOut Digital Ltd
Romford, United Kingdom

If you have any questions about this policy, contact us at: Support@mommanager.co.uk

2. What Data We Collect

Data Collection

Data Type	What We Collect	Purpose
Account	Email address, display name	To create and manage your account
Profile	Language preference, subscription status	To personalise the app experience
App Data	Tasks, budgets, kids' profiles, meal plans, journal entries	To provide the core features of the app
Payment	Subscription plan, billing date, Stripe customer ID	To manage your subscription
Usage	App interactions, feature usage, error logs	To improve the app and fix bugs
Device	Device type, OS version, language	To ensure compatibility and performance

We do not collect precise location data, biometric data, or any sensitive personal information beyond what is listed above.

3. How We Use Your Data

We use the information we collect to:

• Provide, maintain, and improve MomManager
• Process subscription payments securely via Stripe
• Send transactional emails (e.g. payment receipts)
• Respond to your support requests
• Detect and prevent fraud or abuse
• Comply with legal obligations

We do not use your data for targeted advertising, profiling, or automated decision-making that significantly affects you.

4. Stripe Payments

Payments

MomManager uses Stripe to process subscription payments. When you subscribe, your payment details (card number, billing address) are entered directly on Stripe's secure checkout page and are never transmitted to or stored on our servers.

Stripe acts as an independent data controller for payment processing purposes. Stripe is PCI-DSS Level 1 certified. You can review Stripe's privacy policy at stripe.com/privacy.

We receive from Stripe only: your subscription status, plan type, next billing date, and a Stripe customer ID. We store this to manage your access to premium features.

5. Supabase (Database & Backend)

Infrastructure

Your app data is stored securely in Supabase, a cloud database platform hosted on AWS infrastructure in the EU region. Supabase implements industry-standard security measures including:

• Encryption at rest (AES-256) and in transit (TLS 1.2+)
• Row-level security policies ensuring you can only access your own data
• Regular automated backups

Supabase processes data on our behalf as a data processor. You can review Supabase's security practices at supabase.com/security.

6. AI Features

MomManager includes AI-powered features (meal plans, workout plans, skincare routines, children's stories, and an AI assistant). When you use these features, your prompt text is sent to our secure backend proxy and then to Anthropic's Claude AI model for processing.

We do not store AI conversation history on our servers beyond your current session. Anthropic may process prompts in accordance with their own privacy policy available at anthropic.com/privacy.

Please do not include sensitive personal information (e.g. financial details, medical records) in AI prompts.

7. We Never Sell Your Data

8. Data Sharing

We share data only with the following trusted service providers, strictly for the purposes described:

• Stripe — payment processing
• Supabase — database hosting and authentication
• Anthropic — AI feature processing
• Netlify — web app hosting

All third-party providers are contractually bound to process your data only on our instructions and to maintain appropriate security standards. We do not share data with advertisers, data brokers, or analytics platforms.

9. Data Retention

We retain your personal data for as long as your account is active. If you request deletion of your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes (e.g. payment records for accounting, which are retained for 7 years as required by UK law).

10. Your Rights

Under UK GDPR and applicable data protection law, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — receive your data in a machine-readable format
• Restriction — request we limit how we process your data
• Objection — object to processing based on legitimate interests

To exercise any of these rights, email us at Support@mommanager.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

11. Cookies & Local Storage

MomManager uses browser localStorage (not cookies) to store your session, language preference, theme setting, and app data locally on your device. This data never leaves your device unless you are logged in and synced to our servers.

We do not use third-party tracking cookies or advertising cookies.

12. Children's Privacy

MomManager is designed for use by adults (parents and caregivers). We do not knowingly collect personal data from children under the age of 13. The "Kids" feature within the app allows parents to manage data about their children; this data is associated with the parent's account and subject to this policy.

If you believe we have inadvertently collected data from a child under 13, please contact us immediately at Support@mommanager.co.uk.

13. Security

We take the security of your data seriously and implement appropriate technical and organisational measures, including:

• HTTPS encryption for all data in transit
• AES-256 encryption for data at rest
• Row-level database security policies
• Secure API key management via environment variables
• Regular dependency updates and security audits

No method of transmission over the internet is 100% secure. If you discover a security vulnerability, please report it responsibly to Support@mommanager.co.uk.

14. International Transfers

Your data may be processed in the United States (Stripe, Anthropic, Supabase infrastructure). These transfers are subject to appropriate safeguards including Standard Contractual Clauses (SCCs) as required under UK GDPR.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you by email or via an in-app notification. Continued use of the app after changes are posted constitutes your acceptance of the updated policy.

16. Contact Us

For any privacy-related questions, requests, or concerns, please contact:

SoldOut Digital Ltd
Romford, United Kingdom
Email: Support@mommanager.co.uk