Privacy Policy
Momoo is made by Devologies PVT LTD ("we", "us"). This policy explains what we collect when someone uses Momoo, why, who we share it with, and the choices they have. We wrote it to be read, not skimmed past.
The short version: we collect what Momoo needs to work, we don't show ads, we don't track people across apps or websites, and we don't sell anyone's data.
1. What we collect
Account details. When someone creates an account we receive their email address and a user ID from Firebase Authentication. If they use Sign in with Apple, Apple may give us a private relay email address instead of their real one. We do not ask for their name.
Baby profile. The details they enter about their baby, such as name, date of birth, feeding type and pumping goals.
Logs. The breastfeeding, pumping, bottle and milk stash entries they record: times, durations, sides, amounts, milk type and storage, and any notes they add.
Ask questions. The questions they type into Ask, and the answers, are saved as a conversation history in their account.
Voice entries. If they use voice logging, Apple's speech recognition turns what they say into text on our behalf. The audio is handled by Apple under Apple's privacy policy; we receive only the text, which is used to fill in the log and kept as a note.
Subscription status. Whether they have an active subscription, which plan, and when it renews or ends. We never see or store payment card details; Apple handles payment.
Crash reports. If the app crashes, Firebase Crashlytics sends us a technical report (device model, iOS version, what the app was doing) so we can fix the bug. These reports are not linked to their account.
Settings on the device. Some preferences, such as units and display options, are stored only on their device. If they are timing a feed when the app closes, the timer is kept on the device so they can pick it back up.
We do not collect location, contacts, photos, advertising identifiers or browsing history, and we do not use analytics to profile people.
2. Why we use it
- To run the app: sign-in, saving and syncing logs across their devices, reminders, history and exports.
- To answer Ask questions (see section 4).
- To provide and check subscriptions.
- To fix bugs and keep the service secure.
- To respond when they contact us.
Our legal bases, where the GDPR applies, are performing our contract with them (providing the app), our legitimate interest in keeping the app working and secure, and their consent where we ask for it (for example, microphone access).
3. Who we share it with
We share data only with service providers that help us run Momoo, and only what each one needs:
| Provider | What for | Data involved |
|---|---|---|
| Google Firebase (Authentication, Cloud Firestore, Cloud Functions, Crashlytics) | Accounts, storing and syncing data, server features, crash reports | Account details, profile, logs, Ask history, subscription status, crash reports |
| OpenAI | Answering Ask questions | The question and a short summary of recent logs (section 4) |
| RevenueCat | Managing subscriptions | User ID, purchase and subscription history |
| Apple | Sign in with Apple, In-App Purchase, speech recognition | As described in Apple's own privacy policy |
Caregivers. If they invite a partner or caregiver to their household, those people can see and add logs for the baby. Pumping logs stay hidden from caregivers unless the account owner chooses to share them.
We may also disclose data if the law requires it, to protect people's safety, or as part of a merger or sale of the business, in which case this policy would continue to apply.
We do not sell personal data, share it for cross-context behavioural advertising, or use it for advertising of any kind.
4. Ask and OpenAI
When someone asks Momoo a question that needs the AI model, our server sends OpenAI the question, recent turns of that conversation, and a short text summary of their recent logs (for example, feed counts and times, pumped amounts, and the baby's name and age). Some common questions are answered directly from their data without contacting OpenAI.
- Requests go through our server; the app never talks to OpenAI directly.
- We send OpenAI a one-way hash of their user ID, not their email or the ID itself.
- We ask OpenAI not to store the response (
store: false). Under OpenAI's API policy, data sent through the API is not used to train their models. OpenAI may keep request data for a limited time for abuse monitoring under its own terms.
Ask gives general information, not medical advice (see our Terms of Use).
5. How long we keep it
We keep account data, logs and Ask history for as long as the account exists. When someone deletes their account, we delete it (section 6). Crash reports are kept by Crashlytics for 90 days. Copies in provider backups and logs are removed within 30 days.
6. Deleting an account
They can delete their account at any time in the app: Settings → Delete account and data. This permanently deletes their baby profile, logs, stash, Ask history and subscription records from our database, and then deletes their sign-in account. If they used Sign in with Apple, we also revoke Momoo's access to their Apple ID.
Deleting the account does not cancel an Apple subscription. They should cancel it in their Apple ID settings first (Settings → their name → Subscriptions).
7. Their rights
Depending on where they live (including under the GDPR in the EU and UK, and the CCPA in California), they may have the right to:
- see the personal data we hold about them and get a copy,
- correct it,
- delete it,
- object to or restrict how we use it,
- receive it in a portable format,
- withdraw consent where we rely on it,
- not be treated differently for using these rights,
- complain to their local data protection authority.
Much of this can be done in the app: logs can be edited or deleted, history can be exported as a CSV file, and the whole account can be deleted. For anything else, they can email us at support@devologies.com. We may need to confirm their identity first, and we will reply within the time the law requires.
8. Children's privacy
Momoo is for parents and caregivers. It is not directed at children, and we do not knowingly collect personal data from children. Information about a baby is entered by their parent or caregiver, who controls it and can edit or delete it at any time. If someone believes a child has given us personal data, they can contact us and we will delete it.
9. Security
Data is sent over encrypted connections and stored with Google Firebase. Access to each account's data is limited by sign-in and server rules. No system is perfectly secure, but we work to protect the data we hold.
10. International transfers
Our providers may process data in the United States and other countries. Where the law requires it, we rely on safeguards such as the providers' standard contractual clauses.
11. Changes
If we change this policy, we will update the date at the top and, for significant changes, tell people in the app.
12. Contact
Devologies PVT LTD
Email: support@devologies.com