Privacy Policy

My Maternal Mind (“we”, “us”, “our”), located at 25 Rookmelderstraat, 1019 VS Amsterdam, The Netherlands, operates the My Maternal Mind mobile application (the “App”) and website. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the App or website.

We have not designated a Data Protection Officer as our processing activities do not require one under Article 37 GDPR. For all privacy inquiries, you may contact us at support@mymaternalmind.com.

We understand that the information you share with us — including details about your maternal journey — is deeply personal. We are committed to protecting your privacy and being transparent about how your data is handled.

1. Information We Collect

Information You Provide

• Account information: Email address and display name when you create an account (via email or Apple Sign-In).
• Profile information: Your maternal stage (trying to conceive, pregnant, or postpartum), pregnancy week or child age, country, and wellness goals.
• Journal entries: Text content you write in your daily journal reflections, including mood and energy levels.
• Saved affirmations: Affirmations you choose to save for later viewing.
• Wellness preferences: Your favorite wellness toolkit exercises and ambient sound preferences.

Information Collected Automatically

• Meditation session data: When you start, pause, complete, or skip meditations, including duration and completion status.
• Achievement and streak data: Your progress milestones and meditation streak information.
• App usage data: Anonymous diagnostic data such as crash reports, collected by Apple and used to improve app stability.

Sensitive Information

Some of the information you provide — such as your maternal stage, pregnancy week, and wellness goals — may be classified as health-related or sensitive personal data under certain privacy laws (including GDPR). This information is collected only with your explicit consent, processed solely for the purpose of personalizing your experience within the App, and is never used for advertising or sold to third parties.

Apple HealthKit Data

With your explicit permission, the App reads and writes mindful minutes data to Apple Health. This is used solely to display your meditation progress alongside other health data in the Apple Health app. HealthKit data is never sent to our servers, shared with third parties, or used for advertising.

Purchase Information

Subscription purchase history is managed by RevenueCat (see Third-Party Services below) and Apple's App Store. All payment data is handled and stored by Apple. We do not directly process or store payment card information. For details, see Apple's App Store Privacy Policy.

2. How We Use Your Information

We use your information to:

• Provide the App's core features: Personalized meditation generation, journaling, progress tracking, affirmation delivery, and guided wellness exercises.
• Generate personalized content: Your profile information (maternal stage, goals) is used to generate personalized meditation scripts and affirmations. Journal entry content may be used to personalize meditation themes. No raw journal text is shared with third parties — only anonymized thematic summaries are used for content generation.
• Manage your subscription: Determine your subscription status and provide access to premium features.
• Sync your data: Keep your data synchronized across sessions so your progress, journal entries, and preferences are preserved.
• Improve the App: Analyze anonymous usage patterns and crash data to fix bugs and improve features. We may use aggregated, de-identified data to improve our personalization algorithms.

3. AI-Generated Content

The App uses artificial intelligence to generate personalized meditation scripts, affirmations, and wellness insights. Here is how your data is handled in this process:

• What is sent to AI providers: Your maternal stage, wellness goals, and anonymized thematic summaries derived from your journal entries. Raw journal text is never sent to third-party AI providers.
• Text-to-speech: Meditation audio is generated using our own self-hosted text-to-speech system. Your meditation scripts are not sent to any third-party TTS provider.
• Content embeddings: Meditation script text (not personal data) is processed by OpenAI's embedding service solely to ensure variety and prevent repetitive content.
• No AI training on your data: We use Anthropic and OpenAI under commercial API agreements. Your data is not used to train their AI models.
• Data retention in AI pipelines: Thematic summaries used for meditation generation are stored only as long as needed to generate your next meditation and are then discarded. Generated scripts are retained as part of your meditation history.

4. Third-Party Services

We use the following third-party services to operate the App:

We do not sell your personal information to any third party. We do not use your data for advertising. We have not sold or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months.

5. Legal Bases for Processing

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), we process your personal data under the following legal bases:

• Contract performance: Processing necessary to provide the App's core features, including personalized meditation generation, journaling, and progress tracking.
• Explicit consent: Processing of health-related data (maternal stage, pregnancy week) and HealthKit data, which you provide voluntarily. You may withdraw consent at any time.
• Legitimate interests: Analyzing anonymous usage data to improve the App, provided these interests do not override your rights and freedoms.
• Legal obligations: Processing necessary to comply with applicable laws, such as responding to lawful data access requests.

Special category data (Article 9 GDPR): Health data — including mood levels, energy levels, physical symptoms, pregnancy information, child age, and HealthKit mindful minutes — is processed under Article 9(2)(a) GDPR: your explicit consent, which you provide when creating your profile with health-related information and when enabling HealthKit integration.

6. Automated Decision-Making and AI Processing

We use artificial intelligence (Anthropic Claude) to generate personalized meditation scripts, daily affirmations, progress insights, and weekly journey updates based on your profile data, journal entries, and wellness preferences. This processing:

• Does not produce legal or similarly significant effects
• Is based on your explicit consent to use the App's personalization features
• Can be influenced by updating your profile, journal entries, and preferences
• Can be stopped entirely by deleting your account

We also use OpenAI (text-embedding-3-small) to compute text similarity embeddings for meditation variety. This processes only meditation script text, not personal data. You have the right to request human review of any AI-generated content by contacting support@mymaternalmind.com.

7. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the European Union and the United States, where our service providers operate. When we transfer personal data outside the EEA or UK, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Adequacy decisions where the destination country provides sufficient data protection.
• Binding data processing agreements with all third-party service providers.

Our primary infrastructure provider (Supabase) hosts data in the European Union. Text-to-speech audio generation is performed on our own self-hosted European servers — meditation audio content never leaves our infrastructure.

8. Data Storage and Security

• Server storage: Your data is stored on Supabase-managed PostgreSQL databases with row-level security policies ensuring you can only access your own data.
• Local storage: The App stores data locally on your device for offline access and performance. Local data is encrypted by iOS device encryption.
• Encryption in transit: All data transmitted between the App and our servers uses HTTPS/TLS encryption.
• Encryption at rest: Data at rest is encrypted by Supabase's infrastructure using AES-256 encryption.
• Access control: Backend services use API key authentication and role-based access controls with restricted permissions.

While we implement industry-standard security measures, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security but are committed to protecting your data using commercially reasonable safeguards.

9. Data Retention

• Account and profile data: Retained while your account is active; permanently deleted upon account deletion.
• Journal entries: Retained while your account is active; marked as deleted upon account deletion and purged from the database.
• Meditation data and sessions: Retained while your account is active; permanently deleted (including audio files) upon account deletion.
• AI processing logs: Automatically deleted after 90 days regardless of account status.
• In-app analytics (PostHog): Retained for 12 months.
• Error reports (Sentry): Retained for 90 days.
• Website analytics (Google Analytics): Retained for 14 months.
• Email newsletter signups: Retained for 24 months or until you unsubscribe.
• Contact form messages: Automatically deleted after 180 days.
• Deletion audit records: Retained for 3 years for compliance purposes, then anonymized.
• HealthKit data: Managed by Apple on your device. We do not store HealthKit data on our servers.
• Local data: Deleting your account removes all locally cached data from your device, including downloaded meditation audio, profile data, and preferences.

10. Your Rights

For all users

You have the right to:

• Access your personal data stored in the App.
• Deleteyour account and all associated data (available in-app via Profile > Delete Account).
• Export your data in a machine-readable format by contacting us or using the in-app data export feature.
• Correct inaccurate personal data via your in-app profile settings.

For users in the European Economic Area and United Kingdom (GDPR/UK GDPR)

In addition to the above, you have the right to:

• Restriction: Request that we limit processing of your data.
• Portability: Receive your data in a structured, commonly used, machine-readable format.
• Object: Object to processing of your data based on legitimate interests.
• Withdraw consent: Withdraw consent at any time (e.g., for HealthKit data access via iOS Settings > Privacy & Security > Health). Withdrawal does not affect the lawfulness of prior processing.
• Lodge a complaint: You have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.

To submit a formal data access, rectification, deletion, or portability request:

1. Email support@mymaternalmind.com with subject line “GDPR Request: [Access/Rectification/Deletion/Portability]”
2. Include your registered email address for identity verification
3. We will respond within 30 days of receiving your verified request
4. If we need additional time (up to 60 additional days for complex requests), we will inform you within the initial 30-day period
5. You may also exercise your right to erasure directly within the App via Profile → Settings → Delete Account

All requests are free of charge unless manifestly unfounded or excessive.

For United States residents

Depending on your state of residence, you may have additional privacy rights under state laws including the California Consumer Privacy Act (CCPA), Colorado Privacy Act, Connecticut Data Privacy Act, Utah Consumer Privacy Act, and Virginia Consumer Data Protection Act. These rights may include:

• Right to know: What personal information is collected, used, and shared.
• Right to delete: Request deletion of your personal information.
• Right to correct: Request correction of inaccurate personal information.
• Right to opt out: Opt out of the sale or sharing of your personal information. We do not sell or share personal information for targeted advertising.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

Categories of Personal Information Collected

11. Website Analytics & Cookies

Our website at www.mymaternalmind.com uses Google Analytics 4 to understand how visitors use the site. Google Analytics uses cookies to collect aggregated, anonymous usage data such as pages visited, time on site, and referral source.

We use Google Consent Mode v2, which ensures that analytics and advertising cookies are only set after you have given consent via our cookie banner. If you reject non-essential cookies, Google tags send anonymous, cookieless pings that do not identify you personally.

For full details on the cookies we use, see our Cookie Policy.

12. Do Not Track

The App does not track you across third-party websites or services. We do not use third-party advertising trackers in the App and comply with Apple's App Tracking Transparency framework — the App does not request tracking permission because we do not track users for advertising purposes. On our website, we honor your cookie consent preferences via our cookie banner.

13. Children's Privacy

The App is designed for adults and is not directed at children under the age of 13 (or 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at support@mymaternalmind.com and we will promptly delete it.

14. Account Deletion

You can delete your account at any time from within the App:

1. Go to Profile > Delete Account
2. Confirm the deletion

This permanently and immediately deletes:

• Your account and authentication credentials
• All profile information, journal entries, and meditation sessions
• All achievements, saved affirmations, and preferences
• All generated meditation content and wellness favorites
• Your subscription data from RevenueCat
• All locally cached data on your device

This action cannot be undone.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last updated” date at the top of this page and, where appropriate, providing notice within the App. Your continued use of the App after changes are posted constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

16. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your personal data is handled, contact us at:

My Maternal Mind
25 Rookmelderstraat, 1019 VS Amsterdam, The Netherlands

Email: support@mymaternalmind.com
Website: https://www.mymaternalmind.com

We aim to respond to all privacy-related inquiries within 30 days.