Privacy Policy

1. Information We Collect

We collect several types of information from and about users of our Service, including the following:

1.1 Personal Information You Provide

Account and profile data: full name, email address, gestational age or due date, pregnancy-related profile information, and any information you provide during onboarding.
Authentication data: when you sign in with Google or other OAuth providers, we receive your display name, email address, and a unique user identifier.
User-generated content: health logs, daily journal entries, medication records, nutrition entries, mood inputs, and any notes or files you upload.
Communications: messages, support requests, and feedback you send to us.

1.2 Health and Wellness Data

Vitals and biometrics: heart rate, blood pressure, blood oxygen, weight, temperature, glucose, kick counts, sleep duration and quality, and similar measurements you enter manually or that are transmitted from connected devices (such as ESP32 sensors or wearables).
Nutrition data: meals logged, calories, macronutrients, hydration, caffeine intake, and dietary restrictions.
Medication and supplement data: medication names, dosages, frequency, adherence records, and prescriptions where provided.
Location information: approximate location when you use the "nearby hospitals" or location-based features of the Service.

1.3 Information Collected Automatically

Usage data: browser type, device information, IP address, pages visited, time spent on features, referring/exit pages, and clickstream data.
Cookies and similar technologies: we use local storage, session tokens, and analytics cookies (e.g., Vercel Analytics) to deliver functionality and understand aggregate usage patterns.
Performance data: error reports, crash logs, and telemetry used to diagnose issues and improve the Service.

2. How We Use Your Information

We use the information we collect to operate, maintain, improve, and develop the Service. Specifically, we use your information for the following purposes:

To provide the Service: create and manage your account, authenticate you, deliver dashboards, and maintain your health records.
AI guidance and personalized insights: analyze health inputs with our risk and guidance engines to surface personalized tips, alerts, and educational content. These outputs are informational only and do not constitute medical advice.
Risk alerts and notifications: detect out-of-range vitals, medication reminders, appointment prompts, and emergency contact escalations where configured.
Analytics and product improvement: perform internal analytics to understand feature usage, troubleshoot bugs, and design new capabilities. Aggregated or de-identified data may be used for research purposes.
Communications: send service announcements, security notices, and response to support inquiries. We may send marketing emails only with your explicit consent, and you can opt out at any time.
Legal compliance, safety, and enforcement: comply with applicable laws, regulations, and lawful requests; protect the safety, rights, and property of MomSafe, our users, and the public; and detect, investigate, and prevent fraudulent, abusive, or unlawful activity.
With your consent: for any other purpose disclosed at the point of collection or authorized by you in writing.

3. Disclosure of Your Information

We may disclose your personal information in the following circumstances:

3.1 With your explicit consent

We will share personal information and health data with third parties (such as your care provider or emergency contact) only when you explicitly instruct us to do so through the Service.

3.2 With service providers

We share data with vendors and subcontractors that perform services on our behalf, including hosting (Supabase, Vercel), infrastructure, analytics, and email delivery providers. Each provider is bound by contractual obligations to protect the confidentiality and security of your data.

3.3 For legal and safety reasons

We may disclose information in response to subpoenas, court orders, or other legal process; to comply with applicable law; or to protect the vital interests of any person where disclosure is necessary or permitted by law.

3.4 Business transfers

In connection with any merger, acquisition, financing, divestiture, or sale of all or a portion of our business or assets, your information may be transferred as part of that transaction, subject to applicable law and any applicable confidentiality requirements.

4. Google User Data & Limited Use Disclosure

When you choose to register or sign in to MomSafe AI using your Google Account ("Google Sign-In"), we request access only to your basic account information (name, email address, and profile picture) to authenticate you and create your account.

Purpose of use: Your Google user data is used exclusively to verify your identity, maintain your account profile, and deliver service-related notices.
No sale or advertising: We never sell, rent, or license your Google user data. We do not use or transfer Google user data for serving personalized, retargeted, or interest-based advertising.
No human access: We do not allow humans to read your Google account data unless we have obtained your affirmative agreement for specific troubleshooting, it is necessary for security purposes, or it is required by applicable law.
Google Limited Use Compliance: MomSafe AI's use and transfer of information received from Google APIs to any other app will strictly adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Data Retention and Deletion

We retain your personal and health data for as long as your account is active or as needed to provide the Service. Upon account deactivation or deletion, we will delete or de-identify your information within a reasonable period, except for data we are required or permitted to retain by applicable law, regulation, or internal recordkeeping policy. Backups and disaster-recovery copies may persist for an additional retention window before being purged.

6. Data Security

The security of your personal and health information is important to us. We implement commercially reasonable administrative, technical, and physical safeguards to protect against unauthorized access, use, alteration, or disclosure, including:

Encryption of data in transit (TLS 1.2+) and at rest (AES-256) via our infrastructure providers.
Role-based access controls and least-privilege principles for internal systems.
Automated monitoring for anomalous activity, abuse, and security incidents.
Regular security assessments and vulnerability management.

No method of transmission over the Internet or electronic storage is 100% secure, however, and we cannot guarantee absolute security. If you have reason to believe your interaction with us is no longer secure, please notify us immediately at the contact address below.

7. Your Choices and Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information:

Access and correction: request access to, or correction of, the personal information we hold about you.
Deletion: request deletion of your account and personal information, subject to our retention obligations.
Data portability: request an export of your personal data in a structured, commonly used, and machine-readable format.
Restriction and objection: request restriction of, or objection to, certain processing activities where permitted by law.
Withdrawal of consent: withdraw any consent previously provided, without affecting the lawfulness of processing based on consent before withdrawal.
Marketing communications: opt out of promotional emails by following the unsubscribe link in any marketing message.

To exercise these rights, please contact us at privacy@momsafe.in. We will respond to requests in accordance with applicable timelines and requirements under law.

8. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe we may have information about or from a child under 13, please contact us so we can delete that information immediately.

9. Cross-Border Data Transfers

Your information may be processed in, and transferred to and stored in, countries other than your own. Our infrastructure providers may operate globally. By using the Service, you consent to the transfer of information to countries that may have data protection laws different from those in your jurisdiction. We will take reasonable steps to ensure your information is treated securely and in accordance with this Privacy Policy and applicable law.

10. No Medical Advice Disclaimer

The Service, including any AI guidance, risk scoring, alerts, and educational outputs, is for informational and wellness purposes only. It is not a substitute for professional medical advice, diagnosis, or treatment. Always seek the advice of your physician, obstetrician, or other qualified health provider with any questions regarding a medical condition, symptoms, medication changes, or the health of you or your child.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, features, or legal requirements. We will notify you of material changes by updating the "Last updated" date at the top of this page and, where appropriate, by providing a more prominent notice such as an in-app banner or email notification. Your continued use of the Service after changes become effective constitutes acceptance of the revised Privacy Policy.