Privacy Policy

1Who is responsible

HakkApps, LLC, 390 NE 191st St STE 59493, Miami, FL 33179, United States, is the controller of your personal data. Write to support@momiko.app about anything on this page.

2Momiko is not a medical service

Momiko is a log and a helper for parents. It gives general information from public sources, not medical advice, and it does not diagnose or treat. We do not use your data for medical research or clinical studies.

3What we collect

Your account.

• Your email address and the account you sign in with (Apple or Google) with its identifier. If you choose Apple's "Hide My Email", we receive only the relay address.
• Your name, as Apple or Google gives it when you first sign in or as you change it in the app, your language, and when you agreed to the processing of health data and to Momi, with the version of the text you agreed to.

Your family and your children. This is the data you enter yourself.

• The family's name, its members and their roles, and pending invitations. We keep invitation codes only in a form that cannot be turned back into the code.
• Each child's profile: name, date and optionally time of birth, sex, weeks of pregnancy at birth if the baby was born early, and a photo if you add one. For an expected baby: the due date and how exact it is.
• Entries: feeds, pumping and the milk stash, sleep, diapers, activities and walks, growth measurements, milestones, solids and reactions to new foods, temperature, medicines, vaccinations, contractions and checklists in the expecting mode, and notes you write. Each entry records who logged it and when.
• Family settings, such as the vaccination schedule of a country you chose.

Health data. Almost everything you log about a child's body and care — feeds, sleep, diapers, growth, milestones, solids and reactions, observations, temperature, medicines, vaccinations, and in the expecting mode the due date and contractions — is data about health. We process them only with your explicit consent, which you give when you create your account and can withdraw at any time (see "Your choices").

Questions to Momi. If you use Momi, your questions, Momi's answers and the conversations they belong to (see "Momi, the AI helper").

Subscription. Which plan you have, its status and dates, the price, currency and store country, the identifiers the App Store or Google Play gives the purchase, and the store's confirmation of it. We do not receive your card or bank details — the store handles payment.

Messages to support. What you send us, including your email address and anything you attach.

Notifications and email. If you allow notifications: a push token for each of your devices with the app version, which notifications you want, and your quiet hours with your time zone. We send service emails to your address when needed, and no marketing emails.

Technical data. When the app talks to our servers, we receive your IP address, the app and system version and the platform, and with a question to Momi the region of your phone. Our servers record each request in logs — the time, the address requested, the IP address, your account identifier and the result, but not the contents of your entries (see "How long we keep it"). If you allow location for the weather, the app sends an area of about 5 × 5 km, never your coordinates (see "Weather and location").

What we do not collect. We do not collect your contacts, your precise location, your voice, or data from other apps. Voice questions to Momi are turned into text on your phone; the sound never leaves it. We do not use advertising identifiers or analytics that track how you use the app.

Where it comes from. From you; from the other members of your family, who log entries about the children and see your name; from Apple or Google when you sign in; and from the App Store or Google Play about your subscription.

4Why we use it

• To provide Momiko to you and your family: keep the log, sync it between your devices and with the members of your family, show calculations and recommendations, prepare the doctor's report. Legal basis in the EU and the UK: performance of our contract with you (Article 6(1)(b) GDPR) and, for health data, your explicit consent (Article 9(2)(a) GDPR).
• To answer your questions with Momi: with your separate consent (Articles 6(1)(a) and 9(2)(a) GDPR).
• To show the weather and clothing advice: performance of the contract; the location permission on your phone is your choice.
• To manage your subscription and check purchases with the store: performance of the contract.
• To send notifications you have turned on: performance of the contract. News from Momiko is off until you turn it on; the legal basis is your consent (Article 6(1)(a)).
• To keep the service secure and working — logs, crash reports, protection against abuse, fixing bugs: our legitimate interest in a reliable and safe service (Article 6(1)(f)).

We do not use your data for advertising, we do not build advertising profiles, we do not sell your data and we do not share it for cross-context behavioural advertising. We do not make decisions about you that are based solely on automated processing and have legal or similarly significant effects.

You are not required by law to give us this data. Without an account and the consent to health data Momiko cannot work; Momi, location and notifications are optional.

5Who sees it in your family

Everyone in a family sees all of its children and all their entries, with the name of the member who logged each one, and can add, edit and delete entries. The family's owner can invite and remove members. When you join a family, its members see your name, and they can see when your phone received the entries they made. The app can also show how many entries each member logged. Your conversations with Momi are yours: other members do not see them.

6Momi, the AI helper

Momi works only after you agree to it on its first screen. Then, each time you ask a question about a child, we send to an AI service:

• your question;
• up to the last six questions and answers of the same conversation, as text;
• the child's profile as Momi needs it: name, age, sex, and for a baby born early the corrected age; for an expected baby, the due date;
• for a born child, the names of the family's other born children, with every question, so that entries from a phrase go to the right child;
• your language, time zone and the current time, so that "today" and "this week" mean what they mean for you;
• the results Momi requests to answer, only for the child you asked about: today's feeds and volumes; sleep for the last 24 hours and seven days; diaper counts; the milk stash; the latest growth measurement and curve with its percentile; milestones marked for the current age; foods tried, with allergens, introduction status and the kinds and dates of reactions you logged; temperatures and the names and times of medicines over the last seven days, without doses; today's activity; comparisons with the child's own recent days; and the weather figures and clothing advice. These are the values you logged, not only totals, and they do not say who logged them.

If you allowed location, the phone attaches that area of about 5 km to each question so that Momi can get the weather. Our server uses it only for that and does not store it with the conversation; the AI service receives the resulting weather figures and clothing advice, not the area. We do not send your contacts, your precise location, your email, your name or your account details, unless you write them in your question. Before a question is sent, it is checked for signs of an emergency; if it looks like one, the AI service is not called at all and you are told to contact a doctor.

The AI service is AI service name. It passes the request to the AI model that writes the answer. AI service retention

We keep your conversations so that you can see them in the history, until you delete a conversation, delete your account, leave the family the conversation is about, or the child or the family is deleted. We also keep a technical record of each call to the AI service, without the text of the question or the answer. That record is kept for 13 months, and after 90 days it is no longer linked to you.

You can turn Momi off at any time in Menu → Account → Your data → What goes to Momi. From that moment nothing more is sent; your earlier conversations stay in the history for as long as described above. The app asks for consent again if you want to use Momi later. If we change the AI service, we ask for your consent again before sending anything to the new one.

7Weather and location

Location is used only for the weather and clothing advice, and only if you allow it. Your phone turns its location into a square about 5 × 5 km and sends only that square. Our server asks Apple Weather for the weather at the centre of the square and keeps the answer for that square for up to 24 hours, without any link to you. We do not store your coordinates, and we do not record or log who asked about which square. For "what to wear home from the hospital" in the expecting mode, the phone sends the due date along with the square. Our server asks Apple Weather for that date and square and keeps the answer for up to 24 hours, with no link to you.

8Who else receives data

We use these service providers. Each receives only what it needs for its task, and each provider that handles your data for us is bound to protect it at least as well as this policy describes and as the app stores require. Each provider's contact details are on its website. Apple and Google act as independent controllers for sign-in and payments; the others process data on our instructions:

• Hosting — our servers and databases are in Germany (European Union), rented from a hosting provider.
• Cloudflare (United States) — the network between your device and our servers. Requests pass through its data centres in encrypted form and are decrypted there on their way to us, possibly in a data centre outside your country.
• Apple and Google (United States and Ireland) — sign-in (Sign in with Apple, Google Sign-In), payments and subscription status (App Store, Google Play), and push notifications (Firebase Cloud Messaging). A push contains the text of the notification, such as the name of a member or family or the renewal price, and the technical data needed to deliver it.
• Apple Watch and Siri (Apple, United States), only if you use them. Your phone sends the watch a snapshot over Apple's connection between your devices: your name, the children's names, the last feed and sleep and running timers. The watch sends back what you log and keeps the snapshot until you sign out on the phone. Apple's terms apply to what you say to Siri; Siri says Momiko's short answer aloud, which can include a child's name if you have several children.
• Google Firebase Crashlytics (United States) — crash reports: what the app was doing when it failed, the device model, memory and system version, and an identifier for this installation. They contain no entries about your child and no account identifier.
• Apple Weather (United States) — the weather at the centre of an area of about 5 km, with the language and time zone and, for clothing on the way home from the hospital, a date; nothing that identifies you.
• AI service name (United States, and the countries of the model providers it uses) — answers to questions to Momi, as described above, only if you agreed.
• Resend (United States) — delivery of the emails we send you.
• mail provider — our support mailbox.

We also disclose data if the law requires it, to protect the rights and safety of users or others, or as part of a sale or reorganisation of our business under this policy (Article 6(1)(c) and (f) GDPR). We do not give data to anyone else.

9International transfers

Some providers — Google, Apple, Cloudflare, Resend, our email provider, the AI service and the model providers it uses — may process data outside the European Economic Area and the United Kingdom, including in the United States. Where the law requires it, these transfers rely on the European Commission's Standard Contractual Clauses, the UK addendum to them, or the EU–US Data Privacy Framework where the provider is certified under it. You can ask us for a copy of these safeguards at support@momiko.app.

10How long we keep it

• Your account, your families and your entries — as long as your account exists. Entries in a family stay with the family as long as it exists, even after the member who logged them leaves.
• A deleted entry, child or family — disappears from the app at once and is erased from our servers about 90 days later. Until then it is kept so that every device of the family learns about the deletion. When you replace a child's photo or delete the child, the photo is erased from our servers right away, once the change reaches us; it does not wait the 90 days.
• Momi — conversations until deleted as described above; technical records of AI calls for 13 months, unlinked from you after 90 days.
• Subscription and purchase records — as long as your account exists; they are deleted with it. The stores keep their own records of your payments.
• Server logs and other technical records — up to 7 days.
• Push notifications — records of sent pushes are erased after 30 days.
• Support messages — up to 12 months after the question is closed.
• Backups — backup period.
• Crash reports in Firebase Crashlytics — 90 days.
• Records of our team's access — which account or family a team member opened or changed to answer a request, without its contents: up to 12 months.

11Deleting your data

You can delete your account in the app at any time: Menu → Account → Delete account. Here is what happens:

• At once: your account, your profile and consents, your Momi conversations, your subscription and purchase records, your notification settings and devices are deleted, and you are signed out everywhere. There is no waiting period, and it cannot be undone.
• In a family where you were alone, the family, its children and all their entries disappear at once and are erased from our servers about 90 days later; their photos are erased at once.
• In a family with other members, the family stays with them: if you were the owner, ownership passes to the member who joined earliest; the children and the entries — including the ones you made — stay with the family, and your name is removed from them; only a meaningless internal identifier remains.
• If you signed in with Apple, we ask Apple to revoke Momiko's access to your Apple ID.
• Deleting your account does not cancel the subscription in the App Store or Google Play — do that in the store.

The owner can also delete a single child or the whole family, which deletes their entries for everyone. Without the app, see Deleting your account.

12Your choices

• Withdraw consent to health data: Menu → Account → Withdraw consent to health data. Momiko cannot keep entries without this consent, so withdrawing deletes your account in the same way as above. Withdrawing does not affect processing that took place before. Entries in a family with other members stay with that family; to have pregnancy entries about you removed, delete them before withdrawing, or write to us.
• Momi: turn it off on the "Your data" screen at any time.
• Location, notifications, microphone and speech recognition, camera, photos: allow or deny them in your phone's settings; the rest of the app keeps working. The camera is used only to scan invitation QR codes, and from your photos we receive only the one you choose.
• News from Momiko: off unless you turn it on in Menu → Notifications.
• Download your data: Menu → Account → Your data → Download my data gives you the entries of each of your children as a CSV file, with or without a subscription. A PDF report for the doctor is in the Baby tab.

13Your rights

Depending on where you live, you have the right to access your data and get a copy of it, to correct it, to delete it, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time. Most of this you can do in the app; for anything else — including a full copy of your account and profile data — write to support@momiko.app. We answer within one month, and we may need to confirm that the request comes from you.

You have the right to object at any time to processing based on our legitimate interest (logs, crash reports, protection against abuse), on grounds relating to your situation. Write to support@momiko.app.

• European Union and United Kingdom: these are your rights under the GDPR and the UK GDPR. You can complain to the data protection authority of the country where you live or work.
• United States: we do not sell or share personal information, and we do not use it for targeted advertising. We use sensitive personal information, such as health data, only to provide Momiko, so there is nothing to limit. Residents of California and other states with privacy laws can use the rights above, including to know, delete and correct, without being treated differently, and can ask someone they authorise to make a request for them. If we decline a request, you can appeal by replying to our answer; we answer an appeal within 45 days and explain our decision in writing. If the appeal fails, you can complain to the attorney general of your state.
• Brazil, South Korea, Japan, Australia and other countries: you have the rights your local law gives you, and you can exercise them the same way. See also "Country-specific information".

14Consumer health data

If you live in a US state with a consumer health data law, such as Washington or Nevada, see our separate Consumer Health Data Privacy Policy.

15Country-specific information

• Brazil (LGPD): the contact for data protection (encarregado) is HakkApps, LLC, support@momiko.app. You can also complain to the Brazilian data protection authority (ANPD). International transfers rely on your consent where you gave it and on contracts with our providers.
• South Korea (PIPA): the contact responsible for privacy is HakkApps, LLC, support@momiko.app. Your data is transferred abroad over the network when you use the app, to the providers and countries listed under "Who else receives data" and "International transfers", for the purposes and periods described there; you can refuse by not using the feature concerned (Momi, weather) or by deleting your account. Data is destroyed by deleting it from our databases, and backups are overwritten as they rotate.
• Japan (APPI): the business operator is HakkApps, LLC, 390 NE 191st St STE 59493, Miami, FL 33179, United States. Foreign recipients and their countries are listed under "Who else receives data".

16Children

Momiko is for adults. We do not knowingly collect data from children, and children must not use the app. The data about babies in Momiko is entered by their parents or with their permission, and is used only to provide the app to that family. If you believe a child has created an account, write to us and we will delete it.

17Security

Data is encrypted in transit between the app and our servers. Access to the data is limited to the few people who run Momiko, who open it only to keep the service working or to answer your request. Your log is also stored on your phone so that the app works offline; it is protected by the phone's own security, so protect your phone with a passcode. On iPhone it may be included in your own device backups. Reports and CSV files are made on your phone; once you share one, it is in your hands. Timers, the last feed and reminders, including a medicine or allergen name and, if you have several children, a child's name, can appear on the lock screen and in widgets if you use them. Reminders are scheduled on your phone and do not go through our servers. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

18This website

This website does not use analytics, advertising or tracking, and sets no cookies except one, kept for a year, that remembers your language. The hosting provider of the website records the IP address, time and requested page of each visit in its logs, to deliver the site and protect it from abuse, under our legitimate interest. If you open a family invitation link here, the link appears in those logs like any other page address; the website itself does not store it, and the invitation works only once and expires in 7 days.

19Changes

The date at the top shows when this policy last changed. If a change significantly affects how we use your data, we will tell you in the app before it takes effect, and ask for your consent again where the law requires it.

20Contact

HakkApps, LLC, 390 NE 191st St STE 59493, Miami, FL 33179, United States. Email: support@momiko.app.

This policy is published in several languages. If a translation differs from the English version, the English version prevails, to the extent the law allows.