How we handle what you write about your body and your mind.
This policy explains how Mamalu collects, uses, and shares consumer health data. It sits alongside our main Privacy Policy and exists to meet Washington's My Health My Data Act and similar consumer-health-data laws in other states.
The reflections you write, and the stage and pregnancy information you give us, can reveal your physical or mental health status — for example, how you are feeling during pregnancy. We treat all of it as consumer health data.
We collect this to provide the service you asked for. We also derive de-identified patterns from reflections — counts and themes, never sentences — to improve what Mamalu offers other mothers. Once de-identified, that information holds nothing that can be traced back to you, and we commit not to attempt to re-identify it and not to permit anyone else to. To check that a generated card does not echo anyone's actual writing, we compare it against reflections automatically; that comparison is never stored. If you choose to share your words, we ask you separately and you can withdraw at any time. We do not collect consumer health data for advertising.
We ask for your affirmative, opt-in consent before collecting or processing consumer health data beyond what is strictly necessary to deliver the features you asked for. Non-essential analytics run only on our public pages and never where health data is collected or shown; you can switch them off at any time. You can withdraw consent at any time by emailing hello@mamalu.app or by deleting your account.
We do not sell your consumer health data.
We do not share it for targeted advertising, and we run no advertising pixels on any page where health data is collected or shown.
We use processors to run the service: our AI provider, Anthropic, to generate reflections, and our hosting, database, and email providers to store and deliver them. The full list is in our main Privacy Policy.
Under its commercial terms, our AI provider does not use your reflections to train its models and deletes them within about 30 days, except content flagged for safety or legal reasons.
We will not provide your consumer health data to anyone else except as needed to deliver the service, to comply with law, or with your explicit authorization.
You have the right to:
To exercise any of these, email hello@mamalu.app from the address on your account. If you started without an email, include the account ID shown at the bottom of your Memory Book so we can find your entries. It is the only way we can tell which are yours. We will respond within the timeframe the law requires, and we will not treat you differently for asking.
We do not sell consumer health data. If that ever changed, the law requires a separate, signed valid authorization from you first, and we would obtain it before any such activity.
We apply the safeguards described in our main Privacy Policy, and we keep consumer health data only as long as needed to provide the service or as the law requires. You can delete it at any time.