What we collect, why, and what we never do with it.
There is a separate Consumer Health Data Privacy Policy, required by Washington's My Health My Data Act. It governs how we handle your reflections and other health-related data, and should be read alongside this one.
Mamalu is a reflection tool for mothers. You write; we send your words to an AI provider to write a personalized reflection back; your entries accumulate in a private Memory Book.
We do not sell your data. We run no advertising pixels anywhere on this site. We do not use your reflections to target ads. Mamalu is not a medical, therapy, or crisis service.
We do not knowingly collect data from anyone under 18.
To generate your reflection, build and show your Memory Book, let you return to your account, send you email you have asked for, understand product usage in aggregate, and keep the service safe and working. We do not use your reflections to advertise to you or to anyone else.
Your reflections are processed by a third-party AI provider, Anthropic, via its commercial API, to generate the reflection we return to you. This is automated and may be imperfect or inaccurate — it is reflection, not advice.
Under Anthropic's commercial terms, your reflections are not used to train Anthropic's models, and are automatically deleted within 30 days, except where content is flagged for a usage-policy or legal reason, in which case it may be retained longer.
If something you write suggests you may be in crisis, Mamalu shows a fixed message with crisis resources — 911, the National Maternal Mental Health Hotline, 988, and Crisis Text Line. We record that this happened so we can review, in aggregate and periodically, whether our safety response is working.
We do not monitor your account in real time, and we are not able to intervene, contact you, or send help. The resources shown are how you get help. Mamalu is not a crisis service.
We use service providers who process data on our behalf:
We do not sell your personal data and do not share it for cross-context behavioral advertising.
You can access, correct, delete, or export your data, and withdraw consent to non-essential analytics, at any time. To make a request, email hello@mamalu.app from the address on your account. If you started without an email, include the account ID shown at the bottom of your Memory Book so we can find your entries. It is the only way we can tell which are yours. We will action the request within the time the law requires.
Deleting your account removes your reflections and your Memory Book from our systems. Copies held by our AI provider are deleted on their normal cycle, within about 30 days, subject to the exception above.
Non-essential analytics run only on our public pages — the homepage and these policy pages. They never run where you write, read your book, or tell us about your pregnancy. You can switch them off at any time on our safety page. Essential functions — creating your account, saving your book, delivering the service — run in order to provide what you asked for.
We keep your reflections and Memory Book until you delete them or close your account. Our AI provider deletes inputs and outputs within about 30 days. Analytics data is kept only as long as needed for the purposes above.
We use industry-standard measures — encryption in transit, access controls, and row-level security on our database. No system is perfectly secure, and we cannot guarantee absolute security.
Mamalu is for adults 18 and older. We do not knowingly collect data from minors. If you believe a minor has used Mamalu, contact hello@mamalu.app and we will delete the data.
Mamalu is offered to US users only. If you access it from outside the US, please do not use it to submit personal data.
We may update this policy. We'll post the new effective date here and, for material changes, take reasonable steps to notify you.
Questions or requests: hello@mamalu.app