Privacy policy

This policy explains what personal data MamaSure collects, why, and the choices you have. The controller is MamaSure (operator details to be completed before launch). Contact us at privacy@mamasure.app.

What we collect

• Account data: email address, password (stored hashed by our authentication provider), optional display name.
• Health-related data: whether you are pregnant, breastfeeding or planning, and the products, ingredients and medicines you scan, together with the results. This can reveal information about your health, so we only process it with your explicit consent, which you give during onboarding and can withdraw at any time in your account.
• Photos: processed in memory to produce your result, then discarded. We do not store your photos.
• Billing data: handled by Stripe. We store your Stripe customer and subscription identifiers and status, not your card details.
• Usage and technical data: scan counts against your monthly allowance, error codes, and IP addresses used briefly for rate limiting and security.
• Optional product analytics: a few in-app events (such as viewing the upgrade page) only if you opt in.

Why we use it

• To provide the service you asked for: running scans, keeping your history and managing your plan (performance of a contract).
• To process health-related information (your explicit consent).
• To keep the service secure and prevent abuse, such as rate limiting (legitimate interests).
• To meet legal obligations, such as keeping billing records (legal obligation).
• To improve the product with optional analytics (your consent).

Who processes it for us

• Supabase: database and authentication hosting.
• Google (Gemini API): AI analysis of your scan text and photos.
• Stripe: payments and subscription management.
• Our hosting provider: serving the website and app.
• Open Food Facts / Open Beauty Facts: when you enter a barcode, the barcode number (only) is looked up in these public databases.

Some of these providers may process data outside your country, including outside the EEA/UK. Where they do, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. We never sell your personal data and we don't use advertising trackers.

How long we keep it

• Scan history: until you delete a scan, clear your history, or delete your account.
• Photos: not stored.
• Account data: until you delete your account.
• Usage records without scan content (category, status, timing and cost): kept for service analytics. When you delete your account they are disconnected from you.
• Billing records: as long as required by tax and accounting law.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing of your data, to data portability, and to withdraw consent at any time. In your account you can download your data, delete individual scans or your whole history, withdraw health-data consent and permanently delete your account. For anything else, email privacy@mamasure.app. You also have the right to complain to your local data protection authority.

Cookies

We use only cookies that are strictly necessary to keep you signed in and to secure the service. We don't use advertising or third-party analytics cookies.

Children

MamaSure is intended for adults. Please don't use it if you are under 16.

Changes

If we make significant changes, we'll update this page and let account holders know.