Privacy Policy

Introduction

Mothermind ("we", "our", or "us") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our birth confidence and mental health support application.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using Mothermind, you agree to the collection and use of information in accordance with this policy.

Data Controller

Mothermind is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us at:

Information We Collect

Information You Provide

• Account Information: Email address and password when you create an account
• Profile Information: Name, pregnancy stage, and user type (expecting parent, partner, professional)
• Check-in Data: Emotional states, preparedness levels, stress levels, and any free-text responses you provide
• Feedback: Any feedback or suggestions you submit through our forms
• Early Access Signup: First name, email, user type, and weeks pregnant (optional)

Information Collected Automatically

• Usage Data: How you interact with our app, pages visited, and features used
• Device Information: Browser type, device type, and operating system
• Cookies: Essential cookies for authentication and optional analytics cookies (with your consent)

How We Use Your Information

We process your personal data based on the following legal bases under UK GDPR:

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Account data: Retained while your account is active and for 2 years after deletion request
• Check-in data: Retained for the duration of your account to provide personalised support
• Analytics data: Anonymised data may be retained indefinitely for research purposes
• Early access signups: Retained until the service launches or you request deletion

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

To exercise any of these rights, please contact us at privacy@mothermind.com. We will respond to your request within 30 days.

Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication and access controls
• Regular security assessments and updates
• Staff training on data protection
• Row-level security policies ensuring users can only access their own data

Cookies

We use cookies to provide essential functionality and, with your consent, to understand how you use our service:

You can manage your cookie preferences through our cookie consent banner or your browser settings.

Third-Party Services

We work with trusted third-party service providers who process data on our behalf:

• Hosting & Database: Supabase (data stored in UK/EU data centres)
• Payment Processing: Stripe (for donations - we do not store card details)
• Email Services: For transactional and marketing emails (with consent)

All third-party processors are required to comply with GDPR and maintain appropriate security measures.

Children's Privacy

Mothermind is designed for adults aged 18 and over. We do not knowingly collect personal data from children under 18. If you believe we have inadvertently collected data from a child, please contact us immediately at privacy@mothermind.com.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.