1. Overview
MommyDears, operated by AAC Private Limited ("we", "us", "our"), respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the MommyDears platform — including our website at mommydears.co.in, our mobile application, and related services.
This policy is compliant with India's Digital Personal Data Protection Act, 2023 (DPDPA) and applicable rules thereunder. By using the Platform, you consent to the practices described in this policy. If you do not agree, please discontinue use of the Platform.
2. Data We Collect
2.1 Information You Provide Directly
- Account information: Name, email address, phone number, password
- Profile information: Due date or birth date of child, pregnancy or postpartum stage, preferred language
- Health-related information: Information you voluntarily share in chats, mood check-ins, or recovery plans (e.g. symptoms, feeding patterns, emotional state)
- Contact form submissions: Name, email, and the content of your message
- Voice data: Audio recordings submitted via our voice message feature, which are processed for transcription and response
- Payment information: Processed securely by third-party payment providers — we do not store raw card details
2.2 Information Collected Automatically
- Usage data: Pages visited, features used, time spent, click interactions, and navigation paths
- Device information: Browser type, operating system, device model, screen resolution
- IP address and approximate location: Country and city-level data inferred from IP address
- Log data: Server logs including request timestamps, error logs, and referral URLs
- Cookies and similar technologies: As described in Section 6 below
2.3 Information from Third Parties
- If you register via a social login (e.g. Google), we receive your name, email, and profile picture from that provider
- Analytics providers may share aggregated insights about Platform usage
3. How We Use Your Data
We use your personal data for the following purposes:
- Service delivery: To create and manage your account, provide personalised postpartum care plans, and operate the AI chatbot
- Communication: To send you service-related emails, appointment reminders, and responses to your queries
- Platform improvement: To analyse usage patterns, fix bugs, and develop new features
- AI training & improvement: Anonymised and aggregated conversation data may be used to improve our AI models (see Section 4)
- Safety: To detect and prevent fraud, abuse, and security incidents
- Legal compliance: To meet our obligations under applicable Indian law, including responding to lawful government requests
- Marketing (with consent): To send you newsletters, product updates, or promotional communications if you have opted in
We process your data on one or more of the following lawful bases: your consent, performance of a contract, legitimate interests, and compliance with legal obligations — as applicable under the DPDPA, 2023.
4. AI & Chat Data
Our AI chatbot is a core feature of the Platform. Here is how we handle data related to AI interactions:
- Storage: All chat messages — both your queries and the AI's responses — are stored in our secure database linked to your account
- Session history: You can view your past conversation sessions within the Platform
- Model improvement: We may use anonymised, de-identified conversation data to evaluate and improve our AI models. Personally identifiable information is removed before this use
- Third-party AI providers: Our AI is powered by third-party large language model providers (such as Groq). Your messages are transmitted to these providers for processing. They are contractually prohibited from using your data to train their own models
- No human reading: We do not routinely read individual conversations. Access is limited to authorised personnel for safety, debugging, or legal compliance purposes
- Voice data: Voice inputs are transcribed to text and processed in the same manner as typed messages. Raw audio is not retained beyond the processing session
Important: Please do not share highly sensitive information such as financial account details, government ID numbers, or passwords in the chat.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:
- Account data: Retained for the lifetime of your account, plus 12 months after deletion to comply with legal obligations
- Chat history: Retained indefinitely while your account is active, to provide session history features. Deleted upon account deletion.
- Contact form submissions: Retained for 24 months for customer service purposes
- Analytics data: Aggregated and anonymised data may be retained indefinitely
- Voice data: Raw audio is deleted immediately after transcription. Transcribed text follows chat history retention rules.
- Payment records: Retained for 7 years as required by Indian financial regulations
8. Security
We implement industry-standard technical and organisational measures to protect your personal data:
- All data in transit is encrypted using TLS 1.2 or higher
- Passwords are hashed using bcrypt — we never store plaintext passwords
- Databases are hosted on secure, access-controlled cloud infrastructure
- Access to personal data is restricted to authorised personnel on a need-to-know basis
- We conduct regular security assessments and dependency audits
- JWT-based authentication with short token expiry for session security
While we take all reasonable precautions, no system is 100% secure. In the event of a data breach that affects your rights, we will notify you as required by law within 72 hours of becoming aware.
9. Your Rights
Under India's Digital Personal Data Protection Act, 2023, you have the following rights:
- Right to access: Request a copy of the personal data we hold about you
- Right to correction: Request correction of inaccurate or incomplete data
- Right to erasure: Request deletion of your personal data, subject to legal retention requirements
- Right to withdraw consent: Withdraw consent for processing activities based on consent, at any time
- Right to grievance redressal: Lodge a complaint with our Grievance Officer (see Section 13)
- Right to nominate: Nominate another person to exercise your rights in the event of your death or incapacity
To exercise any of these rights, email us at privacy@mommydears.co.in or hello@mommydears.co.in. We will respond within 30 days.
10. Children's Privacy
The Platform is intended for users aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that a child under 18 has provided us with personal data without parental consent, we will take steps to delete that information promptly.
If you believe a minor has registered on our Platform, please contact us at hello@mommydears.co.in and we will investigate and act accordingly.
11. Third-Party Links
The Platform may contain links to third-party websites, apps, or services. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you visit. We are not responsible for the privacy practices or content of external sites.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will update the "Last Updated" date and, where appropriate, notify you via email or an in-app notification.
We encourage you to review this policy periodically. Your continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.
13. Contact & Grievance Redressal
For any privacy-related questions, concerns, or to exercise your rights under the DPDPA 2023, please contact our Grievance Officer:
- Name: Grievance Officer, MommyDears
- Email: privacy@mommydears.co.in
- Alternate Email: hello@mommydears.co.in
- Phone: +91 9082153275
- Address: AAC Pvt Ltd, Unit No. 1109, 11th Floor, Lotus Link Square, D.N. Nagar, New Link Road, Andheri West, Mumbai – 400053, Maharashtra, India
- Response time: We aim to acknowledge all complaints within 48 hours and resolve them within 30 days.
If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India once the relevant provisions of the DPDPA 2023 are notified.