Privacy Policy

Effective Date: March 10, 2026  |  Last Updated: May 14, 2026

1. Introduction

Mom Labs, Inc. ("Mom Labs," "we," "us," or "our") is committed to protecting the privacy of parents, guardians, and their children who use our Service. This Privacy Policy explains what information we collect, how we use it, how we share it, and your rights regarding your personal information.

This Privacy Policy applies to all users of the Mom Labs website and mobile application. Because our Service involves information about children, we take our obligations under the Children's Online Privacy Protection Act (COPPA) and other applicable privacy laws with the utmost seriousness.

2. Information We Collect

2.1 Information You Provide (Parent Account Holder)

When you create an account and use the Service, we collect:

• Account information: Your name, email address, and password
• Billing information: Payment card details and billing address (processed securely by our third-party payment processor; Mom Labs does not store full payment card numbers)
• Child profile information: For each child profile you create — your child's first name, age, reading level, and story preferences

2.2 Information Collected Automatically

When you use the Service, we automatically collect:

• Usage data: Stories generated, pages read, time spent in the app, features used, and story completion rates
• Device information: Device type, operating system, browser type, and app version
• Log data: IP address, access times, pages viewed, and referring URLs
• Cookies and similar technologies: We use cookies and similar tracking technologies to maintain your session and remember your preferences

2.3 Information We Do Not Collect

Mom Labs does not collect:

• Children's last names, addresses, phone numbers, photos, or any contact information
• Precise geolocation data
• Sensitive personal information such as Social Security numbers or government IDs

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Generate personalized stories for your children
• Process subscription payments and manage billing
• Improve and develop our Service, including AI story generation models
• Communicate with you about your account, updates, and support
• Comply with legal obligations, including COPPA
• Detect and prevent fraud and abuse

4. Children's Privacy (COPPA)

4.1 Parental Consent Model

Mom Labs is designed so that all accounts are held by parents or legal guardians. All information about children is provided directly by you, the parent, as part of creating a child profile. By creating a child profile, you are providing verifiable parental consent for Mom Labs to collect and use the child's first name, age, reading level, and preferences for the sole purpose of personalizing stories.

4.2 Data Minimization

We collect only the minimum information necessary to personalize the story experience. We do not collect or require any other personal information about children.

4.3 Your Parental Rights

As a parent or guardian, you have the right to:

• Review the personal information we have collected about your child by contacting us at contact@momlabsapp.com
• Request correction or deletion of your child's personal information at any time
• Revoke consent and request deletion of all associated data by deleting your account
• Use your browser's cookie settings to block or delete cookies

5. How We Share Your Information

Mom Labs does not sell your personal information or your child's personal information to third parties. We may share your information in the following limited circumstances:

• Service providers: We share information with trusted third-party vendors who assist us in operating the Service (e.g., cloud hosting, payment processing, email delivery, analytics, AI content generation). These vendors are contractually required to protect your information and use it only as directed by Mom Labs. For details on how AI providers such as OpenAI, Google, and Replicate handle submitted content, see Section 5a below.
• Legal compliance: We may disclose information when required by law, regulation, legal process, or governmental request.
• Business transfers: If Mom Labs is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you by email or prominent notice before your information is transferred and becomes subject to a different privacy policy.
• Protection of rights: We may disclose information to protect the rights, property, or safety of Mom Labs, our users, or others.

5a. Third-Party AI Providers and Your Content

Mom Labs uses several third-party AI services to generate text, illustrations, and printable activities. The providers we currently rely on, and what each is used for, are:

• OpenAI — story text, activity-sheet text (worksheets, flashcards, puzzles, word searches), incentive-chart text, family-event extraction, illustration generation for storybooks, coloring pages, and child avatars, and content-safety screening of submitted text and images.
• Google (Gemini) — incentive-chart theme text, and (for certain photo-to-coloring-page generations) image generation that includes the photo you uploaded. The Gemini image model receives the uploaded photo as input alongside our prompt; the OpenAI illustration models do not receive your photo directly.
• Replicate — high-resolution image upscaling for print-ready storybooks, and edge-detection processing of uploaded photos when used as an alternative or fallback for coloring-page generation.

No AI Training by Default

Content you submit (including any uploaded images) is not used to train third-party AI models by default. Mom Labs accesses each provider's commercial API tier, under which submitted content is not used to improve OpenAI's, Google's, Replicate's, or any other provider's models.

Temporary Retention for Safety Monitoring

Each provider may retain inputs and outputs for a limited time for abuse and safety monitoring. This retention is unrelated to AI training; it is a safety review window after which the data is deleted by the provider. Mom Labs does not control these retention periods. As a reference point, OpenAI's standard API retains inputs and outputs — including images — for up to 30 days. Google and Replicate retention windows are governed by their own terms, which we encourage you to review on their websites.

Zero Data Retention

A Zero Data Retention (ZDR) agreement with a provider would eliminate that provider's safety-monitoring storage window entirely. Mom Labs does not currently hold a ZDR agreement with any AI provider. If this changes, we will update this policy accordingly.

Recommendation Regarding Photos

Given the above, if you have privacy concerns about identifiable photographs, we recommend using illustrated or non-photographic avatars rather than uploading real photos of your children. Photos uploaded for photo-to-coloring-page generation are sent to the AI provider that produces the output (currently OpenAI, Google, or Replicate depending on which path runs for your request), and may be retained for that provider's safety-monitoring window. The child's name, age, and story preferences submitted as text are subject to the same provider safety-monitoring windows described above.

Provider Privacy Policies

For complete details on how each provider handles submitted content, see their respective privacy policies:

• OpenAI — openai.com/policies/privacy-policy
• Google (Gemini API) — ai.google.dev/gemini-api/terms
• Replicate — replicate.com/privacy

6. Data Retention and Deletion

6.1 Active Accounts

We retain personal information for as long as your account is active and for a reasonable period thereafter to comply with our legal obligations, resolve disputes, and enforce our agreements.

6.2 Account Deletion

When you delete your account, we will delete or anonymize your personal information and your child's personal information within 30 days of the deletion request, except where retention is required by applicable law or for legitimate business purposes (such as fraud prevention or legal compliance). You may request an export of your data before deletion by contacting contact@momlabsapp.com.

6.3 Retention of Usage Data

Aggregated and anonymized usage data that cannot reasonably be linked to you or your child may be retained indefinitely for analytics and service improvement purposes.

7. Data Security

Mom Labs uses commercially reasonable technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include encryption of data in transit (TLS/SSL), access controls, and regular security reviews.

However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately at contact@momlabsapp.com.

8. Third-Party Links and Services

The Service may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party services you access.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice in the Service at least 14 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the revised policy.

10. Contact Us

If you have questions about this Privacy Policy, wish to exercise your parental rights, or have a privacy concern, please contact contact@momlabsapp.com.

For COPPA-related requests or to exercise parental rights regarding your child's data, please email contact@momlabsapp.com with the subject line "COPPA Request."