Effective date: August 21, 2026
1. Who we are and what this covers
MamaTrack is made by TOPSOL ("we", "us", "our"), based in Pakistan. This Privacy Policy explains what information the MamaTrack app handles, where it goes and the choices you have. It covers the iOS and Android app in all five modes — pregnancy, postpartum, period, trying to conceive and perimenopause — and the optional connected features described below. Questions: topsol.org@gmail.com.
2. Summary
Most of what you track stays on your phone. Your logs, photos, plans and settings are kept in the app's local storage on your device, and we do not upload them unless you turn on one of three optional connected features: MamaAI, Communities or Partner Access. Each asks for your agreement before anything leaves the device, and each can be left or deleted from inside the app.
We do not sell your personal information, the app shows no third-party advertising, and we do not track you across other apps or websites.
3. Information stored on your device
Depending on your mode and the tools you use, the app stores on your device:
- your profile — name, age range, active mode, cycle and pregnancy dates, and your baby's birth date in postpartum mode;
- daily logs of symptoms, mood, flow, discharge and notes; period, ovulation and basal-temperature entries;
- kick-counter and contraction sessions; weight, blood-pressure and blood-sugar readings;
- medicines and whether you took them; diet-plan preferences, body measurements and meals;
- postpartum recovery check-ins and your baby's feeds, nappies, sleep and growth;
- appointments and their attachments; bump photos and their notes;
- hospital-bag, shopping, to-do and birth-plan lists; baby-name shortlists; and app preferences.
This data is included in your device's own backup (iCloud or Google) and in any backup file you export from Profile, which you control. Doctor reports, weekly recaps and journey keepsakes are generated on the device and leave it only when you choose to share them. Home-screen widgets read a short summary from the app's local storage and upload nothing.
4. MamaAI (optional)
MamaAI is the in-app health assistant. It runs on our server, but there is no account: when you first accept the MamaAI notice, the app creates a random device identifier and a secret that is stored in your phone's Keychain or Keystore. Losing that secret means losing the conversations — we cannot link them back to you.
When you ask a question we send the message, your mode, your current pregnancy week, postpartum week or cycle day, and your age range. Accepting the notice also lets the app upload a weekly chart so the answers match your own tracking: days with entries, symptoms from a fixed list, mood and sleep quality, weight, blood-pressure and blood-sugar readings, your medicine list, daily counts of baby-care events in postpartum mode, and the notes you wrote on those days. "What MamaAI can see" inside the chat shows exactly what has been shared. Your name, contact details, photos and the rest of the app are never sent.
Messages and charts are processed by our server and by a third-party AI model provider acting on our instructions to generate the reply. They are not used to train AI models and are not sold. Conversations are kept on our server so you can come back to them; you can delete any conversation from the chat, and "Delete All Data & Reset" in Profile deletes everything held for your device. Fair-use limits apply. Each request carries a Firebase App Check token (Google Play Integrity or Apple App Attest) proving it came from a genuine copy of the app.
Dictation uses your phone's on-device speech recognition. Your voice is transcribed on the device and is never sent to us.
5. Communities (optional)
Communities are group conversations with people at the same stage as you. Joining creates an anonymous account with our backend provider, Supabase — no email address, phone number or real name. Other members see only the display name and avatar you choose, your messages and your reactions. There are no direct messages and no photos.
Messages are stored on Supabase and removed automatically after the group's retention period, which is shown in each group (30 days for topic groups, 90 days for due-date cohorts). You can report or block a member; a message reported twice is hidden, and we review reports and can remove accounts from our moderation dashboard.
If you allow notifications for new messages, your device's push token is registered with our backend and notifications are delivered through Firebase Cloud Messaging; you can mute a group at any time. Anonymous accounts that never join a group are deleted after 30 days. Deleting your cloud account from Profile removes you from every group.
6. Partner Access (optional)
Partner Access lets one partner follow the categories you choose to share. As the owner you verify an email address with a one-time code, which creates your cloud account; the partner joins anonymously with an invite code and needs no email. Only the categories you enable are copied to a private Supabase project, protected by account sign-in, row-level security, a private photo bucket and expiring links. Turning a category off deletes its cloud copy; revoking, leaving or deleting either account ends the link and removes the shared data.
If you choose Partner Access, MamaTrack uploads only the categories you enable to a private Supabase project so one authenticated partner can read them. The shared projection may include a due date and pregnancy week, upcoming appointment details without notes or attachments, kick-session counts, selected bump photos without notes, and aggregated pregnancy-log insights without raw logs, dates, notes, flow, discharge, or vital readings. Access is protected by account authentication, row-level security, a private photo bucket, expiring links, and immediate owner revocation. This RLS-only design is not end-to-end encrypted; Supabase processes the shared data on our behalf. Turning a category off deletes its cloud copy. Revoking, leaving, or deleting either cloud account ends the link and removes the projection. Local health data outside the selected categories is never uploaded for Partner Access. If you start a labour session, the shared projection also includes your contraction pattern — how far apart and how long they are, and whether the 5-1-1 pattern has been reached — and it expires automatically twelve hours after your last update.
7. Analytics and attribution
We use Firebase Analytics (Google) to understand how the app is used: screens viewed, features opened, onboarding and subscription steps, your app language and active mode, and device and app-version details. Analytics events never include your health readings, notes, messages or photos, and collection is off in development builds.
On iOS, on first launch, the app asks Apple's AdServices framework whether the install came from an Apple Search Ads campaign. The answer contains campaign and keyword identifiers, not personal details, and is recorded once in analytics. We do not use advertising SDKs.
8. Purchases
Premium is an auto-renewing subscription — monthly or yearly, with a free trial where offered — sold through the App Store or Google Play. Payment is handled entirely by Apple or Google; we never see your card details. We receive only what is needed to unlock Premium (the plan, its status and renewal date) and keep it on your device.
9. Device permissions
Each permission is requested only when you use the feature that needs it, and can be revoked in your device settings:
- Calendar and Reminders — to add your appointments to your calendar;
- Camera and Photos — for bump photos and appointment attachments (we do not scan your library);
- Notifications — for reminders, weekly updates and new Communities messages;
- Microphone and Speech Recognition — for on-device dictation to MamaAI;
- Exact alarms (Android) — so medicine and appointment reminders fire on time.
10. Security
Data in transit is encrypted with TLS. The MamaAI secret lives in your phone's Keychain or Keystore. Cloud data for Communities and Partner Access is protected by authentication and row-level security; it is not end-to-end encrypted, and Supabase processes it on our behalf. No method of storage or transmission is perfectly secure — protect your device with a passcode and keep it updated.
11. Retention
Local data stays until you delete it in the app or uninstall. MamaAI conversations and charts stay until you delete them. Community messages are removed after the group's retention period, and an unused anonymous account after 30 days. Partner Access data is removed when you turn a category off or the link ends. Analytics data is retained by Google under Firebase's standard settings. Support emails are kept only as long as needed to help you.
12. Your choices and rights
- Delete everything on the device — and your MamaAI data — with Profile → Delete All Data & Reset.
- Delete your cloud account (Communities and Partner Access) from Profile.
- Leave a group, mute its notifications, or revoke any permission in your device settings.
- Manage or cancel Premium in your App Store or Google Play account.
Depending on where you live you may have rights to access, correct, delete or port personal information, or to object to its processing. To exercise them for data we hold, email topsol.org@gmail.com; we may need to verify your identity first.
13. International processing
We operate from Pakistan. The connected features use Supabase, Google (Firebase) and a third-party AI model provider, which may store and process data in other countries. Apple and Google handle purchases in the countries where they operate.
14. Children
MamaTrack is for adults and older teens managing their own reproductive health. It is not directed at children under 13 and we do not knowingly collect their information; if you believe a child has given us data, contact us and we will delete it. Postpartum mode records your baby's feeds, sleep and growth as part of your own health record; it stays on your device except for the daily counts included in a MamaAI chart if you use MamaAI.
15. Changes to this policy
We may update this Privacy Policy from time to time. The date at the top will change when we do, and material changes may also be announced in the app or the store listing. Continued use of the app after an update means you acknowledge the revised policy.
16. Contact
TOPSOL, Pakistan. Email: topsol.org@gmail.com.