Privacy Policy

Effective Date: March 10, 2026  |  Last Updated: October 24, 2026

1. Introduction

Mom Labs, Inc. ("Mom Labs," "we," "us," or "our") is committed to protecting the privacy of parents, guardians, and their children who use our Service. This Privacy Policy explains what information we collect, how we use it, how we share it, and your rights regarding your personal information.

This Privacy Policy applies to all users of the Mom Labs website and mobile application. Because our Service involves information about children, we take our obligations under the Children's Online Privacy Protection Act (COPPA) and other applicable privacy laws with the utmost seriousness.

2. Information We Collect

2.1 Information You Provide (Parent Account Holder)

When you create an account and use the Service, we collect:

• Account information: Your name, email address, and password
• Billing information: Payment card details and billing address (processed securely by our third-party payment processor, Stripe; Mom Labs does not store full payment card numbers). See Section 5b for the full list of service providers.
• Child profile information: For each child profile you create — your child's first name, age, reading level, and story preferences
• Mobile phone number and text-message consent (Family Assistant only): If you choose to receive text messages, your mobile number and a record of your consent — the exact wording you agreed to and when — and of any later opt-out. This is optional and is described in Section 5d.
• Connected email and calendar accounts (Household Manager only): If you choose to connect a Google account, the address of that mailbox and a credential allowing read-only access to it. What we read and store from it, and how to disconnect, is described in Section 5c. This is optional, is never set up on your behalf, and nothing is read unless you connect an account yourself.

2.2 Information Collected Automatically

When you use the Service, we automatically collect:

• Usage data: Stories generated, pages read, time spent in the app, features used, and story completion rates
• Device information: Device type, operating system, browser type, and app version
• Log data: IP address, access times, pages viewed, and referring URLs
• Cookies and similar technologies: We use cookies and similar tracking technologies to maintain your session and remember your preferences

2.3 Information We Do Not Collect

Mom Labs does not collect:

• Children's last names, addresses, phone numbers, photos, or any contact information
• Precise geolocation data
• Sensitive personal information such as Social Security numbers or government IDs

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Generate personalized stories for your children
• Process membership payments and manage billing
• Improve and develop our Service, including AI story generation models
• Communicate with you about your account, updates, and support
• Comply with legal obligations, including COPPA
• Detect and prevent fraud and abuse

4. Children's Privacy (COPPA)

4.1 Parental Consent Model

Mom Labs is designed so that all accounts are held by parents or legal guardians. All information about children is provided directly by you, the parent, as part of creating a child profile. By creating a child profile, you are providing verifiable parental consent for Mom Labs to collect and use the child's first name, age, reading level, appearance details, and preferences for the sole purpose of personalizing the stories, activities and games we create for your family.

4.2 Photos You Choose to Upload

If you choose to use the optional “fill this in from a photo” feature, the photo you upload is sent to our AI provider once, read only to suggest your child’s appearance details (such as hair color, eye color and skin tone), and then discarded. We do not store the photo, we never use it to identify or recognize anyone, and it never forms part of any picture we generate.

This feature is entirely optional. You can describe your child’s appearance yourself instead, or choose a ready-made character from our library, and nothing about the rest of the service changes.

4.3 Data Minimization

We collect only the minimum information necessary to personalize the experience, and we keep only what we need: the details you enter about your child are stored on your family account, and an optional photo is not. We do not collect or require any other personal information about children.

4.4 Your Parental Rights

As a parent or guardian, you have the right to:

• Review the personal information we have collected about your child by contacting us at contact+privacy@momlabsapp.com
• Request correction or deletion of your child's personal information at any time
• Withdraw your consent at any time by deleting your account. Deleting your account removes your children’s stored information — their names, birthdates, appearance details and any portraits — together with every story, activity, game and chart we generated about them, along with the rest of your account data. See Account Deletion below for the timeframe
• Use your browser's cookie settings to block or delete cookies

5. How We Share Your Information

Mom Labs does not sell your personal information or your child's personal information to third parties. We may share your information in the following limited circumstances:

• Service providers (subprocessors): We share information with trusted third-party vendors who help us operate the Service — including AI content generation, payment processing, print-on-demand order fulfillment, cloud hosting, email delivery, and analytics. These vendors are contractually required to protect your information and use it only as directed by Mom Labs. The specific AI, payment, and fulfillment providers we currently rely on are named in Section 5b, and the AI providers are described in more detail in Section 5a.
• Legal compliance: We may disclose information when required by law, regulation, legal process, or governmental request.
• Business transfers: If Mom Labs is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you by email or prominent notice before your information is transferred and becomes subject to a different privacy policy.
• Protection of rights: We may disclose information to protect the rights, property, or safety of Mom Labs, our users, or others.

Mobile numbers and text-message consent are never sold or shared. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All of the categories above exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. See Section 5d.

5a. Third-Party AI Providers and Your Content

Mom Labs uses several third-party AI services to generate text, illustrations, and printable activities. The AI providers we currently rely on, and what each is used for, include (but are not limited to):

• OpenAI — story text, activity-sheet text (worksheets, flashcards, puzzles, word searches), illustration generation for storybooks, coloring pages, and child avatars, and content-safety screening of submitted text and images.
• Google (Gemini) — for certain photo-to-coloring-page generations, image generation that includes the photo you uploaded. The Gemini image model receives the uploaded photo as input alongside our prompt; the OpenAI illustration models do not receive your photo directly.
• OpenAI (Household Manager) — if, and only if, you connect a mailbox, the text of messages that match your scan settings is sent to OpenAI so the dates, times and locations in them can be turned into calendar entries. This is the feature working as described in Section 5c; no message is sent to any AI provider unless you have connected an account and a message matches what you asked us to look for.
• Replicate — high-resolution image upscaling for print-ready storybooks, and edge-detection processing of uploaded photos when used as an alternative or fallback for coloring-page generation.

No AI Training by Default

Content you submit (including any uploaded images) is not used to train third-party AI models by default. Mom Labs accesses each provider's commercial API tier, under which submitted content is not used to improve OpenAI's, Google's, Replicate's, or any other provider's models.

Temporary Retention for Safety Monitoring

Each provider may retain inputs and outputs for a limited time for abuse and safety monitoring. This retention is unrelated to AI training; it is a safety review window after which the data is deleted by the provider. Mom Labs does not control these retention periods. As a reference point, OpenAI's standard API retains inputs and outputs — including images — for up to 30 days. Google and Replicate retention windows are governed by their own terms, which we encourage you to review on their websites.

Zero Data Retention

A Zero Data Retention (ZDR) agreement with a provider would eliminate that provider's safety-monitoring storage window entirely. Mom Labs does not currently hold a ZDR agreement with any AI provider. If this changes, we will update this policy accordingly.

Recommendation Regarding Photos

Given the above, if you have privacy concerns about identifiable photographs, we recommend using illustrated or non-photographic avatars rather than uploading real photos of your children. Photos uploaded for photo-to-coloring-page generation are sent to the AI provider that produces the output (currently OpenAI, Google, or Replicate depending on which path runs for your request), and may be retained for that provider's safety-monitoring window. The child's name, age, and story preferences submitted as text are subject to the same provider safety-monitoring windows described above.

Provider Privacy Policies

For complete details on how each provider handles submitted content, see their respective privacy policies:

• OpenAI — openai.com/policies/privacy-policy
• Google (Gemini API) — ai.google.dev/gemini-api/terms
• Replicate — replicate.com/privacy

5b. Service Providers We Rely On

The table below lists the third-party providers we currently use to deliver the Service, grouped by role. The AI providers are described in more detail in Section 5a above.

Provider	Role	Used for	Privacy policy
OpenAI	AI	Story & activity text, illustrations (storybooks, coloring pages, avatars), and content-safety screening of submitted text and images	openai.com
Google (Gemini)	AI	Certain photo-to-coloring-page image generation (which includes the photo you upload)	ai.google.dev
Replicate	AI	Print-quality image upscaling and edge-detection processing of uploaded photos for coloring pages	replicate.com
Stripe	Payments	Membership billing and secure payment-card processing	stripe.com
Lulu	Print fulfillment	Printing and shipping the physical storybooks you order (receives the recipient's name and shipping address and the book file)	lulu.com

This list reflects our current providers and may change as we improve the Service. We may add, remove, or substitute providers within the categories described in Section 5 — for example, adopting a new AI model provider, adding a backup payment processor, or changing print vendors. We keep this section current and will provide notice of material changes as described in the "Changes to This Privacy Policy" section below.

5c. Household Manager: Your Email and Calendar

This section applies only if you choose to connect a Google account to Household Manager. Nothing described here happens otherwise — no mailbox or calendar is read, and no connection exists, unless you set one up yourself and can remove it at any time.

What we ask for, and why

Household Manager exists to gather the dates buried in a parent's inbox — the practice times, the picture day, the field-trip form, the party invitation — and put them on one calendar. To do that it asks Google for three permissions:

• Read your Gmail messages (gmail.readonly) — read-only. We cannot send, reply to, delete, archive or alter anything in your mailbox, and we do not.
• See your calendars (calendar.readonly) — read-only, so events already on your calendars can appear alongside the ones we find.
• Your email address (userinfo.email) — so the app can show you which mailbox is connected when you have more than one.

Google shows these as separate tick boxes when you connect. You may grant some and not others; the features that depend on a permission you declined will simply not work.

What we actually read

We do not read your mailbox in full. We run searches built from the keywords and sources you configure, and look only at messages those searches return. For a matching message we read its content, and we store only what is needed to show you the event and let you find the original: the sender, the subject, the date it was sent, Google's identifier for the message, and the event details we extracted (title, description, date and time, and where we could tell, the type of event). We do not store the body of your emails. Some scans are narrower still and read only the headers and Gmail's own one-line preview, with no message body and no AI involved at all.

Where it goes

The text of a matching message is sent to OpenAI, which turns prose like "please return the form by Friday the 14th" into a dated entry. This is a subprocessor relationship: OpenAI processes the text to provide this feature and, as described in Section 5a, content sent through the commercial API tier is not used to train their models. Your mail is not sent to any AI provider for any other purpose, and it is never used to train ours or anyone else's models, to build an advertising profile, or to produce content for anybody other than you.

Google's Limited Use requirements

Mom Labs' use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, data obtained through Google Workspace APIs is:

• used only to provide or improve the user-facing features you connected it for, and not for any other purpose;
• not transferred to others except as necessary to provide those features, to comply with applicable law, or as part of a merger or acquisition in which it remains subject to this policy;
• never used for advertising, never sold, and never used to build advertising profiles;
• not read by any human being, except with your explicit permission for a specific issue you have raised with us, where necessary for security purposes such as investigating abuse, or where required by law.

Household Manager is also never used as a source for the children's content elsewhere in Mom Labs. Nothing from a connected mailbox or calendar reaches a storybook, a coloring page, or any other generated material.

Turning it off

You can disconnect an account at any time from the Household Manager settings, which deletes the stored connection and the access we hold. You can also revoke our access directly from your Google account at myaccount.google.com/connections, which takes effect immediately and without needing to visit Mom Labs at all. Events already saved to your family calendar stay until you delete them, because by then they are your calendar rather than your mail; deleting your account removes them along with everything else, as described in Section 6.

How the connection is held

Connecting an account stores a credential from Google that lets Household Manager read on your behalf until you revoke it. It is held in our database under the protections described in Section 7 and is used for nothing but the scans you have configured. If it stops working — because you changed your Google password, revoked access, or left it unused for a long period — the app will tell you the connection needs reconnecting rather than quietly returning nothing.

5d. Text Messages (SMS) — Family Assistant

Household Manager, part of the Mom Labs Family Assistant, can send you text messages. Texts are off unless you turn them on: you opt in by entering your mobile number and checking the box that says what you are agreeing to. Agreeing to texts is never a condition of buying or using anything from Mom Labs.

What we collect

Your mobile phone number, and a record of your consent: the exact wording you agreed to, the date and time, and where you agreed (for example, the setup page or your account page). If you later opt out, we record that too. We keep these records so we can show that your choices were honored.

What we send

• A daily reminder of what you are covering that day.
• Urgent alerts about something that needs your action within the next 7 days, such as a deadline, a form, or an event nobody is covering yet.
• Conversations with Carson, the Family Assistant: you can text Carson a question about your family's schedule or ask to add or change something, and Carson replies.
• One-time verification codes when you add or confirm a phone number.

Message frequency varies with your family's schedule, the alerts that apply, and how often you message Carson. Message and data rates may apply.

We never sell or share your number or your consent

We do not sell, rent, or share your mobile phone number or your text-messaging opt-in data and consent with any third parties or affiliates, for marketing, promotional, or any other purposes. Your number is used only to send you the Mom Labs messages you asked for. The text-messaging provider that technically delivers our messages processes your number solely to deliver them, on our behalf and under contract, and may not use it for anything else.

Stopping texts and getting help

Reply STOP to any message to stop receiving texts; you will receive one message confirming you have been unsubscribed and nothing after it unless you opt in again. You can also turn texts off at any time on your account page. Reply HELP for help, or email support+sms@momlabsapp.com. The full terms of the text-messaging program are in our Terms of Service, Section 5a.

Deleting your number

Removing your number from your account stops all texts. When you delete your account, your number is deleted as described in Section 6.2; the record of your consent and opt-out may be kept where the law requires it as evidence of your choices, and is used for nothing else.

6. Data Retention and Deletion

6.1 Active Accounts

We retain personal information for as long as your account is active and for a reasonable period thereafter to comply with our legal obligations, resolve disputes, and enforce our agreements.

6.2 Account Deletion

When you delete your account, we will delete or anonymize your personal information and your child's personal information within 30 days of the deletion request, except where retention is required by applicable law or for legitimate business purposes (such as fraud prevention or legal compliance). You may request an export of your data before deletion by contacting contact+privacy@momlabsapp.com.

6.3 Retention of Usage Data

Aggregated and anonymized usage data that cannot reasonably be linked to you or your child may be retained indefinitely for analytics and service improvement purposes.

7. Data Security

Mom Labs uses commercially reasonable technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include encryption of data in transit (TLS/SSL), access controls, and regular security reviews.

However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately at support+account@momlabsapp.com.

8. Third-Party Links and Services

The Service may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party services you access.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice in the Service at least 14 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the revised policy.

10. Contact Us

If you have questions about this Privacy Policy, wish to exercise your parental rights, or have a privacy concern, please contact contact+privacy@momlabsapp.com.

For COPPA-related requests or to exercise parental rights regarding your child's data, please email contact+privacy@momlabsapp.com with the subject line "COPPA Request."