Privacy Policy

MoMo Companion ("MoMo," "we," "us," or "our") is operated by Fusion Labs Project. We built MoMo as a voice-first AI companion for mindfulness and coaching. Privacy is a core pillar of our product — every design decision is made to communicate safety and your ownership of your data.

This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using MoMo, you agree to the practices described here.

Account Information

When you create an account, we collect your first name, email address, and authentication credentials. You may sign in via email magic link, Apple Sign-In, or Google Sign-In. We receive only the information these providers share (typically name and email) and do not access your passwords on those platforms.

Conversation Data

MoMo stores your conversations to provide continuity across sessions. This includes text messages, voice transcriptions, AI responses, and metadata such as timestamps and conversation summaries. Conversations are isolated to your account using row-level security, so no other user can reach them. Conversations are stored encrypted in transit and at rest, but they are not end-to-end encrypted — MoMo has to be able to read your words in order to remember them.

Nobody on our team browses conversations. A member of staff reads a specific message only in two cases: when you report one of MoMo's responses, or when our automated safety check flags a possible risk to your life. In those cases the flagged message is shown to a reviewer so a human can decide what to do.

Voice Data

When you use voice input, your audio is sent to ElevenLabs to be transcribed, and MoMo's spoken replies are generated by ElevenLabs as well. In live voice conversations ("orb mode"), audio streams directly between your device and OpenAI, which both transcribes what you say and speaks the reply. Voice audio is not anonymized before it is sent. We do not store raw audio recordings after a conversation is complete; the resulting transcript is kept as part of your conversation history.

Information MoMo Derives

To personalize your experience, MoMo also records or infers a small amount of information you do not enter directly: your timezone; an approximate country and city derived from your connection's IP address; and, from how you describe yourself in conversation, an inferred gender used only to decide whether to offer cycle-related reflections. If you arrive from an invite link, we perform a one-time device match to attribute the referral. You can see and delete all of this through the export and delete controls in Section 7.

Health Data

MoMo reads no health data from your phone. It requests no health permission on either platform, and does not use Apple HealthKit or Android Health Connect.

Health data reaches MoMo only if you choose to connect a wearable account — currently Oura or WHOOP. That connection is made between our servers and theirs, and we receive a daily summary: sleep, resting heart rate, heart-rate variability, and — from Oura — steps. Nothing is written back to your wearable account.

This data is used only to give MoMo context for your conversations and for the reflections you see in the app — for example, noticing that a stretch of short nights lined up with a week that felt heavier. It is never used to diagnose, treat, or screen for any condition, never used to determine eligibility for anything such as employment or insurance, never sold, never shared with advertisers, and never used to train any AI model.

Connecting a wearable is entirely optional. MoMo works fully without one, and you can disconnect at any time from Settings inside the app, which deletes the stored access tokens.

Diagnostics

We use Sentry to capture crashes and errors so we can fix them. These reports contain technical details about the failure and an identifier for your account — never the content of your conversations, voice recordings, or health data.

Payment Information

Payments are processed by Stripe. We do not store your credit card number, bank account details, or other payment credentials on our servers. Stripe's handling of your payment data is governed by their Privacy Policy.

• Provide the service: Process your messages, maintain conversational memory (themes, patterns, and cycles), and deliver AI-powered responses.
• Personalization: Remember context from prior sessions so MoMo can reference past conversations and track recurring themes — this is what makes MoMo feel like a companion, not a stateless chatbot.
• Safety: Run automated safety checks on conversations to detect crisis situations and provide appropriate resources.
• Notifications: Send push notifications (maximum one per day) with gentle check-ins, if you opt in.
• Improve the product: Use aggregated, non-identifying counts (such as how many conversations happen per day) and crash reports to understand reliability and improve the experience.
• Process payments: Manage your subscription and billing through Stripe.

MoMo is an AI companion. To understand you and reply, MoMo sends what you write or say to third-party AI providers. This is the core of how the product works — without it, MoMo cannot respond.

What is sent: the text of your messages, images you attach, your voice audio when you use voice mode, and — only if you connect a health source — short numeric summaries of sleep, steps, heart rate and heart-rate variability. MoMo also sends relevant excerpts of your earlier conversations so replies stay in context.

Who it is sent to:

• Google (Gemini) — generates most replies, and powers background work such as memory extraction, conversation summaries and reflections.
• OpenAI — generates replies when Google is unavailable, and powers live voice conversations, where audio streams directly between your device and OpenAI.
• Anthropic (Claude) — generates replies for members on the premium tier, and acts as a final fallback if both other providers are unavailable.
• ElevenLabs — converts your speech to text and MoMo's replies back to speech.

• No model training: None of these providers use your conversations to train, fine-tune, or improve their models. We use API-only access under business terms that contractually forbid training on customer data, and we require each of them to protect your data to a standard equal to the one described in this policy.
• PII anonymization, and its limits: Before your text reaches an AI model, it passes through a privacy proxy that detects and replaces personal identifiers — names, addresses, phone numbers, email addresses, URLs and dates. The original values are restored in the reply before it reaches you. This is a safety net, not a guarantee: it works on text only, so it does not cover images or voice audio; it can miss identifiers it does not recognise; and if the proxy is unavailable, your message is sent without it so the conversation is not interrupted. It does not remove the substance of what you say — the AI provider does see what you are talking about.
• Embeddings: We generate text embeddings (numerical representations) of your messages for semantic search within your own conversation history. These are generated on our own servers and are never sent to a third party.
• Safety checks: Messages are also screened by an AI safety check that can escalate an apparent crisis for human review, as described in Section 2.

We share data with the following service providers, only as needed:

• AI providers (Google, OpenAI, Anthropic) — for generating conversational responses and MoMo's background reflections. Text is subject to PII anonymization; see Section 4 for what that does and does not cover.
• Speech services (ElevenLabs for speech-to-text and text-to-speech; OpenAI for live voice conversations) — for voice features. Audio is not anonymized.
• Authentication (Supabase, Apple, Google) — for account sign-in.
• Payments (Stripe) — for subscription billing.
• Diagnostics (Sentry) — for crash and error reporting.
• Hosting & infrastructure — for running the service.

Each of these providers is bound by a written agreement that requires them to process your data only on our instructions and to protect it to a standard equal to or greater than the protections described in this policy. None of them is permitted to use your data for their own purposes, including model training.

We do not sell, rent, or share your personal data with advertisers or data brokers.

We implement multiple layers of security to protect your data:

• TLS encryption for all data in transit, and encryption at rest on our servers. MoMo is not end-to-end encrypted — see Section 2.
• Row-level security (RLS) ensuring your data is isolated to your account at the database level.
• PII anonymization proxy for AI processing, within the limits described in Section 4.
• JWT-based authentication with secure session management.
• Regular security reviews of our infrastructure.

You have full ownership and control over your data:

• Export: You can request a full export of all your data at any time through the app's privacy settings.
• Delete: You can request complete deletion of your account and all associated data. This is irreversible and includes conversations, memory, themes, and all personal information. You can do this in the app's privacy settings, or without installing the app at our account-deletion page.
• Access: You can view your conversation history, memory themes, and account information within the app.
• Rectification: You can update your account information at any time.
• Withdraw consent: You can revoke health data access, disable notifications, or close your account at any time.

These rights are available to all users regardless of location. For users in the European Economic Area, these rights are provided in accordance with the GDPR.

We retain your conversation data and memory for as long as your account is active, so MoMo can provide continuity across sessions. When you delete your account, all associated data is permanently removed within 30 days.

Aggregated data that cannot be linked back to you may be retained indefinitely.

Two narrow exceptions survive account deletion, both kept because we are required to be able to demonstrate them: a record that you accepted a particular version of this policy (the date and version only, with no conversation content), and safety review records, which are retained for 18 months. Neither is used to contact you or to rebuild an account.

MoMo is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notification. Continued use of MoMo after changes take effect constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at:

[email protected]

You do not have to write to us to leave. You can request deletion of your account and all associated data yourself on our account-deletion page — no sign-in, and no need to have the app installed.