Privacy

    Privacy Policy

    Effective date: February 20, 2026

    1. Introduction

    MoMo ("MindfulCoach Pro," "we," "us," or "our") is operated by Fusion Labs Project. We built MoMo as a voice-first AI companion for mindfulness and coaching. Privacy is a core pillar of our product — every design decision is made to communicate safety and your ownership of your data.

    This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using MoMo, you agree to the practices described here.

    2. Information We Collect

    Account Information

    When you create an account, we collect your first name, email address, and authentication credentials. You may sign in via email magic link, Apple Sign-In, or Google Sign-In. We receive only the information these providers share (typically name and email) and do not access your passwords on those platforms.

    Conversation Data

    MoMo stores your conversations to provide continuity across sessions. This includes text messages, voice transcriptions, AI responses, and metadata such as timestamps and conversation summaries. Conversations are isolated to your account using row-level security — no other user or staff member can access them.

    Voice Data

    When you use voice input, your audio is processed by a third-party speech-to-text service (such as Whisper API or Deepgram) to produce a text transcription. We do not store raw audio recordings after transcription is complete.

    Health Data

    With your explicit permission, MoMo can read health data from Apple HealthKit, including sleep, steps, and heart rate. This data is read on-device and only anonymized summaries are shared with our AI services — raw health records are never transmitted to our servers. You can revoke health data access at any time in your device settings.

    Usage Analytics

    We use self-hosted analytics (PostHog) to understand how people use the app. We collect interaction events only (e.g., button taps, screen views) — never the content of your conversations, voice recordings, or health data.

    Payment Information

    Payments are processed by Stripe. We do not store your credit card number, bank account details, or other payment credentials on our servers. Stripe's handling of your payment data is governed by their Privacy Policy.

    3. How We Use Your Information

    • Provide the service: Process your messages, maintain conversational memory (themes, patterns, and cycles), and deliver AI-powered responses.
    • Personalization: Remember context from prior sessions so MoMo can reference past conversations and track recurring themes — this is what makes MoMo feel like a companion, not a stateless chatbot.
    • Safety: Run automated safety checks on conversations to detect crisis situations and provide appropriate resources.
    • Notifications: Send push notifications (maximum one per day) with gentle check-ins, if you opt in.
    • Improve the product: Use anonymized, aggregated analytics to understand usage patterns and improve the experience.
    • Process payments: Manage your subscription and billing through Stripe.

    4. AI Processing & Your Data

    MoMo uses large language models (LLMs) to generate responses. Your messages are sent to AI providers (Anthropic Claude as the primary model, Google Gemini as a fallback) for processing.

    • No model training: Your conversations are never used to train, fine-tune, or improve any AI model. We use API-only access with providers that contractually commit to not training on customer data.
    • PII anonymization: Before your messages reach an AI model, they pass through a privacy proxy that detects and anonymizes personally identifiable information (names, addresses, phone numbers, etc.). The original values are restored in the response before it reaches you.
    • Embeddings: We generate text embeddings (numerical representations) of your messages for semantic search within your own conversation history. These are used solely to power MoMo's memory features and are isolated to your account.

    5. Third-Party Services

    We share data with the following categories of service providers, only as needed:

    • AI providers (Anthropic, Google) — for generating conversational responses. Subject to PII anonymization.
    • Speech services (Whisper API / Deepgram for transcription; ElevenLabs / PlayHT for text-to-speech) — for voice features.
    • Embedding providers (OpenAI) — for generating text embeddings used in memory search. Subject to PII anonymization.
    • Authentication (Supabase, Apple, Google) — for account sign-in.
    • Payments (Stripe) — for subscription billing.
    • Hosting & infrastructure — for running the service.

    We do not sell, rent, or share your personal data with advertisers or data brokers.

    6. Data Security

    We implement multiple layers of security to protect your data:

    • End-to-end encryption for data in transit.
    • Row-level security (RLS) ensuring your data is isolated to your account at the database level.
    • PII anonymization proxy for AI processing.
    • JWT-based authentication with secure session management.
    • Regular security reviews of our infrastructure.

    7. Your Rights & Data Control

    You have full ownership and control over your data:

    • Export: You can request a full export of all your data at any time through the app's privacy settings.
    • Delete: You can request complete deletion of your account and all associated data. This is irreversible and includes conversations, memory, themes, and all personal information.
    • Access: You can view your conversation history, memory themes, and account information within the app.
    • Rectification: You can update your account information at any time.
    • Withdraw consent: You can revoke health data access, disable notifications, or close your account at any time.

    These rights are available to all users regardless of location. For users in the European Economic Area, these rights are provided in accordance with the GDPR.

    8. Data Retention

    We retain your conversation data and memory for as long as your account is active, so MoMo can provide continuity across sessions. When you delete your account, all associated data is permanently removed within 30 days.

    Anonymized, aggregated analytics data that cannot be linked back to you may be retained indefinitely.

    9. Children's Privacy

    MoMo is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

    10. Changes to This Policy

    We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notification. Continued use of MoMo after changes take effect constitutes acceptance of the updated policy.

    11. Contact Us

    If you have questions about this Privacy Policy or want to exercise your data rights, contact us at:

    [email protected]