Privacy policy

Draft — not yet reviewed by counsel. This page is a structural placeholder for Mummy's privacy policy. It sets out the headings the policy will cover; the wording under each heading is a working draft and must not be relied on as Mummy's final data-handling commitments.

Scope

This policy will describe how Mummy collects, uses and shares personal data for Clients, Providers, Agents and Admin users across the app and its APIs.

Information we collect

• Account details you provide: email, phone number, display name, locale, and for Providers, identity and verification documents.
• Activity on the platform: bookings, messages sent through chat, wallet top-ups and transactions, favourites and searches.
• Device and usage information collected automatically, such as IP address and general session data.

How we use this information

• To create and secure your account, and to verify Providers and Agents before they can operate on the platform.
• To process bookings, wallet top-ups and payouts.
• To send you account, booking and safety notifications.
• To investigate reports and enforce these terms.

Data handling and sharing

Placeholder — pending legal review. Mummy shares data with a limited set of processors needed to run the platform: a payment gateway to process top-ups, an SMS provider to deliver one-time verification codes, an email provider for account and booking notifications, and a storage provider for photos and documents. Mummy does not sell personal data. The full list of processors, and the legal basis for each transfer, will be confirmed here.

Data retention

Account and transaction records are kept for as long as your account is active, and for a further period after closure to meet accounting, dispute and legal obligations. Specific retention periods per data type are still being defined.

Your rights and choices

• Request a copy of the personal data Mummy holds about you.
• Correct inaccurate account details from your account settings.
• Request deletion of your account, subject to a grace period and any records Mummy must keep by law.
• Choose your notification preferences and display language.

Cookies and similar technologies

Mummy uses a small number of first-party cookies for session, locale and security purposes. It does not use third-party advertising trackers.

Children and age eligibility

Mummy is not directed at anyone under 18, and Client registration requires confirming you are at least 21. Mummy does not knowingly collect personal data from anyone below the applicable age.

Security

Account passwords are stored as a salted hash, never in plain text, and sessions are carried in an httpOnly cookie. Further detail on Mummy's security practices will be added here.

Changes to this policy

Material changes will be announced in-app before they take effect.

Contact

Questions about this policy can be sent through the in-app support contact once that feature is live; in the meantime, use the contact details published on the Mummy website.