Moomby Privacy Policy

​​Effective Date: 28 April 2026

Data Controller

Moomby is operated by MUMBI Group, Inc., located at 1606 Headway Circle, Austin, TX, 78754, United States. For purposes of applicable data protection laws, including the GDPR, MUMBI Group, Inc. is the data controller of your personal data.

This Privacy Policy applies to both our website (moomby.com) and the Moomby mobile application.

What We Collect

Account Information: Your name and email address. When you sign in using third-party authentication (such as Sign in with Apple or Google Sign-In), we receive the name and email address you choose to share through that service.

Website Information: If you join our waitlist or interact with our website, we may collect your name, email address, and basic website usage information.

Family Information: Your children's names, nicknames, ages, and pronouns. Any relevant family context you choose to share.

Voice Data: Your voice messages, processed by secure third-party services.

Conversation Data: Transcripts and content of your conversations with Moomby.

Usage Data: How and when you use Moomby.

How We Use Your Data

• To provide personalized parenting support

• To remember your conversations and your family's context

• To improve Moomby's service

• To communicate with you about your account

How We Protect Your Data

We design our systems to minimize the use of personal data wherever possible.

Your Identity Is Protected

We remove direct identifiers such as names before AI processing and use abstract identifiers to minimize identifiability. When our AI discusses your family, it uses pronouns and general references—not names.

Encryption & Security

• All data is encrypted in transit and at rest

• We limit access to your data to essential personnel only

Voice Processing

• Voice is processed by ElevenLabs, our authorized voice processor, operating under contractual data protection obligations.

• Audio is retained for a maximum of 7 days, then permanently deleted

• We do not use voice recognition, voiceprint identification, biometric identification, or speaker profiling technologies

• We use technical safeguards, including automated filtering and data minimization, to prevent personally identifiable information such as names or contact details from being sent to voice services. If a parent voluntarily includes a name in a voice message, that audio is processed solely for transcription, retained for a maximum of 7 days, and not used for identification, profiling, or model training. If an unintended disclosure is detected, we will take prompt corrective action and notify affected users where required by law.

AI Processing

• AI responses are powered by OpenAI, Anthropic, and Google (Gemini), our authorized AI processors, operating under contractual data protection obligations

• We remove direct identifiers such as names before AI processing and use abstract identifiers to minimize identifiability. If an unintended disclosure is detected, we will take prompt corrective action and notify affected users where required by law.

• Your children's ages and family context (without names) are processed for personalization

• AI providers may temporarily retain de-identified data for safety and abuse monitoring, in accordance with their policies

Training Opt-Out

We have opted out of allowing our third-party providers to use your data for AI model training.

Children's Privacy (COPPA Compliance)

Moomby is designed for use by parents and legal guardians who are 18 years or older. We do not knowingly collect personal information directly from children under 13.

However, parents may share information about their children (such as ages, pronouns, and developmental context), and voice recordings may incidentally capture children's voices in the background.

We remove direct identifiers such as children's names before sending text data to third-party AI services. We do not create profiles of children, and incidental voice recordings are deleted within 7 days.

If you believe we have inadvertently collected personal information from a child under 13 without proper parental consent, please contact us at hello@moomby.com and we will promptly delete it.

Data Retention

• Voice audio: Maximum 7 days. Retained by our voice processor before permanent deletion.

• AI conversation data: Retained by AI providers for up to 30 days for abuse detection and system integrity purposes, in accordance with their policies.

• Your account & history: Retained while your account is active. If you request to delete your account and data, your personal information and chat histories will be permanently deleted from our active databases within 30 days of your request, except for limited information we may retain as required for legal, tax, fraud prevention, or dispute resolution purposes.

We Never

• Sell your data or share it with advertisers

• Allow your data to be used to train AI models

• Create profiles of children or use children's data for advertising

• Use voice recognition, voice print identification, or biometric profiling

Third-Party Service Providers

Moomby utilizes secure, third-party enterprise AI and voice processors to provide our services. Our current authorized sub-processors are OpenAI, Anthropic, Google (Gemini), and ElevenLabs. We actively minimize personal identifiers, such as names, before sending data to these processors and use abstract identifiers to minimize identifiability. All service providers are bound by contractual data protection obligations, and we have explicitly opted out of allowing them to use your data for AI model training.

Your Rights

You can always:

• Request a copy of your data

• Ask us to delete all your data

• Correct any inaccurate information

• Cancel your subscription at any time

To exercise these rights, email: hello@moomby.com

EU/UK Residents

Lawful Basis for Processing

We process personal data on the following legal bases:

• Contractual necessity (to provide Moomby's services)

• Legitimate interest (to improve, secure, and maintain the service)

• Consent (for voice recording and optional features)

Your Additional Rights Under GDPR

• Right to access your data

• Right to deletion ("right to be forgotten")

• Right to data portability

• Right to correction

• Right to withdraw consent

Cross-Border Data Transfers

Your data may be processed in the United States and other jurisdictions. Where personal data is transferred outside your country of residence, including to the United States, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent legal mechanisms where required. See our Terms of Use for details.

Changes to This Policy

We may update this policy as Moomby evolves. We'll notify you of significant changes via email or in-app notification.

Contact Us

Questions about your privacy? Email: hello@moomby.com