Maternalabs stores health data about you and your baby so the app can work. We only process it with your permission, which we ask for before the first question about your health.
The Coach and the Scanner use Google's artificial intelligence, which receives what you write and the data from your profile and your records that it needs to answer you, and may process it in any country where Google operates. We ask for a separate permission for this, and you can withdraw it at any time.
We do not sell your data, we do not use it for advertising, and we do not train artificial intelligence with it.
You can delete your account and everything in it from the app.
1. Who we are and how to reach us
Maternalabs is an app from PPL Launch Partners LLC, a Florida limited liability company, United States (registration number L24000457533). It is the controller of your data ("Maternalabs", "we").
Legal address: 8200 NW 41st St, Ste 200, Doral, FL 33166, United States. This is our registered agent's address; it is not an office open to the public.
Where we work: the Maternalabs team works from Panama and accesses the data from there when needed to support you or maintain the service.
Encarregado (Brazil): Carlos Andres Luque Rojas, at the same email.
2. What this covers
This policy covers the Maternalabs app and these pages. It applies to people who use the app as a mother, to people who join as an invited caregiver, and to anyone who opens a user's My Guides link, even without the app (section 3.8).
Maternalabs is offered in the app stores of Latin America, Brazil and the United States. It is not available in the app stores of the European Union or the United Kingdom.
It does not cover the external communities and services the app links to, which are governed by their own terms (section 17).
3. What data we process
3.1 Your account
You can start without an email, but what you answer and log is stored on our servers from the first moment, linked to an identifier for your account.
When you save your account, we store your email and password, or your Apple or Google account identifier if you sign in with it. If you sign in with Google, we also receive the name, email and photo of your Google profile. Apple may give us a relay email instead of yours.
Basic data: your name or the nickname you give us, your language, your country, your role in the app (mother or caregiver), and how you found Maternalabs, which we ask you about when you start.
3.2 Your health data
What you give us when setting up the app, in your profile and in your records:
Pregnancy and reproductive health: your stage (trying to conceive, pregnant, postpartum or breastfeeding), your dates, how your pregnancy is going, and your medical appointments.
Your body: measurements such as weight, height or blood pressure, and your symptoms.
Medical history you choose to share.
Medications and supplements you take or are unsure about.
Breastfeeding: feeds, pumping sessions and milk stash.
Emotional wellbeing: your mood, your rest, who you can count on, and your daily mood log, with its notes.
Exercise and courses: the routines you do and your progress.
3.3 Your baby's data
Profile: name, date of birth or due date, sex, and details of the birth.
Growth and health: measurements, temperature, symptoms, medications and vaccines.
Day to day: feeding, sleep, diapers, activities and milestones.
3.4 What you add
The photos and notes you add to your records or your baby's.
The name and phone number of your obstetrician and of your baby's pediatrician, if you add them.
3.5 The Coach
The messages you write, its answers, and the records you confirm from the chat. If you report an answer, we keep that answer and the reason you choose, so the team can review it.
3.6 The Scanner
What you look up: medications, herbs, supplements, foods and other products.
Photos of packages or prescriptions you show it. A prescription may carry your name and your doctor's.
Your lookup history, with the results you were shown. For a photo, we keep in your history the text that was read from it, not the photo.
To improve the Scanner, we note the names of products you look up that it doesn't have yet, linked to your account. We never keep your photos for this, and what we noted is deleted when you delete your account.
3.7 Caregivers
If you join as a caregiver, we process your account (section 3.1), your name, your role (partner or caregiver) and the records you add to the baby's history, each with your name.
3.8 Technical data
Data about your phone and the app: installation identifiers, model, operating system, app version and language.
The IP address you connect from.
Technical logs from our servers, to find bugs and protect the service. They don't contain what you log or what you write.
Usage measurement: when the app is opened, updated or uninstalled, how much it is used, subscription purchases in the store, and which initial setup screens, common to everyone, are viewed. Never your answers, your health data, your stage, your pregnancy week or your baby's age.
Crash reports: if the app closes because of an error, a technical report of that crash, with the phone model, operating system and app version. It doesn't contain what you log or what you write.
If you open a user's My Guides link, even without the app: the link's code, your IP address, your browser, the time, and a random number your browser keeps in its local storage so the same browser counts only once. Neither that number nor your IP together with your browser is stored in readable form: only a summary of each, computed with a random key specific to that link (section 9).
Your My Guides link carries a random code that doesn't identify you. The app doesn't see who you send it to and doesn't keep the name, phone number or email of whoever opens it. You only see how many openings it has, never who opened it, and the counter doesn't go down.
Your subscription status: the plan, its dates and the store's receipts.
3.9 What we do not process
We don't ask for your location. You choose your country. Your IP address may roughly indicate the region you connect from; only usage measurement uses it that way, to roughly know where the app is used from.
We don't use advertising identifiers, and we don't track what you do in other apps or websites.
We don't access your contacts, or your photos other than the ones you choose to share with the app.
4. How we ask for your permission
Almost everything above is health data, about you and your baby. Data protection laws treat it as sensitive data, which is why we ask for your permission expressly and separately.
When you start, before the first question about your health, the app asks you for these permissions, each one separately:
Your health data and your baby's. You allow us to process it to provide the service, as this policy explains. If you are the mother, you also give this permission on behalf of your baby.
Your data leaving your country. You allow us to store it on our providers' servers in the United States, some of those services to also process it in other countries, and the team to access it from Panama (section 8).
Artificial intelligence. You allow us to send to Google, our artificial intelligence provider, what you write to the Coach, the photos you show the Scanner, and the Scanner lookups that use artificial intelligence, together with the data from your profile and your records that it needs to answer you (section 6). Google may process it in any country where it operates.
In a separate step, you accept the Terms and this policy and confirm you are 18 or older. That step does not count as any of the three permissions.
Why we ask for them:
Without permissions 1 and 2, the app cannot work: its service is to record and make sense of this data, and it is stored in the United States.
Without permission 3, you can use the app, but without the features that use artificial intelligence: the Coach and part of the Scanner, such as reading photos.
How to withdraw them:
The artificial intelligence one, from the app's privacy settings. It switches off at once and does not delete your account.
The ones for your health data and its transfer, by deleting your account (section 10.5). You can also delete individual records at any time.
Withdrawing a permission does not undo what we did with it before.
Data that is not health data (your account, your subscription, technical data) we process because we need it to deliver what you contract with us, to keep the service secure, and to comply with the law. Usage measurement, your answer to "How did you find Maternalabs?" and the data of anyone who opens a My Guides link we process based on our legitimate interest in improving the app and knowing how people find it.
5. What we use it for
Providing the service: storing and showing your records, computing your baby's age, your pregnancy week and growth references, preparing your country's vaccine schedule, and alerting you when it's worth calling your doctor or the pediatrician.
Adapting the app to you: with your answers we choose your plan, your exercises, what we show you in the app, the Coach's context, and what we show you when we offer the subscription. We don't profile you for advertising or commercial purposes.
Answering you with the Coach and the Scanner (section 6).
Improving the Scanner with the products it doesn't have yet (section 3.6).
Improving the app with usage measurement and crash reports (section 3.8).
Knowing how users find us, with your answer to "How did you find Maternalabs?".
My Guides: counting the openings of your My Guides link to unlock its eBooks (section 3.8).
Reviewing the Coach answers you report (section 3.5).
Sharing with your caregivers what you decide (section 12).
Reminding you of what you schedule.
Managing your subscription and the usage limits shown in the app.
Helping you when you write to us.
Keeping the app secure: preventing abuse, applying usage limits, and finding errors.
Complying with the law: billing, access logs and requests from authorities (section 15).
6. Artificial intelligence: what we send and where
6.1 The Coach
The Coach is an artificial intelligence assistant. It runs on the artificial intelligence of Google, our provider.
What we send it: what you write and the data from your profile and your records that it needs to answer you, about you and your baby. If you are a caregiver, it only receives that you are a caregiver, your conversation, the data of the baby you care for, and a summary in numbers of the baby's last 24 hours: nothing else from your profile or the mother's.
What we never send it: your daily mood log, or your obstetrician's or pediatrician's contact details.
How long it is kept: the conversation is kept in your account until you delete it from the Coach itself, or until you delete your account.
6.2 The Scanner
Some Scanner lookups use Google's artificial intelligence, for example to read the photos you show it or to recognize a product. In those lookups we send it what you wrote or the photo, and the data from your profile that it needs to answer you.
6.3 Where, and what Google does with it
Where: Google may process what we send it in any country where it operates. We cannot choose the country.
What for: Google processes this data as our service provider, under the terms we have with it, to provide its service to us.
We do not use your records or your conversations to train artificial intelligence models.
6.4 What the artificial intelligence is not
The Coach is not a person or a health professional, and it can be wrong. It is built on María Fernanda Rodríguez's method, but it is not her. The Terms explain its limits.
7. Who else processes your data
We only work with providers that process the data on our behalf and to provide their service to us:
Provider
What for
Where
Cloud hosting
Storing your account, your data and your files, and running the app
United States
Artificial intelligence: Google
The Coach and the Scanner (section 6)
Any country where Google operates
Subscription management
Knowing which plan you have and whether it is active. It does not receive your health data
United States
Usage measurement and crash reports
Measuring how the app is used and receiving crash reports (section 3.8). It does not receive your health data
United States and other countries where the provider operates
Web hosting
Publishing these pages. It does not receive app data
Global network
Our providers are required to protect your data at least as well as this policy does.
If you want to know which specific companies they are, write to us and we will send you the list (section 10.2).
Others who receive data, but not as our providers:
Apple and Google, as app stores: they charge the subscription under their own terms and, if you sign in with your Apple or Google account, manage your sign-in. They also check that the app connecting to our servers is the genuine one (section 13). We don't send them your health data.
Your caregivers, because you invite them (section 12).
Authorities, only when the law requires it (section 15).
Never: we don't sell your data and we don't share it with social networks, ad networks or data brokers (section 16).
8. Transfers to other countries
Your data leaves your country:
it is stored on our providers' servers in the United States;
Google's artificial intelligence may process what we send it in any country where Google operates (section 6);
usage measurement and crash reports may be processed in other countries where their provider operates (section 7);
our team accesses it from Panama.
These transfers rest on your express consent, which we ask for separately when you start (section 4, permissions 2 and 3), and on our contracts with our providers.
9. How long we keep it
Data
How long
Your account, your profiles, your records, the Scanner history and what we note to improve it, your reports of Coach answers, and your My Guides code with its counter
As long as you have the account
The Coach conversation
Until you delete it or delete the account
Accounts never saved with an email, Apple or Google that never had a subscription
We delete them after 90 days without activity at most, unless they share a baby's history with another account
Technical logs from our servers
30 days at most
What we keep about the openings of your My Guides link (section 3.8)
Deleted once the link has been opened twice, or when you delete your account
Usage measurement
2 months. After that only totals remain, which don't identify you
Crash reports
90 days
Access logs (date, time and IP address)
185 days from each access, because Brazilian law requires 6 months. If your country in the app is Brazil, they are kept even if you delete your account; if not, they are deleted with it
Billing data
As long as tax law requires
When you delete your account:
We delete it from the app and from our systems at once.
We tell our providers to delete it within 30 days at most. Whatever remains in backups disappears within 90 days at most.
After you delete your account, only what the law requires us to keep remains (billing and, if your country in the app is Brazil, access logs until they are 185 days old) and, until they expire, technical logs, usage measurement and crash reports, which are not linked to your account.
10. Your rights
10.1 What you can ask for
To know whether we process your data and get a copy.
To correct anything that is wrong.
To have us anonymize, block or delete data that is unnecessary, excessive or processed unlawfully.
To delete it, all of it or the parts you choose.
To take it with you in a format another system can read.
To object to a specific use.
To know who we share it with, including the names of our providers.
To withdraw your permissions (section 4), and to know what happens if you don't give them.
Maternalabs does not make automated decisions with legal effects about you.
10.2 How
From the app:
edit or delete any record;
delete the Coach conversation;
switch off artificial intelligence, in the privacy settings;
delete your account and everything in it (section 10.5).
By email, at developer@ppllaunchpartners.com, for everything else: among other things, asking for a copy of your data (we send it to you by email), objecting to a use, or asking for the list of companies we share it with. Write from your account's email so we can confirm it's you.
10.3 Deadlines
We confirm we received your request as soon as we read it.
We resolve it within 10 business days, and within 5 if it's to correct something.
If you live in Brazil, we never take more than 15 days.
10.4 If you disagree
You can complain to the authority in your country (section 19).
10.5 Deleting your account
From the app or by email, as the Delete account page explains. This deletes:
your profiles, your records and your babies' records, the Coach conversation and your reports of its answers, the Scanner history and what we noted to improve it (section 3.6), your My Guides code with its counter, your access logs if your country in the app is not Brazil (section 9), your photos, and your data in the service that manages subscriptions;
your caregivers' access, which is revoked;
your Sign in with Apple, if you used it, which is also revoked.
Deleting your account does not cancel your subscription. The subscription is cancelled in the app store (the Terms explain how).
11. Your baby's data
Maternalabs is only for people aged 18 or over: you confirm you are when you start. It is not directed at minors.
You enter your baby's data as mother, father or legal guardian, and you give us permission on your baby's behalf (section 4).
We use it only to provide the service and in your baby's interest: never for advertising or anything the app doesn't need.
It is deleted when you delete your account, or earlier if you ask us.
12. Your caregivers
You can invite caregivers, for example your partner or someone who helps at home, up to the number your subscription allows. They join for free with it.
What they see: your baby's tracking and your breastfeeding, pumping and milk-stash records. They can add records, which carry their name.
What they never see: your health data, your mood log, your conversation with the Coach, or what you answered when setting up the app.
You decide: you can remove anyone's access at any time.
What they log stays: the records a caregiver added are part of your baby's history and stay there even after they no longer have access.
13. Security
Data travels encrypted and is stored encrypted.
Access controls tie every record to its account: no one sees your data except you and, as far as it concerns them, your caregivers.
Apple and Google check that what connects to our servers is the genuine app, on a real phone. They receive nothing you log or write.
Our team accesses the data only when needed.
No system is infallible.
14. If something goes wrong
If a security breach affects your data:
we notify you by email and in the app (if your account has no email, only in the app);
we notify the authorities within the deadlines of your country's law (in Brazil, the ANPD);
we tell you which data was affected, who received it, and what you can do.
In the United States, the Federal Trade Commission's rule on breaches in health apps treats any unauthorized disclosure as a breach, not only an attack.
15. Requests from authorities
We are a US company and may receive legal demands from authorities in several countries. Our commitment:
We only hand over data when the law requires us to, after checking that the request is valid.
We push back on excessive or poorly grounded requests.
We hand over the minimum: never the full history if only part is requested.
We tell you, unless the law forbids it.
We say this because pregnancy data has become a subject of legal interest in some places. Data that no longer exists cannot be handed over: you can delete any record, or your account, whenever you want.
16. What we never do
We don't sell your data or your baby's.
We don't share it with social networks, ad networks or data brokers. The app includes no tools from social networks or ad networks.
We don't use your health data for advertising.
We don't train artificial intelligence models on your records or your conversations.
If we ever wanted to do any of this, we would ask you first, separately, and you could say no without losing the service.
Usage measurement and crash reports. We use a usage measurement tool and a crash reporting tool (section 3.8). They never receive health data, your stage, your pregnancy week or your baby's age; they use no advertising identifiers and are not used for advertising.
17. Links and communities
The app links to external communities, such as messaging groups and channels. They are services outside Maternalabs, with their own terms and privacy policies. What you post there is not covered by this document.
18. Changes to this policy
If we change this policy, we notify you in the app before the change takes effect.
If the change affects how we process your health data or who we share it with, we ask for your permission again.
Earlier versions are available on request.
19. Depending on where you live
Brazil
PPL Launch Partners LLC is the controladora (controller). The encarregado is Carlos Andres Luque Rojas, at developer@ppllaunchpartners.com, who assists you in Portuguese.
We process your health data and your baby's with your specific and highlighted consent (LGPD, articles 11 and 14), and we transfer it outside Brazil with a specific and highlighted consent to the transfer, which we ask for separately (article 33, VIII; section 4, permission 2).
You have all the rights in article 18 of the LGPD (section 10). You can complain to the Autoridade Nacional de Proteção de Dados (ANPD) and to consumer protection bodies.
We keep access logs for the app (date, time and IP address) for 185 days, as the Marco Civil da Internet requires (6 months). If your country in the app is Brazil, they stay even if you delete your account.
Panama
PPL Launch Partners LLC is the responsable del tratamiento (controller), under Law 81 of 2019 and its regulations.
We process your health data with your prior and express consent (section 4).
We respond to your rights of access, rectification, cancellation, objection and portability within the deadlines in section 10.3.
You can complain to the Autoridad Nacional de Transparencia y Acceso a la Información (ANTAI).
We keep a record of the transfers of data to third parties.
United States
Washington and Nevada: if you live there, our Consumer Health Data Privacy Policy also applies, at legal.maternalabs.com/en/consumer-health-data.
Confidentiality: we don't disclose your health information without your authorization, except to the providers that process it on our behalf (section 7) or when the law requires it (section 15).
California: we don't sell or share personal information for advertising.
Other Latin American countries
The data protection laws of your country apply. If they give you more rights than this policy, they prevail. Write to us and we will respond within the deadlines in section 10.3.
20. Language
This policy is available in Spanish, English and Portuguese. If the versions differ, the version in the language you use the app in prevails. If you live in Panama, the Spanish version always prevails.