Privacy Policy

Overview

momit.ai ("we", "us", or "our") helps parents stay on top of school and activity emails by organizing them into a weekly digest. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

Information We Collect

Account information

When you sign up, we collect your email address and name. If you sign in with Google or Apple, we receive your name and email address from the respective provider. If you use Apple's "Hide My Email" feature, we receive an Apple relay address that forwards to your real inbox.

Profile information

You may provide information about your children (first names, grade levels, activities, and keywords) to help us personalize your digest. This information is stored securely and used only to organize your digest.

Forwarded emails

You may forward school and activity emails to a personal momit.ai address. We process these emails to extract events, reminders, and announcements for your digest. Email content is stored securely and used only to generate your digest.

Gmail inbox connection (optional)

If you connect your Gmail account, Momit will have read-only access to Gmail. We can never send, delete, or modify messages in your Gmail account, and we never change your labels or settings in Gmail.

Momit uses this access to identify emails that may pertain to children. We do this in two steps. First we look only at the sender and subject line of your recent emails — not their contents — to find messages that may relate to children's schools, interests, and activities. Then, for those emails, we retrieve the full message including the body and any attachments.

This matching is automated, and it is not perfect. It may occasionally retrieve an email that turns out not to be relevant, or miss one that is. We use what it retrieves only to build your digest. You can change which senders are imported at any time from Settings, and you can ask us to delete anything retrieved by mistake at support@momit.ai.

For emails we do not import, we keep the sender address and the subject line. This lets us recognize that sender later — for example if you add another child, or if we come to recognize organizations they belong to such as a school, after school activity provider, club, etc — and import mail we previously skipped. It also means we do not re-check the same message every time.

When you first connect your Gmail account, we scan the sender and subject line of your recent email — up to about a year — to build your sender list. We retrieve full message content only from the last 60 days. After that, we check for new email going forward.

We store the imported message content in our database so we can build and rebuild your digest, and we store your Google access and refresh tokens in encrypted form.

You can disconnect Gmail at any time from Settings. Disconnecting deletes your stored tokens and immediately ends our future access to your mailbox. Email content that was already imported before you disconnected is not deleted — it stays in your digest and is retained under the Data Retention section below. To remove it, delete your account, or contact us at support@momit.ai and we will delete it for you.

Google Calendar data

If you connect Google Calendar, we request read-only access to your calendar. We use this to show you which events have already been added to your calendar. We do not modify, delete, or share your calendar data. We store the OAuth access and refresh tokens needed to read your calendar, in encrypted form, and you can disconnect at any time from your settings.

Biometric data

If you use our mobile app, you may use Face ID or Touch ID to unlock the app. Biometric authentication is handled entirely by your device's operating system. We never receive, store, or transmit any biometric data.

Push notifications

If you enable push notifications on our mobile app, we store a device token to send you notifications when your weekly digest is ready. You can disable notifications at any time from your device settings.

Diagnostic information

We record diagnostic information so that we can reproduce and fix problems you report. These records identify the app version, screens and actions you took on Momit.

How We Use Your Information

• To create and display your weekly family digest
• To send you a weekly digest email (if enabled)
• To show which events are already on your Google Calendar
• To improve the accuracy of child and event assignment in your digest
• To import and organize school and activity content from a connected Gmail account
• To operate, maintain, and improve the service
• To display aggregated, non-identifying information about the schools and activities in our community (such as school names, logos, or popular activities by region) on our website

We do not sell or rent your personal information. The service may display advertising in the future. Google user data (information obtained through Google sign-in, Google Calendar, or a connected Gmail account) is never used for advertising or ad targeting purposes, and is not transferred to third parties except as necessary to provide the features described above.

AI Processing and Your Email Content

To create your digest, we send your forwarded or Gmail-imported email content to Anthropic's Claude AI via their API. Here is what you should know:

• Your email content is not used to train AI models. We use Anthropic's commercial API, where your content is not used to train Anthropic's models. Momit does not build or train models of its own. Anthropic's handling of API data is described in their privacy policy.
• We use what we learn to improve Momit. When you rate an item or correct an assignment, and when our own team reviews items for accuracy, we look at those signals to improve how Momit organizes content for everyone. We also build a shared directory of organizations — schools, camps, teams, as well as academic and activity providers — from the emails our users receive. It holds information about the organization such as its name, alternate names, and the recurring subject-line formats its emails use, so Momit can recognize the same organization, school or club for other families.
• Your emails are not public. Your forwarded and imported emails are not published, shared with other users, or made publicly available.
• We only send Anthropic what is needed. We send the email text content (subject, body, and any attachments) along with your children's first names, grade levels, and any other details you added to their profile, such as activities or keywords — so the AI can accurately identify which items are relevant to each child. We do not send your login credentials, your calendar data, or your contact list.

Google User Data and Limited Use

momit.ai's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We use Google user data only to provide and improve the digest features you can see in the app.
• We never transfer Google user data to advertising platforms, use it for advertising or ad targeting, use it for credit assessment or lending, or sell it to anyone.
• We never use Google user data to train AI models, and our AI provider does not train on it.
• We do not allow humans to read your Gmail messages, except: when you ask us for help with a specific email or digest item and we need to look at it; where a limited number of authorized momit.ai personnel need to investigate a bug or a security issue such as abuse; or where required by law. Access is limited to personnel who need it and is not used for any other purpose.

Third-Party Services

We use the following third-party services to operate momit.ai:

• Supabase — secure database and authentication hosting
• Vercel — application hosting and infrastructure
• Mailgun — inbound email processing and outbound email delivery
• Anthropic (Claude) — AI-powered parsing of email content to extract digest items (see "AI Processing and Your Email Content" above)
• Google — sign-in, optional Google Calendar integration, and optional read-only Gmail import
• Apple — sign-in via Sign in with Apple

Data Security

We take reasonable measures to protect your information. All data is transmitted over HTTPS. Your data is stored in a secure database with access controls. Authentication tokens are stored securely and are never exposed publicly.

Data Retention

We retain your data for as long as your account is active. If you delete your account, your personal information and digest data will be deleted from our systems. You may request deletion of your data at any time by contacting us. Digest items created from email imported from a connected Gmail account are retained for 24 months, after which they and the underlying imported email content are deleted. Disconnecting Gmail stops any further import and deletes the tokens we hold, but does not delete content already imported. When you delete your account, we revoke our access to your Google account and delete all stored Google user data, including imported email content and OAuth tokens.

Lawful Basis for Processing

We process your personal data on the following legal bases:

• Contract — processing necessary to provide the service you signed up for
• Consent — where you have given explicit consent, such as connecting Google Calendar or Gmail, or enabling weekly digest emails
• Legitimate interests — improving the accuracy and relevance of your digest

Your Rights

Under GDPR and applicable privacy laws, you have the following rights:

• Right of access — request a copy of the personal data we hold about you. You can download your data at any time from Settings → Account → Download your data.
• Right to rectification — correct inaccurate or incomplete information via your account settings.
• Right to erasure — request deletion of your account and all associated data. You can do this from Settings → Account → Delete account.
• Right to restriction — request that we limit how we process your data in certain circumstances.
• Right to data portability — receive your data in a structured, machine-readable format (JSON export available in Settings).
• Right to object — object to processing based on legitimate interests, including opting out of weekly digest emails from Settings → Notifications.
• Right to withdraw consent — withdraw consent at any time (e.g. disconnect Google Calendar or Gmail from Settings).

To exercise any of these rights, contact us at support@momit.ai. We will respond within 30 days. If you are in the EU or UK, you also have the right to lodge a complaint with your local data protection authority.

Children's Privacy

momit.ai is designed for use by parents and guardians. We do not knowingly collect personal information directly from children. Information about children (such as names and grades) is provided by parents to personalize the digest.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on the app.

Contact Us

If you have questions about this Privacy Policy or your data, please contact us at support@momit.ai.