Privacy Policy
Version 2026-11-13
1. Controller
Pisio Technologies SL, tax ID B93856136, calle Juan Ramón Jiménez, km 0, núm. 11, esc. 3, pta. 4, 08191 Rubí (Barcelona), Spain. Contact: privacidad@pisiotechnologies.com.
2. What data we process and why
Mimoa is for logging what happens in a baby's day and sharing it with the people who care for them. That means it processes health data about a child (feeds, sleep, temperature, weight, medication, photos) and, in "For me", how you are feeling. It is logged by the baby's mother, father, guardian or the people they invite.
| Data | Purpose | Legal basis |
|---|---|---|
| Account: email, name, language, region and, if you use them, a password (hashed) or your Apple or Google identifier. | Create your account, sign you in and set units and clock. | Contract (GDPR art. 6.1.b) |
| Baby profile: name or nickname, date of birth and time zone. | Organize their care. | Contract |
| Baby entries: feeds, diapers, sleep, temperature, weight, medication, notes, concerns, tasks and handovers. | Store them, show them to the family according to each person's role, and prepare the summary or report you ask for. | Contract and, because they are health data, the explicit consent of the person logging them as mother, father or guardian (art. 9.2.a), which can be withdrawn by deleting the entries or the account. |
| Photos you add (without location or other metadata) and their labels. | Show them to the family and, if you choose them, in a report. They are never analyzed. | Same as baby entries. |
| "For me": mood, energy, rest and notes. | Your private journal. Only you can see it. | Your explicit consent (art. 9.2.a), withdrawn by deleting your entries or your account. |
| What you tell "Tell": the voice note and the text. | Suggest entries for you. Voice is transcribed and not stored. Nothing is saved until you confirm it. | Same as baby entries. |
| Questions to "Ask Mimoa" and a summary of the baby's recent entries, without names. | Answer your question. The conversation is not stored on our server. | Same as baby entries. |
| Invitations: the invited person's email and role. | Send them the invitation. | Contract |
| Purchases: store, purchase identifier, product, dates and status. We never receive your card. | Activate and maintain Family Plus for your household. | Contract |
| Technical data: a fingerprint of your IP, sign-in attempts and a log of important actions, without their content. | Security and fault detection. | Legitimate interest (art. 6.1.f) |
We do not sell your data and do not use it for advertising or to train AI models. Mimoa does not diagnose or say whether something is normal: suggestions and answers are generated by AI, are for guidance only and do not replace a health professional.
3. Who sees your data inside Mimoa
The baby's entries and photos are seen by the people the family invites, according to their role: caregivers don't see concerns, reports or the album. "For me" is only visible to you. A PDF report you share is a copy outside Mimoa: we can't delete it.
4. Who we share it with
Only with providers acting on our behalf, under contract:
| Provider | Purpose | Where |
|---|---|---|
| Hetzner | Server, database, photos and encrypted backups. | Germany (EU) |
| Amazon SES | Sign-in code and invitation emails (an invitation includes the baby's name and the inviter's name). | Ireland (EU) |
| Cloudflare | Secure connection between the app and the server. | US (global network) |
| OpenAI | Transcribe voice notes, suggest entries from what you tell the app and answer in "Ask Mimoa". | US |
Transfers to the US rely on the EU-U.S. Data Privacy Framework or standard contractual clauses. OpenAI does not use your data to train its models and may keep it up to 30 days to detect abuse. OpenAI never receives photos, "For me", or your name or the baby's name in questions. Apple and Google process your purchases and, if you sign in with them, your sign-in, as independent controllers.
5. How long we keep it
| Data | Period |
|---|---|
| Voice notes | Not stored: deleted once transcribed. |
| "Tell" drafts | Deleted when you confirm or discard them, and after 7 days at most. |
| "Ask Mimoa" conversations | Not stored on the server. |
| Photos you delete | 7 days. |
| Invitations | 90 days after they are used, expire or are revoked. |
| Sign-in codes | 24 hours after they expire. |
| Purchases | While active and up to 365 days after they expire. |
| Account and "For me" | Until you delete your account. |
| Baby entries and photos | While the family uses Mimoa. If you delete your account, what you logged stays for the rest of the family, without your name. If you were the only person on the baby's profile, it is closed and nobody can see it; write to us and we will erase it completely within 30 days. |
| Backups | Made every night and encrypted. What you delete may remain in them until they expire. |
6. Your rights
You can request access, rectification, erasure, restriction, portability and objection, and withdraw your consent, by emailing privacidad@pisiotechnologies.com from your account email. We reply within one month. In Settings you can export your data and delete your account (Settings → Delete my account). You may complain to the Spanish Data Protection Agency (aepd.es) or to your local authority. If you live outside the EU, you also have the rights your local law gives you.
7. Minors and security
Mimoa is for adults caring for a baby, not for children under 16; if we detect a minor's account, we delete it. A baby's data may only be logged by their mother, father, guardian or the people they invite. Connections are encrypted (HTTPS) and so are backups.
8. Changes
If we make a significant change to this policy, we will tell you in the app before it applies.