MamoraPrivacy policy
Last updated: 14 November 2026
The short version
- You don't need an account, name, email or phone number to use Mamora.
- Your health answers are saved only if you agree, and only to build your plan.
- They are stored in the EU (Frankfurt, Germany), and only you can see them.
- Your answers about mood and about thoughts of self-harm are never saved.
- No ads, no tracking, and we never sell or share your data for marketing.
- You can download or delete everything at any time in the app.
1. Who we are
Mamora is an app for gentle fitness and wellbeing after birth. It is run by Anton Syrris, who is the data controller under the EU General Data Protection Regulation (GDPR). You can reach us at hello@joinmamora.com.
We are setting up a company to run Mamora. When it is registered, this page will show its name and address.
2. What we save, and why
When you agree to the health-data question at the start, the app saves the following on our database:
| What | Why | Legal basis |
|---|---|---|
| A random account ID. Mamora signs you in anonymously, with no name, email or password. | To keep your plan and progress together and in sync. | Providing the app you asked for (GDPR Art. 6(1)(b)). |
| That you confirmed you are 18 or older, and your consent choices with the date and the version of the wording. | To show that you gave consent, and to keep Mamora for adults. | Our legal duty to prove consent (Art. 6(1)(c) and Art. 7(1)). |
| Your health answers: how many weeks ago you gave birth (not your baby's birth date); the type of birth; birth-related factors and body symptoms you tick (for example leaking, heaviness or pain); whether you had a postnatal check or were told to hold off exercise; whether you are breastfeeding; your goal and session length. | To build your plan, choose safe exercises and show the right safety guidance. | Your explicit consent (Art. 9(2)(a) and Art. 6(1)(a)). |
| Your weekly check-ins: warning signs, symptoms, pain, bleeding, energy, and the result (for example "keep going" or "rest this week"). | To adjust your plan each week. | Your explicit consent (Art. 9(2)(a) and Art. 6(1)(a)). |
| Your workouts: the date, phase, minutes, how it felt, and whether you had symptoms during it. Your place in the plan. | To show your progress, unlock new workouts and move you forward safely. | Your explicit consent (Art. 9(2)(a) and Art. 6(1)(a)). |
| The country you choose for emergency numbers. | To show the right numbers to call. | Providing the app you asked for (Art. 6(1)(b)). |
| If you subscribe: whether you have Premium, and your purchase status. | To unlock Premium on your phone. | Providing the app you asked for (Art. 6(1)(b)). |
What we never save
- Your name, email, phone number, location, contacts or photos.
- Your baby's birth date.
- Your answers about mood and about thoughts of self-harm. They only decide, on your phone, which help the app shows you.
- Any free text: the app only offers choices you tick.
What stays on your phone only
- The app language and your daily reminder time. Reminders are scheduled by your phone, not by our servers, and their text never mentions health, birth or symptoms.
If you don't agree
You can choose "Continue without saving my answers". You then get a general, gentle plan, and nothing about you is saved on our servers. You can still see the safety guidance and emergency numbers.
Automatic decisions
The app uses your answers to choose your phase and to show safety guidance, for example asking you to rest or to get medical help. This is guidance only. It does not diagnose anything, and it has no legal or similar effect on you.
If you email us
We use your email address and message only to reply to you and handle your request (our legitimate interest, Art. 6(1)(f), or our legal duty when you use your GDPR rights). We delete them once the matter is closed, at the latest after 2 years.
3. Where your data is kept, and who helps us
We use a small number of service providers. They process data only on our instructions, under data processing agreements.
- Supabase runs our database and the anonymous sign-in. Your data is stored on servers in Frankfurt, Germany (EU).
- Apple (App Store) and Google (Google Play) distribute the app and handle payments, under their own privacy policies. We never send them your health answers.
- RevenueCat (USA) manages subscriptions. It receives only a random ID and your purchase details, never health data.
- Expo (USA) delivers app updates. When the app checks for an update, Expo's servers see your IP address, a random installation ID, your phone's system and the app version. We rely on our legitimate interest in keeping the app working and secure (Art. 6(1)(f)).
- GitHub hosts this website and may log visitors' IP addresses for security.
Where a provider is based outside the EU, transfers are protected by the EU–U.S. Data Privacy Framework or by the European Commission's Standard Contractual Clauses.
Mamora has no ads and no advertising or tracking tools. We don't track you across other apps or websites, and we never sell your data or share it for marketing. We don't use analytics today. If we add them later, they will be optional, they will never include your health answers, and we will update this policy first.
4. How long we keep it
- While you use the app, we keep your data so your plan works.
- When you tap Delete my data and start over in the app, your account and everything saved with it is deleted from our database straight away. Copies in our provider's backups are overwritten within a short time.
- If you don't use Mamora for 12 months (no workouts, check-ins or changes to your plan), we delete your account and all its data automatically.
- If an account is created but a plan is never set up, we delete it after 7 days.
- Purchase records kept by Apple, Google and RevenueCat follow their own rules, for example tax law.
5. Your rights
Under the GDPR you have the right to:
- Get a copy of your data, in a format you can take elsewhere: in the app, go to Settings → Your data → Download my data.
- Delete your data: Settings → Your data → Delete my data and start over. See how to delete your account.
- Withdraw your consent at any time by deleting your data. This doesn't affect what was done before you withdrew it.
- Correct your answers, restrict or object to how we use them: answer the questions again in the app, or email us.
You can also email hello@joinmamora.com. We reply within one month. Because Mamora doesn't know your name or email, we may ask you to make the request from inside the app, so we can be sure the data is yours.
If you think we have not handled your data properly, you can complain to the data protection authority in the EU country where you live or work. In Bulgaria this is the Commission for Personal Data Protection (cpdp.bg).
6. How we protect your data
- All data travels encrypted (HTTPS).
- Database rules make sure each account can only ever read its own data.
- Health answers are never written into error logs.
- Only the person running Mamora can access the database, and only to keep it working.
- If a data breach ever puts you at risk, we will tell the authority within 72 hours and tell you in the app.
7. Adults only
Mamora is for people aged 18 or over. We don't knowingly collect data from anyone younger.
8. Changes to this policy
If we change this policy, we will update the date at the top. If a change affects how we use your health answers, we will tell you in the app and ask for your consent again.