The important points
- Mamó stores your conversations.
- Mamó’s operators and developers may review conversations and feedback to improve the product, safety and quality. Your chats are not private from Mamó’s operators and are not end-to-end encrypted.
- Conversations may contain health information. Only share information you are comfortable providing to the service.
- Relevant conversation data is sent to AI and service providers, including OpenAI, to generate responses and search approved sources.
- If you use voice input, the recording is sent to OpenAI for transcription and transcript clean-up. Mamó does not save the audio recording in its own database.
Who is responsible
Donal McDermott, operator of Mamó, is the controller of personal data used by this beta. For privacy questions or to exercise your rights, email [email protected].
What we collect
We collect your account email, password hash, verification and session records, beta status, conversations and messages, response feedback, request usage, and timestamps. Messages you write may reveal health information. We also keep limited security and operational records; we do not intentionally put chat contents, passwords or authentication links in application logs.
How and why we use it
We use account and conversation data to provide Mamó, secure accounts, enforce beta usage limits, preserve history, answer support requests, and operate the beta. We use feedback and may review conversations to improve response quality, safety and the product. The relevant GDPR bases are performance of the service you request, our legitimate interests in operating and improving a safe beta, legal obligations where applicable, and your explicit consent for health information you choose to provide. You may withdraw consent, but Mamó then cannot process health information in your chats and we may need to close or delete the account.
Who receives data
OpenAI receives the conversation context needed to answer, retrieval queries and results, and voice recordings submitted for transcription. Our configured transactional email provider receives your email address and verification or reset email. Hosting, database and backup infrastructure also processes stored data. These providers act under their own contractual and security terms. Where data is transferred outside the EEA, we rely on an applicable transfer safeguard such as an adequacy decision or standard contractual clauses.
Retention, deletion and backups
There is no automatic expiry for an active account. Account details, conversations, feedback and usage records remain in the live database until you delete a conversation or ask us to delete your account, unless we must retain something for a legal or security reason. Deleting a conversation removes its messages and attached feedback from the live database. One-use verification and reset links expire after 24 hours and one hour respectively and are stored only as hashes.
Access-controlled database backups are made daily and retained for 14 days. Data removed from the live database may therefore remain in rolling backups for up to 14 days, after which it expires automatically. Backups are used only for disaster recovery; deleted data restored during recovery will be removed again where reasonably possible.
Your EU data rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability, or object to processing, and you may withdraw consent. You can delete individual conversations in Mamó and can request account deletion by email. You may also complain to your local supervisory authority; in Ireland this is the Data Protection Commission at dataprotection.ie.
Security and automated decisions
We use modern password hashing, hashed session and one-use tokens, server-side access controls, HTTPS, and restricted backups. No service can promise absolute security. Mamó generates AI suggestions, but it does not make solely automated decisions with legal or similarly significant effects about you.
Changes
We may update this policy as the beta changes. Material changes will be shown in the product or sent by email where appropriate.