1. Who we are
Mamo is operated by 686 STUDIO L.L.C., a Washington, United States limited liability company ("we," "us"). We are responsible for the personal information we process to provide Mamo.
Contact: mamofamilyshare@gmail.com
This policy covers the Mamo app, its cloud services, public website and event-invitation pages, and communications with us. Apple and other independent services also have their own privacy policies.
2. Information we process
We receive information you enter or upload, information other authorized people add about you to a family or invitation, and information from the sign-in, purchase and service providers described below. Some information is generated when you use a feature, such as saving an item or registering a device for reminders.
Accounts and profiles. We process account identifiers, your sign-in email and authentication-provider information, and any name, profile photo or birthday you provide. When you choose Apple or Google sign-in, the provider supplies authentication identifiers and may supply your name, email address and profile information. Apple sign-in may supply an email relay address. Birth year is optional for the birthday feature. Account authentication is handled through Firebase Authentication; do not send us your password in support messages.
Family information. This includes family names and photos, memberships and roles, relationships between connected families, invitations and their messages, permission settings, family messages, and any optional city or address selected for your home. Adults may create profiles for family members without creating separate login accounts, including a child's name, photo and birthday.
Content you save. Mamo processes shopping lists, stores, to-dos, events, routines, dates, notes, projects, records, attachments, and associated details such as people, locations, dates, completion states and access settings. We also process activity such as creating or completing an item and marking Feed updates as read, together with author identifiers, timestamps and technical operation records needed for sharing, activity updates and reliable synchronization. These records support the organizer and Feed; they are not an advertising profile.
Purchases. Apple handles App Store payment. We receive and verify transaction identifiers, product information, purchase and renewal status, expiry, trial/refund information, and identifiers linking a purchase to a Mamo account and family. Mamo does not receive your full payment-card details from Apple.
Device and service information. Authentication, hosting, server and notification services process technical information such as IP addresses, request/error information, installation and push-delivery identifiers, device model, app/operating-system/SDK versions, notification preferences, language and time zone. Push registration associates an installation and delivery token with your Mamo account so reminders reach the right device. Firebase SDKs also process technical diagnostics and platform/version metadata for service quality and SDK analytics. Mamo does not currently include Google Analytics for Firebase, Firebase Crashlytics or advertising SDKs; this does not mean the app or its providers collect no technical information.
Public website. Our public Privacy, Terms and Support pages do not require an account and contain no advertising, analytics scripts or tracking cookies. The hosting provider still processes network requests and technical information, such as IP addresses, to deliver and secure the pages. Event-invitation pages additionally process the invitation link or access details needed to display an authorized invitation.
Support. If you contact us, we receive your email address, message and any files you choose to send. Please send only information needed to explain the issue.
3. On-device features and optional permissions
Mamo's built-in speech transcription, item generation, automatic categorization and AI summaries run on supported devices. We do not send their audio or prompts to a Mamo cloud AI service. Mamo does not retain Quick Capture audio recordings. Speech/model assets may be downloaded from Apple. Content you choose to save is then synchronized through Mamo's cloud services. Device keyboards, dictation or other software you independently use are governed by their providers' settings and policies.
If you select photos or files, only the selected content is submitted for the feature you use; Mamo does not upload your entire photo library. Camera access supports features such as scanning invitation codes. Microphone access is optional for voice capture; manual entry remains available.
MapKit processes searches for cities, addresses, stores and event locations. When you save a place, Mamo may store its name, address and latitude/longitude, including precise coordinates for a selected home address or other place. If you enable Open shopping at the store and grant location permission, Mamo can briefly check your device location when you open or return to the app. It compares that location with your saved stores on the device to open a relevant shopping list. These device coordinates are not stored or sent to Mamo's backend, and Mamo does not track your location in the background. A device-only record of the store last shown and its time prevents repeated interruptions; you can disable this feature in Shopping preferences. Saved location/store details can be shared according to the feature's access rules. Mamo does not import your phone's address book to build family connections.
With your permission, Mamo reads Apple Calendar on your device to suggest events for import and check for duplicate exports. Calendar selections, unimported suggestions, duplicate candidates and native source links stay in the app’s local storage. Only the events you explicitly choose to import are saved to Mamo and synchronized under the access settings you choose. Linked imports can update their title, times, location and cancellation status from the original calendar while Mamo is open. Mamo does not copy calendar notes or invitees when importing. Optional export writes authorized Mamo events to a separate Mamo calendar. Exported calendars and downloaded files may remain outside Mamo after their source is changed or deleted.
With your permission, Mamo can read unfinished Apple Reminders for a one-time import into to-dos or shopping lists. Only selected titles, notes, due dates and supported priorities are saved to Mamo under the access settings you choose. Original reminders are not changed, and imported reminders do not stay synchronized with Apple Reminders. Source identifiers are converted on the device into account-and-family-scoped opaque item identifiers to avoid repeat imports; raw Reminders identifiers are not sent to Mamo. You can also explicitly paste text from Notes or another app for review and import. Mamo does not read your Notes library or automatically read the clipboard.
Notifications. If you enable push notifications, Firebase Cloud Messaging and Apple Push Notification service process delivery identifiers and notification content. Notifications can include authorized item titles and updates. You can control reminders in Mamo and permission or lock-screen previews in iOS settings. Disabling notifications does not delete content already saved to the family.
Sample family. If you use Explore a sample family, its fictional content and your sample edits are held in memory on the device and are not saved to a real family or uploaded to Firebase. Resetting or leaving the sample, or restarting the app, discards those edits. Your real sign-in session remains separate, so normal authentication and SDK processing can still occur. Opening an external map, website or email app uses that service under its own terms.
4. Why we use information
We use information to operate and evaluate service reliability; authenticate accounts; create and manage family spaces; save and synchronize content; apply access permissions; deliver requested reminders; display chosen location and store information; provide invitations and connections; verify purchases and restore access; answer support requests; prevent abuse; resolve synchronization errors; and comply with legal obligations.
We do not sell personal information, share it for cross-context behavioral advertising, or use it to track you across other companies' apps and websites for advertising. We do not use your sign-in email for marketing campaigns. Mamo does not use family content to train a Mamo-operated cloud AI model. These statements do not mean cloud infrastructure processes no data: the services described here are necessary to run Mamo.
Where applicable law requires a legal basis, we rely on performance of our agreement for requested services, legitimate interests in security and service reliability subject to your rights, legal obligations, and consent where required for a particular activity. An operating-system permission is not a substitute for every consent required by law.
5. Who can see information
Within your family. Family-shared items are visible to authorized members under the applicable role and audience settings. A Private item is restricted to its creator account; the family-owner role does not override that item privacy. Owners administer the family and may grant members specific management powers. Deleting a family removes its workspace, including private items, even though the owner cannot open those items through the private-item permission system.
Connected families. Connections expose a limited family profile, including adult names and photos where permitted by the sharing settings. Adult names can remain visible when photo sharing is off. Child photos are excluded by default and may be enabled by the source family owner; child names are not included in the connected-family member projection. Connections do not automatically share private notes, the household calendar or home location.
Event invitees and link holders. When an authorized host explicitly shares an event, invitees can see its title, times, event location, host family name, invitation message and cancellation status. Anyone who obtains an enabled public invitation link may view those details without an account. Internal event notes and the household's other content are not included. An event location may itself identify a home if the host enters that address. Treat public links as shareable credentials.
Community events. If an authorized adult explicitly publishes an event to Community, other eligible Mamo users can discover its title, times, chosen public venue, host family name, public message and any cover photo selected for publication through location-based searches. Anyone with a shared public-event link can also view those public details in a browser without an account. Family member and profile photos, internal notes and the saved home address are not included automatically. Published cover photos are resized and re-encoded to remove embedded metadata such as GPS information. Removing or replacing a cover stops us serving the previous image; people who already viewed it may have saved a copy. We process venue coordinates and the area you choose to search; Community does not track your device location in the background. Accepting a private invitation or joining a Community event confirms a headcount linked to your family, or to your account if you have no family, and adds a read-only linked event to Mamo’s calendar. Adults in a family share one response and can change or cancel it. Cancelling removes that linked calendar entry. Accepted events also sync to Apple Calendar if you have enabled that setting. Hosts can see aggregate attendance; private-invitation responses do not contribute to publicly displayed totals. Public event pages show only the aggregate number going, not attendee names, profiles or children’s details. Saving an event for later, or a calendar-only save from an older app version, does not confirm attendance. Unpublishing removes discovery and disables public-event links, while existing saved invitations can remain available until sharing is stopped. We also store reports and hidden-host preferences to handle unwanted or unsafe content.
Personal and shared templates. Templates you save in My templates are private to your account and sync between your devices. They are separate from a family workspace. Templates contain the titles, descriptions, item text and suggested schedules you review; member assignments, permissions, completion history, attachments and saved photos are not included automatically. Review text carefully because it may still contain personal details. Sharing creates a link that lets anyone who receives it preview and copy that specific template version, including in a browser without an account. Saving a newer private version does not update an existing shared copy. You can stop sharing the link. Submitting a template to Explore sends the reviewed content and the public creator name you choose to our moderation process; approved content is publicly discoverable. Your family name and photos are not used as your public creator identity. When you submit an Explore search, we send your search text and selected filters to our Firebase service to find approved public templates. Mamo does not save those queries as a search history or use them for analytics; service providers may process technical logs as described below. We store publication and sharing records, reports and limited moderation records to operate and protect this feature. Hiding a template is saved on your device. Stopping sharing, unpublishing or deleting a template stops future access through that route, but does not remove copies already saved by recipients.
Service providers. Google provides optional Google sign-in, and Google Firebase/Google Cloud supports authentication, database and file storage, server processing, hosting and notifications. Apple supports sign-in, payments, push delivery, maps and device features. Our contact mailbox is hosted by Google. Providers process information to supply their services, and some process their own service/security data under their terms. See Google's privacy information, Firebase privacy information and Apple's privacy information.
Other necessary disclosures. We may disclose information when required by law, to address fraud or security threats, or to protect legal rights. If the business is transferred, relevant information may be transferred with appropriate notice and legal protections. These provisions do not authorize selling family content for advertising.
6. Storage, security and international processing
Our primary family database is hosted in the United States. Provider infrastructure and support may process information in other countries. Mamo uses access controls and the security protections of its cloud providers. Mamo is not an end-to-end encrypted service: authorized service systems and operational personnel may access information when necessary to operate, secure or support it.
No system can guarantee absolute security. Protect your devices, passwords and shared links. Information already viewed, copied, delivered in notifications or exported by another person cannot reliably be recalled by changing access later.
Information may be processed outside your country, including in the United States, where privacy laws may differ. Our cloud providers publish data-processing terms describing their international processing and available transfer safeguards. You can contact us for information about the processing of your data and the safeguards applicable to your request.
7. Retention and deletion
We retain family content while needed to provide the family space, until it is deleted through the service or removed under an applicable request or policy. A subscription ending does not itself delete the family's saved content. Private account templates remain when you leave or delete a family. Deleting your account removes your templates and their share links and Explore listings through the account cleanup process; recipients' independent copies remain.
You can initiate account deletion from User Profile and family deletion from Family Details if you are its owner. Owners must transfer ownership or delete the family before deleting their own account. Account deletion removes your profile, membership and authored content, including authored shared items; other members' own content remains. Family deletion removes the entire family workspace while members keep their individual accounts.
Deletion is processed in background cleanup rather than being instantaneous. Access is restricted when deletion is accepted. Limited purchase-verification records and account/family identifiers may remain for restoring purchases, preventing duplicate grants, security, dispute handling and legal obligations. Completed deletion-job metadata is scheduled for removal after 30 days; this is not a promise that all other retained records expire after 30 days. Offline/downloaded copies and records independently held by Apple or other recipients are separate.
Retention depends on the purpose and nature of the record. Family content and synchronization records support the ongoing family workspace. Purchase records and limited deletion/security identifiers support purchase restoration, access enforcement, fraud prevention and legal obligations; these records do not currently all have automatic expiry dates. Support correspondence is retained as needed to resolve and follow up on requests or disputes. Infrastructure logs follow provider settings and operational needs. Where backups or recovery copies exist, deletion from the active service may precede their expiry under the applicable recovery schedule. Those copies are restricted to recovery, security and legal needs; they are not an ongoing user archive. Contact us to request deletion or information about retention for your account; records that must be retained for an applicable obligation are handled separately from deleted family content.
8. Your choices and rights
Account authentication and the information needed to save and share an item are necessary for those features. Profile photos, birthdays, home location, attachments, calendar access and voice input are optional. You can use manual entry without granting microphone or calendar access. Declining an optional permission limits that feature rather than granting us access anyway.
You can change profile information, item access, family sharing choices and notification preferences; revoke device permissions in system settings; remove content you are authorized to delete; and request account deletion. Stopping an invitation link prevents subsequent access through that link, but it cannot erase an exported copy. Existing explicit invitation grants may need to be removed separately or through Stop sharing.
Depending on your location and applicable law, you may have rights to access, correct, delete or receive a portable copy of personal information, restrict or object to processing, withdraw consent, appeal a decision, or complain to a privacy regulator. Contact mamofamilyshare@gmail.com to make a request. We may reasonably verify identity and authority before responding and will follow applicable response deadlines. A request must not disclose another family member's private information to an unauthorized person.
Where processing relies on consent, withdrawing it does not affect processing already lawfully performed. Statutory rights apply even if a particular self-service control is not available in the app. Contact us to request a copy of your personal information beyond the export and download options available in the app.
To appeal our response to a privacy request, reply to the contact email and identify the request you would like reviewed. You may also contact the privacy authority responsible for your region. We do not require you to waive applicable privacy rights to use these request channels.
9. Age requirements and child profiles
Mamo accounts are for people aged 16 or older, subject to any higher applicable local requirement. People under 16 may not independently create or use an account. An adult may maintain information about a child through an adult-managed family profile. That profile is not permission for the child to sign in or submit information directly, including on a shared device.
Adults should provide only information they are authorized to share and use particular care with children's photos, birthdays and event locations. If you believe an underage person is using an account or submitting information contrary to these rules, contact us so we can investigate and take appropriate action. A 16+ policy does not remove other protections applicable to minors.
10. Changes and contact
We will update the effective date when this policy changes and give additional notice or obtain consent where required for material changes. Questions and privacy requests can be sent to mamofamilyshare@gmail.com using that email address.