Mom n Track · Privacy
Privacy information.
Updated 2026-10-18 · Version 1.3
About this policy
Mom n Track is operated by Firloop LLC, based in Seattle, Washington, USA. This policy explains how Firloop LLC handles information in the Mom n Track iOS and Android care-coordination apps and marketing website. Contact support@momntrack.com for privacy questions or to request access, correction or deletion.
Information you provide
We process account identifiers, sign-in details provided by your chosen phone, Apple or Google provider, profile information and optional profile photos. Care records may include names, relationships, dates of birth, tasks, appointments, medication schedules, health readings, care notes, incidents, documents or document references, and care-circle permissions. Only provide information about another person when you have permission or another valid basis to do so. We record your adult self-declaration, Terms version, Privacy Policy acknowledgment and the time of acceptance. We do not require a birth date for this account eligibility check. This is a self-declaration, not identity or age verification.
How information is used
We use information to authenticate you, organize care, share records with authorized people, synchronize changes, provide reminders and notifications, maintain security, support account requests and enforce subscription allowances. Optional features process additional information only when you use them.
Who can see care records
Access depends on the person’s care circle, membership, role and feature-specific permissions. The circle owner manages access. Incident reports are restricted to the owner, the reporter and an eligible assigned member. Linking an account does not grant ownership. Other circle members do not automatically see every incident. Removing access stops future authorized access but cannot retrieve screenshots, exports or information someone already received.
Sign-in, cloud services and notifications
Google Firebase and Google Cloud provide authentication, database storage, backend processing and push delivery. Apple or Google may provide identity information according to your sign-in choices. Device notification tokens and notification settings support delivery. Device or lock-screen notifications may be visible to people who can access that device. Service providers may process technical information such as device, network, security and service-use information.
Profile photos
Optional profile photos are stored in private Cloudflare R2 storage. The app checks that you are signed in and have permission before issuing a temporary image link that expires after five minutes. Depending on care-circle membership, photos may be visible to you and other authorized members. Anyone who obtains a temporary link can use it until it expires, so do not share it. The app may cache images on your device to improve loading. Replacing or removing a photo requests removal from our storage, but cannot recall copies, screenshots or exports already saved elsewhere, including copies of photos shared before storage became private. Care records are not made public by adding a photo.
AI assistance
When you use AI, your message may be sent to Google’s Gemini service to understand the request. Relevant permitted care context may also be processed for a supported response. Do not put secrets or unnecessary health details into a prompt. The app checks permissions before returning care records and requires you to review actions in the normal app screens. Operational AI records can include account-linked usage, request fingerprints, selected capabilities, response status and optional feedback; they are not a promise of anonymous processing. AI can make mistakes and is not a medical or emergency service. Chat history stores your messages and assistant replies privately under your account so you can revisit them. Other circle members do not receive access to your chats. You can delete a chat or all chats from Chat history; deleting messages does not delete care records created through the app. Saved chats may become unavailable when care access changes. Chat history is removed through backend cleanup after account deletion; limited usage and security records are separate.
Connected health
If you connect Apple Health or Android Health Connect, the app reads only the supported data you authorize. Imported readings and connection information may be stored in your account’s backend to show history, synchronize care and support authorized care features. You can change health permissions in your device settings and disconnect in the app. Removing synced data from Mom n Track does not remove the original records from Apple Health, Health Connect or the wearable. Connected-health data is not used to target advertising.
Analytics and advertising
The mobile app records limited product events, such as starting or completing a creation flow, categorized errors and ad delivery stages, to understand reliability and usage. These event fields do not include care narratives. Free accounts may receive Google AdMob ads when advertising is enabled and the applicable privacy flow permits requests. Our ad requests are non-personalized and do not include care records, health readings or AI messages for targeting. The ad SDK can still process device and network information for delivery, measurement, security and fraud prevention. Pro and Ultra do not show ads. Available ad privacy controls appear in the app and applicable device settings.
Subscriptions
Apple or Google processes in-app payments. We receive product and purchase identifiers, verification results, entitlement dates and subscription status to provide your plan and prevent fraud. We do not collect your payment-card number. Store providers handle payment information under their own policies.
Website and support
The website is a public marketing site, not a care-record application. It records limited app-store selection events when you use those links; hosting services may process request logs such as IP address and browser information. Emailing support shares your email address and the information you include. Do not email passwords, verification codes or unnecessary health records.
Retention and account deletion
Account deletion removes your Firebase sign-in account, ends your memberships, clears your main account profile, disables stored notification devices, and removes your connected-health imports. Profile-photo removal is processed through backend cleanup. Shared Person records and care history, including authorship already recorded in tasks or incidents, may remain for authorized remaining circle members; deleting your login does not automatically delete another person’s records. Limited account-deletion, security, purchase and usage records may remain for care-history integrity, fraud prevention, resolving disputes and applicable obligations. Cached, exported and backup copies may persist independently. For a request concerning retained personal or health information, contact support so we can assess what can be removed, corrected or must be retained. We do not promise immediate deletion from every independent copy.
Your choices and rights
You can edit supported profile fields, change optional device permissions and notification preferences, remove a profile photo, leave a circle, disconnect health integrations, and request account deletion. Depending on your location, you may have additional rights to access, correct, delete, restrict or object to processing, receive a copy of information, or complain to a relevant authority. Contact support@momntrack.com; we may need to verify your identity and authority before acting. Do not send a password or sign-in code.
Security, international processing and children
We use authentication, access controls and service-provider security measures, but no system can guarantee complete security. Cloud providers may process information outside your country. Mom n Track accounts are restricted to adults aged 18 or older. Minors may not create an account or accept an invitation. An adult may maintain a dependent’s care profile with appropriate parental, guardianship or other lawful authority; that profile is not a login account. Adults adding a child’s or dependent’s records must have appropriate authority. Contact us if information was provided without that authority.
Changes
We may update this policy when the service or its data practices change. We will update the date and provide additional notice where appropriate. This policy does not claim medical certification or HIPAA compliance.