Confident Mom

Confident Mom is a daily affirmations app for mothers. To do its job it processes a little about you: your first name, the ages of your children, how you have been feeling and which topics you want to hear more about. This policy explains what we collect, why, who we share it with, how long we keep it and what rights you have. We have written it in plain language on purpose. If anything is unclear, email us at hello@confidentmom.app.

The data controller is Mats Claes, trading as Weight Loss Made Practical, Kerkenbos, 2812 Muizen, Belgium, email hello@confidentmom.app. This policy covers the Confident Mom app for iOS and Android (package id com.kekka.confidentmom) and the website confidentmom.app.

When you first open the app we create an anonymous account with a random user ID; no name or email is needed. If you choose to link the account to Apple, Google or an email address, we store the email address (or the private relay address Apple gives us) and the provider's user identifier so you can sign in again on another device.

The first name you want to be called, how many children you have and their age ranges (or that you are expecting), how you have been feeling lately, what weighs on you most, what would help you keep the habit, the topics you choose, your streak goal and your reminder settings. Optionally a profile picture you pick from your photo library, stored in a private folder only your account can read.

The affirmations you favorite, the collections you create, the affirmations you write yourself, which affirmations you have seen and when, your practice sessions, streak and milestones.

If you use Reframe, the thought you type (30 to 250 characters) and the affirmations generated from it. Your text is sent to the AI provider through our server (section 5); the result is shown to you and kept only if you favorite or save it.

Which subscription you bought, when, and its status, as reported by Apple or Google through RevenueCat. We never see your card number or payment details; the store handles payment.

Device model, OS and app version, language and time zone; the screens and features you use; crash and error reports; the IP address and timestamps in our server logs; and, on iOS only if you allow tracking, the advertising identifier (IDFA). On Android the advertising ID is used for install attribution unless you have disabled it in system settings.

Thumbs-up or thumbs-down ratings on affirmations and Reframe results, free-text feedback you send in the app, and any emails you send us.

Under the GDPR we need a legal basis for each purpose:

Answers such as "how have you been feeling", "what weighs on you" and the free text you type into Reframe can say something about your emotional wellbeing. We treat them as sensitive: they are used only to choose and generate affirmations for you, never for advertising, never sold, never shared with ad networks or attribution partners, and never used to train AI models. Confident Mom is not a medical service and does not try to diagnose anything from your answers.

You can change or clear these answers in the app, skip the questions, not use Reframe, or delete your account at any time. Withdrawing consent does not affect processing that already happened.

Who receives it. The Reframe feature is provided by Google LLC's Gemini API (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), called from our own servers. Nothing goes to Google directly from your device.

What is sent. The text you typed, your first name if you entered one, and the life-stage tags derived from your onboarding answers (for example "toddler years") so the affirmations fit your season. We do not send your email address, account identifier or device identifiers to Google.

Why, and on what terms. Google produces the affirmations you see. We use Google's paid API tier under the Gemini API Additional Terms and Google's Data Processing Addendum: Google acts as our processor, does not use submitted content to train or improve its models, does not use it for its own purposes, and may retain requests only briefly for abuse monitoring before deleting them. Google processes this data in the United States; the transfer is covered by the EU Standard Contractual Clauses in that addendum (see section 9).

Your permission first. None of this happens until you have agreed in the app: a consent screen appears before the first time you use Reframe and repeats what this section says. You can switch it off in Settings → AI processing.

AI output can be wrong or unhelpful. Reframe results are automated suggestions; they have no legal or similarly significant effect on you, and no decision about your access to the Service is made from them.

Product analytics (PostHog). We record which screens you open and which features you use under a pseudonymous user ID so we can see what works and fix what does not. We do not send your onboarding answers, Reframe text or the content of your affirmations to analytics.

Install attribution (AppsFlyer). AppsFlyer tells us which campaign or store listing led to an install and whether that install later subscribed. It receives device data, an install ID, the advertising identifier where permitted, app-open events and purchase events (product and price) forwarded server-side by RevenueCat. It may pass conversion events back to the network that showed you an ad (for example Apple Search Ads or Google Ads) so the campaign can be measured. We embed no ad-network SDKs or pixels, and none of your answers or content is ever included.

Apple App Tracking Transparency. On iOS we ask once, after onboarding, whether we may track you across apps. If you decline, the IDFA is not read and attribution is limited to Apple's privacy-preserving aggregate data. You can change your choice in iOS Settings → Privacy & Security → Tracking. On Android you can reset or delete your advertising ID in system settings.

We do not show third-party ads in the app and we do not use advertising cookies on confidentmom.app.

Reminders are local notifications scheduled on your device, each showing one affirmation. We only schedule them after you opt in, we do not send push notifications from a server, and you can change how many you get, when, or turn them off in the app or in your system settings at any time.

We do not sell your personal data. We share it only with service providers that process it on our instructions under data-processing agreements, with the stores that sell our app, or when the law requires it:

If the Service is sold or merged, your data may be transferred to the new operator under this policy. We may disclose data when required by law, court order or to protect the rights and safety of users.

Some providers above process data in the United States or other countries outside the EU/EEA. Where they do, we rely on the European Commission's Standard Contractual Clauses, the EU-US Data Privacy Framework where the provider is certified, or an adequacy decision, together with technical safeguards such as encryption in transit and at rest. You can ask us for details of the safeguards used for a specific provider.

Deleting your account (Settings → Delete Account) removes your storage files and every database row linked to your user ID, then deletes the sign-in record itself. This is immediate and irreversible. Backups are overwritten within 30 days.

Data is encrypted in transit (TLS) and at rest. Every table has row-level access rules so that one account can never read another's data. AI requests are authenticated and rate-limited. Access to production systems is limited to the operator. No system is perfectly secure; if you suspect a problem, tell us at hello@confidentmom.app.

Under the GDPR and similar laws you can:

To exercise a right, email hello@confidentmom.app from the address linked to your account or include your user ID from the app's Settings screen. We answer within one month. You also have the right to lodge a complaint with a supervisory authority, in particular the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit, Drukpersstraat 35, 1000 Brussels, www.dataprotectionauthority.be) or the authority in your country of residence.

If you live in California or another US state with a consumer privacy law, you have the right to know what personal information we collect and how we use it (this policy), to access, correct and delete it, and not to be discriminated against for exercising these rights. We do not sell personal information or share it for cross-context behavioural advertising as defined in the CCPA/CPRA; attribution data only measures our own campaigns. Your wellbeing answers and Reframe text are used only to provide the features you request. To exercise your rights, email hello@confidentmom.app; an authorised agent may act for you with written permission.

Confident Mom is for adults. We do not knowingly allow anyone under 18 to create an account. We ask about the ages of your children only as ranges, never their names or dates of birth, and we create no profile of them. If you believe a minor has used the app, email us and we will delete the account and its data.

We will update this policy when our data practices or the law change and post the new version at confidentmom.app/privacy with a new "Last updated" date. For material changes, such as a new category of data or a new purpose, we will tell you in the app and, where required, ask for your consent again.