Mobile app, website and early access · English version
Privacy policy
Last updated:
This policy covers the Hey Mom mobile app, including its early-access version, and the Hey Mom website, contact form and early-access requests. You choose which optional phone features and sharing features to use. Reading or accepting this policy does not turn them all on.
Mobile app and Lumi · Website and requests · Your choices and rights
Who is responsible
Guardian OÜ is the data controller, registered in Estonia under registry code 16998791, at Lauteri 3, Tallinn, Estonia. Hey Mom is a Guardian product. Contact info@guardianhome.eu about this policy or your personal data.
Mobile app: what we use and why
- Accounts and family connections: account email, chosen names and relationships, optional profile pictures, family membership, invitation and device records help us sign you in, connect the right phones and provide the service you request. We rely on contractual necessity for these core services.
- Shared reminders and updates: reminder text, schedules, responses, selected contacts, favorite places and notification preferences let both participants follow agreed plans. A family member may provide this information about the person they support. Family access depends on the receiving person's sharing choices; an existing family member can invite additional members to that family.
- Location, daily activity and phone status: with your permission and sharing choice, precise locations, movement, battery level and timestamps support the family map, favorite-place arrivals and departures, Places history and daily activity summaries. We rely on consent for optional location, activity and family sharing. Background access lets agreed updates continue when the app is not open. You can stop sharing or change phone access.
- Health summaries: if you separately allow access and sharing, we read supported steps, sleep and heart-rate summaries from Apple Health or Android Health Connect and share your selected summaries with your family. We rely on explicit consent for this data. Lumi's use of these summaries has its own explicit choice. Phone permission alone does not authorize family sharing or AI use.
- Lumi: voice audio or typed messages and context needed for your request are processed to generate replies, speech, drafts and explanations. Context can include agreed reminders, favorite places, shared location and activity, and Health summaries when separately enabled. We rely on contractual necessity for requested conversations and your separate choices for optional or sensitive context. Lumi is an AI assistant; its replies can be incomplete or incorrect, and proposed actions such as saving a reminder require your confirmation.
- Private diary: if you opt in, selected things you say are sent to our AI writing service to create personal entries with quotes. We rely on your consent for this optional memory feature. Pending excerpts and completed entries are stored on this phone. Entries can be used for your private recall, are not shared with family, and are not backed up to your account. You can disable Diary or delete entries. Disabling it stops new entries and recall; it does not delete existing entries.
- Notifications and Inbox: device notification tokens, delivery records, enabled alert preferences and read status let us deliver reminders and alerts and show the family phone its notification history. This records notifications sent by the service, not proof that a person saw them.
- Reliability and security: limited device, app version, delivery and technical error information helps us operate the service, diagnose problems and prevent abuse. We rely on legitimate interests for these purposes. Technical error reports exclude conversation content, audio, Health readings, precise locations, contacts and account identifiers.
Microphone access is needed for spoken input; typing remains available without it. Camera access is used to scan invitation codes, which can also be entered manually. Notifications show agreed reminders and enabled alerts. Optional calendar access lets you bring upcoming events into reminders. You choose photos when adding a picture. Optional permissions are requested when relevant and remain controlled by your phone.
Without information needed for account access or pairing, we cannot provide the corresponding service. Refusing an optional permission limits the feature that needs it. We do not identify you by your voice or make a voice clone from your conversations. Lumi suggestions do not make decisions with legal or similarly significant effects about you.
Who receives app information
Family members receive the information you agree to share, not your private diary or full private conversation history. Guardian's authorized team and service providers receive information needed for their work. Do not include someone else's private information in a conversation unless you are entitled to share it.
- AWS: app hosting, accounts, data storage and service infrastructure.
- ElevenLabs and its language model providers, including Google: Lumi conversations and generated speech. Microsoft Azure supports reminder transcription, drafting, activity explanations and private diary writing.
- Google Maps, AWS location services, MapTiler and Tavily: maps, requested places, directions and searches. Requests may include the relevant location or search terms.
- Apple, Google, Expo and RevenueCat: phone services, app delivery, notifications and subscription infrastructure, as applicable to the feature and platform.
- PostHog: enabled app analytics use allowlisted events without conversation content or precise location.
Health data is not used for advertising or sold to data brokers. App data may also be disclosed when required by law. Primary app services use EU infrastructure; AI, search, distribution and other providers may process information outside the European Economic Area. Applicable safeguards can include a European Commission adequacy decision or standard contractual clauses with supplementary measures where needed. You can request details and a copy of the safeguards relevant to your information at info@guardianhome.eu.
How long app information is kept
- Raw shared location history and family Inbox notifications: up to 90 days. Hourly activity summaries: up to 13 months. Shared Health summaries: up to 30 days. Expired records are no longer available through these features; physical removal from storage may follow the storage service's deletion cycle.
- Saved reminders, contacts, responses, favorite places and account information: while needed for the service, until removed or the applicable account data is deleted.
- Diary excerpts: until the entry is written, then replaced by the entry and selected quotes. Entries remain until deleted, sign-out or a reset of this phone's setup. Uninstalling may also remove them.
- The configured Lumi conversation agents disable saved audio and use ElevenLabs Zero Retention Mode for conversation content. This does not mean all app records or provider metadata have zero retention. Our Azure requests disable optional response storage. Microsoft's separate abuse monitoring can select potentially abusive prompts and responses for restricted review and retention, including human review. We do not represent that processing as zero retention. See Microsoft's service privacy information.
- Native technical diagnostic events: up to 30 days in the diagnostic service, with associated CloudWatch logs retained for seven days. Limited local retry queues expire after seven days.
- Data-export download copies: seven days. Restricted database recovery backups: up to 35 days. Minimal request and erasure records: 60 days, to confirm completion and prevent deleted data being restored.
Limited consent, security and legally required records may remain where needed for their stated purpose. Provider retention and any legally required billing retention are separate from deletion of the app's working records.
App controls, export and deletion
Use Privacy and permissions to change optional choices, and phone settings to change OS access. Stop sharing on the receiving phone withdraws family sharing. This stops future access through the app; it cannot retrieve information someone has already copied outside it. Turning off a phone permission alone does not delete previously saved data.
Open Your data from the family account settings or receiving phone's Privacy page to request a downloadable copy or account deletion. Deletion asks for confirmation and the words delete account. An accepted request ends access and affected sharing, then processes associated records. Our operational target is seven days; the app shows the request's actual progress. An export is prepared asynchronously and becomes available to download through the request screen. You can also contact us by email, including if you cannot open the app.
Deleting your account does not delete other family members' accounts or cancel a store subscription. Manage any subscription separately in the relevant store. Deletion removes data belonging to the requesting person and associated access; another person's private records remain theirs.
Website and early-access requests
The phone screens and map locations shown on this website are examples. Visiting the website does not give us access to the phone permissions described above. The following also covers translated landing pages and earlier waitlist registrations.
- Early-access requests: your email, selected relationship category, signup page and form position, referral and campaign information, and records of your email permission and request time. We use your selected language for the confirmation email. Permission to email you about early access is the basis for those updates. You do not need to provide a family member’s name or contact details.
- Messages: your name, email, selected language and message, so we can answer your enquiry. Our legitimate interest is responding to people who contact us. Please avoid including sensitive information or other people’s personal details.
- Website operation: requests include technical information such as IP addresses and browser details. Hosting and short-lived form rate limits support our legitimate interest in keeping the website reliable and preventing abuse.
- Measurement: referral information helps us understand signups. Website analytics and marketing technologies are described in the Cookies policy, including what happens before and after cookie consent.
Requesting access is optional. Without an email address and email permission, we cannot process your request. Cookie acceptance is not required to request access or send a message. Visiting this website does not grant access to your phone’s location, activity, contacts or microphone.
Who receives information
Authorised Guardian team members handle requests and messages. We use Resend for early-access contacts and email delivery, Vercel for website hosting, and the measurement providers described in our Cookies policy. These services receive information needed for their role. We may also disclose information where required by law.
Provider processing may involve countries outside the European Economic Area. Where required, transfers must be covered by an applicable adequacy decision or appropriate contractual safeguards. You can contact us for information about the safeguards relevant to your data.
How long information is kept
Request details and earlier waitlist registrations are kept while needed to manage your early-access request. Contact messages are kept while needed to answer and follow up on the enquiry. You can ask us to remove them. Limited consent, suppression or legal records may need to remain to respect your email preferences or meet legal obligations. These forms do not currently have a fixed automatic deletion period.
Your choices and rights
For app data, you can ask for access, correction, deletion, a portable copy, restriction or objection where applicable, including objection to processing based on legitimate interests. You can withdraw consent at any time without affecting processing that was lawful before withdrawal. We normally respond within one month; if a request is complex or numerous requests require more time, we will explain any permitted extension within that month. We may need enough information to verify that a request concerns your own data; we will not ask for your account password.
To withdraw your early-access request or email permission, or request access, correction, deletion or a copy of your data, email info@guardianhome.eu from the address you used. Where applicable, you can also object to processing or ask us to restrict it. Withdrawing consent does not affect processing that was lawful before withdrawal.
You can complain to the Estonian Data Protection Inspectorate or your local supervisory authority. Use Cookie settings in the footer to change your website cookie preference. This is separate from early-access email permission.
Changes to this policy
We will update this page when our practices change and explain material changes through the app or another appropriate channel. A policy update does not automatically authorize new optional sharing or phone access.