Privacy policy

1. Who we are

mom2mom is a project of the team that created it at the Kooperativ hackathon in Warsaw. We are registering a foundation (fundacja) in Poland. Until then, the project team is the data controller. You can reach us through the form on the main page.

2. What we collect

Sign-up: your role (mom-expert, founder, mentor or partner organisation), name, email or Telegram, city, the language of the page and the time you sent it.

Your story: the text you write in the join form. We send it to our AI provider to build your profile or brief. If you send the form, we store the text and that result with your contact. If you don't, we keep nothing.

Technical data: your IP address, used for a few minutes to limit how often the AI can be called, and standard server logs (IP address, time, page) kept for up to 30 days for security.

3. Why we use it and on what legal basis

We use your sign-up data only to contact you about the mom2mom pilot. The legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.

We process your text before you send it to show you the result you asked for, and technical data to keep the service secure. The legal basis is our legitimate interest (Article 6(1)(f) GDPR).

4. AI and OpenAI

The join form uses OpenAI's API. Your text is sent to OpenAI, L.L.C. (USA), which processes it on our behalf under its API data processing terms. Data may be transferred outside the European Economic Area under appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

Please do not type sensitive data into the form: health information, ID or passport numbers, or other people's personal data.

5. Who else sees your data

Only the mom2mom team. Our hosting providers store data on our behalf as processors. We never sell your data, and we never share your profile with a company without your agreement.

6. How long we keep it

Sign-up data: until the end of the pilot, and no longer than 24 months, or until you withdraw your consent. Server logs: up to 30 days. Text you don't send: not stored.

7. Cookies

This website sets no cookies.

We count visits with Cloudflare Web Analytics. It sets no cookies, stores nothing on your device and does not build a profile of you. Cloudflare, Inc. sees the page you open, the page you came from, your browser and device type and your country, and gives us only totals. The legal basis is our legitimate interest in knowing how the site is used (Article 6(1)(f) GDPR).

8. Your rights

You have the right to access your data, correct it, delete it, restrict its processing, receive it in a portable format and object to its processing. You can withdraw your consent at any time. This does not affect processing that happened before.

To use any of these rights, send us a request through the form on the main page (describe it in the “Anything we should know?” field). You also have the right to complain to the Polish data protection authority, the President of the Personal Data Protection Office (Prezes UODO, uodo.gov.pl).

9. Children

mom2mom is for adults. Please share only as much about your children as you need to describe your availability.

10. Changes

If we change this policy, we will update it on this page and change the date above.