Privacy

What Mamigo keeps, and what it never does.

Written for a parent, not a lawyer. Each section starts with the one line that matters.

Effective 12 September 2026 · Questions: hello@mamigo.family

1. Who we are

Mamigo is a small, independent product. One person builds it; you can email her.

Mamigo is made by Keren Tevet and reachable at hello@mamigo.family. Postal: Mamigo · New York, NY. This page covers two things: the waitlist on this website, and the Mamigo app once you are in.

2. The waitlist

We keep your email, who invited you, and a few timestamps. Nothing else, and you can leave any time.

When you join, we store:

We email you: a welcome with your spot and your link; a short digest on days when friends joined through your link; a note when you unlock a reward; and one email when it's your turn. Every email has an unsubscribe link, and Gmail's own Unsubscribe button works too. Unsubscribing stops the digest and reward emails. The "your spot is ready" email still comes, because that one is the service; join again from this page and the welcome comes again.

To be removed entirely, reply to any email or write to hello@mamigo.family. We delete your address and your private link, and remove you from our mailing list. If a friend earned a reward because you joined, that stays; the join happened.

To slow down bots, the form counts sign-ups per internet address for a few minutes. That count lives in memory on the server and is never written down or stored.

3. The Mamigo app

Mamigo reads, never sends. It keeps what a message means, never the message.

Read-only, by construction. WhatsApp sees Mamigo as a linked device that only reads. The Gmail permission we ask for is read-only. Mamigo can't send, reply, react, or post, in any group or email, and no button in the app ever puts a message on the wire. A "reply" button copies a draft to your clipboard and opens WhatsApp; you press send.

No message is stored raw. A message is read, understood, and let go. What Mamigo keeps is the outcome: the task, the date, the place, the fact ("Ella has swimming on Tuesdays"), the name of the group it came from. Email bodies and attachments exist in memory only for the seconds it takes to understand them.

What is kept: tasks and events, with their status; things Mamigo learned about your family, which you can read in full in the Memory tab and export at any time; photos in which one of your kids appears, if you enrolled their faces, saved to your phone and, briefly, to a private bucket so the app can fetch them; reference files a group shared (a timetable, a contact list) if you keep them; and what you tell us in feedback.

Kids' faces stay on our server, not with a third party. Face matching runs locally on our servers with open models. No photo and no face signature is sent to any AI provider. Reference photos you add for a kid are not kept; only a numeric face signature is.

Credentials are encrypted per family. Your WhatsApp link and your Google connection are stored encrypted with a key unique to your account. Nobody can read them from the database.

Calendar writes happen only on your action or your setting. An event goes into your calendar when you tap "Add to calendar", or when you have switched on "Add events automatically", which is off by default and only ever mirrors the events and reminders Mamigo found for you. Turning it off never deletes anything.

4. Google data (Gmail and Calendar)

Your Gmail data is used for one thing: showing you what your school mail needs from you.

Mamigo's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In plain words:

5. Who else touches your data

A few services run Mamigo. Each sees only what its job needs.

RailwayRuns the Mamigo server.
SupabaseThe database, and the private storage bucket for matched kids' photos and kept files.
ResendSends the waitlist emails. Holds your email address and whether you unsubscribed.
PostHogProduct analytics: which screens are used, how often, whether something failed. Never message content, never names, never group names. On the waitlist we identify you by your referral code, not your email.
AI providersText from messages is sent to a language model to understand it: OpenRouter with no-retention, no-training routing; Google Gemini on the paid, no-training tier; and Anthropic. Kids' photos never go to any of them.

6. How long, and your rights

Outcomes are kept while they're useful; you can see, export and delete everything.

7. Changes to this page

If this page changes in a way that matters, you'll hear from us first.

Small edits (wording, a new service that does the same job) are made here with a new effective date. A change that affects what we keep or who sees it is emailed to everyone on the waitlist and in the app before it takes effect.