Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including:

• Account Information: Name, email address, and authentication credentials when you create an account.
• Profile Information: Photos, relationship to family members, and optional biographical details.
• User Content: Memories, photos, videos, voice recordings, captions, comments, and reactions you create or share within the Service.
• Communications: Messages and content sent to family members through our chat and game features.
• Payment Information: When you purchase a premium subscription or digital product, payment details are processed securely by Dodo Payments or Stripe, as identified during checkout. We do not store full payment card details on our servers.
• Usage Data: Information about how you interact with the Service, including feature usage, device information, browser type, and IP address for analytics and error tracking.
• Advertising and Analytics Events: Page visits, signup starts, account creation, and checkout events that help us understand ad performance and improve marketing without using private family content.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Mulam platform and all its features
• Facilitate family sharing, connection, and intergenerational storytelling
• Process transactions for premium subscriptions and digital products
• Send you technical notices, updates, security alerts, and support messages
• Personalize your experience with AI-powered features (memory summaries, prompts, game content)
• Monitor and analyze usage patterns to improve our Service
• Comply with legal obligations and enforce our Terms of Service

3. Data Sharing and Disclosure

We do not sell your personal data. We share your information only in the following circumstances:

• With Family Members: Content you create is shared with family members within your family group, based on your privacy settings (family-only or private).
• With Service Providers: We engage trusted third-party providers who need access to perform services on our behalf, including:
  • Supabase — Database, authentication, and file storage
  • Dodo Payments and Stripe — Payment processing for premium subscriptions and digital products
  • NVIDIA / Google AI — AI-powered content enrichment and personalization
  • Sentry — Error monitoring and performance tracking
  • Meta Pixel, Google Analytics, and Microsoft Clarity — Ad performance and public-page measurement, only if you accept cookies
• Legal Compliance: We may disclose information in response to valid legal requests (court orders, subpoenas) or to protect our rights, property, or safety.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Cookies, Advertising and Analytics

When you first visit Mulam, we ask before turning on advertising and analytics cookies. Until you accept, none of these tools load, and if you choose "No thanks" they stay off. Cookies Mulam needs to work, such as keeping you signed in, are always on.

If you accept, we use Meta Pixel (which ads bring visitors, signups, and purchases), Google Analytics (page visits and signup steps), and Microsoft Clarity (how visitors use our public landing page; it never runs inside the family app). We do not send family memories, private stories, names, emails, phone numbers, or child profile details to these tools.

You can change your choice at any time on our Privacy Policy page at mulamroots.com/legal/privacy.

5. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit (TLS/HTTPS) and at rest
• Row-Level Security (RLS) in our database ensuring users can only access their own family's data
• Regular security audits and vulnerability assessments
• Account deletion and privacy-request controls, subject to legal and billing retention requirements

However, no method of electronic storage or transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. When you delete your account, we permanently erase your data from our systems within 30 days, in compliance with GDPR requirements. Certain metadata may be retained for legal or audit purposes as required by applicable law.

7. Children's Privacy

The Service is designed for family use. Children under 13 may use the Service only with parental consent and supervision through a family account managed by a parent or grandparent. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States and India. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing of your data in certain circumstances

To exercise any of these rights, please contact us using the information below.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.