Privacy Notice

At WiseMama, we are committed to protecting your privacy. This notice explains, in plain language, what data we collect, why we collect it, and how it is kept safe. WiseMama operates as an educational platform based in the United Kingdom and processes data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

WiseMama is a UK-based educational platform and is the data controller for personal data collected through this website. WiseMama is currently operated by an individual and is not a registered company. For any privacy-related queries, contact us at privacy@wisemama.net.

2. What Information We Collect

We collect only what is necessary to provide the service:

• Account information — your email address, collected when you create an account. If you sign in with Google, we receive your name and email address from Google. We never store your password directly — authentication is handled by Clerk, a specialist third-party service.
• Diary entries and photographs — the text content and any photos you choose to upload within the diary feature. These are stored securely in an encrypted database and are visible only to you.
• Learning progress — which topics you have completed and any bookmarks you save, so your progress persists across sessions.
• Technical data — basic information such as your IP address and browser type, collected automatically to ensure the website functions correctly and to detect security issues.

3. Our Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

• Contract performance — processing your email and progress data is necessary to provide the account-based features you have requested.
• Legitimate interests — collecting technical data to maintain security and improve the service, where this does not override your rights.
• Consent — where you voluntarily submit diary content, you are consenting to our storing that content on your behalf.

4. How We Use Your Information

Your data is used solely to:

• Create and manage your account.
• Securely store and display your diary entries and photographs to you.
• Maintain your learning progress and bookmarks across sessions.
• Communicate important updates about your account or the service.

We do not sell, rent, or share your personal data with any third party for marketing or commercial purposes. Ever.

5. Data Security and Storage

Your data — including diary entries and photographs — is stored in a secure, encrypted database hosted on Neon (a managed PostgreSQL cloud service). All connections are encrypted in transit using TLS. Access to your content is restricted to your account only — no other user, and no WiseMama team member, can view your personal content.

6. Cookies and Local Storage

WiseMama uses browser local storage (not traditional cookies) to remember your preferences — such as your journey selection (pregnancy or baby mode) and whether you have completed onboarding. This data is stored only on your device and is not transmitted to our servers. No advertising or tracking cookies are used.

7. Third-Party Services

We use a small number of trusted third-party services to run the platform:

• Clerk — handles user authentication securely. Your password is never stored by WiseMama. See Clerk's Privacy Policy.
• Google — if you choose "Sign in with Google," Google shares your name and email with us. See Google's Privacy Policy.
• Neon — cloud database hosting. Data is processed within the EEA under appropriate safeguards. See Neon's Privacy Policy.
• Netlify — website hosting. Your IP address may be logged by Netlify's infrastructure. See Netlify's Privacy Policy.

8. Data Retention

We retain your account data, diary entries, and uploaded photographs for as long as your account is active. If you delete your account, all associated data — including all diary content and photographs — is permanently deleted from our active systems within 30 days. Anonymised, aggregated usage statistics (with no personal identifiers) may be retained indefinitely.

9. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — request deletion of your account and all associated data.
• Portability — request your data in a machine-readable format.
• Restriction — ask us to pause processing your data in certain circumstances.
• Objection — object to processing based on legitimate interests.

To exercise any of these rights, email privacy@wisemama.net. We will respond within one month.

10. Right to Complain

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the UK's data protection authority: the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

11. Changes to This Notice

We may update this Privacy Notice from time to time. The effective date at the top of this page will always reflect the most recent version. For significant changes, we will notify account holders by email.

12. Contact

For any privacy-related questions: privacy@wisemama.net