Privacy Policy

MumChat is operated by SBG Trading Ltd, a company registered in England and Wales. When this policy refers to “we”, “us”, or “MumChat”, it means SBG Trading Ltd.

For any privacy-related queries, contact us at our contact page or email privacy@mumchat.com.

MumChat is a service that allows parents and carers to forward WhatsApp messages and images (such as school letters or birthday invitations) to a dedicated number. Our system uses AI to extract event details from those messages and sends you a calendar invite — just hit Accept and the event is in your calendar.

We use Meta’s Llama AI model to process messages. Meta’s usage policies apply to content processed through their model.

We collect and store only the minimum data necessary to provide the service:

• Your WhatsApp number — so we know who a forwarded message is from.
• Your email address — so we can send you calendar invites.
• Extracted event details — the title, date, time, and any requirements (such as what to bring or cost) that our AI extracts from your message. This is all we retain.

We do not store the content of your WhatsApp messages. The original message text and any images you forward are deleted immediately after the AI has extracted the event details — typically within seconds of receipt.

We do not store children’s names, photos, or any personal information about children.

We use the data we collect solely to operate the MumChat service:

• To identify your account when a message arrives
• To send you calendar invites for events we extract
• To send you optional event summaries if you have enabled them

We do not use your data for advertising, profiling, or any purpose beyond providing the service.

We may display advertising within the service in the future. If we do, we will update this policy and notify you in advance. We will never sell your personal data to advertisers.

When you forward a message or image, its content is temporarily passed to an AI model (currently Meta’s Llama) to extract event details. The content is not retained by us after processing. You should be aware that the AI provider’s own data processing terms may apply to content passed to their systems — please review Meta’s privacy policy for details.

We do not pass any personal details about you (your name, number, or email) to the AI model — only the forwarded message content.

We do not sell, rent, or share your personal data with third parties, except:

• Service providers — we use Supabase (database), Resend (email delivery), and Meta’s Llama (AI processing). Each processes data only as necessary to provide their service to us, under appropriate data processing agreements.
• Legal requirements — if we are required to disclose data by law, court order, or regulatory obligation.

We retain your account data (WhatsApp number and email) for as long as you have an active account. Event records are retained until you delete them or close your account.

Original message content and images are deleted immediately after AI processing — we do not retain them at all.

As a UK resident, you have the following rights regarding your personal data:

• Right to access — request a copy of the data we hold about you.
• Right to rectification — ask us to correct inaccurate data.
• Right to erasure — ask us to delete your account and all associated data.
• Right to restriction — ask us to limit how we process your data.
• Right to portability — request your data in a portable format.
• Right to object — object to our processing of your data.

To exercise any of these rights, visit our contact page. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

All data is encrypted in transit using TLS and encrypted at rest in our database. We use industry-standard security practices and limit access to personal data to those who need it to operate the service.

No system is completely secure. In the event of a data breach that affects your rights or freedoms, we will notify you and the ICO as required by law.

MumChat is a service for adults (parents and carers). We do not knowingly collect personal data from children under 13. The service processes messages about children’s events, but we do not retain any personal information about those children.

We may update this policy from time to time. We will notify you of significant changes by email. The date at the top of this page shows when it was last updated.

For any questions about this policy or how we handle your data, visit our contact page or email privacy@mumchat.com.

SBG Trading Ltd, England and Wales