Privacy policy
Last updated: May 2026
At TribuMama we take your privacy seriously. This page explains what data we collect through our app and website, why we collect it, and your rights as a user.
Data controller
The data controller is TribuMama, based in Spain. You can contact us at hey@tribumama.app for any privacy-related query.
What data we collect
Through the TribuMama app we collect: email address (for authentication), phone number (optional, for SMS verification), first name and profile photo (optional), your approximate location (neighborhood and coordinates — used to find nearby tribes), your child's age range (to match you with relevant groups), language preference, interests and identity tags you select, and a device push notification token (to send you relevant alerts). We do not collect payment data.
How we use your data
We use your data to: (1) authenticate you and maintain your account; (2) show you tribes near your neighborhood; (3) send you push notifications about tribe activity you have opted into; (4) let other tribe members see your first name and profile photo within shared groups; (5) improve the product through anonymised analytics. We do not sell your data or share it with advertisers.
Location data
We request access to your device location to find tribes in your neighborhood. Your precise GPS coordinates are stored only while you are a member of a tribe and are never shown to other users. We display only the neighborhood name publicly. You can revoke location access at any time in your device settings.
Photos
If you choose to set a profile photo, we store it in a secure cloud bucket. You can delete your photo at any time from the app. Access to your device photo library is requested only when you actively choose to upload a photo.
Push notifications
We store a device token to send you push notifications about tribe activity. You can revoke notification permission at any time in your device settings. Disabling notifications does not affect your account.
Legal basis
Processing is based on your explicit consent when you create an account and, where applicable, on our legitimate interest in providing a safe and functional community platform (Art. 6(1)(a) and 6(1)(f) GDPR). You can withdraw your consent at any time by deleting your account from the app settings.
Data retention
We keep your data for as long as your account is active. When you delete your account, all your personal data (profile, location, photos, tribe memberships) is permanently deleted within 30 days. Anonymised analytics data may be retained longer.
Your rights
You have the right to access your data, rectify it, request its deletion, object to processing, request restriction of processing, and obtain a portable copy of your data. You can delete your account directly from the app (Settings → Delete account). For other requests, write to us at hey@tribumama.app. You can also lodge a complaint with the Spanish Data Protection Authority (aepd.es).
Third-party services
We use Supabase (EU data region) for database and authentication, Expo for push notification delivery, and anonymised product analytics. Each provider is bound by a data processing agreement and complies with GDPR.
Cookies
The TribuMama website does not use tracking or advertising cookies. Only strictly necessary technical cookies may be used for the site to function.
Changes to this policy
If we make significant changes to this policy we will notify you by email or in-app notification. The current version will always be available on this page.