Privacy policy
Last updated: July 2026
TribuMama helps mothers meet others nearby and form small local groups called tribes. This policy explains what we collect, why, the legal bases we rely on, who we share it with, and the choices you have. It covers both the TribuMama mobile app and the tribumama.app website.
Who we are
TribuMama is the data controller for the information you share with us, and operates the service from Spain. For any question about this policy or your data, or to exercise your rights, contact us at hey@tribumama.app.
Information we collect
Account: when you sign up we collect your email address, which we use to send you a one time sign in code. We do not collect a password or social login. Profile: you may add your first name, a short bio, your children's age range, your parenting style, identity and interest tags, photos, and an optional Instagram handle. Location: we collect the approximate area you set, and your device location when you allow it, to find tribes near you, along with the city and region derived from the place you choose. Usage and device: to keep the app working and safe we collect a push notification token if you enable notifications, your language preference, basic app activity and crash diagnostics, and limited technical data such as your IP address. Messages: when you chat in a tribe, we collect the messages you send, including their text, who sent them, which tribe they belong to, and when they were sent. Website: if you join the waitlist at tribumama.app we collect your name, email and city, and optionally your neighborhood, your baby's age and any feedback you send.
How we use your information
We use your information to create and secure your account, match you with tribes and mothers near you, show your profile to members of tribes you join or consider joining, deliver the messages you send within your tribes, send notifications you have turned on, keep the community safe and handle reports, understand how the app is used so we can improve it, and respond to you when you contact us. We do not sell your personal data and we do not use it for third party advertising.
Legal bases
We rely on the following legal bases under the GDPR. Performance of a contract, to create your account and provide the core service. Your consent, for optional processing such as accessing your device location, sending push notifications, and product analytics, which you can withdraw at any time. Our legitimate interest, in keeping the community safe, preventing abuse, and improving the service. Compliance with legal obligations, where the law requires us to keep certain records.
Location
When you allow it, we collect your device location to find tribes near you. Your exact coordinates are stored on our servers to calculate distances, and are never shown to other members or shared with them. On the map, tribes appear only at the level of a neighborhood area, not at any exact address. You can turn location access off at any time in your device settings.
Photos and profile visibility
Photos and profile details you add are visible to other members, and to mothers considering a tribe before they join. Please share only what you are comfortable making visible to the community, and avoid sharing images or details of other people, including children, without their agreement. You can edit or remove this information at any time from your profile.
Messages and chat
Tribes have a group chat. The messages you send are visible to every member of that tribe, and are stored on our servers so the conversation stays available to them. You can delete your own messages at any time, which erases their text for everyone and leaves a short note in its place showing the message was deleted. Messages cannot be edited once sent. If you block a member, their messages are hidden from you. Please share only what you are comfortable posting to the whole group, and do not share other people's private information or images, including children, without their agreement.
Links you share
When you send a link in a chat, your device contacts that website directly to show a small preview, such as its title, description and image. This means the website you link to may see your device's IP address, just as it would if you opened the link in a browser. We do not send your message or your identity to that website; your device only makes the request needed to load the preview.
Children and family information
TribuMama is for adults and is intended for mothers and caregivers aged 18 and over. We do not knowingly collect data from anyone under 18. Any age information relates to your own children and is used only to match you with mothers at a similar stage. We do not create profiles for children. If you believe a minor has given us personal data, contact us at hey@tribumama.app and we will delete it.
Service providers we use
We share data only with trusted providers that process it on our behalf under data processing agreements, and that may not use it for their own purposes. Supabase (European Union) hosts our database, authentication and photo storage. PostHog (European Union) provides product analytics. Sentry provides crash and error diagnostics. Expo delivers push notifications, which are routed through Apple and Google notification services. hCaptcha helps us block automated sign ups. Resend sends transactional emails, such as notifying us when someone files a report. For maps, address search uses Photon (Komoot), map tiles are served by OpenStreetMap (or MapTiler where enabled), and the map view uses Apple Maps on iOS and Google Maps on Android. Our website is hosted on Vercel, and email to us is handled by our email provider.
International data transfers
We aim to keep your data within the European Union. Where a provider processes data outside the European Economic Area, that transfer is covered by appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an adequacy decision like the EU US Data Privacy Framework.
Data retention
We keep your information while your account is active. Chat messages are kept while their tribe exists so members can follow the conversation, and you can delete your own messages at any time. If you delete your account, we permanently delete your personal data, including your profile, location, photos, tribe memberships and the messages you have sent, within 30 days, except where we must keep limited records to meet a legal obligation. When a message is reported, we keep a copy of its text as moderation evidence, and we may keep this copy even after the message or the account is deleted, for as long as needed to keep the community safe. We may also keep other safety and moderation records, such as reports. Diagnostic and aggregated data that no longer identifies you may be kept longer.
Your rights
Under the GDPR you can access your data, correct it, delete it, receive a portable copy, and object to or restrict certain processing. You can withdraw consent at any time, and you can delete your account directly from Settings. To exercise any right, email hey@tribumama.app. You also have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es).
Security
We use reasonable technical and organizational measures to protect your data, including encryption in transit and access controls. No service can guarantee absolute security, so we encourage you to use a strong, unique sign in and to share thoughtfully.
Cookies and similar technologies
The TribuMama website does not use advertising or cross site tracking cookies. We use only strictly necessary technical storage and privacy friendly, cookieless analytics that do not require a consent banner. The mobile app stores only the data needed to keep you signed in and to remember your preferences on your device.
Push notifications
If you turn on notifications, we store a device token so we can send you updates about your tribes, including new chat messages. A message notification may show the sender's name and a short preview of the message, which passes through Apple and Google notification services to reach your device. You can hide these previews or turn notifications off at any time in your device settings, which does not affect the rest of your account.
Changes to this policy
We may update this policy as the app evolves. When we make material changes, we will let you know in the app or by email, and the current version will always be available here.
Contact
For any privacy question or request, contact us at hey@tribumama.app.