Privacy Policy — Mama Studio
Last updated: April 2, 2026
1. Introduction
Welcome to Mama Studio. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what data we collect, how we use it, and what rights you have regarding your personal information when using our website and mobile application at mamastudio.com.
Mama Studio operates in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and all applicable international privacy laws.
2. Who We Are
Data Controller: Mama Studio contact@mamastudio.com mamastudio.com
3. What Data We Collect
Data you provide directly:
- Full name and email address upon registration
- Profile information and preferences
- Photos and images you upload to generate AI portraits
- Payment information (processed securely via Stripe — we never store your card details)
- Communications you send to our support team
Data we collect automatically:
- IP address and approximate location
- Device type, operating system, and browser
- Pages visited, time spent, and interactions within the app
- Cookie and tracking data (see our Cookie Policy)
Data from third parties:
- If you register via Google or Apple Sign-In, we receive your name and email address from those providers
4. How We Use Your Data
We use your personal data for the following purposes:
| Purpose | Legal Basis |
|---|---|
| Creating and managing your account | Contract |
| Generating your AI portraits | Contract |
| Processing payments | Contract |
| Improving our AI models (anonymized data only, with consent) | Consent |
| Sending product updates and newsletters | Consent |
| Analytics and performance monitoring | Legitimate interest |
| Fraud prevention and security | Legitimate interest |
| Legal compliance | Legal obligation |
5. Your Photos and AI Processing
Your uploaded photos are used exclusively to generate your AI portraits. We do not:
- Share your photos with third parties
- Use your photos to train our AI models without your explicit consent
- Store your original photos longer than 30 days after portrait generation
All image processing is performed on secure, encrypted servers. Generated portraits are stored in your personal account and accessible only to you.
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data | Until account deletion |
| Uploaded photos | 30 days after generation |
| Generated portraits | Duration of subscription |
| Payment records | 7 years (legal obligation) |
| Analytics data | 13 months |
| Support communications | 3 years |
7. Who We Share Your Data With
We never sell your personal data. We may share limited data with trusted third-party service providers solely to operate our platform:
- Stripe — payment processing
- Google Analytics — anonymized usage analytics
- Amazon Web Services (AWS) — secure cloud storage and processing
- Meta & Google — advertising (with your consent only)
- Intercom — customer support
All third-party providers are contractually bound to process your data securely and in compliance with applicable privacy laws.
8. International Data Transfers
Your data may be processed in countries outside the European Union. In such cases, Mama Studio ensures appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.
9. Your Rights
Depending on your location, you have the following rights regarding your personal data:
Under GDPR (EU/UK users):
- ✅ Right to access your data
- ✅ Right to rectification
- ✅ Right to erasure (« right to be forgotten »)
- ✅ Right to restrict processing
- ✅ Right to data portability
- ✅ Right to object to processing
- ✅ Right to withdraw consent at any time
Under CCPA (California users):
- ✅ Right to know what data is collected
- ✅ Right to delete your data
- ✅ Right to opt out of data selling (we do not sell data)
- ✅ Right to non-discrimination
To exercise any of these rights, contact us at: privacy@mamastudio.com
We will respond within 30 days.
10. Data Security
Mama Studio implements industry-standard security measures to protect your personal data, including:
- End-to-end encryption for all data transfers (SSL/TLS)
- AES-256 encryption for stored data
- Regular security audits and penetration testing
- Strict access controls and employee data training
- Two-factor authentication for all internal systems
In the event of a data breach affecting your rights, we will notify you within 72 hours as required by GDPR.
11. Children’s Privacy
Mama Studio is not intended for users under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us immediately at privacy@mamastudio.com and we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of any material changes via email or a prominent notice on our website at least 14 days before the changes take effect. Continued use of Mama Studio after that date constitutes acceptance of the updated policy.
13. Contact & Complaints
For any privacy-related questions or concerns, please contact our Data Protection Officer:
Email: privacy@mamastudio.com Website: mamastudio.com/privacy
If you are located in the EU and believe we have not handled your data appropriately, you have the right to lodge a complaint with your local supervisory authority. In France, this is the CNIL (www.cnil.fr).