Privacy Policy

Effective Date: October 26, 2026

Instinct Labs, LLC (“we,” “our,” or “us”) operates MamaCopilot, Serre, and other products and brands (each a “Brand,” collectively the “Services”). This Privacy Policy explains how we collect, use, and safeguard your information when you interact with any of the Services. By accessing or using any Service, you acknowledge this Privacy Policy and agree to our Terms of Service.

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set forth below:

  • “Account” means the user account you create to access and use a Service.
  • “Brand” means an individual product, website, or application operated by Instinct Labs, LLC, such as MamaCopilot or Serre.
  • “Contributions” means any content, such as reviews, ratings, comments, images, or other materials, that you voluntarily post, share, or submit through a Service and may be visible to other users or the public.
  • “Service” or “Services” means any website, mobile application, related platform, integration, offering, and all future updates, features, or developments operated by Instinct Labs, LLC, across any Brand.
  • “Instinct Labs,” “we,” “us,” or “Company” means Instinct Labs, LLC, the operator of the Services.
  • “Privacy Policy” means this Privacy Policy.
  • “Submissions” means direct communications you send to the Company, including feedback, suggestions, ideas, or other information regarding a Service.
  • “User Content” means all personal information, files, tasks, reminders, notes, and other data you provide or generate for your personal use within a Service.
  • “AI-Generated Content” means any content, outputs, or assets created by or through the artificial intelligence features or tools provided by a Service.
  • “You” or “User” means the individual accessing or using a Service.
  • “Third-Party Services” means any services or platforms integrated with or accessed through a Service that are operated by parties other than Instinct Labs, LLC.

1. Information We Collect

User Consent and Control

By accessing or using a Service, you consent to the collection, use, and processing of your personal information as outlined in this Privacy Policy. You have control over your data preferences, including:

  • Managing cookie settings through our cookie banner and browser controls
  • Accessing, updating, or deleting your personal information at any time via your account settings

We process your personal information based on your consent and as necessary to provide and improve the Services. Your continued use of a Service signifies your acknowledgment of this Privacy Policy.

You may withdraw or modify your consent at any time by adjusting your cookie preferences or managing your personal information within your account settings. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

Legal Bases for Processing

We process your personal information based on multiple legal grounds, including your consent, the necessity to perform our contract with you (such as providing and improving the Services), compliance with legal obligations, and our legitimate business interests. Our legitimate interests include maintaining security, preventing fraud, and improving user experience, provided these do not override your rights and freedoms.

A. Personal Information (User Content)

We collect personal information that you provide for your own use of a Service, including:

  • Name, email address, and contact information
  • Account credentials (username, password)
  • Device IDs and usage preferences
  • Tasks, reminders, notes, and other personal organizational data
  • Personal settings and customization preferences

Sensitive family information is treated as highly confidential. We do not sell or rent it, and we do not share it with advertisers. It is only shared with third-party service providers as necessary to provide the Services (see Section 4, “Third-Party Services, Data Processors, and International Transfers”), and always under confidentiality and security obligations. You may delete sensitive family information at any time through your account settings or by contacting us at hello@instinctlabs.ai.

This information constitutes your User Content and is used primarily to provide you with personalized services within the relevant Brand.

Certain features rely on approved third-party AI services to process User Content in order to generate responses, recommendations, or task suggestions. Such processing occurs only with your explicit permission, and only for the purposes of providing the requested functionality.

B. Submissions to Us

When you communicate with us directly, we collect:

  • Support requests and help desk communications
  • Feature requests and product suggestions
  • Bug reports and technical feedback
  • Survey responses and user research participation
  • Ideas, suggestions, or other feedback about improving a Service

These communications constitute “Submissions” as defined in our Terms of Service. The treatment of Submissions, including any transfer of intellectual property rights, is governed by Section 4.2 (“Submissions and Contributions”) of our Terms of Service.

C. Contributions (Public/Shared Content)

If you choose to post content that may be visible to other users, we collect:

  • Reviews and ratings of resources or features
  • Comments or testimonials
  • Profile information you choose to make public
  • Any other content you intentionally share with the community

These constitute Contributions and are subject to different licensing terms as outlined in Section 13 (“User-Generated Content, Submissions, and Contributions”) of this Privacy Policy.

D. Non-Personal Information

We collect information that does not directly identify you, including:

  • Browser type, IP address, and device model
  • Time and date of access
  • Pages viewed, features used, clicks
  • Crash logs, diagnostics, and AI interaction patterns
  • Aggregated usage analytics across all content types
  • Anonymized link interaction data, such as the domains of external links tapped or visited within a Service (for example, amazon.com)

E. Account Responsibilities

Use of a Service that requires an account means, by creating and maintaining that account, you agree to:

  • Provide true, accurate, current, and complete information during registration and keep it updated.
  • Keep your login credentials secure and confidential.
  • Notify us immediately if you suspect any unauthorized access to your account.
  • Use your account only for lawful purposes and in compliance with our Terms of Service, including acceptable use restrictions.
  • Avoid accessing or attempting to access accounts or data other than your own without authorization.

These responsibilities supplement the account requirements described in Section 3 (“Accounts”) of our Terms of Service.

F. Subscription and Purchase Information

If you purchase a paid subscription, we may receive information related to your subscription status, product tier, purchase date, renewal status, expiration date, transaction identifiers, and the platform through which you purchased (such as Apple App Store or Google Play).

We do not collect or store your full payment card number when your purchase is made through Apple App Store or Google Play. Payment processing is handled by the applicable App Distributor under its own terms and privacy practices.

If you buy MamaCopilot credits on the web, Stripe processes the payment. We receive the amount paid, the credits purchased, a transaction identifier, and whether the payment was later disputed.

G. Google Account Access (Household Calendar & Logistics)

You connect your Google Calendar to our calendar service through Google’s standard OAuth authorization process. The only Google permission you grant is access to your calendar events; we do not connect to your inbox and cannot read your mail. Specifically:

  • For Google Calendar, we read the events on your main calendar so we can show you your day and week, and we create new events. We do not edit or delete any event you or anyone else has already added. If you import a calendar from another app, such as Cozi or Maple, its events are added to your calendar the same way. If you give us a Cozi calendar link, we use it once to read your events and do not keep it. Events we add stay on your calendar if you stop using the Service or delete your account.
  • For each message you send us, by email or through a chat app, we keep a short record so you can see what happened to it: the sender, the subject line, the events we created, and a brief summary of what we read. These records are deleted after 90 days, or sooner if you delete your account. We do not keep the full text of a chat message once it has been processed. An email you forward is delivered to our forwarding mailbox. The original email and its attachments are deleted from that mailbox 30 days after they arrive, and permanently removed by our email provider within a further 30 days. Authorized staff can see your account, credit balance and usage history, including the short description of each message such as its subject line, when helping with support or credit questions.
  • If you stop using this service, our access to your Google account is revoked and any household information we have stored is deleted.
  • Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data, or anything derived from it, to create, train, or improve generalized AI or machine learning models, and we do not share it with any AI provider that uses it for that purpose.

H. Browser Extension Products

Some Services are offered as browser extensions. Where a browser extension stores data locally within your browser (such as user-created content, snippets, or preferences), we do not receive, store, or have access to that data ourselves.

Some browser extensions use Chrome’s debugger API to read the content of tabs you explicitly select, only at the moment you initiate an action such as merging tabs into a file. This content is processed transiently, in your browser, to generate the output locally — it is never stored, transmitted to us, or sent to any third party.

Some browser extension products let you store personal information about your family members — such as a child’s allergies, medical conditions, medications, or emergency contacts — to help you fill out forms more quickly. This information is entered by you, is stored only in your browser as described above, and is treated as sensitive family information under this Policy (see Section 1.A). Because these browser extensions do not use an account system, this information is not accessible through “account settings” — you can delete it at any time directly within the extension using its built-in controls, or by uninstalling the extension, which removes all locally stored data.

Our browser extensions send us anonymous usage measurements so we can tell how often they are installed, whether they work, and whether people keep using them. These measurements are counts and technical facts only: that an extension was installed, updated or uninstalled; which of our products it was and which version; whether an action such as filling a form succeeded or failed; and how many fields were filled. They also include a randomly generated identifier, created on your device, that lets us count returning use without knowing who you are. It is not linked to your name, your email address, or any account.

These measurements never include the information you store in the extension. We do not receive the names, dates of birth, allergies, medical details, contact details or any other content you enter, nor the contents of the forms you fill, nor the addresses of the pages you visit. We can see that seven fields were filled; we cannot see what was in them. This measurement is processed for us by Google Analytics (see Section 4).

When you uninstall one of our browser extensions, your browser may open a page on our website. That page records the uninstall and offers you the option to tell us, by choosing from a short list, why you removed it. Answering is entirely optional, and the page does not ask for or collect your email address or any other contact information.

If a browser extension offers a paid upgrade, payment is processed by Stripe via ExtensionPay. We do not collect or store your full payment card number; Stripe and ExtensionPay collect your email address and payment details directly to process the transaction, under their own privacy practices.

Separately from the information you enter for form-filling, a browser extension may show you an optional prompt inviting you to give an email address so that we can tell you about product updates. If you give one, it is sent to us and to our email provider and is used only for that purpose. It is never pre-filled from anything you have stored in the extension, including any email address you have saved as part of a family profile, and the two are kept as separate values. Giving it is not required, you can decline, and declining changes nothing about how the extension works or what it costs.

I. 3rd Party Chat Platforms and Text Messaging

Certain Instinct Labs products operate through WhatsApp, Telegram and text messaging (SMS/MMS). When you message one of our bots, we receive and process the content you send us — including text messages, images, and documents (such as forwarded school flyers, chat messages, or PDFs) — along with your account identifier for that platform (such as your phone number, for WhatsApp and text messages).

This content is processed, including by approved third-party AI services (see “AI providers” above), to extract relevant information (such as dates, times, and locations) and generate a response, such as a calendar event. Messages you forward may reference other individuals, including minors (for example, a child’s name mentioned in a school communication) — this information is processed solely to provide the requested service and is handled under the same data practices, including retention and deletion timelines, described elsewhere in this policy. We do not use chat content for advertising purposes.

If you link a chat account to your MamaCopilot account, messages from that chat become part of your account, and records of earlier messages from it move into your account.

Text messages (SMS/MMS). If you text one of our numbers, we receive your phone number and the content of your messages, including any images or files you attach. We use your phone number only to reply to the messages you send us and to provide the service you asked for. We reply to what you send; we do not send marketing or promotional texts, so how often you hear from us depends on how often you message us. Message and data rates may apply. Reply STOP at any time to stop receiving texts from us, and START to resume. If you reply STOP, we keep a scrambled record of your phone number so we don’t text you again, including after you delete your account. Reply HELP for help, or contact us at hello@instinctlabs.ai. Mobile carriers are not liable for delayed or undelivered messages.

Texting a parent about a job. Some parents use our Services to hire household help, such as a babysitter, nanny or housecleaner. If a parent gives you one of our numbers and you text it, we receive your phone number, your messages and the name you give, and we store them for that parent only. Our software drafts replies, and the parent reviews and sends each one; we never text you on our own, and we do not contact you about anything other than that job. If the parent decides not to move forward with you, your number and messages are deleted about 90 days later. Reply STOP at any time to stop texts from that number.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties. We share your phone number and messages only with the service providers that deliver and process them for us (our text messaging carrier and the AI services described above), solely to provide the service.

You can stop this data collection at any time by no longer messaging our chat account or number, or, for text messages, by replying STOP. To request deletion of data associated with your chat account or phone number, contact us at hello@instinctlabs.ai.

J. Family Apps: Shared Logs and Sign-up Sheets

Some Services help a family or a group of parents coordinate: a potty training app with a log shared among a child’s caregivers, and a sign-up sheet service for class parties, volunteer shifts and similar events. They run on Google Firebase, with data stored in the United States.

Shared family logs (potty training app). The app does not ask you to sign up. It creates an anonymous account on your device. What you enter is stored with your family: a child’s first name or nickname and a color, the potty events you log (such as a try, a pee, or an accident) with their times and any notes, which family member logged each one, the stickers placed on the chart, your reminder settings, and the display name each family member chooses. Only people who join your family with an invite code you share can see or add to it. Because this is health-related information about a child, we treat it as sensitive family information under this Policy (see Section 1.A). We do not use it for advertising, we do not sell or share it, and the app does not use your device’s advertising identifier or track you across other apps. The creator of a family can delete the family and everything in it from the app’s settings; any other member can leave the family or delete their own account the same way. Deleting the app alone does not delete the family’s data.

Sign-up sheets. An organizer creates an account with Google or an email sign-in link and enters the sheet’s details: a title, dates, a location, notes, the slots people can sign up for and, for contributions, the organizer’s own Venmo, PayPal or Zelle handle. A person signing up gives a name and an email address and may add a comment. Other people viewing the sheet see names as the organizer chooses (first name and last initial by default, full names, or none); email addresses are shown only to that sheet’s organizer. We use a participant’s email address only to send the confirmation, the link to change or cancel, and a reminder before the slot, and we never add it to a marketing list. We do not process payments for sign-up sheets: any money goes directly from participants to the organizer through the payment service they choose, under that service’s terms. Sheets and their sign-ups are deleted 12 months after the event date unless the organizer keeps them, and an organizer can delete a sheet at any time.

To prevent abuse, sign-up sheets use Google reCAPTCHA Enterprise, and we keep the IP address of requests that create sign-ups or report a sheet for a limited time to enforce rate limits and investigate reports.

Both products send us usage measurements (for example, that a sheet was created, that a sign-up was completed or that an event was logged, with the type of slot or event) through Google Analytics for Firebase or Google Analytics. These measurements do not include names, notes, comments or email addresses.

2. How We Use Your Information

We use your information to:

  • Provide, operate, and improve the Services.
  • Personalize task recommendations, reminders, and other features using AI.
  • Communicate with you regarding updates, support inquiries, and account matters.
  • Monitor analytics, troubleshoot errors, and enhance performance.
  • Comply with applicable laws, regulations, and legal processes.
  • Activate, manage, and verify paid subscriptions and entitlements.
  • Provide access to paid features.
  • Maintain records relating to purchases, renewals, cancellations, refunds, and purchase restoration requests.
  • Communicate with you about subscription status, billing-related changes, or purchase support.
  • Detect fraud, abuse, or unauthorized access related to purchases.
  • Support potential future features such as contextual advertising, affiliate marketing, or lead generation — only with your consent and in ways consistent with this Privacy Policy and applicable law.

AI-Generated Content, Ownership, and How We Use It

When you use a Service, you might type in thoughts, lists, details about your family, or other information (“Input“). Some Services use AI to generate responses, ideas, or other text in return (“Output“). Together, we call these things your “User Content.”

You own your User Content.
As between you and the Company, you keep ownership of both your Input and any AI-generated Output you receive through a Service. We do not claim ownership of it.

To run a Service for you, we do need permission to work with this content behind the scenes. When you use a Service, you give the Company a limited license to:

  • host and store your User Content,
  • process and transmit it (for example, to our AI providers), and
  • display it back to you inside the Service,

only as needed to provide, maintain, protect, and improve the Services, develop new features, and comply with legal obligations. We do not sell your User Content.

We may share your User Content with carefully chosen service providers (such as AI infrastructure, hosting, and analytics providers) who help us deliver the Services. When we do, they are required to use it only to provide their services to us and not for their own independent purposes.

This limited license continues even if you deactivate or delete your account, but only for copies of your User Content that are:

  • already included in our backups, logs, or records, or
  • reasonably needed for the purposes described above (such as security, fraud prevention, or legal compliance).

We do not keep your User Content longer than we reasonably need it for those purposes.

Personal vs. commercial use

Our Services are designed for personal use. You may use AI-generated Output for your own personal, non-commercial purposes.

If you want to use Output in connection with a business, product, or service (for example, something you get paid for or use to promote a business), you’ll need our prior written consent. You can reach us at hello@instinctlabs.ai to request permission.

What you can’t do with our AI and content

To protect the Services and other users, you agree that you will not:

  • use a Service, our content, or any AI-generated Output to create, train, or improve any machine learning models, algorithms, or other AI systems without our express prior written permission; or
  • use a Service in ways that violate our Terms of Service or applicable law.

Your use of the Services is governed by our Terms of Service, which set out your full rights and responsibilities.

3. Cookies and Tracking Technologies

Cookie-based tracking applies to our websites. Our apps measure usage with Google Analytics for similar purposes, as described in Section 4.

When you create a MamaCopilot account, we record which of our pages you came from, so we can tell which ones help people find us. This is stored with your account and deleted when you delete your account. It is also sent to Google Analytics with our usage measurements, linked to an account identifier rather than to your name or email address, and that copy is kept for the retention period set in our Google Analytics account rather than deleted with your account.

We use cookies and similar technologies to operate, improve, and personalize the Services. Full details on the types of cookies we use, how long they last, and your choices for managing them are provided in our Cookie Policy.

Note: our Services are intended for users aged 18 or older, as set out in our Terms of Service.

In summary:

  • Essential cookies enable core functions such as secure login, session management, and preference storage.
  • Performance and analytics cookies help us understand usage trends, improve site performance, and develop new features.

You can control or withdraw your consent for non-essential cookies at any time through our cookie banner or by adjusting your browser settings. Disabling certain cookies may limit the functionality of some parts of the Services.

Affiliate Links

Links generated by some Services (including in chat features) may be affiliate links. Where applicable, when you tap an Amazon link, the Service automatically adds an affiliate tracking tag to the URL. If you make a qualifying purchase, we may earn a small commission at no extra cost to you.

We do not receive personally identifiable information from Amazon as a result of these clicks. Full details are in our Affiliate Disclosure, where applicable to a given Brand.

4. Third-Party Services, Data Processors, and International Transfers

We rely on third-party data processors who assist in delivering the Services securely and efficiently. These services may process limited user data on our behalf or independently under their own privacy terms.

Current integrations may include:

  • AI providers (Google Gemini API, OpenAI API) — for AI-driven responses and natural language understanding. Our AI providers do not use the data we send them to train their models.
  • Firebase (Google) — for authentication, data storage, analytics, crash reporting, and cloud functions
  • Google Calendar API — for connecting your calendar, governed by Google’s API Services User Data Policy
  • RevenueCat — for subscription management, purchase verification, entitlement tracking, and subscription status management
  • Email delivery providers — for email communications (only for users who have opted in)
  • Stripe — for payment processing when you buy MamaCopilot credits on the web, and, together with ExtensionPay, on browser extension products
  • Google Analytics — for usage measurement across our websites, landing pages, apps, and browser extension products. Measurements from browser extensions are anonymous. Measurements from a MamaCopilot account are linked to an account identifier, not to your name or email address.

If you purchase a Subscription through the Apple App Store or Google Play, those platforms process your payment transaction under their own terms and privacy policies. We may receive limited subscription-related information from Apple, Google, and RevenueCat, such as product identifiers, subscription status, renewal or expiration status, purchase dates, transaction identifiers, and entitlement information, in order to provide access to paid features, restore purchases, prevent fraud, and provide customer support.

Additional third-party partnerships may include affiliate programs and external commerce platforms. For example, a Service may include affiliate links to products or services. Affiliate programs may use cookies or tracking identifiers to attribute purchases. We do not receive or store any personally identifiable purchase data from these partners.

These providers may process and store data on servers located in the United States or other countries where they operate. This may involve transferring your information across state or national borders. Such transfers are necessary to provide hosting, analytics, payment processing, and other core Service functions.

We require our service providers to maintain industry-standard security measures and handle data in accordance with this Privacy Policy. Use of these services is also subject to their respective privacy policies, which we encourage you to review.

For additional contractual terms, limitations, and user responsibilities related to third-party integrations, please see Section 7 (“Third-Party Services and Integrations”) of our Terms of Service.

5. AI and Automation

Some Services use AI to analyze user inputs and automate recommendations. We do not make automated decisions that have legal or significant effects without human oversight.

For purposes of this Privacy Policy, “significant effects” means decisions that:

  • Affect your legal rights or obligations (e.g., denial of services, eligibility determinations, legal status changes)
  • Have a material financial impact (e.g., creditworthiness, insurance rates, employment opportunities)
  • Significantly affect access to essential services (e.g., healthcare, housing, education)
  • Result in long-term or irreversible consequences for you or your family

AI-generated content is intended only for informational and organizational purposes, not for making binding or high-impact decisions. Any recommendations provided by a Service should be independently reviewed before taking action.

Because AI powers core features of some Services, withdrawing your AI data consent for those features may require account deletion. You can delete your account at any time through your account settings.

5.1 Limitations on AI-Generated Content Use

AI-generated content produced by a Service is intended for informational and organizational purposes only. It should not be solely relied upon for making decisions that affect legal rights, financial matters, health, or other critical areas. You are responsible for consulting appropriate professionals and verifying information before taking any significant actions based on AI outputs. Use of AI-generated content for unauthorized purposes, including creating or training other AI systems, is strictly prohibited without our prior written consent.

6. Professional Advice Disclaimers

AI-Generated Content Limitations: AI features across our Services provide suggestions, recommendations, and automated assistance based on data patterns and user input. However, these AI-generated outputs do not constitute professional advice of any kind.

Not Professional Advice: AI-generated content from a Service is not intended as and does not constitute:

  • Medical, health, or wellness advice
  • Legal advice or legal guidance
  • Financial or investment advice
  • Professional childcare or parenting advice
  • Psychological or mental health counseling
  • Educational or academic guidance
  • Nutritional or dietary recommendations

User Responsibility: You are solely responsible for:

  • Verifying any AI-generated information with qualified professionals
  • Making informed decisions about acting on AI suggestions
  • Consulting appropriate experts before making important decisions
  • Understanding that AI outputs are general suggestions, not personalized professional guidance

No Professional Relationship: Use of our AI features does not create any professional relationship between you and us, nor do we assume any professional duties or responsibilities toward you.

Always Consult Professionals: For any decisions involving health, legal matters, finances, childcare, education, or other important life areas, always consult with qualified, licensed professionals in the relevant field.

6.1 AI-Generated Content Disclaimer

The AI-generated content provided by our Services is created based on the information and patterns derived from your inputs and other data processed by our AI systems. While we strive to ensure helpfulness and relevance, this content is generated automatically and does not guarantee accuracy, completeness, or suitability for any particular purpose. You should independently verify any information or recommendations before relying on them for important decisions.

Conversations with our AI features are not protected by legal privilege and may be disclosed if required by law, regulation, or court order.

7. Sharing Your Information

We do not sell your personal data. We may share it with:

  • Trusted third-party service providers and platform partners that help us operate the Services, including providers for hosting, analytics, AI functionality, email delivery, text message delivery, subscription management, purchase verification, and entitlement tracking (such as Firebase, RevenueCat, Apple, Google, and VoIP.ms, as applicable). Mobile phone numbers and text messaging opt-in data are never shared for marketing or promotional purposes.
  • Legal authorities, when required by law or subpoena
  • Successors in the event of a merger, acquisition, or asset sale

8. Data Retention

We retain different types of content for varying periods based on its nature, ownership, and legal requirements. Retention rules also reflect the rights described in Section 9 of this Privacy Policy and the ownership, licensing, and termination provisions in our Terms of Service.

8.1 User Content (Personal Data)

  • Retention Period: Removed from active systems within 30 days after verified account deletion unless longer retention is required for legal, security, or operational reasons. Third-party service providers process data according to their own privacy terms and contractual commitments with us. We encourage you to review their privacy policies for the most current information.
  • What We Keep After You Delete Your Account: When you delete your account, we keep a limited record of your purchases for accounting and tax purposes; a record that free credits were already given to your email address or phone number, so they cannot be claimed twice; your email address on our unsubscribe list, so we don’t email you again; and, if you replied STOP to our texts, a record of that, so we don’t text you again. The free-credit and STOP records hold a one-way scrambled version of your email address or phone number rather than the address or number itself, but they can still be matched to it, so we treat them as personal data. They are kept for fraud prevention and to respect your request not to be contacted.
  • Ownership: You own your User Content.
  • License After Deletion: Once deleted from our systems, you no longer have access; we do not retain active copies except as required by law or backups (see 8.7).
  • Deletion Requests: May be made at any time via account settings or by contacting hello@instinctlabs.ai.
  • Held Messages: If your MamaCopilot credits run out, messages you send us are kept for up to 30 days until you add credits, then deleted without being read.

8.2 AI-Generated Content

  • Ownership: As between you and the Company, you retain ownership of both your Input and any AI-generated Output you receive through a Service. We do not claim ownership of it.
  • License to Us: To provide a Service, you grant the Company a limited license to host, store, process, transmit, and display your User Content solely as needed to provide, maintain, protect, and improve the Services, develop new features, and comply with legal obligations. We do not sell your User Content.
  • Personal Use: You may use AI-generated Output for your own personal, non-commercial purposes.
  • Commercial Use: Any commercial use of AI-generated Output — including use related to business, products, services, paid consulting, promotional campaigns, resale, sublicensing, or other revenue-generating activities — is prohibited without prior written consent from the Company. Please contact hello@instinctlabs.ai for commercial licensing inquiries.
  • Retention: AI-generated content is retained for as long as your account is active or as needed to provide the Service, subject to the deletion terms in Section 8.1. It is not used for quality control or service improvement purposes in ways that involve personal identifiers.
  • Post-Termination: Our limited license to retained copies (such as backups) ends when those copies are deleted in accordance with Section 8.7.

8.3 Submissions (Feedback, Suggestions, Ideas)

  • Ownership: Intellectual property rights transfer to us upon submission.
  • Retention Period: Indefinite, as implemented features or ideas remain part of the Services.
  • Reason: Ensures continuity of features and avoids legal conflicts.

8.4 Contributions (Public/Shared Content)

  • Ownership: You retain ownership but grant us a perpetual license to use, display, and distribute Contributions.
  • Retention Period: Indefinite, unless removed for legal, policy, or relevance reasons.
  • Removal Requests: Considered case-by-case; granted at our discretion.

8.5 Subscription and Transaction Records

  • Ownership: Subscription and transaction records are associated with your account and maintained by the Company for operational, legal, and financial purposes.
  • Retention Period: Retained for as long as reasonably necessary to provide the Services, maintain financial and business records, detect fraud, resolve disputes, and comply with legal obligations.
  • Scope: Includes subscription status, product identifiers, purchase dates, renewal history, expiration status, refund status, restore history, entitlement information, and transaction identifiers.

8.6 Non-Personal Information

  • Retention Period: Aggregated and anonymized analytics may be retained indefinitely for Service improvement, research, and business reporting.

8.7 Legal, Security, and Backup Retention

We may retain any content type longer when:

  • Required by law, regulation, or court order.
  • Needed for legal proceedings, investigations, or dispute resolution.
  • Necessary to protect rights, safety, or system integrity.
  • Required for tax, audit, or financial recordkeeping.
  • Contained in disaster-recovery backups, which may persist for up to 90 days after deletion from active systems.

Upon expiration of retention periods, including backups, we employ secure deletion and data destruction methods to permanently remove personal information from our systems in accordance with industry standards and applicable laws.

9. Your Rights

Your rights regarding your information vary depending on the type of content and applicable data protection laws. For retention rules that distinguish between deletable Personal User Content and non-deletable Submissions or Contributions, see Section 8 (“Data Retention”) and Section 13 (“User-Generated Content, Submissions, and Contributions”).

Below are the rights you have for each content type:

9.1 Rights Regarding User Content (Personal Data and AI-Generated Content)

  • User Content: For your personal User Content — such as personal information, tasks, files, notes, and other data used within a Service — you retain full ownership and control. You may access, correct, delete, or export this data as detailed in this Privacy Policy and through your account settings.
  • AI-Generated Content: You retain ownership of AI-generated Output you receive through a Service, as described in Section 2. You may use it for personal, non-commercial purposes. Commercial use requires our prior written consent. You may not use AI-generated Output to create, train, or improve any machine learning models or AI systems without our express written permission.
  • Restrictions: You may not sell, sublicense, distribute for profit, or otherwise commercially exploit AI-generated content without prior written permission.
  • Post-Termination: This personal, non-commercial license to AI-generated content survives account termination for any copies you lawfully retained before deletion.
  • Use Governance: Use of your content and interactions with the Services is governed by our Terms of Service.

9.2 Rights Regarding Submissions (Feedback to Us)

For Submissions (feedback, suggestions, ideas sent directly to us), your rights are limited because intellectual property ownership transfers to us:

What You Can Do

  • Access: Request confirmation of what Submissions we have received from you
  • Correction: Provide updates or corrections to pending Submissions that haven’t been implemented

What You Cannot Do

  • Cannot Demand Deletion: Once submitted, you cannot require us to delete Submissions since we own the intellectual property
  • Cannot Restrict Use: You cannot limit how we use implemented ideas or features derived from your Submissions
  • Cannot Withdraw: Intellectual property transfer is permanent

Why These Limitations Exist

These limitations allow us to:

  • Implement user-suggested features without legal complications
  • Continue using improved features even if the original suggester leaves
  • Share and develop ideas across our team without ongoing permission requirements

9.3 Rights Regarding Contributions (Public/Shared Content)

For Contributions (reviews, ratings, public content), you have mixed rights due to the perpetual license you’ve granted:

What You Can Do

  • Access: Request copies of your Contributions
  • Correction: Request corrections to factual errors in your Contributions
  • Removal Requests: Request removal of specific Contributions (considered case-by-case)

What You Cannot Do

  • Cannot Force Deletion: We may continue displaying Contributions due to perpetual licensing rights
  • Cannot Restrict Distribution: You cannot limit how we use or display your Contributions across platforms

Our Discretionary Actions

We may choose to remove Contributions when:

  • They violate our content standards
  • They contain personal information you want protected
  • Legal requirements mandate removal
  • The Contribution is no longer relevant or accurate

9.4 General Rights and Procedures

How to Exercise Your Rights

Email Requests: Send detailed requests to hello@instinctlabs.ai including:

  • Your full name and account email
  • Specific content or data involved
  • Type of request (access, correction, deletion, etc.)
  • Reason for the request (if required by law)

Account Settings: Many rights can be exercised directly through your account dashboard within the relevant Service.

Verification: We may require verification of your identity before processing requests to protect your privacy.

Response Timeline

  • Acknowledgment: We will acknowledge your request within 5 business days
  • Response: We will respond substantively within 30 days for most requests
  • Complex Requests: May require up to 60 days with notification of the extension
  • Urgent Requests: Security or safety-related requests will be prioritized

No Fees

We do not charge fees for exercising your data subject rights, except in cases of manifestly unfounded or excessive requests.

9.5 Limitations and Legal Requirements

When We May Decline Requests

We may decline or limit your requests when:

  • Legal Obligations: We are required by law to retain certain information
  • Legal Claims: Information is needed for legal proceedings or defense
  • Security: Deletion would compromise system security or other users’ data
  • Technical Limitations: Requests are technically infeasible
  • Third-Party Rights: Granting the request would violate others’ rights

9.5.1 California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Right to Know – Request the categories and specific pieces of personal information we have collected about you, the sources of that information, the business or commercial purposes for collecting or sharing it, and the categories of third parties to whom it was disclosed.
  • Right to Delete – Request deletion of personal information we collected from you, subject to certain exceptions.
  • Right to Correct – Request correction of inaccurate personal information we maintain about you.
  • Right to Opt Out of Sale/Sharing – Direct us not to sell or share your personal information for cross-context behavioral advertising.
  • Right to Limit Use of Sensitive Personal Information – Request that we limit our use of sensitive personal information to purposes allowed by law.
  • Non-Discrimination – Exercise these rights without discrimination.

How to Exercise Your Rights

Email us at hello@instinctlabs.ai with “California Privacy Request” in the subject line. You may authorize an agent to act on your behalf if they provide written permission.

We do not “sell” personal information for monetary consideration, but some data uses (such as analytics or advertising cookies) may be considered a “sale” or “sharing” under California law. You can opt out of such uses by contacting us or using our cookie preferences tool.

9.5.2 Virginia Residents (VCDPA)

If you are a Virginia resident, the Virginia Consumer Data Protection Act (VCDPA) provides you the right to:

  • Confirm whether we process your personal data and access such data.
  • Correct inaccuracies in your personal data.
  • Delete personal data you provided or we obtained about you.
  • Obtain a copy of your personal data in a portable format.
  • Opt out of targeted advertising, the sale of personal data, or profiling in furtherance of decisions producing legal or similarly significant effects.

How to Exercise Your Rights

Send your request to hello@instinctlabs.ai with “Virginia Privacy Request” in the subject line. If we decline your request, you may appeal by replying to our denial email with “Privacy Appeal” in the subject line. We will respond to appeals within 60 days.

9.5.3 Colorado Residents (CPA)

If you are a Colorado resident, the Colorado Privacy Act (CPA) grants you rights to:

Access, correct, and delete personal data.

Obtain your personal data in a portable, readily usable format.

Opt out of the processing of personal data for targeted advertising, sale, or certain types of profiling.

How to Exercise Your Rights

Email hello@instinctlabs.ai with “Colorado Privacy Request” in the subject line. If your request is denied, you may appeal by replying to our response with “Privacy Appeal” in the subject line. Appeals will be resolved within 45 days.

We will honor universal opt-out signals recognized by Colorado law once required by the Colorado Attorney General.

9.5.4 Connecticut Residents (CTDPA)

If you are a Connecticut resident, the Connecticut Data Privacy Act (CTDPA) provides rights to:

  • Confirm whether we process your personal data and access such data.
  • Correct inaccuracies.
  • Delete personal data.
  • Obtain a portable copy of your personal data.
  • Opt out of targeted advertising, sale of personal data, and certain profiling activities.

How to Exercise Your Rights

Email hello@instinctlabs.ai with “Connecticut Privacy Request” in the subject line. If we deny your request, you may appeal within 60 days by replying with “Privacy Appeal.”

9.5.5 Utah Residents (UCPA)

If you are a Utah resident, the Utah Consumer Privacy Act (UCPA) grants you rights to:

  • Access and obtain a copy of personal data you have provided to us.
  • Delete personal data you provided to us.
  • Opt out of the sale of personal data or targeted advertising.

How to Exercise Your Rights

Email hello@instinctlabs.ai with “Utah Privacy Request” in the subject line.

9.6 Right to Lodge Complaints

If you believe we have not adequately addressed your privacy concerns:

Contact Us First: Email hello@instinctlabs.ai

State Authorities: Contact your state’s consumer protection agency

Federal Agencies: File a complaint with the Federal Trade Commission (FTC)

9.7 Changes to Your Rights

We will notify you of any material changes to your privacy rights or how to exercise them through:

  • Email notifications to your registered address
  • Prominent notices within the Services
  • Updates to this Privacy Policy

Your continued use of the Services after such notifications constitutes acceptance of the changes.

10. Children’s Privacy

Who our Services are for. Our Services are for adults. They are not designed for children, and children may not use them. Age and eligibility requirements are set out in our Terms of Service, and by using any Service you confirm you meet them. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information directly from someone under 18, we will delete that information and terminate any associated account.

Information you provide about your own child. Several of our Services are built for parents, so you may enter information about your children. If you do, you confirm that you are that child’s parent or legal guardian and that you have obtained any consents needed. How that information is handled depends on where it goes, and there are two cases.

Case one: information that stays on your device. Some of our browser extension products exist specifically so that you can save your child’s details once and fill them into school, camp, sports and healthcare forms without retyping them every time. That can include their name, date of birth, school, allergies, medical conditions, medications, health-insurance identifiers and emergency contacts. This information is stored only in your own browser, on your own computer. It is never sent to us or to anyone else. We cannot see it, read it or recover it, and we could not produce it if we were asked to. You can delete it at any time using the controls inside the extension, or by uninstalling the extension, which removes all of it. We do measure whether the extension is working, for example that a form was filled and how many fields it completed, but those measurements carry counts only, never the details themselves, and never anything that identifies your child. Section 1.H describes these products and that measurement in more detail.

Nothing in this section asks you to hold that information back: the product does not work without it, and it does not leave your machine. One thing may travel, and it is not your child’s information: an extension may invite you, once, to give your own email address to hear about product updates. That is optional, it is never taken from anything you have saved, and declining costs you nothing. Your child’s details stay on your machine either way.

Case two: information that reaches us or a processor. Our chat and AI-assisted Services, including the assistants we offer over third-party chat platforms such as WhatsApp and Telegram (see Section 2.I), work by sending what you write to us and to third-party processors so that it can be read and acted on. For those Services, please share only what the task actually needs about a minor, and avoid entering full legal names, home addresses, government identifiers, financial details or detailed medical information where a shorter reference would do. We apply automated measures to reduce personal identifiers in chat messages, but these do not cover every Service or every field and cannot be relied on to remove everything. The chat-platform assistants in particular are designed to extract real details such as names, dates and locations from whatever you forward to them, so no automated redaction is applied to that content. Anything you send over WhatsApp or Telegram also passes through that platform under its own privacy practices, which we do not control.

Parental notice. If you are a parent or guardian and you believe your child under 18 has given us personal information directly, email hello@instinctlabs.ai and we will delete it.

11. Data Security

We use encryption, secure authentication, and access control to protect your data. While we strive to secure your data, no method is 100% secure.

We do not store full payment card information for purchases made through the Apple App Store or Google Play.

Breach Notification

If we become aware of a data breach involving your personal information, we will:

  • Notify you in the most expedient time possible and without unreasonable delay, and no later than required by applicable law.
  • Provide details about the nature of the breach, the categories of affected data, and recommended steps you can take to protect yourself.
  • Inform relevant regulatory authorities when required.

Notifications will be sent to your registered email address or through prominent notices within the Services.

12. Business Transfers

If the Company undergoes a business transaction (e.g., merger or sale), your personal data may be part of the transferred assets. We will notify you if such a transfer results in a new privacy policy.

13. User-Generated Content, Submissions, and Contributions

When you use a Service, you may provide different types of content. Each type has different rules for ownership, use, and retention.

Types of Content

  • User Content – Your personal information, tasks, files, and data used privately within your account.
  • AI-Generated Output — Responses, suggestions, and other content generated by a Service’s AI features in response to your Input. As between you and the Company, you retain ownership of this Output. See Section 2 for full details.
  • Submissions – Feedback, suggestions, or ideas you send directly to us to improve a Service.
  • Contributions – Reviews, ratings, or other content you choose to share publicly or with other users.

13.1 User Content

Ownership – You keep full ownership of your User Content.

Our License – By using a Service, you grant us a non-exclusive, worldwide, royalty-free license to use, host, store, display, process, and reproduce your User Content for the purposes of operating, maintaining, and improving the Services. This includes delivering personalized features such as reminders, checklists, and suggestions, and may support potential features like contextual advertising, affiliate partnerships, or lead generation. Any such features will only use your data consistent with your consent and as detailed in this Privacy Policy.

Privacy – We do not sell your personal data, make your private content public, or share identifiable user information with advertisers or partners without your explicit consent.

Deletion – You can delete User Content by closing your account; we’ll remove it from active systems within a reasonable time unless retention is required for legal, security, or operational reasons.

Standards – Your use of the Services and any content you provide must comply with our Terms of Service.

13.2 Submissions

Ownership Transfer – When you send us Submissions — such as feedback, suggestions, feature requests, or other ideas — you assign and transfer to us all intellectual property rights in those Submissions.

Usage – We may use, reproduce, modify, publish, translate, distribute, and otherwise exploit your Submissions for any lawful purpose, commercial or otherwise, without obligation to compensate you.

No Confidentiality – Submissions are not confidential. Do not send us ideas or information you wish to keep private.

Personal Data in Submissions – If you include personal information in a Submission, it will be handled according to this Privacy Policy; however, the content itself remains our property once submitted.

13.3 Contributions

Ownership – You own your Contributions but grant us an unrestricted, irrevocable, perpetual, worldwide, royalty-free license to use, reproduce, modify, publish, translate, distribute, display, perform, create derivative works from, sublicense, and otherwise exploit your Contributions — including your image, voice, name, company names, trademarks, and other likenesses — for any lawful purpose, commercial or otherwise, across all media.

Waiver of Moral Rights – You waive all moral rights in your Contributions to the maximum extent permitted by law.

Public Nature – Contributions may be visible to other users and/or third parties. Only post content you’re comfortable sharing publicly.

Standards – You must have rights to your Contributions, ensure they are truthful, and comply with all laws. We may moderate, edit, or remove Contributions at our discretion.

Reviews and Ratings – Must reflect your honest experience; we may use and share them indefinitely.

13.4 Cross-Reference to Terms of Service

The rights and responsibilities described in this section are in addition to those set out in Section 4 (“User Content”) of our Terms of Service. If there is any inconsistency between this Privacy Policy and the Terms of Service, the Terms of Service will control.

14. Contact Regarding Data Deletion or Disputes

You can contact us at hello@instinctlabs.ai for:

  • Accessing, correcting, deleting, or downloading your data
  • Raising privacy concerns or complaints
  • Requesting account closure

What to Include in Your Email

  • Your full name and account email
  • The type of request (e.g., access, correction, deletion, portability)
  • Any relevant details or files

Timelines

  • We aim to acknowledge requests within 5 business days and complete most within 30 days.
  • Deleted User Content is removed from active systems within 30 days and from backups within 90 days, unless retention is required by law.

Self-Service Options

You can update most personal information, delete User Content, and adjust communication preferences from your account settings. To request a copy of your data, contact us at hello@instinctlabs.ai.

Mailing Address

Instinct Labs, LLC
131 Continental Dr Ste 305
Newark, DE 19713

For urgent security issues, include “URGENT – Security Issue” in the subject line.

15. Dispute Resolution and Governing Law

If you have a privacy-related concern, please contact us at hello@instinctlabs.ai with:

  • A brief description of the issue
  • The rights you believe have been affected
  • The outcome you’re seeking

We aim to resolve most matters quickly through direct communication.

All disputes, claims, or controversies arising from or relating to this Privacy Policy — including matters involving data privacy, data security, or alleged violations of privacy rights — are governed by the dispute resolution provisions set out in Sections 21 (“Governing Law”), 22 (“Dispute Resolution Summary”), and 23 (“Arbitration and Dispute Resolution”) of our Terms of Service. Those provisions apply in full to privacy-related disputes.

16. Limitation of Liability (Privacy-Specific Provisions)

This Privacy Policy incorporates the liability limitations set out in our Terms of Service, with the following clarifications for privacy-related matters:

General Liability Cap: Our liability to you in connection with this Privacy Policy and our processing of your personal information is limited as set out in our Terms of Service, except where applicable law does not permit such limitations.

Privacy-Specific Considerations: However, this liability limitation may not apply to privacy violations where:

  • Applicable privacy laws (such as GDPR, CCPA, or state privacy statutes) provide for statutory damages or penalties that supersede contractual limitations
  • Regulatory authorities impose fines or penalties that we are legally required to pay
  • Privacy violations involve willful misconduct or gross negligence
  • Courts determine that liability caps are unenforceable for specific privacy claims

Regulatory Compliance: Nothing in this limitation affects:

  • Our obligations under applicable data protection laws
  • Regulatory authorities’ ability to impose fines or sanctions
  • Your rights to seek remedies available under applicable privacy statutes
  • Statutory damages available under privacy laws that cannot be contractually limited

International Users: For users in jurisdictions with mandatory consumer protection or privacy rights (such as the EU under GDPR), local laws may provide additional protections that supersede these contractual limitations.

Indemnification Preserved: These liability limitations do not affect your indemnification obligations as set out in Section 17 (“Indemnification”) of our Terms of Service, nor do they limit our right to seek injunctive relief or other equitable remedies for violations of this Privacy Policy.

Disclaimer: We are not providing legal advice about the enforceability of these limitations in your jurisdiction. Consult local counsel if you have questions about your rights under applicable privacy laws.

17. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or app notification. Please review this page regularly.

18. Accessibility of Our Policies

We are committed to making our privacy practices and policies accessible to all users. If you have difficulty accessing or understanding any part of this Privacy Policy or related materials, please contact us at hello@instinctlabs.ai. Your feedback is valuable in helping us improve accessibility.

We are happy to provide this Privacy Policy in alternative formats upon request to support your accessibility needs.

19. Contact Us

For any questions, concerns, or requests regarding your privacy or data, please contact us at:

This Privacy Policy governs your use of all products and brands operated by Instinct Labs, LLC, including MamaCopilot and Serre.