Privacy Policy

This policy applies to mothers and caregivers using MomPlan, partner organization staff using the partner portal, and visitors to our public website. It does not apply to third-party government agency websites you may visit through links on our platform. Partner organizations that receive your data through referrals may have their own privacy policies.

We collect the following categories of information:

• Identifiers — name, email, phone number, account credentials (password stored hashed), IP address, device identifiers
• Household & eligibility data — household size, income, residence, employment, housing costs, pregnancy and children details, program interests, and optional immigration or citizenship status you choose to provide for eligibility screening
• Sensitive personal information — health program enrollment indicators, disability or chronic illness flags, domestic violence or legal-issue flags (when you provide them), immigration status, and government identification numbers or documents you upload
• Documents — identity, income, and residence files you upload to your encrypted document locker
• Commercial information — partner subscription and billing records (partner portal only; not collected for free family accounts)
• Internet or network activity — pages visited, features used, and cookies (see our Cookie Policy)
• Communications — support chat, SMS/email alerts you opt into, and feedback

• Directly from you when you register, complete eligibility intake, upload documents, or contact support
• From partner organizations when you accept a caseworker connection or referral
• Automatically through cookies, logs, and similar technologies when you use our site

We use personal information to:

• Provide eligibility screening, application assistance, and renewal tracking (contract / service delivery)
• Pre-fill and track benefit applications you initiate (contract / your authorization)
• Send renewal reminders and document requests you opt into (consent / contract)
• Connect you with partner nonprofits or caseworkers when you consent (consent)
• Improve our services, security, and fraud prevention (legitimate interests)
• Comply with legal obligations and respond to lawful requests (legal obligation)

We do not sell or share your personal information for cross-context behavioral advertising. We do not use eligibility data for unrelated advertising.

Canadian users: where processing is based on consent, you may withdraw consent subject to legal or contractual restrictions and without affecting processing that occurred before withdrawal.

We collect sensitive categories only when you provide them and only to assess eligibility, pre-fill applications you authorize, connect you with services you request, or comply with law. We do not use sensitive personal information for purposes unrelated to providing MomPlan services.

Immigration status: If you provide immigration or citizenship information, we use it solely to match you with programs whose rules may apply to your household. We do not sell this information. We do not disclose it to immigration enforcement except where we are legally compelled by a valid court order or similar legal process, and we will notify you where permitted by law.

California residents may limit our use of sensitive personal information to what is necessary to provide the services you request by contacting privacy@momgovassistance.online.

MomPlan uses rule-based and automated tools to compare your profile against publicly available program criteria and generate eligibility estimates. These results are informational only — they are not legal, financial, or medical advice, and they do not constitute a final government determination. You may contact us to learn more about how eligibility suggestions are generated; a human caseworker or support agent can review your profile when you request assistance.

Depending on your state of residence, you may have the right to:

• Know what personal information we collect, use, disclose, and retain
• Access, correct, or delete your personal information
• Obtain a portable copy of certain information
• Opt out of sale or sharing (we do not sell or share for cross-context behavioral advertising)
• Limit use of sensitive personal information
• Non-discrimination for exercising your rights
• Appeal a denied request where required by state law

California residents (CCPA/CPRA): Submit requests via privacy@momgovassistance.online, through your account's Privacy & data rights settings, or by mail to MomPlan Inc., 251 Little Falls Drive, Suite 200, Wilmington, DE 19808, United States. We verify requests before fulfilling them and respond within 45 days (with a permitted extension where allowed by law). Authorized agents may submit requests with proof of authorization. If we deny a request, you may appeal by replying to our decision email.

Other U.S. states: Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and other states with comprehensive privacy laws may exercise similar rights using the same contact methods.

Canadian users have the right to access personal information we hold about you, request correction of inaccurate data, and withdraw consent where processing is consent-based (subject to legal or contractual restrictions).

Our Data Protection Officer: dpo@momgovassistance.online. You may file a complaint with the Office of the Privacy Commissioner of Canada if you believe we have not addressed your concern adequately.

We may share information with:

• Service providers (subprocessors) — Supabase (database & auth), Amazon Web Services or equivalent cloud hosting, email/SMS delivery providers, payment processing (Stripe for partner subscriptions), and analytics vendors (only with your cookie consent)
• Partner organizations — only when you explicitly refer yourself or accept a caseworker connection
• Government agencies — only when you submit an application or documentation at your direction, or as required by law
• Legal & safety — to comply with valid legal process, protect rights and safety, or prevent fraud. We do not voluntarily share immigration status with immigration enforcement

All subprocessors are bound by confidentiality and data protection obligations. Enterprise customers may request our current subprocessor list.

MomPlan infrastructure is hosted primarily in the United States. If you access our services from Canada, your information may be processed in the U.S. We implement contractual and technical safeguards (including standard contractual clauses or comparable mechanisms where required) to protect cross-border transfers. See our Government Compliance page for more detail.

We use encryption in transit and at rest, access controls, and audit logging. Health-related data is handled per our HIPAA Compliance practices where applicable.

Approximate retention periods:

• Account & profile data: While your account is active, plus up to 90 days after verified deletion for backup purge and fraud prevention
• Uploaded documents: While your account is active; deleted within 30 days of a verified account-deletion request unless law requires longer retention
• Application records: While your account is active, plus up to 7 years where required for tax, audit, or partner contractual obligations
• Security logs: 12 months

You may request account deletion from your profile settings or by emailing privacy@momgovassistance.online.

We maintain procedures to detect, investigate, and respond to security incidents. If we determine that an incident poses a significant risk to your rights, we will notify you and regulators as required by applicable law (including HIPAA breach notification where applicable).

MomPlan is intended for adults (parents and caregivers). We do not knowingly collect personal information directly from children under 13 (U.S.) or under the applicable age of consent in Canada. Information about children may be provided by a parent or guardian solely to assess household eligibility for benefit programs.

We may update this policy and will post the revised version on this page with an updated "Last updated" date. Material changes will be communicated via email or in-app notice where required. Questions: privacy@momgovassistance.online.