Privacy Policy

When you create a MainMe account, we collect your email address and a password (stored securely via Supabase Auth — we never see your raw password). We also collect the profile information you provide for your child: their first name, age, personality type, theme preferences, music genre preferences, and preferred language. This information is used solely to generate personalized content for your child.

If you upload a photo of your child, that image is stored securely in our cloud storage and used only as part of the content generation pipeline (specifically, as the still frame in personalized video content). We do not use child photos to train any AI models, ever.

We collect payment information through Stripe. MainMe never sees or stores your full card number — all payment data is handled entirely by Stripe, which is PCI-DSS compliant. We do store your Stripe customer ID in our database so we can manage your subscription.

We use the information you provide to generate your child's personalized monthly content — the song, storybook, and activity pack. We use your email address to send you delivery notifications and, occasionally, product updates. You can unsubscribe from marketing emails at any time.

We do not sell your personal information to any third party. We do not use your data for advertising. We do not share your data with any company except those we work with directly to deliver the service: Supabase (database and storage), Stripe (payments), Anthropic (AI content generation), MiniMax (music generation), and Mailchimp (email delivery).

We use Vercel Analytics to understand aggregate usage patterns (page views, performance). This data is anonymized and does not include personally identifiable information.

MainMe is a service for parents and caregivers, not for children directly. Children do not create accounts, submit data, or interact with our platform. All accounts are created and managed by adults. The child information we store (name, age, preferences, photo) is provided by a parent or guardian and is used solely to create personalized content for that child.

We comply with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under 13 through any direct interaction. If you believe we have inadvertently collected such information, please contact us at hello@mainme.app and we will delete it promptly.

For more information about our COPPA compliance practices, see our dedicated COPPA compliance page.

We share data with third-party services only to the extent necessary to operate MainMe. These services include Supabase (database, authentication, and file storage), Stripe (payment processing), Anthropic (AI content generation), MiniMax (music generation), Mailchimp/Mandrill (transactional email delivery), and Vercel (hosting and anonymized analytics).

Each of these providers has their own privacy policies and security certifications. We do not share your data with any other party, and we will not do so without your explicit consent except where required by law.

We take security seriously. Data is encrypted in transit using TLS. Passwords are hashed and never stored in plain text. Files are stored in private cloud buckets with row-level security policies that prevent any user from accessing another user's data. Payment information is handled entirely by Stripe and never touches our servers.

If you believe you have discovered a security vulnerability in MainMe, please report it to hello@mainme.app. We take all reports seriously and will respond promptly.