Last updated: June 2025
Privacy Policy
1. Who we are
imok.today is operated by moody monday, dental and wellness, unipessoal lda, based in Portugal, European Union.
Contact: hello@imok.pt
2. What data we collect
- Family member: name, email, phone number
- Elder: name, phone number only (no account, no email)
- Check-in responses (timestamps, reply text)
- Payment information (processed by Stripe — we never store card details)
- Device and browser data (basic analytics only)
3. Why we collect it
- To send daily SMS check-in messages to elders
- To notify family members of check-in status
- To process subscription payments
- To improve the service
4. Legal basis (GDPR Article 6)
- Contract performance (providing the service)
- Legitimate interests (safety notifications)
- Consent (where applicable)
5. Who we share data with
- Vonage / SMS provider: elder phone number and message content, to deliver SMS
- Stripe: family member email and payment data
- Supabase: encrypted data storage (EU region)
We never sell personal data to third parties.
6. Data retention
- Active accounts: retained while subscription is active
- Cancelled accounts: deleted within 90 days of cancellation request
- SMS logs: retained 90 days then deleted
- Elder phone numbers: deleted immediately on family request
7. Your rights (GDPR)
- Right to access your data
- Right to correct inaccurate data
- Right to delete your data
- Right to data portability
- Right to object to processing
To exercise any of these rights, email hello@imok.pt or use our data request form.
8. Elder data — special note
Elders do not have accounts. Their phone number is entered by the family member, who accepts responsibility for having consent to register that number. Family members confirm this during setup.
9. Cookies
We use minimal cookies for authentication only. No advertising or tracking cookies. See our Cookie Policy for details.
10. International transfers
Data is stored in EU-based Supabase servers. SMS delivery via Vonage may route through non-EU infrastructure. Appropriate safeguards are in place.
11. Changes to this policy
We will notify users of material changes by email with 30 days notice.
12. Contact and complaints
You have the right to complain to your local data protection authority. In Portugal, this is the CNPD — Comissão Nacional de Proteção de Dados.