Welcome to Mori! Mori is the family's AI assistant — made for parents, by parents. You talk and Mori organizes your family's routine across health, screen time, schedule, and meals, all in one shared record that both guardians can see. We take your family's privacy very seriously — especially when it comes to children's data.
This Privacy Policy describes how we collect, use, store, and protect your information when you use the Mori app. By creating an account and using our services, you agree to the practices described in this document.
2. What Data We Collect
2.1 Account Data (Parent / Guardian)
Email address and password (authentication via Supabase)
Parent or guardian name
Language preference (English, Portuguese, or Spanish)
Optional PIN to protect Kids Mode exit
Research-survey email preference — whether you have agreed to receive occasional product-feedback surveys by email. You can change this at any time in Edit Profile.
2.2 Child Profile Data
Child's name
Child's age or age range
Interests and preferences selected during onboarding
2.3 Usage Data
Generated activities and ratings (1 to 5 stars)
Activity progress (completed steps)
Screen time tracking data
Saved activity history
2.4 Third-Party Integration Data
Google Calendar access upon explicit OAuth authorization (read-only)
Anonymous analytics data via Google Analytics (optional, when enabled)
2.5 Mori Agent Data (beta)
Notes and information you share in chat with the Mori Agent
Child health and medical records you choose to log — for example doctor visits, prescriptions, exams, vaccine records, and symptom notes or photos
Family expense and financial entries you choose to log
Documents and images you upload (such as prescriptions, exam results, receipts, bank statements, or school invitations), stored in a private storage bucket
Calendar events and reminders you create
When two guardians are linked to the same child, the child's record — including the above — is shared between both guardian accounts
Health and some financial details are sensitive personal data; we process them only to provide the Agent's features, based on your consent as the child's guardian.
2.6 Audio, Voice, and Device Permissions
When you use voice input in the app, we record audio through your device microphone and send it to OpenAI to transcribe your speech into text (speech-to-text). We do not record audio unless you tap to use voice input, and we keep the recording only as long as needed to produce the transcription.
In Kids Mode, text is read aloud using OpenAI text-to-speech; only the text to be read is sent, not any recorded audio.
The app uses the camera permission so you can capture photos and documents for the Mori Agent, and the microphone permission for voice input. These permissions are used only when you choose to take a photo or speak, and you can manage them at any time in your device settings.
3. Mori Screen Check — Chrome Extension
Mori Screen Check is an optional Chrome browser extension that helps parents track what their children watch on streaming platforms. Below we describe how this extension collects and handles data.
3.1 What the Extension Does
The extension uses content scripts that run exclusively on Disney+ and Netflix to detect what content is being watched
It does not access, monitor, or collect any browsing history or data from any other websites or services
3.2 Data Collected by the Extension
Show or movie title currently being watched
Episode information (season and episode number, when applicable)
Duration of the viewing session
Streaming platform (Disney+ or Netflix)
Timestamps of when content was watched
3.3 How Data Is Transmitted
Viewing data is synced to Mori's servers every 5 minutes via encrypted HTTPS connections
Data is linked to the parent's Mori account through a secure pairing code system — the parent generates a code in the Mori app and enters it in the extension to establish the connection
3.4 Control and Deletion
The extension can be disconnected at any time from the extension popup or from Mori's Screen Check page in the app
All collected viewing data can be reviewed and deleted by the parent at any time through the Mori app
Uninstalling the extension immediately stops all data collection
4. How We Use Your Data
We use the information collected solely to:
Create and manage your account and family profile
Generate personalized activities for your child based on age, interests, and meeting duration using AI (Claude, by Anthropic)
Display Google Calendar events to suggest activities at the right time
Save activity history and ratings to improve future recommendations
Track your child's screen time to support parental control
Provide multilingual support tailored to your family's profile
Continuously improve our services based on aggregated, anonymous usage data
Read and extract information from photos and documents you upload, using AI vision (Claude, by Anthropic), so the Agent can organize them for you
Transcribe your voice input into text using OpenAI (Whisper) when you choose to speak instead of type, and read text aloud in Kids Mode using OpenAI text-to-speech
Send reminder and account emails (for example beta invites) to the guardians on the account
We do not use your data for advertising purposes, and we do not sell it to third parties.
5. Data Sharing with Third Parties
Mori uses trusted third-party services to operate the platform. We share data only to the extent necessary for the services to function:
Supabase: Database and authentication — secure storage of profiles, activities, and progress, with Row Level Security (RLS) enabled on all tables.
Anthropic: Claude API — used to generate activities and to power the Mori Agent. Text you share and the photos/documents you upload (which may include health or financial information) are sent to Claude to extract and organize the information you ask for. Anthropic does not retain this data beyond what is required to process the request and does not use it to train its models.
OpenAI: Voice transcription (Whisper) and text-to-speech — when you use voice input, the audio you record is sent to OpenAI to convert your speech into text; in Kids Mode, text is sent to OpenAI to be read aloud. OpenAI processes this data only to perform the request and, under its API terms, does not use it to train its models.
Google: Calendar OAuth and Analytics — Calendar access is granted only upon explicit user authorization; Google Analytics, when enabled, collects usage data anonymously.
Vercel: Application hosting and deployment infrastructure.
Resend: Transactional email delivery — used to send reminder emails and closed-beta invitations to the guardians on the account. Only the recipient email address and the message content are shared.
We do not share personally identifiable information with advertisers or other third parties without your explicit consent.
6. Children's Data Protection
Mori is a parent-controlled application. Accounts are created and managed exclusively by adult guardians. We do not collect data directly from children — all information about the child is provided by the guardian during onboarding.
We do not allow children to create accounts, register, or interact with features that involve direct collection of personal data. Kids Mode is a closed, controlled experience accessible only via a PIN set by the guardian.
If we identify that data has been collected from minors without proper parental consent, we will remove that information immediately. Please contact us at contato@oiemori.com.
7. Storage and Security
All data is stored in Supabase with encryption in transit (HTTPS/TLS) and at rest
Row Level Security (RLS) ensures each user can only access their own data
Passwords are managed by Supabase Auth with secure hashing and are never stored in plain text
The Kids Mode PIN is stored securely within the user profile
Language preferences are persisted in localStorage on the user's device
Documents and images uploaded to the Mori Agent are kept in a private storage bucket protected by Row-Level Security, so only the linked guardians of that child can access them
We follow security best practices, but no system is completely invulnerable. We recommend using strong, unique passwords.
8. Data Retention
We retain your data for as long as your account is active. You may request deletion of your account and all associated data at any time by emailing contato@oiemori.com. Upon request, we will remove your data within 30 days, unless legal obligations require us to retain it for a longer period.
9. Your Rights
In accordance with applicable data protection laws (including GDPR and LGPD where applicable), you have the right to:
Access the personal data we hold about you and your family
Correct inaccurate or outdated data (available directly in the app via profile editing)
Request deletion of your data
Withdraw consent for data processing at any time
Data portability in a structured format
Revoke Google Calendar access directly in your Google Account settings
To exercise any of these rights, please contact us at contato@oiemori.com.
10. Cookies and Local Storage
Mori uses browser localStorage to persist language preferences between sessions. We do not use tracking or advertising cookies. Google Analytics, when enabled, may use anonymous analytics cookies to understand usage patterns — you can disable this in your browser settings.
11. Changes to This Policy
We may update this Privacy Policy periodically to reflect product improvements or changes in applicable law. When we make significant changes, we will notify you by email or in-app notice before the changes take effect. The date of the last update will always be indicated at the top of this document.
Continued use of Mori after changes are made constitutes your acceptance of the revised policy.
12. Contact
If you have any questions, concerns, or requests related to your privacy, please reach out to our team:
Email: contato@oiemori.com
Website: www.oiemori.com
We will do our best to respond within 5 business days.
Mori — Making every meeting a learning opportunity