Your family.
Your say.

Mapa keeps your family’s plans, dates and papers in one private place. This page says what Mapa keeps, who else sees it, and how to take it back.

Last updated 3 October 2026.

Who runs Mapa

Bytalos LLC runs Mapa and is responsible for your data (the “controller” under the GDPR). Write to [email protected] with any privacy question or request.

Free tools and parent stories

Paste the Chaos sends your pasted text to TypeSafe, our assistant provider, for automatic processing. Mapa does not save the original export in its database. Results stay temporarily in your browser memory, and an encrypted preview expires after 30 minutes. We keep the email you provide to unlock the result and your choice about receiving updates. Providing an email does not create a family account. Write to our privacy contact to remove that email or change your choice.

Receipts and manually entered week cards are made in your browser. Nothing is posted or sent automatically. Sunday cards in your signed-in family space contain counts of your own saved activity.

Tales from Parents stores the text you choose to submit for anonymous publication. Submissions are checked before they appear. Leave out names, schools, contact details and identifying details about children. We use a signed browser cookie and limited usage counters to prevent repeated votes and excessive requests. Write to our privacy contact if you want a story removed.

WhatsApp messages you choose to send

If you connect your WhatsApp number, Mapa keeps that connection and the messages you send to Mapa’s WhatsApp number. Only explicitly sent or forwarded text is received. Mapa has no access to your groups or other conversations. Forwarded messages enter your private Mapa chat and can create private notes and plans. Updates to existing shared plans may stay shared. Disconnect the number in Settings to stop future imports. Deleting your account removes its connection and private messages through our existing deletion process.

What Mapa keeps

• Your account: name, email address and sign-in details.
• What your family adds: plans, tasks, notes, child profiles, health and vaccine records, family chat, and files in the vault.
• Emails you forward to your family address, and calendars you choose to connect.
• Settings, reminder choices, and usage records needed to run and secure the service, such as sign-in attempts and Mapa credit use.

The iPhone app keeps a copy of your family’s plan on the device for offline use, and clears it when you sign out.

Mapa is for adults. Children don’t have accounts. Parents add details about their children, and health details only when they choose to.

Affiliate referrals and payments

If you choose to remember an affiliate referral, Mapa stores its code in a signed cookie for 30 days and uses it to connect an eligible new subscription to that partner. Partners see their earnings, never your name, contact details or family records. Affiliate applicants provide a display name, website and country. Stripe handles their payment account setup.

Closing an affiliate account removes its public profile and disables its link. Mapa retains the payment identifiers, referral attribution, commission calculations and transfer history needed to account for payments, refunds and disputes. These financial records do not contain your family’s messages or records.

Birthday gifts you choose to prepare

Gift budgets, preferences, suggestions and orders are private to the adult who creates them. You can enable preparation before a birthday; purchases require your separate approval. To find ideas, OpenAI receives the gift categories, age range, budget, and the interests and things to avoid that you choose to enter. It searches the web with the categories, age range, budget and interests; things to avoid are only used to filter what it finds. Leave names and private details out of those fields. Family messages, health records and other private records are not used to choose gifts.

Another family can use a gift profile only when you explicitly share selected preferences through a single-use invitation. Invitations expire after 30 days. Revoking a profile stops future use of those preferences; it cannot undo a purchase or copies already seen by the recipient.

If you connect a gift wallet, Stripe Link handles payment approval. Mapa encrypts its wallet access credentials and delivery address. The retailer receives the delivery details needed to fulfil the approved order. Disconnecting stops future purchases and revokes the wallet connection. Deleting your account removes gift preferences and delivery details; pending wallet revocation is retried until confirmed. Payment and retailer order identifiers, amounts and receipts may remain for accounting and resolving an uncertain purchase.

Who in your family sees it

Only the adults in your household. An adult joins with an invitation link from the owner. Each link works once, and only for one email if the owner adds one. The owner can remove adults and cancel invitations. Invitations expire after 14 days. Private chat with Mapa, and what Mapa saves from it, is visible only to the adult who wrote it.

Feature requests

A person on the Mapa team reads each feature request before other families can see it. They see the request and how many votes it has, never your name or your family. Leave out names and private details. Your votes are counted, not shown. A request we don’t add to the list stays visible only to you. You can remove a request you sent, and its votes go with it. If you close your account, your votes and your unlisted requests are removed; a request already on the list stays there with no link to you.

When Mapa processes information automatically

Reading and organizing the information you add is part of Mapa’s service on the web and iPhone. The iPhone app shows one short disclosure before your first request that uses assistant providers and asks you to agree. Your choice is saved to your account for use on iPhone, so the app does not ask again for each message, record or feature. The web app does not show this additional agreement step; its processing is described in this policy. Relevant information, including health details you choose to add, can then be sent to the providers below to process your requests. This does not change who in your family can see private records.

Mapa uses three assistant providers: OpenAI, which writes answers, reads photos and PDFs and turns voice notes into text; TypeSafe, which routes requests and double-checks changes before they’re saved; and Google, which handles the voice on Call Mapa.

• When you ask Mapa for help, by writing “Mapa”, pressing its button, or in your private chat: your message, up to 40 recent messages from that chat, your current plans and tasks, the adults’ names, and the records Mapa can read go to OpenAI. New family records you add or ask Mapa to save can be used in answers. Records previously excluded from processing remain excluded; editing them does not change that choice. Your message, recent chat and any changes Mapa proposes go to TypeSafe to route and check the request.
• When you send a photo or PDF in chat, it goes to OpenAI to be read at the moment you press Send, not before.
• When you send a voice note, the recording goes to OpenAI to be turned into text when you press Send. Mapa keeps the text, not the recording.
• When you call Mapa, your voice goes to Google (Gemini) for the conversation while the call is on, along with the first names of the people in your family and your family’s language. Anything about your plans goes through Mapa as above, and a text record of the call is saved in your private chat with Mapa. Mapa doesn’t keep the call audio.
• Only if the owner turns it on: family chat messages go to TypeSafe even when nobody asks Mapa, so clearly stated birthdays can be saved. Forwarded emails can also be read automatically, and daily suggestions ranked. Each of these is off until the owner switches it on in Settings.
• New health records, vaccination records and family history you choose to add can be used as context for your requests and sent to the assistant providers described above. Existing records previously excluded from processing remain excluded.
• When you use Capture, photos and PDFs can be sent to OpenAI to read. Server-only reading and meeting transcription use tools on Mapa’s server. An optional double-check sends the extracted text to TypeSafe. Only record or upload a conversation when you have the participants’ permission.

Our aim is to keep processing on your device where practical and limit the information sent externally. This is a design aim, not a promise that all processing happens on your device. Mapa stores family information on its servers and uses third-party APIs for the features described above. Server-only processing also takes place outside your device.

We do not sell your family content or send it to API providers for advertising. Sending relevant content to a provider to deliver a feature is still a disclosure of that content. Using an API does not, by itself, mean that no data is collected, logged, retained or disclosed.

Provider use and retention depend on the applicable service terms, account settings and processing agreements. OpenAI states that API content is not used to train its models by default; Google states that prompts and responses under its paid API terms are not used to improve its products. These restrictions are distinct from retention. Providers may retain content or usage records for service operation, security, abuse prevention and legal obligations, and may disclose data to subprocessors or as required by law under the applicable terms. We do not make a blanket guarantee of zero retention or no further disclosure across every provider.

Mapa requests that OpenAI responses are not stored using the API’s storage setting. This setting does not eliminate separate security or abuse-monitoring logs. For details, see OpenAI’s API data controls and Google’s API terms. You can withdraw the iPhone app’s processing permission in its Settings. This does not disable the web app or automations you have enabled; turn those off separately in their settings.

Other services Mapa relies on

These providers process data for Mapa, only to run the service:

• Convex: the database where your family’s records live.
• Cloudflare R2: storage for vault files. Files download only through your signed-in account. There are no public links.
• Resend: sign-in codes, invitations and email reminders.
• Apple, Google or Mozilla push services: reminder notifications. The notification text never includes child names or health details.
• Google Calendar or iCloud: only if you connect a calendar. Calendar passwords are encrypted and never sent back to your browser.
• Stripe: payments, if you subscribe or buy credits, and payment account setup and transfers for affiliates. Mapa never sees your card number.
• Google (Gemini): voice for Call Mapa, only while you’re on a call.
• Meta: ad measurement, only if you accept marketing cookies (see below).
• PostHog: web product measurement, only if you accept marketing cookies.

Some of these providers work outside the European Economic Area, mostly in the United States. Where they do, Mapa relies on legal safeguards such as the EU Standard Contractual Clauses.

Why Mapa may use your data

• To give you the service you signed up for: storing, organizing and reminding (contract).
• To keep accounts safe and stop abuse, for example by limiting sign-in attempts (legitimate interest).
• Mapa sends relevant family information to assistant providers to provide the features you use, as described above. The iPhone app asks for permission first, including for health details you choose to add. You can withdraw that iPhone permission in the app’s Settings; this stops new assistant requests from the iPhone app, does not disable web use or enabled automations, and does not undo processing already completed.
• For marketing cookies: only with your consent. You can withdraw it at any time. That doesn’t undo what was done before.

Advertising and cookies

Mapa uses the cookies it needs to keep you signed in. With your permission for marketing cookies, Mapa tells Meta about page views, when a new household signs up, and when a plan starts (with the plan’s price), to measure its ads. Those events have no names, emails, child details or family records. You can withdraw this permission by clearing Mapa’s site data in your browser settings.

With that same optional permission, PostHog measures web page paths and actions such as joining a household, saving or completing records, opening billing, reading a document or recording, selecting a capture destination, sending a request to Mapa, creating an invitation and updating a calendar connection. Events use an opaque account identifier and limited categories or yes/no values. They do not contain names, emails, family content, prompts, replies, document text, URL query strings or fragments. Session recording and automatic click tracking are disabled. This measurement does not run inside the iPhone app. You can withdraw this permission by clearing Mapa’s site data in your browser settings.

If an ad or a link with campaign labels brought you to Mapa, your browser remembers those labels for 7 days. When you create a household, Mapa saves them with it, so we can tell which campaigns families come from. They aren’t shared with anyone.

How long Mapa keeps it

Your records and files stay until you delete them or close your account. Temporary copies of photos and recordings are deleted from the server once they’ve been read. Unused invitations expire after 14 days, and pending handovers after seven days. When an account is closed, its data is deleted within 30 days, except where the law requires Mapa to keep something longer, such as payment records.

Your rights

You can ask to see, correct, export or delete your data, to limit or object to how it’s used, and to withdraw consent.

• Export: Settings → Download your family’s data. It includes records, family chat, your private chat and file details.
• Delete: delete records and files in Mapa at any time. To close your account, use Settings → Delete account, or write to [email protected]. Mapa replies within one month.
• Complain: you can contact your data protection authority. In Portugal, that’s the CNPD (cnpd.pt).

An adult removed from a household loses access, but copies they already downloaded stay with them.

Changes

If this page changes in a way that matters, Mapa will tell you in the app before it takes effect.

Open Mapa