Get support or be a supporter.
Effective Date: February 27, 2026 | Last Updated: February 27, 2026
Plain-Language Summary. FC Mother is a platform operated by Square Roots that helps users support maternal health through community actions ("Assists") and financial contributions. We collect only what we need to run the platform, process payments, and comply with the law. We never sell your personal data. You can access, correct, or delete your data at any time by emailing support@fcmother.com.
FC Mother (app.fcmother.com) is operated by Square Roots ("we," "us," or "our"), a company registered in the United States. Square Roots is the data controller responsible for the personal data processed through the FC Mother platform.
For data protection inquiries, contact our Data Protection Point of Contact at support@fcmother.com.
| Category | Data Elements | When Collected |
|---|---|---|
| Account Data | Name, email address, password (hashed), country, profile image (optional) | Account registration |
| Payment Data | Billing name, payment method details (processed by Stripe; we do not store card numbers) | One-time contributions or subscription sign-up |
| Contribution Data | Contribution amount, currency, country selection, tier selected, referral code (if any) | During checkout |
| Assist Activity Data | Assist claims, proof submissions (photos, screenshots, video), earned/funded Assist type and amount | When completing or funding Assists |
| User-Generated Content | Stories, proof-of-action media, profile bio | Voluntary submissions |
| Communication Data | Emails, support inquiries, feedback | When you contact us |
| Category | Data Elements | Purpose |
|---|---|---|
| Device & Browser Data | IP address, browser type, operating system, screen resolution, language preference | Platform functionality, security |
| Usage Data | Pages visited, features used, timestamps, referral source (UTM parameters) | Analytics, performance improvement |
| Session Data | Session identifiers, authentication tokens | Maintaining your login state |
| Transaction Logs | Assist awards, spends, wallet balance changes (server-side event logs) | Audit trail, fraud prevention, platform integrity |
For users who register an FC Mother account directly through this platform, we do not intentionally collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or biometric data), except the health-related information described in §2.5. If you voluntarily include sensitive information in optional submissions (e.g., a story about your maternal-health experience), you consent to our processing of that information for the purposes described in this Policy. You may delete voluntary submissions at any time.
FC Mother organizes support around mothers. If you use FC Mother’s support features, we process the following data — whether you joined directly through this platform or through a partner maternal-health program:
Follow-up contact. When you provide contact information with an Assist Survey, you agree that FC Mother may contact you for follow-up wellbeing check-ins. Today we do this by email; where we offer messaging check-ins we will only use them with your consent, and every follow-up message includes a way to decline further contact.
Your control. You can ask us at any time to stop follow-ups, correct your information, or delete your profile and survey history by contacting support@fcmother.com (or replying to any follow-up message).
| Purpose | Data Used |
|---|---|
| Operate the platform and deliver services | Account data, device data, session data |
| Process contributions and subscriptions | Payment data, contribution data |
| Verify Assist claims and award Assists | Assist activity data, user-generated content, transaction logs |
| Administer sweepstakes and rewards | Account data, Assist activity data, country |
| Display leaderboards and competitions | Name or display name, country, club, Assist totals (earned/funded) |
| Prevent fraud and enforce platform rules | Transaction logs, device data, usage data, IP address |
| Send transactional communications | Email address, contribution/subscription details |
| Send marketing communications (with consent) | Email address, preferences, activity data |
| Improve the platform and develop new features | Usage data, aggregated analytics |
| Comply with legal obligations | All categories as required by law |
We process your personal data on the following legal bases:
We do not sell your personal data. We share data only in the following circumstances:
| Recipient | Data Shared | Purpose |
|---|---|---|
| Stripe, Inc. | Name, email, payment details, contribution metadata | Payment processing, subscription management |
| Email Service Provider | Email address, name, transactional/marketing content | Delivering platform emails |
| Cloud Hosting Provider | All platform data (encrypted at rest) | Infrastructure and data storage |
| Analytics Provider(s) | Anonymized or pseudonymized usage data | Platform performance and funnel analytics |
| Public Leaderboards | Display name (or initials), country, club, Assist totals | Community competition feature |
| Law Enforcement / Regulators | As required by valid legal process | Legal compliance |
| Corporate Transactions | All data (under confidentiality obligations) | Merger, acquisition, or asset sale (with prior notice) |
All service providers are contractually bound to process data only on our instructions and to implement appropriate security measures.
If you are a mother and you share your care-team invite code, anyone who joins with that code will see your first name and your open support requests (the kinds of help you have asked for) so they can respond. They do not see your survey responses, wellbeing scores, contact information, or anything else. You control the code, and removed members lose access.
We work with Twilio Inc. (United States) to send transactional SMS and WhatsApp messages you have opted into (such as support and appointment updates). Twilio processes your mobile number and the content of those messages solely to deliver them; reply STOP to opt out at any time. See twilio.com/legal/privacy.
FC Mother operates in the United States, Brazil, and Mexico. Your data may be transferred to and processed in a country other than where you reside. When we transfer data internationally, we implement appropriate safeguards:
You may request a copy of the safeguards we use by contacting support@fcmother.com.
We retain your data only as long as necessary for the purposes described in this Policy:
| Data Type | Retention Period | Rationale |
|---|---|---|
| Account data | Duration of account + 30 days after deletion request | Service delivery, account recovery grace period |
| Transaction & contribution records | 7 years from transaction date | Tax compliance, financial audit requirements |
| Assist activity logs | Duration of account + 1 year | Fraud prevention, dispute resolution |
| Sweepstakes entry records | 3 years from drawing date | Legal compliance, winner verification |
| Server-side event logs | 2 years from event date | Analytics, security investigation |
| Marketing consent records | Duration of consent + 3 years | Demonstrating valid consent |
When data is no longer needed, we securely delete or anonymize it.
We use the following categories of cookies and similar technologies:
| Category | Purpose | Examples | Consent Required |
|---|---|---|---|
| Strictly Necessary | Authentication, session management, security | Session cookies, CSRF tokens | No (essential) |
| Functional | Language preference, country selection, UI state | localStorage entries | No (enhances experience) |
| Analytics | Understanding usage patterns, funnel analysis | Event tracking (internal), third-party analytics (if enabled) | Yes (where required by law) |
| Marketing | Measuring campaign effectiveness | UTM parameter tracking | Yes |
You can manage cookie preferences through your browser settings or through our cookie consent mechanism (where applicable). Disabling strictly necessary cookies may impair platform functionality.
Regardless of where you are located, you have the following rights with respect to your personal data:
To exercise any right, email support@fcmother.com with the subject line "Data Rights Request." We will respond within 30 days (or sooner as required by applicable law).
If you are a California resident, you have additional rights under the California Consumer Privacy Act and its amendments:
Categories of PI collected in the last 12 months: Identifiers (name, email, IP address); commercial information (contribution history); internet/electronic activity (usage logs, cookies); geolocation data (country); inferences (user segmentation for platform personalization).
We do not sell personal information. We do not use or disclose sensitive personal information for purposes other than those permitted by the CCPA.
If you are a resident of Brazil, the Lei Geral de Proteção de Dados (LGPD) grants you the following rights:
To exercise these rights, email support@fcmother.com with the subject line "LGPD Rights Request." We will respond within 15 business days.
If you are a resident of Mexico, the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP) grants you ARCO rights:
To exercise ARCO rights, email support@fcmother.com with the subject line "ARCO Request." Include your full name, a copy of official identification, a description of the data and right you wish to exercise, and any supporting documentation. We will respond within 20 business days.
Consent: By creating an account or making a contribution on FC Mother, you consent to the processing of your personal data as described in this Policy. You may revoke your consent at any time, subject to legal and contractual limitations.
If you are located in the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR) and UK GDPR grant you additional rights:
You have the right to lodge a complaint with your local data protection authority. A list of EU data protection authorities is available at edpb.europa.eu.
To exercise GDPR rights, email support@fcmother.com with the subject line "GDPR Rights Request." We will respond within 30 days.
FC Mother is intended for users 13 and older. Users aged 13–17 may use the free, non-financial features of the Platform; financial contributions, paid subscriptions, and sweepstakes entries are limited to users 18 and older (or the age of majority in your jurisdiction).
We do not permit registration by children under 13 and do not knowingly collect personal data from them. If you are a parent or guardian and believe a child under 13 has registered, contact support@fcmother.com and we will delete the account and associated personal data. A parent or guardian may also request review, correction, or deletion of a minor’s data at the same address.
We implement technical and organizational measures to protect your personal data, including:
No system is completely secure. If we become aware of a data breach that poses a risk to your rights, we will notify you and the relevant authorities as required by law.
Field-level encryption for mother identity and health data. Identity and health fields tied to mothers (name, contact information, city, date of birth, ethnicity, postal code) are encrypted at the field level with AES-256-GCM before storage, with keys held in a managed secrets service. Lookups use keyed blind indexes (HMAC-SHA256) so the plaintext identifier is never stored or queried. This architecture is structured to align with HIPAA Safe Harbor de-identification practices and GDPR/LGPD security-of-processing duties; it is an architecture commitment, not a certification claim.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting a notice on the platform and, where required, by email. The "Last Updated" date at the top of this page indicates when the most recent revision took effect. Your continued use of the platform after changes are posted constitutes acceptance of the updated Policy.
If you provide your mobile phone number and opt in to FC Mother’s care-team text-message notifications, we collect your mobile number and your consent, and use them only to send you the supportive SMS messages you signed up for — for example, new assist requests your care team can claim, weekly assist-streak reminders, leaderboard updates, team-goal progress, and mother check-ins.
We do not sell, rent, or share your mobile opt-in information or phone number with third parties or affiliates for their own marketing or promotional purposes. Mobile information collected for SMS is used only to operate the FC Mother messaging program and is disclosed only to the service providers (such as our SMS delivery provider) that help us send these messages on our behalf.
You can opt out of SMS at any time by replying STOP to any message; reply HELP for help. Message frequency varies. Message and data rates may apply. See our Terms of Service for full SMS program terms.
If you have questions about this Privacy Policy or wish to exercise your data rights: