We collect only the information necessary to provide safe, effective, and supportive women’s health services.
Information you provide directly
This may include:
name and contact details (email address and optional mobile number)
account login credentials
programme progress, responses, and interactions
health or wellness information you choose to share
customer support communications
survey or feedback responses
Health-related information is used solely to deliver, personalise, and improve MUTU services.
We do not require information about race, ethnicity, religion, political beliefs, or sexual orientation.
If voluntarily provided, it is used only for inclusion, accessibility, or equality monitoring.
Information collected automatically
When you use MUTU services, we may collect:
device, browser, and operating system information
IP address and approximate location
usage activity and interactions
cookies and analytics data
This information helps us:
operate and secure services
understand how services are used
improve performance and user experience
You can manage cookies through browser settings and our cookie tools.
Information from service providers
We may receive limited information from:
payment processors
hosting and infrastructure providers
analytics and communications vendors
We do not sell health data or purchase sensitive personal information from third parties.
Categories of personal information
Under applicable U.S. state privacy laws, we may collect the following categories of personal information:
Identifiers — such as name, email address, account credentials, and optional mobile number
Customer records information — such as account details, programme participation, and customer support communications
Internet or network activity information — such as device data, browsing activity, and interactions with MUTU services
Geolocation data (approximate) — derived from IP address
Sensitive personal information — limited to health or wellness information you choose to provide in order to receive MUTU services
We collect this information:
directly from you
automatically from your device or browser
from service providers supporting MUTU’s operation
We use and disclose these categories of information only for the purposes described in this Privacy Notice, and we do not sell personal information.
3. How we use personal information
Provide MUTU services
create and manage accounts
deliver programmes and guidance
personalise support
provide customer service
Communicate with you
Notes from MUTU and supportive health content
service or security updates
occasional relevant offers where permitted by law
You may opt out of marketing emails at any time.
Improve and protect MUTU
analyse usage and outcomes
develop and test improvements
prevent fraud or misuse
maintain safety and integrity
Where possible, we use aggregated or de-identified data.
Comply with legal obligations
respond to lawful requests
enforce terms
protect rights, safety, and security
4. Email and SMS communications
Email
You may receive supportive content, service updates, and occasional relevant offers.
You can unsubscribe at any time using the link in any email.
SMS / text messages
If you provide a mobile number and opt in:
we may send occasional supportive or service-related text messages
message frequency varies
message and data rates may apply
you may opt out at any time by replying STOP
SMS consent is separate and optional and is not required to use MUTU services.
5. HIPAA status and regulatory context
MUTU currently provides direct-to-consumer digital health and wellness services and is not a covered entity or business associate under the U.S. Health Insurance Portability and Accountability Act (HIPAA).
Accordingly, personal information you provide directly to MUTU through consumer services is not protected health information under HIPAA.
However, MUTU may in future integrate with healthcare providers, health plans, or clinical care pathways.
If MUTU becomes a HIPAA business associate in specific contexts:
additional contractual and regulatory safeguards will apply, and
a separate HIPAA-regulated privacy notice may govern those services.
Although MUTU is not currently regulated under HIPAA for its direct-to-consumer services, our privacy, security, and data governance practices are informed by internationally recognised data protection standards, including the EU and UK General Data Protection Regulation (GDPR).
This includes principles such as data minimisation, purpose limitation, user consent, and appropriate technical and organisational security safeguards.
6. Disclosure of personal information
We do not sell personal information.
We may disclose personal information to trusted service providers who support MUTU’s operation, including:
cloud hosting and infrastructure providers
payment processors
analytics and communications vendors
professional advisers where required
All providers must protect personal information and use it only for permitted purposes.
Business transfers
If Planet MUTU Ltd is involved in a merger, acquisition, investment, restructuring, or sale of assets, personal information may be transferred as part of that transaction.
Any recipient must:
use personal information consistently with this Privacy Notice, and
provide protections no less protective than those described here.
Where required by law, we will notify you of any material change in ownership or data use and explain the choices available to you.
7. US state privacy rights
Depending on your state of residence, you may have rights to:
access personal information we hold about you
correct inaccurate personal information
request deletion of personal information
obtain a portable copy of your data
obtain a portable copy of your data
opt out of certain data sharing or targeted advertising
limit the use of sensitive personal information (where applicable)
appeal a denied privacy request
To exercise your privacy rights or raise a concern about how we handle your personal information, please contact: [email protected]
We will not discriminate against you for exercising your privacy rights.
Sensitive personal information
Some information processed by MUTU, such as health or wellness information you voluntarily provide, may be considered “sensitive personal information” under certain U.S. state privacy laws.
We use sensitive personal information only as reasonably necessary to provide MUTU services, ensure safety, and meet legal obligations.
We do not:
sell sensitive personal information
use sensitive personal information for cross-context behavioural advertising
Where applicable law provides a right to limit the use or disclosure of sensitive personal information, you may exercise that right by contacting: [email protected]
Do Not Sell or Share
MUTU does not sell or share personal information for monetary consideration or cross-context behavioural advertising as defined under California law.
8. International data transfers
Because MUTU operates globally, personal information may be processed outside your state or country of residence, including in the United Kingdom.
We use appropriate contractual, organisational, and legal safeguards to protect transferred personal information.
9. Data retention
We retain personal information only as long as necessary to:
provide services
meet legal obligations
resolve disputes
maintain safety and accountability
Account information is generally retained while active and for a limited period afterwards.
Information may be anonymised and retained for research, safety monitoring, or service improvement.
10. Children’s privacy
MUTU services are intended for adults.
We do not knowingly collect personal information from children under 13 years of age.
If we become aware such information has been collected, it will be deleted promptly.
11. Security
We implement reasonable administrative, technical, and organisational safeguards designed to protect personal information, including:
encryption in transit
secure hosting environments
access controls and staff training
ongoing monitoring and review
No system can guarantee absolute security, but we continuously improve our safeguards.
12. Changes to this Privacy Notice
We may update this Privacy Notice from time to time.