PRIVACY NOTICE (US / GLOBAL)
- Planet MUTU Ltd
- Last updated: August 2026
- Planet MUTU Ltd (“MUTU,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information.
- This Privacy Notice explains how we collect, use, disclose, and safeguard personal information when you use:
- mutusystem.com
- mutumamas.com
- related websites, applications, member platforms, communications, and support services operated by Planet MUTU Ltd
- This notice applies to individuals located outside the United Kingdom and European Economic Area (EEA), including the United States.
- For users located in the UK or EEA, a separate UK/EU Privacy Policy applies.
1. Who we are
-
Business / data controller:
Planet MUTU Ltd
United Kingdom - Contact: [email protected]
2. Personal information we collect
- We collect only the information necessary to provide safe, effective, and supportive women’s health services.
Information you provide directly
- This may include:
- name and contact details (email address and optional mobile number)
- account login credentials
- programme progress, responses, and interactions
- health or wellness information you choose to share
- customer support communications
- survey or feedback responses, including responses to our health outcome surveys (see “Health outcomes research and benchmarking” in section 3)
- Health-related information is used to deliver, personalise, and improve MUTU services and, where you have separately consented, for the health outcomes research and benchmarking described in section 3.
- We do not require information about race, ethnicity, religion, political beliefs, or sexual orientation.
- Our health outcome surveys include optional demographic questions, including race and ethnicity, each offering a “Prefer not to say” option. If voluntarily provided, this information is used for inclusion, accessibility, and equality monitoring and, where you have consented, in the research and benchmarking described in section 3, so that findings reflect the experiences of women of all backgrounds.
Information collected automatically
- When you use MUTU services, we may collect:
- device, browser, and operating system information
- IP address and approximate location
- usage activity and interactions
- cookies and analytics data
- This information helps us:
- operate and secure services
- understand how services are used
- improve performance and user experience
- You can manage cookies through browser settings and our cookie tools.
Information from service providers
- We may receive limited information from:
- payment processors
- hosting and infrastructure providers
- analytics and communications vendors
- We do not sell health data or purchase sensitive personal information from third parties.
Categories of personal information
- Under applicable U.S. state privacy laws, we may collect the following categories of personal information:
- Identifiers — such as name, email address, account credentials, and optional mobile number
- Customer records information — such as account details, programme participation, and customer support communications
- Internet or network activity information — such as device data, browsing activity, and interactions with MUTU services
- Geolocation data (approximate) — derived from IP address
- Sensitive personal information — limited to health or wellness information you choose to provide in order to receive MUTU services or that you choose to provide in our health outcome surveys
- Survey research information: health outcome survey responses linked to an internal reference number rather than to your name or email address (see “Health outcomes research and benchmarking” in section 3)
- We collect this information:
- directly from you
- automatically from your device or browser
- from service providers supporting MUTU’s operation
- We use and disclose these categories of information only for the purposes described in this Privacy Notice, and we do not sell personal information.
3. How we use personal information
Provide MUTU services
- create and manage accounts
- deliver programmes and guidance
- personalise support
- provide customer service
Communicate with you
- Notes from MUTU and supportive health content
- service or security updates
- occasional relevant offers where permitted by law
- You may opt out of marketing emails at any time.
Improve and protect MUTU
- analyse usage and outcomes
- develop and test improvements
- prevent fraud or misuse
- maintain safety and integrity
- Where possible, we use aggregated or de-identified data.
Health outcomes research and benchmarking
- MUTU invites customers to take part in structured health outcome surveys. These surveys ask about pelvic and core health symptoms, wellbeing, and demographics, at intervals over time. They exist to measure whether women’s health actually improves, and to contribute to independent research and benchmarking in women’s pelvic health, a field with a long history of going unmeasured.
- Taking part is entirely voluntary and is not required to use MUTU services. Before any health question, the first survey you complete asks for your express consent to the collection, use, and sharing described in this section, and consent is renewed if you re-enroll. If you do not consent, the survey ends and no health data is collected. Later surveys in the series are covered by that consent. Where the law of your state requires consent for the collection or sharing of consumer health data, this survey consent is how we obtain it.
- Survey responses collected before August 2026 were gathered without your name, email address, or any other identifier. They are anonymous: they cannot be linked to you, and they are used for research, benchmarking, and service improvement in aggregate form only.
- From August 2026, survey responses are connected over time using an internal reference number, so that your baseline answers and your follow-up answers can be read as one journey without revealing who you are. Your answers are stored separately from your account: your account details are held in our CRM, which never receives your survey answers, and only the reference number links the two.
- The survey dataset contains your answers, coded demographic information (such as year of birth, country, and race or ethnicity category) and, where relevant, the organisation that referred you. It never contains your name, email address, or phone number. The key connecting the reference number to your customer account stays within MUTU and is never shared.
- This data is used to measure health outcomes over time, for scientific research including peer-reviewed publication, for benchmarking of women’s pelvic and core health outcomes, and for the development and validation of population-level measures of women’s pelvic health.
- With your consent, pseudonymised survey data (never your name or contact details) may be shared with carefully selected research partners: academic and clinical research institutions, health systems and health services, and accredited health data research platforms that aggregate pseudonymised data for approved research purposes. Extracts contain only a reference number, referral source, and the answers themselves. Every recipient is bound by contract to use the data only for the approved research purpose, to prohibit any attempt to re-identify individuals, and to apply security standards no less protective than our own. Research findings are published in aggregate only; individual responses are never published. We never sell survey data and never share it for advertising or marketing purposes.
- Research data relating to US consumers is shared in de-identified or aggregate form wherever possible. Where pseudonymised record-level data is shared, it is shared only with your express consent and never in exchange for money or other valuable consideration. We do not sell consumer health data.
- Where we use or share de-identified information, we maintain and use it only in de-identified form, we do not attempt to re-identify it (except as permitted by law to test the effectiveness of de-identification), and we contractually require every recipient to commit to the same.
-
You may withdraw your research consent at any time by contacting [email protected]. On withdrawal, the record linked to your reference number is deleted. Withdrawal does not affect your access to MUTU services.
Community content. MUTU operates member community spaces. Posts and comments you write there are shared with other members according to the visibility setting you choose for each post. We analyse community content in de-identified, aggregate form to understand what members need, to improve the program, and to inform research into women's pelvic and core health. Names, email addresses and profile links are removed from the text before any analysis, and each author is replaced by a one-way coded reference that cannot be reversed. Private direct messages are never included, and posts you have marked private to yourself are excluded. Findings are reported in aggregate; any short extract quoted outside MUTU is de-identified and carries nothing that identifies who wrote it. We do not sell community content, and we do not use it for advertising.
Comply with legal obligations
- respond to lawful requests
- enforce terms
- protect rights, safety, and security
4. Email and SMS communications
- You may receive supportive content, service updates, and occasional relevant offers.
- You can unsubscribe at any time using the link in any email.
SMS / text messages
- If you provide a mobile number and opt in:
- we may send occasional supportive or service-related text messages
- message frequency varies
- message and data rates may apply
- you may opt out at any time by replying STOP
- SMS consent is separate and optional and is not required to use MUTU services.
5. HIPAA status and regulatory context
- MUTU currently provides direct-to-consumer digital health and wellness services and is not a covered entity or business associate under the U.S. Health Insurance Portability and Accountability Act (HIPAA).
- Accordingly, personal information you provide directly to MUTU through consumer services is not protected health information under HIPAA.
- However, MUTU may in future integrate with healthcare providers, health plans, or clinical care pathways.
- If MUTU becomes a HIPAA business associate in specific contexts:
- additional contractual and regulatory safeguards will apply, and
- a separate HIPAA-regulated privacy notice may govern those services.
- Although MUTU is not currently regulated under HIPAA for its direct-to-consumer services, our privacy, security, and data governance practices are informed by internationally recognised data protection standards, including the EU and UK General Data Protection Regulation (GDPR).
- This includes principles such as data minimisation, purpose limitation, user consent, and appropriate technical and organisational security safeguards.
6. Disclosure of personal information
- We do not sell personal information.
- We may disclose personal information to trusted service providers who support MUTU’s operation, including:
- cloud hosting and infrastructure providers
- payment processors
- analytics and communications vendors
- professional advisers where required
- research partners (pseudonymised survey data only, with your consent, as described under “Health outcomes research and benchmarking” in section 3)
- All providers must protect personal information and use it only for permitted purposes.
Business transfers
- If Planet MUTU Ltd is involved in a merger, acquisition, investment, restructuring, or sale of assets, personal information may be transferred as part of that transaction.
- Any recipient must:
- use personal information consistently with this Privacy Notice, and
- provide protections no less protective than those described here.
- Where required by law, we will notify you of any material change in ownership or data use and explain the choices available to you.
7. US state privacy rights
- Depending on your state of residence, you may have rights to:
- access personal information we hold about you
- correct inaccurate personal information
- request deletion of personal information
- obtain a portable copy of your data
- opt out of certain data sharing or targeted advertising
- limit the use of sensitive personal information (where applicable)
- appeal a denied privacy request
- To exercise your privacy rights or raise a concern about how we handle your personal information, please contact: [email protected]
- We will not discriminate against you for exercising your privacy rights.
Consumer health data
- Some states (including Washington, Nevada, and Connecticut) provide specific rights over consumer health data, including the right to consent before it is collected, a separate right to consent before it is shared, the right to withdraw consent, and the right to have it deleted.
- We obtain your consent before collecting health outcome survey data and your separate consent before sharing it, as described in section 3, and you may withdraw either consent or request deletion at any time by contacting [email protected]. We do not sell consumer health data.
Sensitive personal information
- Some information processed by MUTU, such as health or wellness information you voluntarily provide, may be considered “sensitive personal information” under certain U.S. state privacy laws.
- We use sensitive personal information only as reasonably necessary to provide MUTU services, ensure safety, and meet legal obligations and, where you have separately consented, for the health outcomes research and benchmarking described in section 3.
- We do not:
- sell sensitive personal information
- use sensitive personal information for cross-context behavioural advertising
- Where applicable law provides a right to limit the use or disclosure of sensitive personal information, you may exercise that right by contacting: [email protected]
Do Not Sell or Share
- MUTU does not sell or share personal information for monetary consideration or cross-context behavioural advertising as defined under California law.
8. International data transfers
- Because MUTU operates globally, personal information may be processed outside your state or country of residence, including in the United Kingdom.
- We use appropriate contractual, organisational, and legal safeguards to protect transferred personal information.
9. Data retention
- We retain personal information only as long as necessary to:
- provide services
- meet legal obligations
- resolve disputes
- maintain safety and accountability
- Account information is generally retained while active and for a limited period afterwards.
- Pseudonymised research data is retained for the duration of the research programme it supports; if you withdraw consent, the record linked to your reference number is deleted.
- Information may be anonymised and retained for research, safety monitoring, or service improvement.
10. Children’s privacy
- MUTU services are intended for adults.
- We do not knowingly collect personal information from children under 13 years of age.
- If we become aware such information has been collected, it will be deleted promptly.
11. Security
- We implement reasonable administrative, technical, and organisational safeguards designed to protect personal information, including:
- encryption in transit
- secure hosting environments
- access controls and staff training
- ongoing monitoring and review
- No system can guarantee absolute security, but we continuously improve our safeguards.
12. Changes to this Privacy Notice
- We may update this Privacy Notice from time to time.
- When we do, we will:
- Revise the “Last updated” date
- Publish the updated notice on our website
- Provide notice where required by law
13. Contact us
- Planet MUTU Ltd
- Email: [email protected]
- Website: https://mutusystem.com/en-us/