Privacy Policy

1. Introduction

Welcome to Mondy.ai ("Mondy", "we", "our", or "us"). Mondy is developed and operated by Rumeth Dasanayake, an independent developer based in Sri Lanka.

We are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, disclose, store, and protect your information when you use our website, mobile applications, and related services (collectively, the "Services").

By using Mondy, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

We collect only the information necessary to provide, maintain, improve, and secure our Services.

Personal Information

When you create an account or communicate with us, we may collect:

• Name
• Email address
• Phone number
• Mailing address (where applicable)
• Profile information you choose to provide

Voice Recordings and Transcripts

When you record in the app, Mondy captures your microphone audio. Depending on the feature, this audio may be streamed in real time to a speech-to-text provider, or uploaded after recording, to generate a transcript. Once a transcript exists, it — along with related content such as prompts and profile notes — is sent to Mondy's servers and AI providers when you generate posts, plans, or other content. Profile notes, tags, and similar inputs are sent to our servers when you save them.

These are used to provide transcription, AI-assisted content generation, and related functionality.

Where practical, voice recordings, transcripts, and AI content are stored separately from your account's personally identifiable information and associated using internal identifiers rather than direct personal identifiers.

User Content

We collect content you create or upload, including:

• Posts
• Drafts
• Captions
• Images
• Videos
• Scheduled content
• Other media submitted through the Service

Connected Platform Information

When you connect third-party platforms such as Facebook or Threads, we collect:

• Secure authorization (OAuth) tokens
• Account identifiers
• Display names
• Basic account metadata required to operate the Service

Device and Usage Information

We may automatically collect technical information including:

• Device type
• Operating system
• App version
• Language preferences
• IP address
• Diagnostic information
• Crash reports
• Performance data
• Feature usage information

This information helps us improve reliability, security, and performance.

Payment Information

Payments are securely processed by our third-party payment providers. Mondy does not store your payment card information on its own servers.

3. How We Use Your Information

We use your information to:

• Create and manage your account
• Authenticate your identity
• Publish and manage content on connected social media platforms
• Generate AI-assisted content
• Transcribe voice recordings
• Provide customer support
• Improve the quality, accuracy, reliability, and performance of Mondy's Services and AI capabilities
• Detect fraud, abuse, and unauthorized access
• Maintain security and platform integrity
• Comply with applicable legal obligations

4. AI Processing and Service Improvement

Mondy uses artificial intelligence to generate content, process voice recordings, and provide intelligent recommendations.

To improve the quality, accuracy, reliability, and performance of our Services, we may use voice recordings, transcripts, prompts, generated content, and other user-submitted content for research, testing, quality assurance, and machine learning.

Where practical, this information is processed in a de-identified or pseudonymized form and separated from directly identifying personal information.

We do not sell your voice recordings, transcripts, or AI inputs.

5. Data Sharing and Third Parties

We do not sell your personal information.

We use trusted third-party service providers to operate and improve Mondy. Depending on the features you use, these providers may process limited information on our behalf. Third parties that receive user data on our behalf are required to provide the same or equal protection of that data as described in this Privacy Policy and as required by applicable law.

• Cloud Hosting: Google Cloud Platform (GCP) – Secure hosting, storage, networking, and infrastructure.
• Artificial Intelligence & Language Models: Google Gemini, Anthropic Claude, OpenAI ChatGPT, and xAI Grok – Used to generate, transform, summarize, and enhance content based on your inputs.
• Authentication: Clerk and OAuth providers – Used to securely authenticate users and manage account access.
• Payment Processing: RevenueCat – Used to manage subscriptions, purchases, and billing. Payment information is processed by Apple, Google, and RevenueCat; Mondy does not store your payment card details.
• Speech-to-Text / Transcription: AssemblyAI, Google Speech-to-Text, and Deepgram – Used to transcribe voice recordings into text for processing.
• Analytics: Mixpanel, Google Analytics, and Firebase Analytics – Used to understand app performance, feature usage, diagnose issues, and improve the user experience.

These providers only receive the information necessary to perform the services we request and are contractually or legally required to protect your data.

We also share information with social media platforms only when you explicitly authorize Mondy to publish or manage content on your behalf.

We may disclose information where required by applicable law or to protect the safety, rights, or property of Mondy, our users, or others.

5a. Your Consent for AI and Speech-to-Text Sharing

Before Mondy shares your microphone audio with a speech-to-text provider, or your transcripts and related content with an AI provider, we ask for your explicit permission in the app. Features that require this sharing — including voice recording, transcription, and AI content generation — are unavailable until you grant this permission.

You can withdraw this permission at any time in Profile → AI data sharing. Once withdrawn, Mondy will not send new audio, transcripts, or related content to these AI or speech-to-text providers until you opt in again. This is separate from account deletion, which is available at Profile → Edit Profile → Delete Account.

6. Cookies and Tracking Technologies

Our website uses a small first-party cookie (mondy_cookie_consent) to remember your cookie preferences.

This cookie does not track you across other websites.

Mondy does not use cross-app or cross-site tracking for advertising purposes without obtaining your permission through Apple's App Tracking Transparency (ATT) framework where required.

8. International Data Transfers

Your information may be processed and stored in countries other than your own.

Where required by applicable law, we implement appropriate safeguards to protect personal information during international transfers.

9. Security

We implement appropriate technical and organizational safeguards to protect your information, including:

• Encrypted data transmission (TLS/HTTPS)
• Secure storage of authorization credentials
• Access controls and authentication
• Continuous monitoring and security practices designed to protect against unauthorized access, disclosure, alteration, or destruction of data

While no method of transmission or storage is completely secure, we continually work to protect your information using industry-standard practices.

10. Your Privacy Rights

Depending on your location, you may have rights including:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Withdraw consent where applicable
• Object to or restrict certain processing activities
• Request a copy of your personal data where required by law

To exercise your rights, contact: support@mondy.ai

11. Children's Privacy

Mondy is not intended for children under the age of 13, or the minimum legal age required in your jurisdiction.

We do not knowingly collect personal information from children. If we become aware that such information has been collected, we will promptly delete it.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

When we make material changes, we will update the "Last updated" date and, where appropriate, notify you through the App or by other reasonable means.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

• Mondy.ai
• Email: hello@mondy.ai
• Website: https://mondy.ai

You can also contact us through our site. For security vulnerability reports, see our security.txt.