Privacy Policy

Last updated: November 10, 2026

At a glance

  • We don't receive your chats. Chats, memories and settings all stay on your computer.
  • Your chats go straight from your computer to the AI company you picked. They never pass through our servers.
  • Sign-in details and API keys are kept only in your Mac's Keychain.
  • If you make a shop account, we keep your email, the characters you have, your orders, who you invited, and when you first downloaded each character. We never see your card number. If you joined through an invite, we also record when you had your first chat in the app, never what it said.
  • No tracking cookies, no ads. The only cookie holds an invite code for up to 30 days, and only if you open an invite link.
  • You can delete your account any time. We keep only the transaction records the law tells us to, for as long as it says.
  • Passwords you save for sites stay only in your computer's secure storage. We and the AI never get them, and using one needs Touch ID or Windows Hello.
  • If you connect your phone, your chat passes through our relay. It holds a message briefly only while your computer is offline, and doesn't keep a log.
  • If you allow screen awareness, the app reads the front app's name and window title on your computer. Only what a request needs goes to the AI you chose.
  • If you connect Google, your Gmail, calendar, to-dos and contacts are read on your computer only, never sent to our servers, and used only for what you ask.

1. What the app handles and where it's stored

  1. Chat history, memories, what your character knows about you, and settings are stored in the app's folder on your computer. They are never sent to our servers.
  2. Sign-in tokens and API keys for AI services are stored in your operating system's secure storage (macOS Keychain or Windows Credential Manager) and are never sent anywhere except to the AI company concerned.
  3. Saved logins. Passwords you save in the app for sites live only in that same secure storage. They are never sent to our servers or to the AI model. Reading one requires Touch ID or Windows Hello.
  4. You can view, edit and delete memories inside the app.

2. Information sent to AI companies

For a character to answer, your conversation has to be sent to the AI company you connected (OpenAI or Anthropic). These requests go directly from your computer to that company. We never receive or see their contents. How that company handles your information is governed by its own privacy policy.

3. What the website collects

  1. Launch update email. Only if you enter and submit it yourself.
  2. Your account. Your email address, when you made the account, and the invite code we make for it.
  3. Your characters. Which characters are on your account, how you got each one (free, purchase or invite), when you got it, and when you first downloaded it.
  4. Your orders. The payment provider (Toss Payments or Paddle), its order number, the amount, currency, payment status, and when you paid or cancelled. Your card number and other payment details go straight to the payment provider. We never receive or store them.
  5. Invites. Who invited whom and when, and whether (and when) the invited friend had their first chat in the app. The app only tells us that a first chat happened and when. We never receive what was said.
  6. Access logs. Cloudflare, which hosts our website, may briefly keep standard access logs for security and operations. We count visits as totals only, with Cloudflare Web Analytics, which uses no cookies. We don't use any of this to track visitors.

4. How we use it

  1. Launch update email: only to send news about the launch and the Windows version.
  2. Your account: to email you sign-in links, recognize you, and answer your questions.
  3. Your characters and orders: to put the characters you bought on your account so you can download them, confirm payments, and handle cancellations and refunds. Your first download time tells us whether an order can still be cancelled.
  4. Invites: to give invite rewards and to stop rewards being collected through fake accounts.
  5. We may show anonymous totals in the shop, such as how many people have taken each character home.

We never use this information for ads, and we never sell it or pass it on.

5. How long we keep it

  1. Your launch update email: until you unsubscribe or ask us to delete it.
  2. Your account, characters and invites: until you delete your account. Then we delete them right away.
  3. Korean e-commerce law requires us to keep some records even after you delete your account:
    • Records of contracts and cancellations: 5 years
    • Records of payments and delivery: 5 years
    • Records of complaints and disputes: 3 years
  4. When a retention period ends, we delete the information so it can't be recovered.

6. Who helps us, and who else receives information

These companies process personal information for us so we can run the Service:

  • Supabase Inc. (United States; our data is stored in Sydney, Australia): stores accounts and our database, and sends sign-in link emails
  • Cloudflare, Inc. (United States): runs our website and server functions, stores and delivers app and character files, and runs the phone-connection relay
  • Toss Payments Co., Ltd. (Korea): processes payments made in Korea

If you pay outside Korea, Paddle.com Market Ltd (United Kingdom) is the seller. Paddle collects your email, country and payment details directly at checkout, and its own privacy policy applies to them. To connect the payment to your account, we pass Paddle an account identifier and your email, and Paddle sends us the order number, amount, currency and payment status.

Some of these companies are outside your country, so your information may be transferred abroad. We only use companies that protect it under their own published privacy and data processing terms. If you'd rather not, you don't need an account: the app and Mongi work without one, but you won't be able to get or buy characters in the shop.

7. Cookies and browser storage

  1. Your sign-in session is kept in your browser's local storage (localStorage). It's gone when you sign out or clear your browser data.
  2. Only when you open a friend's invite link, we set a cookie called mongi_ref that holds the invite code for up to 30 days, so the invite still counts when you sign up. Only this website reads it.
  3. We don't use tracking cookies, ad cookies or third-party analytics cookies. Our fonts are hosted on this site too, so no outside font servers are called.

8. Checking for app updates

The app connects to our website to check for new versions. Only technical details, such as the app version and the type of operating system, are exchanged. No chats or personal information are sent. We only count checks per day and version, and we don't record who checked.

9. Your rights

  1. You can ask us to show, correct or delete the information we hold about you, or to stop processing it. You can also ask us to delete your account at any time.
  2. Email us from your account email at the address below. Once we've confirmed it's you, we'll take care of it within 10 days. Records the law requires us to keep are deleted when their retention period ends.
  3. Children under 14 may not make an account.

10. Keeping it safe

Everything is sent encrypted (HTTPS). Account records can be read only by that account and by our own servers, and only the people who need admin access have it.

11. Phone connection

If you connect your phone, the following passes between your devices. It is used only if you turn it on.

  1. QR pairing. You pair your phone with a QR code shown on your computer. A short code and a device identifier used to recognize the pairing are kept on the relay.
  2. Relay. Chat messages between your phone and your computer pass through a relay we run on Cloudflare (relay.hellomongi.com). Only when your computer is offline and the message can't be delivered right away do we hold it briefly, and we delete it once delivered. We don't read held messages or use them for ads or training. Your chat history stays on your computer.
  3. Web Push. To send your phone notifications of your character's replies and requests for confirmation, we store the push subscription your browser creates (the address and keys for sending notifications). We delete it when you turn notifications off or disconnect.

12. Screen awareness and agent features

  1. With your permission, the app reads the name and window title of the frontmost app on your computer, so it can handle your requests (for example closing a tab or working in an app) properly. You can withdraw permission at any time.
  2. What it reads stays on your computer. Only the part needed for a request you made is sent to the AI company you connected. We don't receive or store it.
  3. Agent actions such as closing a browser tab or operating an app happen on your computer. The app asks you first before anything hard to undo, such as paying, sending or deleting.
  4. Microphone: when you hold the talk key, press and hold a character, talk out loud, or turn on "Answer to their name", the app listens through your microphone. Speech is turned into text by a model running on your computer; the sound is never recorded, stored or sent anywhere. Only the resulting text is sent, as your message, to the AI company you connected. A mic indicator shows whenever the app is listening, and name listening is off until you turn it on.

13. Phone calls (planned, optional)

This applies only if you choose to use it, and we will explain it separately and ask you to agree before you start.

  1. You connect your own Twilio account and place calls with your own verified number. Your Twilio account details are kept in your computer's secure storage.
  2. Call audio passes through our relay. We don't store or record it; it passes through only for as long as delivery takes.
  3. Calls go through Twilio, so Twilio's privacy policy applies to that part separately.

14. Google account connection (optional)

This applies only if you press "Connect with Google" in the app.

  1. With your permission, the app accesses the Google services you allow: Gmail (read messages and send the mail you ask it to send), Google Calendar (see calendars and events, and add or change events), Google Tasks (see and add to-dos) and Google Contacts (look people up). You choose which of these to allow on Google's own consent screen, and you can add or remove them later.
  2. This data is accessed only on your device, directly between the app and Google. It is never sent to Mongi's servers, and we don't receive or store it. The key that keeps you connected is kept in your computer's secure storage (Keychain or Windows Credential Manager).
  3. It is used only to do what you ask, such as reading you a message, adding an event or sending a reply you approved. Sending mail and adding or changing events or to-dos always needs your OK first. It is not used for advertising, it is not sold, and it is not used to train AI models. As with any request, the part needed to answer you is sent to the AI company you connected (section 2).
  4. You can disconnect at any time in the app (Settings → Connections → Google). The app hands the key back to Google and deletes it from your computer. You can also remove Mongi's access in your Google Account at myaccount.google.com/permissions.
  5. Mongi's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

15. Privacy officer and contact

For how purchases and refunds work, see our Refund Policy.