MangoSpace AI Privacy Policy
Last Updated: 2026-11-01
Effective Date: 2026-11-01
Our Privacy Commitment
Your data is yours. We keep what the app needs to work, we tell you plainly what that is, and we do not sell any of it. This policy describes what MangoSpace AI actually does today, not what we hope to do later. When the app changes, this document changes with it.
The Simple Version
AI features are optional and off until you turn them on. We store your account and the things you create in the app, including the memories you save for your avatar. Your conversations with your avatar stay on your device, not on our servers. When AI is on, your messages are sent to an AI provider to generate a reply, and that provider keeps them under its own terms for a period we describe below; when AI is off, nothing you write in the app is sent to one. The app shows no ads. We do not sell your data, we do not track you across other apps or websites, and we do not build a profile of you to sell.
Information We Collect
1. Account Information
When you create an account we collect:
- Your email address, as Apple or Google shares it with us. With Apple you can choose to share a private relay address instead of your own
- Which of the two you signed in with, and the identifier it gives your account
- Your name, if Apple shares it the first time you sign in with Apple
- Account creation date and last seen date
- Display name and avatar name, if you provide them
- What you told us you want help with when you set up the app, which version of the setup flow you saw, how far through it you got, and the day you finished
- The days you opened the app, over the last 400 days
- The devices you are signed in on: the device and browser type, an identifier the app creates for each device, and when each was last active
Why we need it: to create and secure your account, and to let you see and sign out the devices on it.
How long we keep it: until your account is deleted. The days you opened the app are kept for 400 days. A day older than that is removed the next time you open the app. A signed-in device is removed when you sign out of it, or at your next sign-in once its session has expired.
2. Age Verification
MangoSpace is for adults, so we ask your age once, when you create your account. On an iPhone that can share an age range, the system asks whether to share it with us, and if you do, we ask nothing more. Otherwise we ask your age. We never ask your date of birth.
We do not store your age or your age range. The server reads whichever one you gave, works out whether you are 18 or older, and records only that you are, which of the two it came from, and when. It discards the age or the range. There is no field in our systems that holds either, so there is nothing to leak, subpoena, or hand to anyone.
If the answer is under 18, we store nothing about it: the account is deleted at once, with everything in it. What remains is the deletion record described under "Delete Your Data", which holds no email address or name, and a line in our server logs for up to 30 days that names the account's internal identifier and not the age.
Why we need it: MangoSpace is for adults, and we have to be able to show that we asked.
How long we keep the answer: until your account is deleted.
3. Consent Records
We record what you agreed to and when: your acceptance of these documents, your acceptance of the AI terms, your agreement to mood tracking and to sleep tracking and their withdrawal, and, when a crisis safety notice is shown to you, that it was shown and that you acknowledged it.
Each record holds an event name from a fixed list, a document version, a timestamp, the version of the app that recorded it when the app sent one, and for a safety notice the category of notice. It holds no message content and no free text.
We also keep a count of how many times each kind of safety notice has been shown to you, and the date of the most recent one. That is a number and a date per category, and nothing else.
Why we need it: if there is ever a question about what you were told and when, the answer should not depend on anyone's memory.
How long we keep it: until your account is deleted.
4. Subscription and Payment Information
If you subscribe we record your subscription tier, status, billing period, which payment provider handled it, whether it was a test purchase, and which screen in the app you subscribed from. Card numbers never reach our servers; our payment providers handle them directly.
AI chat comes with usage limits, so we also record how much you have used, the same counters for every account whatever its plan: a count and a start time for the current 5-hour window and the current week, how the week's use splits across the AI models you used, a count and a start time for the current 24 hours of the free taste, and how many messages you have sent in all. They hold no message content.
Why we need it: to give you what you paid for, or your free taste, and for financial and tax compliance.
How long we keep it: subscription status until your account is deleted. The usage counts are replaced when a new window starts, except the count of messages sent in all, and every one is deleted with your account. Payment records are held by our payment providers under their own retention rules, which are typically seven years for tax purposes.
5. App Data You Create
We store what you deliberately create in the app:
- Goals: title, schedule, skills, completion history, timestamps, and a trophy for each goal you complete: the goal as it was the last time you completed it, and how many times and on which days you completed it. Your trophies and completion history stay when you delete a goal
- Skills: levels and daily level-up history
- Calendar: events you create
- Sleep: the nights you log and how you rate them, if you turn sleep tracking on
- Mood: each mood you save and when you saved it, if you turn mood tracking on
- Adventures: the adventure your avatar is on or last finished: where, when it started and with how much HP and luck, when you ended it if you ended it early, the dice each place rolled and what they found, how the fight with the monster went, when your avatar last won each adventure, how many times your avatar has been rebuilt, and the coins, magic items and monster wins your adventures have added up to
- Public: your handle, a public username generated with your account, which you can change; the avatar you have equipped, as the parts it wears and the colors you chose for it; the backdrop behind it; and, once you move into a village, your seat in it: the village, your plot, when you joined and when you last moved. Your neighbors see your handle, your avatar and your house at your plot, and the month you arrived. They never see your name or your goals. This is everything about you another player can see. The village is the only place other players see it.
- Village safety: the neighbors you block, and each neighbor you report with the reason you chose, the note you added, if any, and the date. The neighbor is never told.
- Avatar: the name you gave your avatar, the looks you save, each one the parts it wears, the colors you chose for it and its name, the outfits and homes you own, the ship cabin your avatar travels in, and the sky you set for your dashboard and whether its weather follows your mood
- Game data: coins, the items you own, the magic items you're using and when each one wears off, the day you last opened your daily gift, your star path progress, and a history of what you earned and spent
- AI settings: whether AI is on, the models you picked, and your memories: short notes about you that you write yourself or save from a conversation so your avatar can keep them in mind. They are stored with your account so they follow you to your other devices, and they are sent to the AI provider with your messages only while memory is turned on. You can edit or erase them at any time.
- Votes: your likes and dislikes on AI models. Each model's total likes and dislikes are kept with no account attached.
Why we need it: it is the app.
How long we keep it: until you delete the item or your account.
Your moods and the nights you log are health data. We store them only after you agree in the app, and they are never sent to an AI provider. In Settings under Privacy and AI, Delete my mood history deletes every mood and stops mood tracking, and Delete my sleep history deletes every night and stops sleep tracking. Our Consumer Health Data Privacy Policy covers your mood, the nights you log and how you rate them, and the safety notice records.
6. Conversations With Your Avatar
Your conversations are not stored on our servers. They stay on the device you had them on.
Your messages pass through our servers to reach the AI provider that generates the reply, and are not kept there afterwards. When you return to an old conversation, your device is what remembers it. The app keeps only your latest conversations on the device and deletes the oldest automatically once there are more than a few; clearing your chat history in Settings removes them all at once.
Because we do not hold them, a valid legal order cannot reach them from us, and our 35-day database recovery window never contains them.
Three limits come with this, and we would rather write them down than let the claim sound broader than it is:
- On the web, "your device" means "this browser." Clearing your browser data clears your conversations, and they do not follow you to another browser or another computer.
- Conversations do not sync between your devices. What you said on your phone is not on your laptop. That is the cost of not holding them, and we think it is worth paying.
- The AI provider still receives your message and keeps it under its own terms, typically up to 30 days for abuse monitoring. See "AI Providers" below. Not storing a conversation is not the same as it never leaving your device, and we will not describe it that way.
Text you attach is treated the same way. You can attach a file or a paste to a message. It travels with that one message to the AI provider and is never written to our servers. We keep no copy of it, and neither does the app: once the message is sent, only the attachment's name stays on that message in the conversation on your device. To ask about the same text again, attach it again.
For one hour after each message we keep a record that it was charged: your account, an identifier your app generated for that message, and the amount of energy. It holds nothing you wrote. It exists so that resending a message after a timeout is never charged twice, and it deletes itself.
Why we need it: so your avatar can follow a conversation instead of starting over on every message. Your device sends the recent part of the thread with each message, which is how it follows.
How long we keep it: we do not keep it. Your device keeps it until the limit above prunes it, you delete it, or you clear your history.
7. Diagnostic and Operational Data
We collect the technical information our servers produce while running:
- Error and performance logs, held in Amazon CloudWatch
- Aggregate counts, such as how many messages were sent in a day
- Device platform, time zone, and language, sent with each message so replies fit your context
- The IP address a request came from, in our sign-up, sign-in and session logs and in the request logs of our firewall and content delivery network. We use it to investigate a suspicious sign-in or an attack, and never join it to your profile.
Our logs are written to exclude message content, and email addresses are masked before they are logged. We do not use a third-party analytics or crash-reporting service.
Why we need it: to find and fix what breaks, and to protect accounts from abuse.
How long we keep it: server logs for up to 30 days, and the firewall and content delivery network's request logs for 90 days, then they are deleted automatically. None of them is used to build a profile of you.
8. Emails You Send Us
When you write to support@mangospace.ai, privacy@mangospace.ai or security@mangospace.ai, we receive your email address, your name if your email includes it, what you write and anything you attach.
Why we need it: to answer you and to fix what you tell us about.
How long we keep it: up to two years after your request is resolved.
What We Do Not Collect
- Location. We do not request or track your physical location.
- Contacts, photos, or other apps. We do not read them.
- Browsing history. We do not track what you do outside MangoSpace AI.
- Biometrics. We do not collect face or fingerprint data. If you unlock the app with your device's biometrics, that check happens on your device and we never receive the data.
- Your age or your date of birth. We never ask your date of birth, and your age is asked once and discarded once we know you are 18 or older. See section 2.
How We Use Your Information
To run the app: deliver AI replies, sync your data across your devices, manage your subscription and its usage limits, and track your progress.
To keep it working: debug failures, monitor cost and abuse, and improve features.
To learn what helps: count, in aggregate, how many people come back, finish setting up, or subscribe, so we can improve the app. We never use it to build a profile of one person.
To reach you: transactional email such as the emails about deleting your account, and payment notices. Marketing email only if you opt in, and you can opt out at any time.
To comply with the law: respond to valid legal requests, and prevent fraud and abuse.
We do not use your conversations to train AI models, and our AI providers do not train on data sent through their APIs under the terms we use.
Third Parties Who Receive Your Data
AI Providers
No message you write in the app reaches an AI provider unless AI features are on. They are off until you turn them on, and switching them off in Settings stops it at our servers rather than in the interface.
When AI is on, your messages are sent to whichever AI provider serves the model handling your request. We use three:
- Google (Gemini models)
- Anthropic (Claude models)
- OpenAI (GPT models)
What they receive: your message, the recent conversation context, anything you attached to it, your memories while memory is turned on, and whatever app data the feature you used requires, such as your goals list when you ask about goals, and your recently completed goals with every message while goal reading is turned on. They do not receive your email address, your account identifiers, or your age.
What they do with it: each provider retains API data for a limited period for abuse monitoring, typically up to 30 days, and does not use API data to train its models. Each provider's own policy governs this, and those policies can change. We are pursuing zero-retention arrangements where a provider offers one.
Payment Providers
- Stripe processes subscriptions purchased on the web.
- RevenueCat, with Apple and Google, processes subscriptions purchased in the mobile apps.
They receive your payment details directly. We receive confirmation that a payment succeeded and which subscription it bought.
Cloud Infrastructure
We use Amazon Web Services. Your data is stored in the US East (Northern Virginia) region, encrypted in transit and at rest.
Security
Amazon Web Services WAF filters the requests that reach our servers, to block automated abuse. It sets nothing in your browser.
Email and Support
Our email provider hosts the emails you send us. Service providers that help us answer support requests may also process them, only to help us reply to you.
Data Security
- All traffic between your device and our servers uses TLS.
- Stored data is encrypted at rest with our own encryption key. Only the parts of our service that read or write your data, and the people who administer it, can use that key, and every use of it is logged.
- You sign in with Apple or Google, and we never handle your credentials for either.
- Access to production systems is limited and audited.
- Our logging is written to keep message content out of logs.
No system is perfectly secure. If a breach affects your data we will notify you within 72 hours of becoming aware of it, tell you what was affected, and explain what we are doing about it.
Safety and Content Moderation
We run an automated safety check on each message. It looks for signs of crisis, such as expressions of self-harm, and for questions that call for a professional, such as medical, legal, or financial advice. When it triggers, the app shows you the matching notice, and for a crisis it shows resources instead of a normal reply. We record that a notice was shown, as described under Consent Records: a category, a count, and a date, never the message.
Our AI providers also run their own safety systems, and are independently required by law to report certain illegal content to the authorities.
We do not read your conversations for any other purpose, and no person at MangoSpace reviews them as a matter of routine. Past the moment a message is processed we could not, because we do not keep it.
In the village you can report a neighbor or block them from their house. A person at MangoSpace reads every report within 24 hours, with the reason and the note you wrote, and may give the reported player a new handle or move them out of the village. We never tell anyone who reported or blocked them, and no other player sees your reports or blocks.
Your Rights
See and Correct Your Data
You can view and edit your account details, goals, calendar, and other app data in the app at any time.
Delete Your Data
You can delete individual goals, calendar events, memories, and conversations in the app, and your whole mood history or sleep history. Deleting a conversation removes it from your device, which is the only place it exists, and clearing your chat history in Settings does the same for all of them at once.
To delete your entire account, go to Settings, then Privacy and AI, then Delete Account. Your account is deleted fourteen days after you ask. Until then you can change your mind: sign in, and the countdown screen offers Cancel deletion. We email the account's address when you ask, if you cancel, and when the deletion is done. Asking signs your account out on every other device at once.
On the deletion date we delete your account and everything this policy lists as tied to it, and your handle becomes free for someone else to take.
If you pay for a membership: a subscription bought on our website stops renewing as soon as you ask, and the membership ends with the account on the deletion date; the rest of the period is not refunded. A subscription bought through Apple or Google keeps renewing until you cancel it in your store settings, which we cannot do for you, and deleting the account does not cancel it.
If you signed in with Apple, you can also remove MangoSpace from your Apple ID: in iOS Settings, tap your name, then Sign in with Apple.
What remains after deletion:
- a record that the account asked to be deleted: the account's internal identifier, the dates, how it signed in, and whether a renewal was stopped, with no email address or name. It deletes itself 30 days after the deletion date, and while it exists it is what refuses a sign-in token issued before the deletion.
- records our payment providers are required to keep for tax purposes
- a record of a past purchase at RevenueCat, our mobile payment provider, which no longer points to any account
- deleted data in our 35-day recovery window, until it ages out. Conversations are never in that window, because they are never on our servers.
If you cannot sign in, email privacy@mangospace.ai from your account's email address and we will help.
Get a Copy of Your Data
In Settings, under Privacy and AI, Download my data saves a copy of your account and everything you created in the app: a page you can read in any browser, or a JSON file for moving it to another service. Your conversations are on your device, so they are not in that copy.
Opt Out of Marketing
Use the unsubscribe link in any marketing email, or email us.
Region-Specific Rights
EU and UK (GDPR)
You have the right to access, correct, erase, restrict, and port your data, to object to processing, and to withdraw consent. Our legal bases are: performing our contract with you for the app's core functions, your consent for AI chat and for optional communications, your explicit consent for mood tracking and sleep tracking (Article 9(2)(a)), and our legitimate interest in security and fraud prevention. Email privacy@mangospace.ai and we will respond within 30 days.
California (CCPA and CPRA)
You have the right to know what we collect and why, to delete it, to correct it, and to opt out of any sale or sharing of personal information. We do not sell personal information. Exercising these rights never changes the service you receive. Email privacy@mangospace.ai.
Everywhere Else
We apply the same practices regardless of where you live. If your local law gives you more, write to us and we will honor it.
Age Requirements
MangoSpace is for users 18 and older. We ask your age once, when you create your account, and store only that you are 18 or older. An answer under 18 ends the sign-up and deletes the account at once.
We do not knowingly collect personal information from children. If you believe a child has provided us with information, email privacy@mangospace.ai and we will delete it.
Turning AI Off
AI features are off until you turn them on, and Settings has a switch to turn them off again at any time, under Privacy and AI.
What off means: nothing you write in the app is sent to an AI provider. The refusal happens on our servers, so an out-of-date copy of the app cannot send anyway.
What off does not do: it does not delete anything by itself, and it does not cancel a paid plan. The same screen offers to erase what your avatar remembers and to clear your chat history on this device, both as separate choices. A subscription keeps billing until you cancel it under Manage Membership.
Cookies and Similar Technologies
The web app stores your sign-in session in your browser so you stay logged in, and stores your interface preferences such as language and theme. When you sign in with Apple or Google on the web, their sign-in window runs on their site, under their own privacy policies.
We do not use advertising cookies, cross-site tracking, or third-party marketing pixels on the web.
Automated Decisions
Your avatar generates suggestions and replies automatically. It proposes changes such as creating a goal or an event, and nothing it proposes takes effect until you accept it. No automated decision is made that has a legal effect on you.
When We Share Your Data
With your consent. When you ask us to.
To comply with the law. Valid subpoenas, court orders, and lawful requests from authorities. A valid order cannot reach your conversations, because we do not hold them. Neither can your age, which we never store.
To prevent serious harm. If we believe in good faith that disclosure is necessary to prevent imminent physical harm.
In a business transfer. If MangoSpace AI is acquired or merges, your data may transfer to the new owner, who would be bound by this policy until you are notified of any change.
What we never do: we do not sell your data, we do not share it for anyone else's marketing, and we do not build profiles to sell.
International Transfers
MangoSpace AI operates from the United States and stores data there. If you use the app from outside the United States, your data is transferred to and processed in the United States under appropriate safeguards, including Standard Contractual Clauses where they apply.
Data Retention Summary
| Data | Retention |
|---|---|
| Account information | Until the account is deleted |
| Days you opened the app | 400 days. An older day is removed the next time you open the app, and every day is deleted with the account |
| Signed-in devices | Until you sign out of them. An expired session is removed at your next sign-in |
| Age verification answer | Until the account is deleted. Your age and age range are never stored |
| Consent and safety notice records | Until the account is deleted |
| App data such as goals, calendar, memories, votes | Until you delete it or the account is deleted |
| Goal trophies and completion history | Until the account is deleted, including after you delete the goal |
| Mood | Until you delete your mood history or the account is deleted |
| Nights you log | Until you delete your sleep history or the account is deleted |
| Neighbors you block | Until you unblock them, or either account is deleted |
| Reports you file | The reason and the note until we have acted on the report. That a report was filed, and when, until either account is deleted |
| Conversations | Not stored on our servers. Kept on your device until its limit prunes them, you delete them, or you clear your history |
| Send charge records | 1 hour, then deleted automatically. No message content |
| Subscription status | Until the account is deleted. Payment records are held by our payment providers |
| Usage counts | Replaced when a new window starts, except the count of messages sent in all. Deleted with the account. No message content |
| Operational logs | Up to 30 days, content excluded. Sign-up, sign-in and session logs include the IP address a request came from |
| Firewall and content delivery request logs | 90 days. They include the IP address a request came from |
| Emails you send us | Up to two years after your request is resolved |
| Account deletion request | From the request until 30 days after the deletion date. After the deletion it holds no email address or name |
| Database recovery window | 35 days after deletion. Conversations are never in it |
Changes to This Policy
When this policy changes we update the date at the top. For changes that materially affect you, we notify you in the app or by email and ask you to accept the new version before continuing to use the affected feature. We do not apply new terms retroactively to data already collected without asking you.
Relationship to the Terms of Service
Read this policy alongside our Terms of Service. Where the two conflict, the Terms of Service govern.
Contact Us
Email: privacy@mangospace.ai
Mail:
MangoSpace AI
522 W Riverside Ave #7059
Spokane, WA, 99201
USA
We aim to reply within 7 business days and to fulfill verified requests within 30 days.
Your Trust Matters
We would rather tell you that a feature does not exist yet than describe one that does not. If you find something in this document that does not match what the app does, tell us and we will fix the app or fix the document.