How MangoSpace protects your data
Your data is yours. This page says what we keep, where it lives, who else receives any of it, and how to reach us if you find a security problem. The Privacy Policy says the same things in full.
What lives where
- On your device: your conversations with your avatar. They are not stored on our servers, so they do not sync between devices, and on the web they live in your browser.
- On our servers: your account and what you create in the app: goals, calendar, mood and the nights you log if you track them, your avatar and looks, game progress, votes, and the memories you save for your avatar.
- In our support mailbox: the emails you send us, kept up to two years after your request is resolved.
- At an AI provider: only what you send in the app while AI is on: your message, the recent part of the conversation, anything you attach, your memories while memory is turned on, and the app data a feature you use needs, such as your goals when you ask about them. The provider does not receive your email address or account details.
What we never do
- No ads, and no advertising or tracking cookies.
- We do not sell your data, share it for anyone else's marketing, or build a profile of you.
- No third-party analytics or crash-reporting service.
- We do not use your conversations to train AI models, and our AI providers do not train on data sent through their APIs under the terms we use.
Who receives your messages
AI features are off until you turn them on. While they are on, your messages go to these AI providers, which run the chat and the models you choose:
- Google (Gemini models)
- Anthropic (Claude models)
- OpenAI (GPT models)
Each provider keeps what it receives for a limited period for abuse monitoring, typically up to 30 days, under its own terms. Payments are handled by Stripe on the web, and by RevenueCat with Apple and Google in the mobile apps; card numbers never reach our servers.
How it is protected
- Every connection between your device and our servers uses TLS.
- Your data is stored with Amazon Web Services in the United States (Northern Virginia), encrypted at rest with our own encryption key. Only the parts of our service that read or write your data, and the people who administer it, can use that key, and every use of it is logged.
- You sign in with Apple or Google, and we never handle your credentials for either.
- Email addresses are masked before anything is logged, and our logs are written to exclude message content.
- If a breach affects your data, we will tell you within 72 hours of becoming aware of it, what was affected, and what we are doing about it.
Your controls
All of these are in the app, under Settings, then Privacy and AI.
- Turn AI off. Nothing you write in the app is sent to an AI provider while it is off, and our servers refuse it.
- Download my data. A copy of your account and everything you created, as a page you can read or as a JSON file.
- Erase what your avatar remembers, and clear your chat history on a device.
- Delete your account. It is deleted fourteen days after you ask, and signing in before then lets you cancel. We email you when you ask, if you cancel, and when it is done.
How long we keep things
| Data | Retention |
|---|---|
| Conversations | Not stored on our servers. Kept on your device until its limit prunes them, you delete them, or you clear your history |
| Account information | Until the account is deleted |
| Days you opened the app | 400 days. An older day is removed the next time you open the app, and every day is deleted with the account |
| App data such as goals, calendar, memories, votes | Until you delete it or the account is deleted |
| Goal trophies and completion history | Until the account is deleted, including after you delete the goal |
| Mood | Until you delete your mood history or the account is deleted |
| Nights you log | Until you delete your sleep history or the account is deleted |
| Operational logs | Up to 30 days, content excluded. Sign-up, sign-in and session logs include the IP address a request came from |
| Firewall and content delivery request logs | 90 days. They include the IP address a request came from |
| Emails you send us | Up to two years after your request is resolved |
| Account deletion request | From the request until 30 days after the deletion date. After the deletion it holds no email address or name |
| Database recovery window | 35 days after deletion. Conversations are never in it |
Report a security problem
If you find a vulnerability in MangoSpace, email security@mangospace.ai (or privacy@mangospace.ai) with what you found and the steps to reproduce it.
- Please do not access, change, or delete anyone else's data, and stop as soon as you have shown the problem.
- Please give us a reasonable time to fix it before telling anyone else.
- We aim to reply within 7 business days, and we will tell you when it is fixed.