Legal

Mooli Privacy Policy

Last updated: June 7, 2026

This Privacy Policy explains how Xu Xiangrong, an individual developer operating Mooli ("Mooli," "we," "us," or "our"), collects, uses, discloses, and protects personal information when you use the Mooli mobile application, related websites, cloud services, AI features, share extension, widgets, and support channels (collectively, the "Service").

Mooli is a personal AI productivity assistant that helps users chat with an assistant, organize notes and tasks, plan schedules, summarize meetings, process voice notes, generate daily or weekly recaps, and sync selected information across devices.

1. Information We Collect

Information you provide directly

We collect information that you choose to provide, including:

  • Account information, such as email address, display name, account identifier, profile preferences, subscription tier, trial status, and account settings.
  • User profile information, such as preferred name, occupation, timezone, first day of week, work schedule preferences, and other personal facts you ask Mooli to remember.
  • Chat, note, task, calendar, and planning content, including messages, task titles and details, note content, notebooks, daily plans, recurring schedule data, alarms, reminders, and AI-generated suggestions.
  • Meeting and voice content, including audio recordings, local or cloud transcripts, meeting titles, summaries, action items, linked calendar events, recording duration, and recording timestamps.
  • Files and media you submit, including photos, images, PDFs, shared text, links, document metadata, and file names.
  • Account deletion feedback, such as deletion reason and optional comments.
  • Support communications, such as the content of messages you send to us and any contact information you include.

Because Mooli includes free-form text fields, voice recordings, images, and documents, you may choose to enter or upload information about yourself or others. Please do not submit information you are not authorized to share. You are responsible for ensuring that you have the necessary rights, permissions, and lawful basis to upload, share, record, or process any content with Mooli, including text, images, PDFs, documents, audio recordings, calendar entries, and other third-party content.

Information collected from your device or app permissions

Depending on your settings and permissions, we may collect:

  • Location information, including precise GPS coordinates, approximate place names produced by reverse geocoding, location breadcrumbs, and timestamps, when you enable location-related features.
  • Calendar information, including event title, start and end time, all-day status, location, notes, calendar title, recurrence data, event identifiers, and related Mooli tasks or notes, when you grant calendar access or sync Mooli events with the system calendar.
  • Audio data from microphone access when you record voice notes, meeting recordings, or voice messages.
  • Photos, camera captures, PDFs, and other files you select or share with Mooli.
  • Notification information, including Apple Push Notification service device tokens, notification status, delivery failures, and notification interaction metadata.
  • Device and technical information needed to operate the Service, such as app version, authentication tokens, session information, operating system data, request timestamps, local date, timezone, and server logs.

Mooli respects iOS permission settings. If you do not grant a permission, the related feature may be unavailable or limited.

Information from Apple and payment services

If you purchase a subscription or audio-minute pack through Apple in-app purchase, we receive transaction data needed to verify and fulfill the purchase, such as product ID, transaction ID, purchase environment, purchase date, expiration date, and signed transaction information. We do not receive your full payment card number from Apple.

Information generated by Mooli

We may generate or store derived information to provide the Service, including summaries, semantic tags, action items, daily trajectories, weekly recaps, memory records, AI suggestions, vector embeddings, quota usage, and product usage counters such as daily chat count, quick note count, and audio minutes used.

Cookies and similar technologies

If you visit a Mooli website, we may use cookies, local storage, server logs, or similar technologies to operate the website, remember preferences, secure sessions, understand traffic, and improve the Service. You can control cookies through your browser settings. The mobile app does not need browser cookies for most core app features.

2. How We Use Information

We use personal information to:

  • Provide, maintain, and improve the Service.
  • Authenticate users and manage accounts.
  • Sync notes, tasks, events, chat logs, files, and settings across devices.
  • Generate AI responses, summaries, transcripts, plans, reminders, recaps, embeddings, and suggestions.
  • Process voice notes, meeting recordings, PDFs, images, and shared content.
  • Personalize Mooli based on your preferences, remembered facts, current context, calendar, tasks, location, and prior interactions.
  • Manage subscriptions, trials, quotas, purchases, billing-cycle usage, and entitlement verification.
  • Send notifications, morning plan reminders, proactive suggestions, recap notifications, and service messages.
  • Detect, prevent, and troubleshoot fraud, abuse, security issues, bugs, outages, and unauthorized access.
  • Respond to support requests and account deletion requests.
  • Comply with legal obligations and enforce our terms and policies.

We do not sell personal information, and we do not use personal information for third-party targeted advertising.

For users in the United States and Canada, this section also serves as a notice at collection: we collect the categories of information described above from you, your device, Apple services, our service providers, and information generated through your use of Mooli, and we use them for the purposes described in this Privacy Policy.

3. AI Processing

Mooli offers AI-based features. To provide these features, we may send relevant user content and context to AI service providers, including Google Gemini API and related Google AI services, and to our own cloud functions that prepare prompts, process files, generate embeddings, or store outputs.

The content sent for AI processing may include chat messages, notes, tasks, calendar context, location names, audio files, transcripts, PDFs, images, user profile facts, daily context snapshots, and previous conversation history when needed for the requested feature.

We do not use your personal information or user content to train our own foundation AI models. Where we use third-party AI service providers through paid API services or equivalent privacy-protective commercial terms, our agreements and provider terms are intended to prohibit those providers from using your prompts, files, responses, or other submitted content to train or improve their public foundation models, unless you separately opt in or we clearly tell you otherwise.

AI outputs may be inaccurate or incomplete. You are responsible for reviewing AI-generated tasks, events, summaries, and recommendations before relying on them.

Where feasible, you can reduce AI processing by not using AI features, not uploading optional files, not enabling optional contextual permissions, deleting content, or deleting your account. Some core Mooli features depend on AI processing and may not work without it.

4. How We Share Information

We share personal information only as needed to operate, secure, and improve the Service, including with:

  • Cloud infrastructure, database, authentication, storage, and serverless providers, including Supabase.
  • AI and machine-learning providers, including Google Gemini API and related Google services.
  • Audio processing and compute infrastructure providers, including Modal-hosted transcription or diarization services where used.
  • Apple services, including StoreKit, App Store Server API, App Store Connect, Apple Push Notification service, Sign in with Apple if enabled, and iOS frameworks such as Calendar, Location, Notifications, Camera, Photos, Files, and Speech where you grant permission.
  • Service providers that support hosting, security, diagnostics, customer support, and operational communications.
  • Professional advisors, legal authorities, or other parties where required to comply with law, protect rights, prevent harm, investigate abuse, or respond to valid legal process.
  • Successors or transferees in connection with a transfer of the Service, sale of assets, reorganization, or similar transaction, subject to appropriate confidentiality protections.

We require service providers to process information only for authorized purposes and to protect it appropriately.

5. Data Storage, Retention, and Deletion

We retain personal information for as long as needed to provide the Service, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and support legitimate business operations.

Typical retention patterns include:

  • Account, profile, subscription, quota, and purchase records: retained while your account is active and as needed for legal, accounting, fraud-prevention, and support purposes.
  • Notes, tasks, events, notebooks, chat logs, uploaded files, memories, recaps, location breadcrumbs, calendar snapshots, and AI-generated content: retained until you delete the content, delete your account, or we no longer need it to provide the Service.
  • Uploaded audio, PDF, and image files: retained as needed to provide the relevant feature and account history, unless deleted by you or during account deletion.
  • Logs, diagnostics, and security records: retained for a limited period appropriate to security, troubleshooting, and legal needs.
  • Account deletion feedback: may be retained in a de-identified or limited form to improve the Service and understand deletion reasons.

Mooli includes an account deletion flow. When you delete your account, we aim to delete your account and associated cloud data, including chats, notes, tasks, uploads, recaps, profile data, location breadcrumbs, calendar snapshots, quota records, and related user tables. Some information may remain in backups, logs, fraud-prevention records, legal records, or de-identified analytics for a limited period where permitted by law.

You may also delete local content from your device through the app or by uninstalling the app, subject to normal iOS behavior.

6. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including authenticated access, cloud database controls, row-level access controls where configured, encrypted network connections, permission-gated iOS access, and deletion workflows. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You are responsible for maintaining the security of your device, Apple ID, email account, and Mooli login credentials.

7. Your Choices and Controls

Depending on your location and the feature, you may be able to:

  • Access, update, or delete account profile information in the app.
  • Delete notes, tasks, events, chat history, recordings, and uploaded content.
  • Delete your account through the in-app delete account flow.
  • Disable or revoke iOS permissions for Location, Calendar, Notifications, Camera, Microphone, Photos, Files, and other protected resources in iOS Settings.
  • Turn off push notifications or notification types through iOS Settings or Mooli settings.
  • Stop using optional AI, location, recording, calendar, or file-upload features.
  • Contact us to request access, correction, deletion, export, objection, restriction, or withdrawal of consent where applicable law provides those rights.

To make a privacy request, contact us at privacy@mooli.ai. We may need to verify your identity before fulfilling a request.

8. Canada Privacy Rights

If you are in Canada, we handle personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) where it applies, and applicable provincial privacy laws.

We collect, use, and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances, including the purposes described in this Privacy Policy. By using Mooli, creating an account, enabling optional permissions, uploading content, recording audio, or requesting AI features, you consent to the collection, use, disclosure, storage, and processing described in this Privacy Policy. You may withdraw consent where legally available, but this may limit or prevent us from providing parts of the Service.

Canadian users may request access to or correction of their personal information, ask questions about our privacy practices, or challenge our compliance by contacting privacy@mooli.ai. We may need to verify your identity before responding. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or, where applicable, a provincial privacy regulator.

If you are in Québec, we may collect personal information through technologies that allow identification, location, or profiling when you enable features such as account login, location, calendar context, AI personalization, reminders, or website technologies. We use those features to provide and personalize Mooli, not for third-party advertising. You may disable optional location, notification, calendar, microphone, camera, and file permissions through iOS settings.

9. Legal Bases for EEA, UK, and Similar Regions

If you are in the European Economic Area, the United Kingdom, Switzerland, or another jurisdiction with similar rules, our legal bases may include:

  • Contract: to provide the Service you request, manage your account, process subscriptions, and deliver core features.
  • Consent: for optional permissions such as location, microphone, camera, calendar, notifications, certain AI processing, or marketing communications where required.
  • Legitimate interests: to secure, improve, debug, and operate the Service, prevent abuse, respond to support requests, and understand product performance, provided those interests are not overridden by your rights.
  • Legal obligation: to comply with applicable laws, accounting requirements, tax rules, and lawful requests.

You may withdraw consent where processing is based on consent, but withdrawal will not affect processing already completed.

10. United States State Privacy Rights

Depending on your state of residence and applicable law, you may have rights to know, access, correct, delete, obtain a portable copy of, or opt out of certain processing of personal information. We do not sell personal information and do not share personal information for cross-context behavioral advertising.

Mooli may process sensitive personal information if you choose to provide it through free-form notes, voice recordings, documents, calendar entries, location features, or AI conversations. Sensitive personal information may include precise geolocation, account login information, private communications or documents you submit, audio recordings, and information that could reveal health, beliefs, work life, personal relationships, or other sensitive details depending on what you choose to provide. We use sensitive personal information only to provide, secure, personalize, and improve the Service; comply with law; process your requests; and other purposes permitted by applicable law. We do not use sensitive personal information to infer characteristics for unrelated advertising.

In the preceding 12 months, we may have collected and disclosed to service providers the categories of personal information described in Section 1, including identifiers, contact information, commercial information, internet or network activity, geolocation information, audio/visual/user content, inferences or derived data, and sensitive personal information depending on your use of Mooli. We disclose these categories for the purposes described in Sections 2 and 4. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

To exercise applicable rights, contact privacy@mooli.ai. You may use an authorized agent where required by applicable law, but we may require proof of authorization and identity verification. If we deny a request, you may appeal by replying to our decision email with "Privacy Appeal" in the subject line.

11. International Transfers

We and our service providers may process information in the United States, Canada, Hong Kong, the European Economic Area, and other countries where we or our providers operate. These countries may have privacy laws different from those in your location. Where required, we use appropriate safeguards, such as contractual protections, to support international transfers. If you are in Canada, your personal information may be transferred outside your province or outside Canada and may be accessible to courts, law enforcement, national security authorities, or other government authorities in those jurisdictions as permitted by law.

12. Hong Kong Privacy Rights

If the Hong Kong Personal Data (Privacy) Ordinance applies to our processing of your personal data, you may have the right to request access to and correction of your personal data, subject to applicable exceptions. To make such a request, contact privacy@mooli.ai. We may charge a fee permitted by law for data access requests and may need to verify your identity before responding.

13. Children's Privacy

Mooli is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you are in a region with a higher minimum age for consent to online services, you must meet that age requirement to use Mooli. If you are in Canada and are not old enough to provide meaningful consent under applicable law, you should use Mooli only with consent from a parent or guardian. If you believe a child has provided personal information to us, contact privacy@mooli.ai so we can take appropriate action.

14. Third-Party Links and Services

The Service may include links, files, calendar entries, shared content, or integrations that lead to third-party services. We are not responsible for the privacy practices of third parties that we do not control. Please review their privacy policies before providing information to them.

15. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice as appropriate, such as by updating the "Last updated" date, posting an in-app notice, or sending a notification. Your continued use of the Service after an updated policy becomes effective means you accept the updated policy, where permitted by law.

16. Contact Us

If you have questions or requests about this Privacy Policy or Mooli's privacy practices, contact us at:

Xu Xiangrong

Hong Kong

Email: privacy@mooli.ai

Website: https://mooli.ai