Privacy Policy
Last updated: September 26, 2026
This Privacy Policy explains how Mong handles personal information. It is written to clearly describe our privacy practices under the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply to us.
What we collect
- Account information, such as your email address, authentication details, profile details, saved library items, preferences, and any information you choose to provide.
- Usage information, such as searches, song pages viewed, generated meaning activity, interactions, approximate technical logs, and feature usage.
- Cookie choices, device and browser information, IP address, security events, and diagnostics needed to operate and protect the service.
How we use data
- To provide Mong features, including login, search, song analysis, personalization, saved items, support, and service communications.
- To keep the platform secure, detect fraud or abuse, enforce limits, debug errors, improve reliability, and understand service performance.
- To comply with legal obligations, respond to privacy requests, protect our rights, and handle user reports or disputes.
Your rights
- You can request access to personal information we hold about you and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant, or misleading.
- You can ask us to delete your account data where we no longer need it, decline optional analytics, and change your privacy preferences at any time using the control in the footer.
- For privacy, access, correction, deletion, or complaint requests, contact: itsmongapp@gmail.com
Optional YouTube videos
To find a matching video, our server searches the YouTube Data API using the song's public title and artist name. This lookup does not send lyrics, private stories or account details, and does not use OpenAI. We temporarily save the video reference for up to 28 days.
Song pages may offer an optional YouTube video. We do not load the embedded player until you choose to open it. Opening the player connects your device to Google/YouTube, which may receive your IP address, device information and playback activity under Google's Privacy Policy.
Visibility and AI processing
- Your notes, personal stories and listening preferences are private account data. Messages are available to their recipients and processed on our servers; they are not end-to-end encrypted. Public profile details, comments and published fusions are visible to other people. Avoid sharing sensitive details about yourself, children or others.
- When you request AI features, OpenAI receives the relevant song information and submitted text, including Finder descriptions and the name, situation and choices entered for Song Diagnosis. Provider processing and retention follow the applicable service arrangements and policies; we do not promise zero provider storage.
- Mong is operated by Matías Rufino Varela. For privacy requests or concerns, contact itsmongapp@gmail.com. Registering or using social sign-in does not subscribe you to marketing; newsletter consent is requested separately.
- Account deletion removes associated private notes, stories and messages in the service; shared readings and copies made by others may remain. Limited payment records may remain for reconciliation and applicable obligations. Anonymous daily-limit records expire after seven days of inactivity and weekly selections after 90 days; these periods do not apply to every usage record, log, backup or external provider. Contact us for access, deletion or retention questions.
Account preferences and communications
- After registering, you may choose your preferred language and optionally provide up to 3 favourite artists and a favourite genre. These preferences are private account settings, not public profile fields. You may skip, change or remove your answers in your account preferences.
- We use these choices to select relevant, already published song meanings in your chosen language. If you enable the weekly selection, we may send it at most once a week through the channels you choose: in-app notifications and/or the email newsletter. Availability depends on existing published meanings; subscribing does not request new AI generation.
- Notifications about replies to your comments have separate in-app and email choices. The email newsletter requires a separate, explicit opt-in to these terms; registering, accepting the general terms or enabling reply notifications does not subscribe you. We record your choices, the date and the applicable consent version to manage and demonstrate your consent.
- Change your choices at any time in account preferences. Every newsletter includes a free unsubscribe link that works without logging in. Unsubscribing from the newsletter stops newsletter emails; reply alerts remain controlled separately. Essential account and security emails are unaffected. Our email service provider processes the delivery information needed to send your chosen emails; our privacy policy explains providers, retention and your rights.
- Saved weekly selections and their delivery status are retained for up to 90 days to manage delivery and avoid duplicate recommendations. Your current preferences and consent records are handled under the retention rules in our privacy policy.
- If you choose concert recommendations, we use your favourite artists and optional country to find upcoming Ticketmaster dates for your newsletter. These settings remain private. Ticket links may be affiliate links: itsMong may earn a commission on eligible purchases. Ticketmaster and its partners handle ticket sales, prices, availability and tracking under their own terms. You can disable this section separately or unsubscribe from the newsletter.
Australian Privacy Act and APPs
- Where the Privacy Act 1988 (Cth) and Australian Privacy Principles apply, we handle personal information in a transparent way and only collect information reasonably necessary for Mong's functions and activities.
- You may use Mong without creating an account where account features are not required. Some features, such as saving items or account management, need account information to work.
- We take reasonable steps to keep personal information accurate, protected against misuse, interference, loss, and unauthorised access, modification, or disclosure.
- We do not use Australian government identifiers as our own identifiers.
Retention
- Account records are kept while your account is active or as needed to provide the service.
- Search, generation, rate-limit, and security logs may be kept for abuse prevention, debugging, analytics, and cost control.
- We delete, anonymize, or aggregate data when it is no longer needed for the purposes described here, unless we need to keep it for legal, security, or operational reasons.
Services that process information
- Hosting and database infrastructure and, when the relevant feature is used or enabled, these services process information: OpenAI, Brevo, Google (OAuth, reCAPTCHA, Analytics, AdSense), Facebook, Vercel, Apple Music, Spotify, Last.fm, Ticketmaster, YouTube, PayPal.
- Email delivery uses Brevo. Sign-in and anti-abuse services may receive account and device information. Analytics and advertising use the choices described below. External services, including Google, YouTube, Ticketmaster and PayPal, may also process information for their own purposes under their own privacy policies. We do not sell personal data.
Cookies and analytics
- Essential cookies support login, security, localization, and cookie consent.
- Loads usage and performance measurement from Vercel and Google only if you allow optional analytics. Your advertising choices stay separate.
- Choose which services can load. Analytics and advertising have separate controls. You can return here from the footer at any time.
Advertising and your choices
- Google AdSense may use cookies and identifiers depending on your choices, the applicable settings and the type of ad. You can change your preferences at any time using the permanent privacy control in the footer. Earlier refusals remain in effect until you change them.
International processing
- Providers may process information outside your country. Locations depend on the provider and the service configuration. Contact us for information about a specific processing activity.
Privacy complaints
- If you believe we have breached the Australian Privacy Principles or mishandled your personal information, contact us at itsmongapp@gmail.com with details of the issue.
- We will acknowledge privacy complaints within a reasonable time, investigate them, and respond with the outcome or any practical steps we can take.
- If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).
Contact
- For privacy, deletion, or data access requests, contact: itsmongapp@gmail.com
- Please include the email address tied to your account so we can verify and handle the request.