Mosambe
What we collect, why, who it's shared with, and how to make it disappear.
This describes what the current build of Mosambe actually does — checked line by line against its source, not boilerplate. It's posted here for TestFlight review while it goes through legal review; it may be revised before general release.
Nothing leaves this conversation on its own.
An email, a booking, deleting your data — you approve every one, every time.
We don't sell it. We don't advertise on it. You can delete all of it, any time.
01 — Scope
This covers the Mosambe iOS app and the service behind it, from the moment you sign in — including during early TestFlight testing. Just browsing mosambe.com doesn't create an account; the only thing collected there is the email you type into the waitlist form, covered by the consent line under that form.
Only what the assistant actually needs.
Sign in with Apple.
A stable, anonymous account id and, only if you share it, your name. We never see your Apple password — only an email if you explicitly choose to share one.
What you tell Mosambe.
Your messages and its replies, kept so the conversation has memory from one message to the next.
What Mosambe remembers.
Facts and promises it picks up — "call the dentist by Friday" — each kept with your exact original wording, so you can see where it came from.
Google, if you connect it.
Calendar, Gmail, Tasks, Drive — read-only, plus sending mail once you approve each one. Tokens are encrypted at rest.
An activity record.
Which actions Mosambe took and whether you approved each — the trail behind "what has this thing actually done."
Your IP, a password, a card.
Not collected, not asked for. Nothing to breach because it was never there.
03 — How we use it
To hold up our end of the conversation — reading back what you've told Mosambe before, so you don't repeat yourself.
Occasionally, to message you first: a short nudge about something you asked it to track, sent at reasonable hours, never about something you've already waved off.
And, only once you say so: every action that reaches outside this conversation is held back and shown to you in full before it happens. Nothing executes on Mosambe's own judgment.
Deleting your account removes all of this immediately — not just going forward.
Conversation messages
180 days
Activity / audit log
90 days
Facts & commitments
Until you delete them, or your account
Google access token
Until you disconnect Google, or delete your account
Nothing here is hidden from you.
Google, any time.
Just ask Mosambe to disconnect it — revoked at Google, deleted on our side, immediately.
Everything, on request.
Ask Mosambe to delete your data, or write to privacy@mosambe.com. Your account and everything tied to it, gone right away.
What it knows.
The Memory tab shows every fact and commitment on file, in plain language, with its source.
07 — Security
Connected-service tokens are encrypted at rest (AES-256); everything moves over HTTPS. We never hold a password, card number, or another service's login on your behalf. No method of storage or transmission is perfectly secure, but we've built this to have as little worth stealing as possible.
08 — Children
Mosambe isn't directed at children under 13, and we don't knowingly collect information from them.
09 — Changes
We'll update the date at the top whenever this changes. If a change means Mosambe would use your data in a meaningfully different way, we'll tell you inside the app before it takes effect — not just here.