Privacy Policy

Last updated: September 28, 2026

Before using screen analysis: when you tap the guide, the visible screen image is sent to MondoCue’s server and an AI provider to produce your requested translation and guidance. During an explicitly enabled iOS live session, changed portions of the selected screen area are sent automatically until you stop or the session ends. Do not analyze pages containing information you do not want processed.

Information we process

• Screen images and requests: the screen image you choose to analyze, your selected response language, and an optional question are processed to return an explanation. The app server does not retain screen images after the request finishes. The AI provider processes the image under its own terms and retention settings. When you use the iOS Shortcut, MondoCue also saves a compressed screenshot and its guide in a protected temporary app-group cache so the app can display the result. The app removes these files when the guide is opened; otherwise, it treats the handoff as expired after 10 minutes and removes the files the next time you open the app or run the Shortcut after confirming. iOS does not run the cleanup continuously while MondoCue is closed.
• iOS live screen assistant (preview): after you accept the in-app disclosure and start the system screen broadcast, MondoCue uses on-device text recognition to detect stable changes in the selected top or bottom half of the screen. That cropped area is sent to our server and AI provider for analysis. Visible notifications and private information in the selected area may be included. Audio is ignored, and the live extension does not save captured images to disk. The translation result is temporarily shared with the floating guide through a protected, session-specific app-group cache. Normal stop and next app initialization clear that cache; abrupt termination may leave it until you next open the app. Expired sessions are not resumed. Sessions end after 15 minutes or at most 20 analysis attempts, and account limits also apply. Returning to MondoCue pauses capture. Stop the session or the system broadcast before opening sensitive screens.
• Feedback: comments and an optional contact email are sent to the configured MondoCue feedback inbox through Resend. The email address is used as the reply address when provided. MondoCue does not store feedback submissions in its account database; Resend processes the email for delivery under its own terms.
• Account and sign-in: account identifiers, email address (if you sign in with email), hashed authentication credentials, and account recovery data.
• Purchases: product, transaction or subscription identifiers, purchase status, and access expiry. Creem processes web checkout details for direct Android downloads. Apple or Google processes purchases made through its store.
• Service operation: daily explanation counts, limited abuse-prevention information, and technical logs needed to keep the service reliable.

AI providers and transfers

Depending on the service region and current configuration, screen images may be sent to OpenAI, Google, DeepSeek, or Alibaba Cloud to generate a response. The selected provider receives the image and prompt. We do not use screen images to build a user profile. Provider handling, storage, and cross-border processing are governed by that provider’s terms and settings. We will identify the active providers and service region in the app before public launch.

Payments

For the direct-download Android version, checkout is hosted by Creem in a secure browser tab. MondoCue does not receive or store full card numbers. In-app purchase builds use Apple or Google billing and follow their purchase and refund processes. We receive transaction data needed to verify payment, prevent duplicate grants, and provide access.

Retention and deletion

You can request account deletion in the app. Account email, sign-in and recovery credentials, sessions, and usage records are scrubbed after deletion; transaction records may remain as pseudonymous records to prevent duplicate grants and support refunds or accounting. Inactive accounts are scrubbed after 90 days from the end of their last paid access by default. Applicable accounting and payment rules may require some records to be retained longer. Screenshots are not stored by the app server.

Security

Authentication secrets are stored in protected device storage and hashed on our server. Payment and AI provider credentials stay on the server. No internet service can promise perfect security; contact support promptly if you suspect unauthorized access.

Your choices

You decide when to capture a screen, which response language to use, and whether to continue after reviewing sensitive content. You can revoke Android accessibility access, stop an iOS live session in MondoCue or through the system screen-broadcast control, or delete your account in the app. You may also contact us about data access or deletion requests.

Contact

For privacy questions, data access, or deletion requests, email support@mondocue.com.

This policy is being prepared for the public beta and should be reviewed against the final service configuration and applicable market requirements before paid launch.