Privacy Policy

1. Who we are

Mona is an AI conversation partner for practising languages (the "Service"). The Service is operated by Pragmati Networks LTD, Ramat Gan, Israel ("Mona", "we", "us"). We are the controller of the personal data described here.

This policy explains what we collect when you visit or use the Service, why, who we share it with, and the choices you have.

2. Data we collect

Some learning data is also kept in your browser's local storage (IndexedDB) so the app works quickly and offline, and is synced to your account when you are signed in.

3. How we use it

We do not sell your personal data. We do not use your conversations to train our own AI models. We do not make decisions about you that have legal or similarly significant effects using automated means alone.

4. AI processing and who we share data with

Mona's replies, corrections, translations and voice are generated by third-party AI models. To produce them, your messages, transcripts, voice audio and the relevant context (target language, level, topic, earlier turns) are sent to the AI provider we use at that time. We may switch between these providers. Under their API terms they process the data to return a response and, by default, do not use it to train their models; they may keep it briefly for abuse monitoring.

We may also disclose data if required by law, to protect our rights or users' safety, or to a buyer or successor if the business is sold or reorganised.

5. Cookies and similar technologies

When ad tags are switched on, a banner asks whether you agree to ad cookies. Meta and Google tags load only if you agree. If you decline, nothing is sent to Meta or Google, and our own first-party counting continues.

You can change your choice at any time by clearing Mona's cookies in your browser, which brings the banner back.

6. Retention, security and international transfers

Retention. We keep account and learning data while your account is open. You can delete your account at any time in Settings. We then delete it within 30 days, except what we must keep for tax, accounting or legal claims (subscription and invoice records, typically 7 years). Usage and event data is kept for up to 25 months. Our AI providers keep request data only for the short periods their API terms allow.

Security. Data is encrypted in transit (HTTPS) and stored with Supabase, with access rules that limit each learner to their own records. A small number of authorised Mona administrators can view learner records to provide support and run the Service. No system is perfectly secure, and we cannot guarantee absolute security.

International transfers. We are based in Israel, and our providers process data in the United States, the EU and other countries. Where EU or UK law requires it, transfers rely on adequacy decisions (Israel has one from the European Commission) or Standard Contractual Clauses in our providers' data processing terms.

7. Your rights, children, changes and contact

Your rights. Depending on where you live, you can ask to access, correct, delete or export your data, object to or restrict some processing, and withdraw consent at any time without affecting earlier processing. California residents can ask what we collect and request deletion; we do not sell or "share" data for cross-context behavioural advertising without your cookie consent. Contact us and we will reply within 30 days. You may also complain to your local data protection authority, or in Israel to the Privacy Protection Authority.

Children. Mona is not directed at children under 16. We do not knowingly collect data from them, and we will delete it if we learn we have. Users aged 16 to 18 should use Mona with a parent or guardian's permission.

Changes. We will post updates here and change the "last updated" date. If a change materially affects how we use your data, we will tell you in the app or by email before it takes effect.

Contact. Pragmati Networks LTD, Ramat Gan, Israel.