Privacy questions

The ones parents and users ask most. If yours isn't here, email al@panda.associates.

If you're a parent

Where is my child's data actually stored?: In a database hosted by Render in Frankfurt, Germany, encrypted on disk. What's in it: their email, whether they said they're under or over 18, and their conversations with Mojo. No name, no date of birth, no school.
Can I see what my child has written?: No. There's no parent view and we won't send you their conversations. Mojo works because young people can think out loud in it without an audience. If you're worried about their wellbeing, the safety page explains what Mojo does when someone seems to be struggling.
Can I have their data deleted?: They can do it themselves in a few taps (Your record → Manage my data → Delete all my data). If you'd rather we did it, email us from an address we can match to the account, or ask them to email us, and it's done.
Is what they type used to train AI?: No. Anthropic's terms for business customers say they may not train on it. We don't train anything. We re-read Anthropic's terms and put the date on the privacy page so you can see when we last checked.
Can Anthropic staff read the conversations?: They hold what's sent for up to 30 days and then delete it. In that window, and for up to two years if their safety systems flag a conversation, Anthropic could look at it under their own rules. We can't see inside Anthropic, so we won't claim they never do.
Could a company use this to advertise to my child?: There's no path for it. Mojo has no advertising code, no analytics trackers, and none of the four companies that handle the data is allowed to use it for anything but the job we pay them for. We've also committed, on the privacy page, never to sell data or share it with advertisers, and not to hand it over if Mojo changes hands.
What if there's a data breach?: The most valuable thing an attacker would get is a list of email addresses; there are no passwords (sign-in is by emailed code), no names and no payment details. If it happened we'd email every affected account as soon as we knew, and report it to the ICO within 72 hours as the law requires.
My child is under 16 and has an account.: Email us and we'll delete it. Mojo is for 16 and over; we take people's word on age, so this can happen.
Who is behind Mojo?: One person — Alastair Lee, a product strategist in Bath — through his company, Panda Associates Ltd. You can email him directly at al@panda.associates.

If you use Mojo

Can my parents see my chats?: No. Not now, and not through any parent feature — there isn't one.
Does a person read what I write?: No. The only human who could is the person who runs Mojo, and he doesn't. If we ever wanted to read conversations to make Mojo better we'd ask you first, and no is a fine answer. The one thing we do see is feedback you send us — including the screenshot, if you attach one.
What does the AI actually get?: Your conversation, and whether you're under 18 — so it knows to be careful. Not your email. Not your name, because we never asked for it. It also gets the search terms Mojo writes when it looks a job up.
If I delete everything, is it really gone?: From the live database, instantly. Render keeps backups for seven days in case of a disaster, then those go too. Anthropic deletes its copy within 30 days. After that it doesn't exist anywhere.
Can I get a copy of my data?: Yes. Email us and we'll send everything we hold about you within a month — usually days.
Does Mojo track me around the web?: No. There are no tracking cookies, no analytics scripts, nothing that follows you to other sites. Mojo's own cookies only keep you signed in and remember where you were.