Plain English
Privacy.
What Moonjar collects, where it lives, who else sees it, and what you can do about all of it. Last updated 10 May 2026.
The short version
Moonjar stores the things you save — documents, notes, photos, transcripts, chat history — in our primary database, with file attachments held in encrypted object storage. To make those things searchable and to power the assistant, parts of your content are sent to three third-party AI providers: Anthropic (Claude), Cohere, and OpenAI. We don't sell your data, we don't share it with advertisers, and you can request deletion of your account at any time.
What we collect
- Account information. Email, password hash, optional display name. Required to sign in and to keep your library private to you.
- Captured content. Anything you save: typed text, fetched articles, photos, PDFs, voice recordings, emails forwarded to your capture address. This is the data the app exists to hold.
- Derived metadata. The classifications and field extractions Moonjar produces from your captures (e.g. "this is an article by X published on Y").
- Chat history. Conversations with the assistant, including any tool calls it made and the documents it referenced.
- Memories. Short, structured facts the assistant extracts from chats so future conversations have context (e.g. "the user's son's name is Henry").
- Operational logs. Request timestamps, error traces, AI cost metrics. Retained 30 days, used to keep the service running.
Where it's stored
Primary database storage runs in Singapore, with file attachments held inline in the same database. Hourly backups are encrypted and retained for 30 days in off-site object storage in Sydney, Australia. All transit is over HTTPS. Nothing custom-cryptographic — Moonjar is exempt under U.S. export regulation as HTTPS-only.
Third-party AI providers
Moonjar uses three external AI services to provide its core features. The first time you launch the app, you'll be asked to consent to this data sharing; you can revoke consent at any time in Settings → Privacy. With consent revoked, AI-powered features stop; the rest of the app continues to work.
Anthropic — Claude
What it receives: the text and metadata of documents you capture (so they can be classified and field-extracted), your chat messages (so the assistant can respond), and a curated subset of your library matching the question being asked.
What it does with it: processes the request and returns a response. Anthropic has stated it does not use API traffic to train its models. Anthropic privacy policy.
Cohere — Embeddings
What it receives: the text of each captured document and the text of each search query.
What it does with it: generates a numerical embedding (1,536 dimensions) used by Moonjar's search. Cohere does not retain or train on API content under their standard terms. Cohere privacy policy.
OpenAI — Voice
What it receives: audio data when you dictate, and short text snippets when you ask the app to read something aloud.
What it does with it: transcribes audio to text via gpt-4o-transcribe; synthesises speech via gpt-4o-mini-tts. OpenAI does not train on API content by default. OpenAI privacy policy.
Retention and deletion
Your library is retained for as long as your account exists. Account deletion is available by request — email support@in.moonjar.io from the address registered to your account with the subject Delete my account. An in-app delete button is on the way; until it ships, the email path is how this works. When you delete your account, your documents, attachments, chats, memories, embeddings, and metadata are scheduled for hard-deletion within seven days. Operational logs containing your user ID are purged at the same time. Backups roll off within 30 days under standard rotation; we do not selectively re-restore deleted accounts from backup.
What we don't do
- We do not sell your data.
- We do not share it with advertisers, brokers, or analytics providers that link content to identity.
- We do not train any model — ours or anyone else's — on your captured content.
- We do not require any third-party social login. Moonjar uses email + password only.
Your rights
You can delete individual documents, individual chats, and all memories from inside the app. You can revoke consent for AI features. To delete your account in full, or to request a copy of your data, email support@in.moonjar.io. For formal GDPR or CCPA requests, the same address — we'll respond within 30 days.
Children
Moonjar is intended for users aged 13 and over. We do not knowingly collect data from children under 13. If you believe we have, contact us and we'll delete it.
Changes to this policy
If this policy changes materially, we'll notify active users in-app before the change takes effect. Smaller, non-material edits (typos, link updates) will simply be reflected here with a new last updated date.
Contact
For privacy questions, deletion requests, or anything else: support@in.moonjar.io.