Plain English
Privacy.
What Moonjar collects, where it lives, who else sees it, and what you can do about all of it. Last updated 12 May 2026.
The short version
Moonjar stores the things you save — documents, notes, photos, transcripts, chat history — in our primary database, with file attachments held in encrypted object storage. To make those things searchable and to power the assistant, parts of your content are sent to three third-party AI providers: Fireworks, Cohere, and Gemini. We don't sell your data, we don't share it with advertisers, and you can request deletion of your account at any time.
What we collect
- Account information. Email, password hash, optional display name. Required to sign in and to keep your library private to you.
- Captured content. Anything you save: typed text, fetched articles, photos, PDFs, voice recordings, emails forwarded to your capture address. This is the data the app exists to hold.
- Derived metadata. The classifications and field extractions Moonjar produces from your captures (e.g. "this is an article by X published on Y").
- Chat history. Conversations with the assistant, including any tool calls it made and the documents it referenced.
- Memories. Short, structured facts the assistant extracts from chats so future conversations have context (e.g. "the user's son's name is Henry").
- Operational logs. Request timestamps, error traces, AI cost metrics. Retained 30 days, used to keep the service running.
Where it's stored
Primary database storage runs in Singapore, with file attachments held inline in the same database. Hourly backups are encrypted and retained for 30 days in off-site object storage in Sydney, Australia. All transit is over HTTPS. Nothing custom-cryptographic — Moonjar is exempt under U.S. export regulation as HTTPS-only.
Third-party AI providers
Moonjar uses three external AI services to provide its core features. The first time you launch the app, you'll be asked to consent to this data sharing on a screen that names each provider and the data it receives. Because Moonjar is AI-native — capture, classification, search, and chat all rely on these services — declining consent means not using the app. To revoke consent later, delete your account from Settings → Account → Delete account; your data is removed with it.
Fireworks — language model
What it receives: the text and metadata of documents you capture (so they can be classified and field-extracted), your chat messages (so the assistant can respond), and a curated subset of your library matching the question being asked.
What it does with it: processes the request and returns a response. Fireworks does not use API content to train its models and operates zero data retention by default. Fireworks privacy policy.
Cohere — Embeddings
What it receives: the text of each captured document and the text of each search query.
What it does with it: generates a numerical embedding (1,536 dimensions) used by Moonjar's search. Cohere does not retain or train on API content under their standard terms. Cohere privacy policy.
Gemini — Voice
What it receives: your speech during a voice conversation, and the assistant's text replies.
What it does with it: powers the hands-free voice conversation — transcribes what you say and generates spoken replies in real time via Gemini Live. On the paid Gemini API, Google treats inputs as confidential and does not use them to train its models. Gemini API terms.
Retention and deletion
Your library is retained for as long as your account exists. You can delete your account from inside the app at any time — go to Settings → Account → Delete account and confirm. If you can't sign in for any reason, email support@in.moonjar.io from the address registered to your account and we'll initiate deletion from our end. When you delete your account, your documents, attachments, chats, memories, embeddings, and metadata are scheduled for hard-deletion within seven days. Operational logs containing your user ID are purged at the same time. Backups roll off within 30 days under standard rotation; we do not selectively re-restore deleted accounts from backup.
What we don't do
- We do not sell your data.
- We do not share it with advertisers, brokers, or analytics providers that link content to identity.
- We do not train any model — ours or anyone else's — on your captured content.
- We do not require any third-party social login. Moonjar uses email + password only.
Your rights
You can delete individual documents, individual chats, and all memories from inside the app. You can revoke consent for AI features. To delete your account in full, or to request a copy of your data, email support@in.moonjar.io. For formal GDPR or CCPA requests, the same address — we'll respond within 30 days.
Children
Moonjar is intended for users aged 13 and over. We do not knowingly collect data from children under 13. If you believe we have, contact us and we'll delete it.
Changes to this policy
If this policy changes materially, we'll notify active users in-app before the change takes effect. Smaller, non-material edits (typos, link updates) will simply be reflected here with a new last updated date.
Contact
For privacy questions, deletion requests, or anything else: support@in.moonjar.io.