Mondai

Privacy Policy

Last updated: 2026-07-26

1. Who we are

Mondai is operated by Vychodil, based in the Czech Republic (EU). We build AI tools that help creators run their social media across Instagram, Facebook, Threads, TikTok, YouTube, Pinterest and LinkedIn. This policy explains what data we collect, why we collect it, who we share it with, and what you can do about it.

2. Data we collect

  • Account info: the email and name you provide at signup, and a hashed version of your password.
  • Onboarding answers: your niche, voice, visual style, and content pillar preferences.
  • Connected social accounts: when you connect a platform (Instagram, Facebook, Threads, TikTok, YouTube, Pinterest or LinkedIn), we store an OAuth access/refresh token plus basic account metadata — your username or channel name, profile details, and follower or subscriber counts.
  • Posts, videos and engagement: we fetch your recent posts and videos and their metadata (captions, media URLs, engagement metrics, comments and channel analytics) from the platforms you connect, so Mondai can learn your style, show you analytics, and help you reply to comments.
  • Photos you upload: the photos you put into the content library, plus AI-generated descriptions of those photos.
  • Drafts and published posts: the content Mondai creates with you, including AI confidence and reasoning metadata.

3. How we use your data

  • To run the Mondai service - generate recommendations, publish posts on your behalf, show you analytics.
  • To send your content to our AI provider (Anthropic Claude) so it can analyze your photos and write captions, titles and descriptions in your style.
  • To send your data to the official platform APIs (Meta, TikTok, Google/YouTube, Pinterest, LinkedIn) so we can read your history, show analytics, manage comments, and publish the drafts you approve.
  • To improve Mondai - understand which features work and where users get stuck.

We do not sell your data. We do not use your photos, captions, or any data obtained through connected-platform APIs to develop, improve, or train any generalized AI/ML model — we use it only to provide the features you asked for.

4. Platforms & third parties we work with

  • Anthropic - AI generation and image analysis; your data is not used to train Anthropic's models.
  • Meta (Instagram, Facebook, Threads) - reading your posts and publishing on your behalf, only after you authorize.
  • TikTok - reading your profile and videos and publishing on your behalf, only after you authorize.
  • Google (YouTube) - reading your channel, videos and analytics and publishing on your behalf, only after you authorize.
  • Pinterest - reading your boards and publishing pins on your behalf, only after you authorize.
  • LinkedIn - reading your profile and publishing on your behalf, only after you authorize.
  • Stripe - payment processing (when you upgrade to a paid plan).

5. Google API Services & YouTube

When you connect YouTube, Mondai uses YouTube API Services to read your channel, your videos and their metadata, and your channel analytics, and to publish videos and manage comments on your own channel at your request.

Mondai's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. YouTube data is used only to provide the features described above; it is never used for advertising and is never used to develop, improve, or train AI/ML models.

Your use of YouTube through Mondai is also subject to:

You can revoke Mondai's access to your Google and YouTube data at any time by disconnecting YouTube in Settings → Connected accounts, or through the Google Account security permissions page: myaccount.google.com/permissions.

6. Your rights

You can edit your profile, disconnect any connected platform, and delete your Mondai account from the Settings page. Disconnecting a platform deletes its stored OAuth tokens. Account deletion is permanent and removes all your data: drafts, photos, context profile, content pillars, and connected accounts.

7. Data location and security

Your data is stored in encrypted databases. OAuth tokens for connected accounts are stored server-side and never exposed in the browser. Passwords are hashed with bcrypt.

8. Contact

Questions about this policy? Email us at hello@heymondai.com.

← Back to home