Privacy Policy

Updated Date: August 17, 2026
Effective Date: August 17, 2026

MINDAI PTE. LTD.
MINDAI PTE. LTD. (hereinafter referred to as "we," "us," "our") has established this Privacy Policy to explain how we collect, use, disclose, and protect your information when you use our software-as-a-service products provided through www.macaron.im, our applications, and related services (collectively referred to as the "Services").
By using our Services, you acknowledge that you have read and agree to all terms of this Privacy Policy. If you do not agree to these terms, please immediately cease using or accessing our applications. We strongly recommend that you read this policy in detail before taking any action.
To optimize your user experience, we need to process your personal information. If you do not wish to have your personal information processed as described in this policy, or if you are under 18 years of age, please stop using our Services.
We primarily collect and use your information to:
Provide and improve our Services and user experience
Ensure the security and integrity of the platform
Fulfill our legal obligations
When necessary, we will share your information with trusted third parties and service providers to provide services, meet legal requirements, and achieve other purposes detailed later in this policy. Macaron is an AI assistant, and generating the responses and outputs you ask for involves sending some of your information to third-party AI providers. Section 3 explains what we send, why we send it, what we remove first, and how you give and withdraw your permission.

1. Information We Collect

We collect personal information that you provide to us, including basic information such as first name, last name, email address, password, account ID, nickname, birthday, gender, user content, file uploads, feedback, outputs, and communications you exchange with us.

If you purchase a subscription, the payment information needed to complete the transaction is collected and processed directly by our payment processors. We receive confirmation of the transaction and related billing records, but we do not collect or store your full payment card number.

The user content you provide includes the messages and prompts you send to Macaron, the files, images, and documents you upload, the audio you record when you use voice features, and the outputs Macaron generates for you (together, "Inputs and Outputs"). Inputs and Outputs are the categories of information most likely to be sent to a third-party AI provider, as described in Section 3.

We also automatically collect information, including application, browser, and device information (such as device type, operating system, browser information, IP address, and other device characteristics), service usage data (including activity information, diagnostic and troubleshooting information), and information from cookies and similar technologies.

During onboarding, if you choose to connect external apps or device permissions, we may collect permission results, such as whether you granted or denied a requested permission. This includes your choice about whether to allow processing by third-party AI providers, as described in Section 3.

Personal information does not include de-identified, anonymized, or aggregated information, and when data is de-identified or anonymized, we maintain it in that form and do not attempt to re-identify the information.

2. Health Connect and Health Data

Health Connect is an optional feature available only in the Global Android version of Macaron. You may complete onboarding and use the Services without connecting Health Connect. Macaron requests Health Connect access only after you take an action in the app to connect it or to obtain a response to a health-related chat request.

Macaron may request the following 22 Health Connect read permissions: READ_ACTIVE_CALORIES_BURNED, READ_BLOOD_GLUCOSE, READ_BLOOD_PRESSURE, READ_BODY_FAT, READ_BODY_TEMPERATURE, READ_DISTANCE, READ_EXERCISE, READ_FLOORS_CLIMBED, READ_HEART_RATE, READ_HEIGHT, READ_HYDRATION, READ_LEAN_BODY_MASS, READ_NUTRITION, READ_OXYGEN_SATURATION, READ_RESPIRATORY_RATE, READ_RESTING_HEART_RATE, READ_SLEEP, READ_SPEED, READ_STEPS, READ_VO2_MAX, READ_WEIGHT, and READ_WHEELCHAIR_PUSHES. We do not request READ_HEALTH_DATA_HISTORY.

Onboarding records only your choice about whether to connect Health Connect. Macaron accesses Health Connect data only when you ask for a health-related response in chat. We access only the permitted data types and time range needed for that request. Depending on your permissions and request, this can include activity and energy measurements, nutrition, hydration, heart and respiratory measurements, body measurements, sleep information, and exercise sessions. Health Connect data from before you granted access may be unavailable, so a response may be incomplete.

To generate the response you request, Macaron transmits the health-data result needed for that request, together with the related chat request, to Macaron services through encrypted connections. We use Health Connect data only to generate the health-related response you requested and to support the security, integrity, and required legal operations for that processing. We may disclose that data to service providers that process data for us to provide, secure, and support the Services. We require those providers to process the data only for the services they perform for us and as described in this Privacy Policy. Where generating your health-related response requires processing by a third-party AI provider, we send that provider only the health-data result and chat request needed for that response, with the identifiers described in Section 3.3 removed, and only after you have given the permission described in Section 3.4. We do not use Health Connect data for advertising, sell it, or disclose it to advertising platforms, data brokers, or information resellers. We also do not use it to make insurance, credit, employment, lending, or other eligibility decisions.

On your device, the health-data result is kept only in memory while Macaron prepares the current health-related request. It is not written to local databases, message drafts, analytics events, or diagnostic logs. Health-data results transmitted with a chat request may be retained with the associated chat and service records as described in Section 7.

You can revoke Macaron's Health Connect access at any time in Android Settings > Health Connect > App permissions. Revoking access stops future access to Health Connect data. You can also manage access from Macaron's Privacy Settings when Health Connect is available on your device.

3. AI Processing, Third-Party AI Providers, and Connected Apps

3.1 How Macaron generates responses

Macaron is an AI assistant. When you send a message, upload a file, record audio, or ask Macaron to complete a task, we process that content using AI models in order to produce the response, output, or action you asked for. Some of those models are operated by us. Others are operated by third-party AI providers, and generating your response requires us to send part of your information to them.

3.2 What we send to third-party AI providers, and why

Depending on the feature you use and the request you make, we may send a third-party AI provider:
the text of the message you send to Macaron;
the content of files, images, or documents you attach to that message;
the earlier messages in the same conversation that are needed for context;
the audio you record when you use voice input, where the feature you are using converts speech to text; and
the instructions Macaron adds to your request so that the provider can return a response in the form the feature requires.

We send this information for one purpose: to generate the response, output, or task result you asked for.

We name the third-party AI providers we use in the app, before we send your information to any of them for the first time, as described in Section 3.4. If we add or replace a provider, we will tell you in the app and, where the change affects what we send or why, ask you to confirm again.

3.3 What we remove before sending, and what we do not send at all

Before we transmit a request to a third-party AI provider, we take steps to remove the information that identifies you as the person who sent it. In particular, we do not send your Macaron account identity — your name, email address, account ID, or nickname — to any third-party AI provider. A provider receives the content needed to generate your response, but it does not receive from us the information that links that content to you or to your account.

We do not send your account password, payment card number, or government identification document to any third-party AI provider. We do not send your Inputs and Outputs to third-party AI providers for advertising purposes, and we do not sell them. We do not send information to a third-party AI provider before you have confirmed your agreement as described in Section 3.4.

Please note that we can only remove the identifiers we add. We cannot remove personal information that you yourself write into a message or include in a file you upload, because that content is what the provider needs in order to answer you. Please do not include information you would not want processed by a third-party AI provider, such as payment card numbers, government identification numbers, or account credentials. Macaron does not need that information to answer you.

This applies to other people's information as well as your own. Only upload or submit content that you have the rights and permissions to share, and consider whether it contains information about other people before you send it.

3.4 Your permission, and what happens if you do not agree

Before we send your information to a third-party AI provider for the first time, we tell you in the app which providers we use and what will be sent, and we ask you to confirm that you agree. We do not send anything to a third-party AI provider until you have confirmed. We ask for this confirmation so that you know who receives your information before anything is sent; the legal basis on which we carry out this processing is set out in the table in Section 4.

Macaron cannot generate the responses you ask for without these providers, so there is no way to continue using Macaron while refusing this processing. If you do not agree, or if you later change your mind, you can delete your account at any time in Settings > Delete account. We will then handle your information as described in Sections 7 and 8.

3.5 What we require of third-party AI providers

We engage each third-party AI provider under a written agreement. Those agreements require the provider to:
process the information we send only to generate the output we have requested, and only on our instructions;
maintain confidentiality, security, and data-protection safeguards that are the same as, or equivalent to, the protections described in this Privacy Policy;
refrain from selling the information or using it for advertising; and
retain the information only for the period we have agreed with that provider, and delete or return it in accordance with our instructions.

These are requirements we impose by contract. Each third-party AI provider is an independent company and not our agent. It processes information on its own systems, which we do not operate, access, or monitor, and its handling of your information is also governed by its own terms and privacy policy. Except as applicable law requires of us, we are not responsible for a third-party AI provider's own acts or omissions. If you would like to understand how a particular provider operates, we encourage you to read its published terms.

Third-party AI providers may retain the information we send for a limited period in order to deliver the output, monitor for abuse, and meet their own legal obligations.

3.6 Accuracy and limitations of AI outputs

AI models generate responses by predicting likely content, and their outputs may be inaccurate or incomplete. You should not rely on Macaron's outputs as a substitute for professional advice, including medical, legal, or financial advice. If an output contains inaccurate personal information about you, you may ask us to correct or remove it as described in Section 11.

Some Macaron features are designed to carry out tasks for you. Please take care when using them. Macaron can make mistakes, including sharing your information in ways you did not intend, so supervise these tasks and interrupt them if something looks wrong.

3.7 Connected apps

Some Macaron features let you connect your own accounts with other services. When you connect an account, you authorize that service to share specified information with Macaron, and you authorize Macaron to act within that service on your behalf. Before you connect, we show you what Macaron will be able to do, and what Macaron can access is limited to the permissions you grant at that point and to what your own account in that service is permitted to see.

Information we receive from a connected app is handled as described in this Privacy Policy. Where answering your request requires it, that information may be sent to a third-party AI provider on the same basis as the rest of your Inputs, as described in Sections 3.2 to 3.5. The other service's own handling of your information continues to be governed by its own privacy policy and terms, which we do not control.

You can disconnect a connected app at any time in Macaron's Settings, and you can also revoke Macaron's access from that service's own security settings. Disconnecting stops future access; information already received is handled as described in Section 7.

4. How We Use Your Information

We use your personal information primarily for the following purposes: delivering services, personalizing experiences, operational management, improving services, creating and developing new features, while ensuring you receive a secure, smooth, efficient, and customized experience. Additionally, we also use your information based on legal compliance needs and loss prevention. Rest assured, your account password is only used to create and maintain your account and to provide you with services.

We use your basic information to create and maintain your account, which is necessary for fulfilling our contract with you.

To provide you with services, we use your basic information, communication content, application information, browser and device information, service usage data, and other information you submit to us, which is also necessary for fulfilling our contract with you. This includes transmitting your Inputs to us and, where you have given the permission described in Section 3.4, to third-party AI providers, and returning the resulting Outputs to you.

When providing customer support, we use your basic information, communication content, service usage data (including location information), application information, browser and device information. We rely on legitimate interests to process this information, particularly the interest in ensuring you can optimally use the Services. In the European Economic Area and the United Kingdom, you have the right to object to and request restriction of such processing (i.e., "legitimate interest" processing).

When sending service-related communications, we use your basic information, communication content, application information, browser and device information, service usage data, and other information you submit, which is necessary for fulfilling the contract and also based on the legitimate interest of ensuring you can optimally use the Services.

To facilitate the security, integrity, and protection of the Services, we process your basic information, communication content, application information, browser and device information, service usage data, and other information you submit, based on the legitimate interest of maintaining effective operation and delivery of the Services.

To comply with legal and regulatory obligations, we use your basic information, communication content, application information, browser and device information, service usage data, and other information you submit, based on the legitimate interest of complying with laws in the jurisdictions where we operate, responding to requests, and fulfilling corporate responsibilities.

To customize your service experience and improve our Services, we process your basic information, communication content, application information, browser and device information, service usage data, permission results, and other information you submit, based on the legitimate interest of understanding how users interact with the Services to customize and improve products, and to ensure reports are accurate and reliable.

To promote the safety and integrity of the Services, network, users, employees, and the public, we use your basic information, communication content, application information, browser and device information, and service usage data, based on the legitimate interest of preventing fraud, unauthorized use, violations, protecting the safety of all parties, resolving disputes, verifying accounts, combating harmful behavior, and preventing harm.

For research and innovation purposes, we use your basic information, communication content, and service usage data, based on the legitimate interest of improving and iterating the Services through user feedback.

Using your content to develop and improve our models. We use content submitted to the Services, including your Inputs and the Outputs generated for you, to develop, train, and improve the AI models that power Macaron. Before content is used for this purpose, we take steps to remove information that identifies you, and we do not use it to build a profile of you or to make decisions about you individually. You can object to this use, or withdraw it where we rely on your consent, as described in Section 11.

We do not use Health Connect data, or the health information you provide in a health-related request, to develop or train our models. Section 2 describes the narrower basis on which that data is handled.

Where you tell us not to use your content for this purpose, we will stop using it to train our models. We will still use content that you submit as feedback, and content that has been flagged for safety review, so that we can detect harmful content, enforce our policies, and improve the safety of the Services.

Once content has been used to train a model, the training is not reversible. If you later delete that content or your account, we will remove it from our systems as described in Sections 7 and 8, but we cannot remove the effect it has already had on a model that has been trained.

Some of the content submitted to the Services is reviewed by automated systems and, where necessary for the purposes described above, by trained personnel, including personnel of the service providers who work for us. Please do not enter information you would not want a reviewer to see, or that you would not want us to use to improve the Services and the machine-learning technologies that power them.

Where data protection law requires us to identify a legal basis for processing your personal information, the following table summarizes the bases we rely on.
Purpose: Creating and maintaining your account, and providing the Services
Categories of information: Basic information; Inputs and Outputs; application, browser, and device information; service usage data
Legal basis: Performance of our contract with you

Purpose: Sending your Inputs to third-party AI providers to generate the responses you request
Categories of information: Inputs and Outputs, and the context and instructions needed to process them
Legal basis: Performance of our contract with you. Generating the responses you request is the service we provide, and it cannot be delivered without these providers. We separately ask you to confirm this processing in the app before it begins.

Purpose: Processing Health Connect data to answer a health-related request
Categories of information: The health data described in Section 2
Legal basis: Your consent

Purpose: Accessing information from a connected app
Categories of information: The information you authorize that service to share
Legal basis: Your consent, given at the time you connect the account

Purpose: Providing customer support and sending service-related communications
Categories of information: Basic information; communication content; application, browser, and device information; service usage data
Legal basis: Performance of our contract; our legitimate interest in ensuring you can use the Services effectively

Purpose: Protecting the security and integrity of the Services and preventing fraud and abuse
Categories of information: Basic information; communication content; application, browser, and device information; service usage data
Legal basis: Our legitimate interest in protecting the Services, our users, our personnel, and the public

Purpose: Improving, customizing, and developing the Services
Categories of information: Basic information; communication content; application, browser, and device information; service usage data; permission results
Legal basis: Our legitimate interest in understanding how the Services are used and improving them

Purpose: Developing, training, and improving the AI models that power the Services
Categories of information: Inputs and Outputs, with identifying information removed; service usage data
Legal basis: Our legitimate interest in developing and improving the models that deliver the Services, subject to your right to object under Section 11

Purpose: Complying with legal and regulatory obligations
Categories of information: Any category relevant in the circumstances
Legal basis: Compliance with a legal obligation to which we are subject

Where we rely on your consent, you may withdraw it at any time as described in Section 11. Where we rely on our legitimate interests, you may object to that processing as described in Section 11.

5. How and Why We Share Your Information

We commit not to sell or share your personal information with third parties for targeted advertising purposes. Additionally, we have never sold or shared personal information of individuals under 16 years of age for targeted advertising purposes.

Before we share your personal information with any third party described in this Section 5, we require the third party, by written agreement, to provide protections for your information that are the same as, or equivalent to, the protections described in this Privacy Policy, and to process your information only for the purposes we specify. We do not control how a third party operates internally, and its handling of your information is also governed by its own terms and privacy policy.

To provide the Services, we may need to share necessary information with the following categories of third parties:
Third-Party AI Providers: Disclosure of your Inputs, and of the context and instructions needed to process them, to third-party AI providers, so that they can generate the responses and outputs you request. Section 3 describes what we send, why we send it, what we remove before sending, how you give and withdraw your permission, and the requirements we place on those providers.
Service Supporters: Disclosure of necessary personal information to third-party service providers who assist in providing the Services.
Our service supporters include Mixpanel, a data analytics platform that helps us understand how users interact with our services, optimize user experience, and improve our product features. Mixpanel does not store any chat data you provided; it only stores event data, such as the number of "Clicks on New task."
Health Connect data is disclosed only as described in Section 2: to Macaron services, to a third-party AI provider where generating the health-related response you requested requires it, and to service providers that need it to provide, secure, and support that processing. Mixpanel does not receive Health Connect data.
User-Initiated Sharing: When you use active sharing features such as conversation links, the information recipients will depend on whom you choose to share with. Please note that once you share information in this way, it can be seen, collected, and used by others, including being cached, copied, screen captured, or stored elsewhere by them or by search engines. We cannot retrieve information that has been shared in this way, and we are not responsible for any such use of it.
Legal Compliance Scenarios: Sharing information with advisors, regulatory bodies, or government agencies in the following situations:
Responding to legal and regulatory requirements, court orders, or government requests
Fulfilling statutory obligations and regulatory requirements
Investigating and preventing fraud and security issues
Protecting the rights and personal safety of all parties
Corporate Account Association: If you register using a corporate email, we may share account existence and basic information (such as email address) with that organization to allow corporate administrators to manage account permissions.
Group Internal Collaboration: Based on service efficiency requirements, information may be shared among affiliated companies or group members.
Asset Transaction Scenarios: During company mergers, acquisitions, reorganizations, bankruptcy, or other changes in control, your information may be transferred as a transaction asset.
Disclosure at Your Request: When you explicitly instruct or contractually stipulate disclosure.

Please note: Our Services may include links to third-party websites (such as social media), whose privacy policies are independent of ours. Please be aware that when you leave Macaron Services for other websites or use other services, even if accessed through links provided by Macaron, we cannot and have no obligation to protect the personal information you provide on these third-party platforms.

6. Security

We have implemented a series of reasonable technical, administrative, and organizational measures aimed at comprehensively protecting the security of your personal information. These protective measures cover both online and offline environments, with the purpose of preventing the loss, misuse, unauthorized access, disclosure, alteration, or destruction of your personal information. Information sent from the Macaron app to our services, and from our services to third-party AI providers, is transmitted through encrypted connections. Any health data we retain is protected by these measures, including access controls that limit access to people and service providers who need it for the purposes described in this policy.

However, we must honestly point out that in today's digital world, no security system can provide absolute 100% protection. Therefore, when using our Services, you need to understand and accept this reality: despite our best efforts to protect your information, the risks associated with using our Services ultimately must be borne by you personally.

7. Data Retention

We retain your personal information only for as long as necessary to provide the Services, fulfill legal obligations, or protect relevant rights. We consider factors such as when the information was collected, service requirements, legal requirements, and security factors to determine retention periods.

Your Inputs and Outputs are retained with the associated conversation and service records for as long as necessary to provide, secure, troubleshoot, and support the Services, comply with legal obligations, resolve disputes, and enforce our agreements. As described in Section 3.5, we require third-party AI providers to retain the information we send only for the period we have agreed with them; their own terms and privacy policies also apply to their handling of that information, and we do not control their internal practices.

Health Connect permission status is retained with your account profile for as long as your account is active or as long as needed to provide the related feature. Health-data results transmitted with a health-related chat request may be retained with the associated chat and service records for as long as necessary to provide, secure, troubleshoot, and support the Services, comply with legal obligations, resolve disputes, and enforce our agreements. We delete or de-identify those records when they are no longer needed, subject to the exceptions described below.

When information is no longer needed, when you delete your account, or when you request deletion, we will delete or de-identify the relevant information unless retention is required for legal, security, fraud prevention, dispute resolution, or compliance reasons. Backup copies may remain for a limited period before being deleted according to our backup lifecycle.

8. Data Deletion

You can request deletion of your account and associated data, including your conversations, Health Connect permission status, and Health Connect data that we retain with chat or service records, in the Macaron app by going to Settings > Delete account.

You can also request deletion by emailing contact@macaron.im with the email address or account ID associated with your Macaron account. We may verify your identity before processing the request. After verification, we will delete the associated account data unless retention is required for legal, security, fraud prevention, dispute resolution, or compliance reasons.

For public instructions on account and data deletion, please visit https://macaron.im/account-deletion.

9. Children's Personal Information

Our Services are designed for adults and not intended for children. We do not knowingly solicit or collect personal information from children. According to our Terms of Service, all users must be at least 18 years old to use our Services. If you discover that we have collected personal information from minors without guardian consent, please contact us immediately, and we will promptly delete the relevant data.

10. International Data Transfers

To support global business operations, we, our service providers, and the third-party AI providers described in Section 3 may transfer, store, and process your personal information worldwide (including in the European Union, United Kingdom, and United States). For residents of the European Union, Switzerland, or the United Kingdom, we strictly adhere to lawful data transfer mechanisms, such as the European Commission's Standard Contractual Clauses and relevant local regulations (such as the UK's International Data Transfer Addendum), ensuring your personal data receives appropriate protection during cross-border transfers.

11. How You Can Exercise Your Personal Rights

Depending on the laws in your region, you may have the following rights related to your personal information. Even if local laws do not explicitly provide for these rights, we may at our discretion offer you these choices.

Right to Access Information and Data Portability: You have the right to obtain a copy of your personal information that we hold, understand how we use and disclose your information, and how we have processed your data in the past. You can also request that we provide specific information in a standardized, commonly used machine-readable format and transfer it to you or a third party you designate.

Right to Deletion: You can request that we delete your personal information. After account termination, we will process or delete your related information according to our data retention policy.

Right to Correction: You can request that we update or correct personal information that you believe is incomplete or inaccurate.

Right to Restrict Processing and Object: You can limit or object to our use or transfer of your personal information based on legitimate interests, public interest, or direct marketing purposes. However, we may continue to process your information in situations permitted or required by law.

Right to Withdraw Consent: Where we process your information based on your consent — for example, Health Connect data, or information from an account you have connected — you can withdraw that consent at any time. Withdrawal will not affect the lawfulness of our processing of your information prior to your withdrawal. Processing by third-party AI providers is necessary to deliver the Services, as explained in Section 3.4 and the table in Section 4; if you no longer wish that processing to continue, you can delete your account in Settings > Delete account.

Right to Appeal: If we refuse your request, you can appeal our decision.

Right to Complain: You have the right to file a complaint with your local data protection authority.

You can submit requests by sending an email to contact@macaron.im. We will not discriminate against you for exercising your legal rights. To protect your privacy and security, we may verify your identity before processing your request, including asking for additional information. If we cannot verify your identity, we may refuse your request.

Under certain U.S. privacy laws, you can designate an authorized agent to make requests on your behalf. We will require the agent to provide proof of your authorization and may need you to directly confirm your identity.

Please note that the above rights are not absolute and may only apply in specific situations or may be reasonably refused.

12. Contact Us

MINDAI PTE. LTD., a company incorporated in Singapore with its registered office at 152 Beach Road, #11-05 Gateway East, Singapore 189721, is the entity responsible for the personal information described in this Privacy Policy.

If you have any questions or concerns about this Privacy Policy, if you wish to exercise any of the rights described in Section 11, or if you have a complaint, please contact us via contact@macaron.im. We treat that address as our contact point for all privacy matters.

13. Changes to This Privacy Policy

To continuously optimize our service quality, we may periodically update this Privacy Policy. All policy changes will be posted on this page, and significant changes will be communicated to you with reasonable notice as required by law. You can always check the date at the top of the page to see when the policy was last updated. We encourage you to review this policy regularly to stay informed about how we protect your personal information.

14. Additional Information for Users in Singapore

MINDAI PTE. LTD. is incorporated in Singapore and is the organisation responsible for the personal data described in this Privacy Policy for the purposes of the Personal Data Protection Act 2012 (the "PDPA").

Where a data breach occurs that is notifiable under the PDPA, we will notify the Personal Data Protection Commission and the affected individuals within the timeframes the PDPA requires.

Where we transfer personal data outside Singapore, including to the third-party AI providers described in Section 3, we take steps intended to ensure that the recipient is bound to provide a standard of protection comparable to that required under the PDPA.

You may contact us at contact@macaron.im with any question or complaint about your personal data. If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission.