Privacy Policy
Mundi lets you talk to people around the world in your own language, and to Bouba, an AI you can talk to about anything. This policy explains what we collect, why, who helps us run Mundi, how long we keep things, and your rights. We've tried to write it plainly.
Who we are
Mundi is run by Christopher Inegbedion, an individual based in the United Kingdom, who is the "controller" of your personal data under UK data protection law (the UK GDPR and the Data Protection Act 2018). "We", "us" and "our" mean Mundi and its operator.
Contact: privacy@mundi.chat
Who Mundi is for
Mundi is only for people aged 18 or over. We don't knowingly collect data from anyone younger. If you think someone under 18 is using Mundi, tell us at privacy@mundi.chat and we'll close the account.
What we collect
When you sign up and set up your profile
- Your email address, and whether you've verified it.
- Your first and last name. These are never shown to anyone else.
- Your username, which is the only name other people see.
- Your language, your interests and your bouba (the character that represents you).
- Your country, taken from your phone's region setting. We don't collect your precise location.
About your phone
- A random device identifier that the app creates and keeps on your phone. It isn't your phone number or Apple's advertising identifier. We use it to keep you signed in, to apply safety bans, and to stop abuse such as mass sign-ups.
- Your network (IP) address. We keep the address your account last connected from, to keep Mundi safe (for example, spotting someone getting around a ban or making accounts in bulk) and to limit abuse. Our analytics provider also receives it with usage events and uses it to estimate your approximate location (country and city), so we can see where Mundi is used.
- Your app version and iOS version, with our analytics (below).
When you talk
- Your voice, while you're in a conversation. To translate what you say and let the other person hear it in their language, your voice is streamed live to services that turn it into text, translate it and speak it. When you talk to Bouba, your voice is streamed to the AI service that runs Bouba. We don't record or store your voice, or transcripts of your conversations.
- Your voice "match". So that people hear the translation in a voice like yours, a short sample of your voice is turned into a voiceprint on your phone and matched to the closest of a library of stock voices. The voiceprint never leaves your phone; only the name of the matched stock voice is sent. Your voice is not cloned.
- Who you've talked to. For each one-to-one chat we keep who it was with, their country and language, and when. This lets your passport show the countries and languages you've talked with, and helps us investigate safety reports. Who it was is never shown to you or anyone else.
- Messages you type in a chat are passed to the other person (translated). We don't keep them.
Safety
To keep Mundi safe, an automated safety system reads the text of what's said in conversations as it happens, and checks custom interests you add to your profile. If something appears to break our rules, we keep a record of it: the words that were flagged, a few lines of the conversation around them, the decision, and who said it. These records are seen only by us, for safety, and may lead to a warning, a chat being ended, or a temporary ban of your device.
How you use the app
We record events such as signing up, opening the app, which screens you visit, starting and ending a call, and how long calls last, so we can understand how Mundi is used, fix problems and plan improvements. These events never include what anyone said, your email or your name; you're identified by a random account number, with your approximate location worked out from your network address. We also record what each call costs us to run.
The web demo (mundi.chat/try)
You can try Bouba on our website without an account. To give each person one free try, and to protect the demo from overload and abuse, we set a cookie with a random id, keep a one-way scrambled version of your network address (it can't be turned back into the address), and record when your try started and how long it lasted. Your voice is handled exactly as in the app: streamed live to the AI service that runs Bouba, and not recorded or stored by us. If you join the waitlist we keep your email, when you joined, whether you confirmed it, and, if you came with a friend's invite link, which invite. We use your email only to confirm it and to tell you when Mundi launches. You can ask us to remove it at any time at privacy@mundi.chat. A friend's invite link works by a random code; we count a friend for you only once they've confirmed their own email.
Why we use your data, and our legal basis
- To provide Mundi: your account, matching you with people, translating conversations, Bouba, your passport. Legal basis: performing our contract with you (our Terms).
- To keep Mundi safe: moderating conversations, handling reports, banning people who break the rules, preventing abuse and fraud. Legal basis: our legitimate interests, and yours, in a safe service; and where required, legal obligations.
- To understand and improve Mundi: analytics and cost tracking. Legal basis: our legitimate interests in running and improving the service.
- To contact you: sign-in codes and important messages about your account or these documents. We don't send marketing. Legal basis: performing our contract.
Who helps us run Mundi
We don't sell your data or use it for advertising. We share it only with service providers who process it on our behalf, under contracts that limit what they can do with it:
| Provider | What they do | What they receive | Where |
|---|---|---|---|
| Hetzner | Hosts our server and database | Everything we keep | Germany (EU) |
| Deepgram | Turns speech into text; can speak translations | Your voice while talking; text to speak | United States |
| Groq and Cerebras | Translate what's said | The text of what's said | United States |
| ElevenLabs | Speaks translations in a voice like yours | The translated text | United States |
| OpenAI | Runs Bouba's voice and conversation | Your voice and what you say while talking to Bouba | United States |
| OpenRouter | Safety checks; Bouba's web searches | Conversation text being checked; search questions | United States |
| Resend | Sends sign-in codes | Your email address | United States |
| PostHog | App analytics | Usage events, your random account number and network address | EU |
Where data goes outside the UK, we rely on the protections UK law provides for international transfers, such as the UK–US Data Bridge or the UK's International Data Transfer Agreement or Addendum. Where a provider offers it, we switch off use of your data to train their models.
We may also share data if the law requires it, to protect someone's safety, or with a buyer if Mundi is ever sold (they'd be bound by this policy).
How long we keep things
- Your account and profile: until you delete your account.
- Who you've talked to: while your account exists (up to your last 1,000 chats).
- Sign-ins: a sign-in on a device ends after 90 days without use.
- The network address your account last used: 90 days.
- Web demo cookie, scrambled network address and try records: 13 months.
- Waitlist emails: until we've told you about the launch, or until you ask us to remove yours.
- Safety records: 12 months. A ban stays on a device for as long as it lasts.
- Usage events and cost records: 24 months.
- Backups: our database is backed up nightly; backups are kept for 14 days, so deleted data disappears from them within two weeks.
- Your voice and conversations: not kept by us at all.
Your rights
Under UK law you have the right to: access the personal data we hold about you; have it corrected; have it deleted; object to or ask us to restrict how we use it; and receive it in a portable form. You can delete your account at any time in the app (Passport → Settings → Delete account), which deletes your profile, history and sign-ins. For anything else, email privacy@mundi.chat; we'll reply within one month.
If you're unhappy with how we've handled your data, please tell us first. You can also complain to the UK Information Commissioner's Office (ico.org.uk).
Security
Connections to Mundi are encrypted. Sign-in keys are stored on our server only as one-way hashes, our server accepts only key-based administrator access, and access to personal data is limited to what's needed to run Mundi. No system is perfectly secure, but we work to protect your data and will tell you and the authorities if a breach puts you at risk.
Changes
We'll update this policy as Mundi changes. If a change is significant, we'll tell you in the app or by email before it takes effect. The date at the top shows when it last changed.