Mondro for Mac (beta)

Privacy policy

Effective October 22, 2026. Version 4. Applies to Mondro for Mac and to the Mondro website and waitlist.

The short version

  • Your chats, files and memory stay on your Mac unless you connect another computer's AI or turn on a tool that reaches the internet. We cannot see them.
  • There is no account, no sign-in and no subscription.
  • The version that comes after this beta sends no report. It asks our update server whether there is a newer version, and that server sees your Mac's internet address.
  • In the beta, you choose whether the app sends us one small report a day, made of counts, version numbers and a few plain facts about your Mac and how the app ran. It is off until you choose. You can read every report on your Mac.

1. Who we are

Mondro Inc. ("Mondro", "we") makes Mondro for Mac. Our privacy contact is our Privacy Officer at Mondro Inc.: support@mondrosystems.com. Ask and we will tell you their name.

2. What stays on your Mac

Your chats are answered on your Mac, unless you connect another computer's AI (section 6), and we keep no cloud copy. Your notes, files, household map and memory are plain files in the Mondro folder on your Mac. We cannot open them. Everything the app stores for you is a file you can open, copy or delete in two folders: the Mondro folder in your home folder, and the Mondro folder in Library > Application Support. The exceptions are tokens for tool servers, which are in the macOS Keychain, and three small folders named com.mondrosystems.mondro, in Library > Application Support, Library > Caches and Library > WebKit. They hold the window's size and position, the look, the zoom, the household member last picked and a web cache.

3. What we collect

In the version of Mondro for Mac that comes after this beta: no report. The app has no reporter and no analytics. Its update check (section 6) is its only request to a server we run.

In the beta: one report a day, only if you choose Send a Daily Report. You can also choose to keep reports on your Mac, or to have no report at all. Nothing is written or sent before you answer, and a report written before you chose Send is never sent. The beta reporter is in the beta build only. When the server receives a report, it also records the time it arrived. Apart from that, the whole report is this list and nothing else:

  1. A random identifier for this install, made on your Mac when you first choose Send a Daily Report or Keep Reports on This Mac. If you used an earlier beta, you already have one, and it is kept. It is not an account, an email address or a hardware serial number.
  2. The app version.
  3. The macOS version.
  4. The chip generation, such as Apple M2. Never the Pro, Max or Ultra tier.
  5. The memory tier: 8, 16 or 32 GB. Never the exact amount.
  6. How many of the last 30 days you opened the app.
  7. How many chats you touched that day.
  8. Of those, how many used a staff member. Never which one.
  9. How many tool calls you approved.
  10. How many tool calls you declined.
  11. Which screens you opened, by their built-in names. Names you typed cannot appear.
  12. The model family in use: llama, qwen, gemma, hermes, gpt-oss or other. Never the file name or path.
  13. Which parts of the app failed that day, by name from a fixed list. Never the error message.
  14. How long the AI took to start, in milliseconds.

A report never holds any message text, file names, file contents, memory contents, staff instructions, your house map, names or addresses of devices on your network, Wi-Fi names, internet protocol addresses, your name, or anything from your Mondro folder.

Downloads. Our update server counts how many times each version of Mondro, and each update, is downloaded. The count is a total. It does not keep your internet address, and it does not count update checks.

On the website and waitlist: if you join the waitlist, we collect the email address you give us and any answers you choose to give on the sign-up form. We use them to write to you about Mondro. We send nothing you did not ask for, and you can ask us to remove you at any time.

4. Where the beta report goes, and for how long

If you chose Send a Daily Report: each report is first written as a plain text file in the Beta folder inside your Mondro folder. The Network page in the Workshop lists every report on this Mac, newest first. Press Refresh to see today's report grow. A report is sent once, after the day it describes has ended (the report for March 31, 2027, the last day, is not sent), to a Mondro function on Amazon Web Services (AWS) in Ohio, in the United States. If a send fails, the app tries once more the next time you open it. After that, the report stays on your Mac. The request has no cookies, no account and no password. Like any website, the server can see the internet address a request comes from. Our code does not read that address and does not store it with the report.

We keep each report for 90 days. After that, it is folded into daily totals across all testers and deleted. A daily total holds no install identifier. On a day when only a few testers send a report, a total can be close to one tester's report.

5. Who sees it

People at Mondro who work on the app. We may share totals with our advisers and investors, for example how many testers were active in a week. Totals hold no install identifier. We do not sell reports and we do not give them to advertisers or analytics companies. Our service providers are Amazon Web Services, which hosts the beta report function, and Shopify, which hosts the website and waitlist.

6. Other times Mondro connects to the internet

Apart from the beta report, the app connects to the internet only when:

  • you ask it to download a model, which comes straight from the company that hosts it;
  • you press Search in the model search box, which searches the model host;
  • it checks for a newer version of Mondro: one minute after it opens, then every 6 hours (in the beta, every hour, and when its window comes to the front if the last check is an hour old). It asks our update server for one small file, and that server sees your Mac's internet address, as any website does. Mondro sends nothing about your chats or your household with it. When there is a newer version, the app downloads it, and installs it only when you say so. Workshop > Settings > Updates shows the address and turns off the automatic check. Check for Updates still checks when you choose it;
  • you turn on a tool. A tool reaches its own service, and Mondro cannot see where a tool that runs as a program connects. The Tools page shows the program or address each one uses;
  • you connect another computer's AI. Your chats, and anything you ask the AI to do, such as filing or tidying memory, go to that computer. So do the routines you schedule, even when they run while you are away.

If you use another computer's AI, Describe on a staff card sends each picture to that computer.

Every request the app itself makes to another computer or service, including each one to another computer's AI, is listed on the Network page in the Workshop while the app is open, with its address. A few things show differently or not at all:

  • A model download is listed when it finishes or stops, not while it runs.
  • Scan My Network is one line for the whole scan. The scan pings each address on your home network and asks the devices there for their names.
  • Requests to the AI on this Mac stay on this Mac, so they are not listed.
  • Links you open in your browser, the bug-report email Mondro drafts for you to send, and the Room Scanner page in the App Store are opened by your browser or Mail, not by Mondro, so they are not listed.
  • A tool that runs as a program on your Mac is not listed, and Mondro cannot see where it connects. The Tools page shows the program it runs.

On your home network. If you turn on Share the AI on my home network, other devices on your home network can use the AI on your Mac with the key shown in Workshop > Network. Their requests and the answers cross your network without encryption, and the Network page does not list their requests. Scan My Network, in Household > Devices, asks the devices on your own network for their names; nothing from the scan leaves your network.

7. Your choices

  • Read every beta report on this Mac, including today's, on the Network page. Press Refresh to see today's report grow.
  • To stop the beta report, choose Keep Reports on This Mac or No Thanks on the Network page. The version that comes after this beta sends no report.
  • To delete the stored reports for your install: email us your install identifier (it is in every report file). We will delete them within 30 days.
  • Changing your answer stops new reports; it does not delete reports we already have. Write to us for that.
  • To leave the waitlist, or have your email removed: write to us.
  • Delete what the app stored on your Mac by deleting the five folders named in section 2. Tokens for tool servers are in the macOS Keychain: "Remove and Forget Token" on a tool's card removes its token, and you can also remove them in Keychain Access, where each is named "Mondro:" followed by the tool's name.

8. Where data is kept

Beta reports are stored in the United States (Ohio). Waitlist data is held by Shopify. The beta is offered in Canada and the United States only.

9. Children

Mondro is not made for children, and we do not knowingly collect information from them. The beta is for adults.

10. Changes

If we change this policy, we post the new version with its date. If a change affects what the beta report holds, the app shows a notice before the next report is sent.

Versions.

  • Version 4, October 22, 2026: our update server counts downloads of each version and each update, as totals (section 3).
  • Version 3, October 22, 2026: the beta report became your choice, off until you choose.
  • Version 2, October 13, 2026: two items in the list of what a beta report never holds were reworded; section 6 says where Describe sends pictures, what goes to another computer's AI (including the routines you schedule), when the update check runs and what the Network page lists; and a new paragraph covers sharing the AI on your home network.
  • Version 1, October 7, 2026: the first version.

11. Contact

support@mondrosystems.com