Privacy Policy

MokingBird Oy | Business ID: 3615646-1 | Finland

Last updated: April 2026 | Effective date: April 12, 2026

Introduction

MokingBird Oy ("MokingBird," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information across our website (mokingbird.xyz) and our products: MokingBird AI (including mbRAG, mbDataGen, and mbFT), MB Viewer, Sortify, Jogg, and Jogg Mini.

We operate under Finnish law and comply fully with the European Union General Data Protection Regulation (GDPR).

Our core commitment is simple: we do not sell your data. We do not run ads. We build products designed to keep your information on your device.

If you have any questions about this policy, contact us at [email protected].

Scope

This policy applies to:

• mokingbird.xyz (main website) and all contact/communication flows initiated through it
• General company-level privacy commitments applicable across all MokingBird products

Product-specific privacy behavior is documented in separate product policies (MokingBird AI, MB Viewer, Sortify, Jogg, Jogg Mini). Where a product-specific policy exists, it controls for that product. This policy sets the company baseline.

1. What Data We Collect

1.1 Our Website (mokingbird.xyz and subdomains)

When you visit our websites, we may collect:

• Server logs — IP address, browser type, page visited, timestamp. This is standard web server behavior. Logs are retained for up to 30 days for security purposes and then deleted.
• Contact form submissions — If you fill out a contact form, we collect your name, email address, and message. We use this solely to respond to you.
• Newsletter sign-ups — If you subscribe to our newsletter, we collect your email address. You can unsubscribe at any time.

We aim to use privacy-friendly, cookieless analytics (such as Plausible or Cloudflare Web Analytics) to understand traffic patterns without tracking individuals. If our analytics setup changes, we will update this policy.

1.2 Desktop Applications (MokingBird AI, MB Viewer)

Our desktop applications collect no data whatsoever during normal operation.

• No telemetry
• No crash reports sent to us
• No usage analytics
• No registration required
• All files you open, process, or generate remain on your machine

The only exception is optional update checks — if you choose to check for updates, the app makes a network request to our release server to compare version numbers. No personal data is included in this request.

1.3 Mobile Applications (Sortify, Jogg, Jogg Mini)

Our mobile apps collect the minimum data required to provide the service:

• Sortify — No account required for local use. If you choose to use cloud sync, your sync data is stored in your own cloud storage (Google Drive, OneDrive, Dropbox, or iCloud) — not on MokingBird servers.
• Jogg — May collect anonymized progress data for the leaderboard and XP system. No behavioral tracking or profiling.
• Jogg Mini — Designed for children aged 5–15. Complies with COPPA and GDPR. See Section 7 for full details on children's data.

2. How We Use Your Data

We use the data we collect only for the following purposes:

• To respond to inquiries and support requests
• To send you newsletters you have opted into
• To improve our products based on aggregate (non-personal) usage patterns
• To detect and prevent security incidents on our websites
• To comply with legal obligations

We do not use your data for:

• Targeted advertising
• Selling or sharing with third parties for commercial purposes
• Building behavioral profiles
• Training AI models on your data or content

3. Data We Never Collect or Do

To be explicit:

• We do not sell your data. Ever. To anyone.
• We do not run ads in any of our products.
• We do not track your behavior across websites or apps.
• We do not access the documents or files you open in our desktop apps.
• We do not use your data to train AI models.
• We do not require an account to use our core products.

4. Third-Party Services

We use a small number of third-party services to operate:

When you use cloud LLM providers (OpenAI, Anthropic, etc.) with MokingBird AI, those queries are governed by those providers' privacy policies. MokingBird has no access to your API keys or queries.

5. Legal Bases for Processing (GDPR)

Where GDPR applies, we process personal data on the following lawful bases:

• Consent — newsletter sign-ups, optional analytics
• Contract or pre-contract communication — responding to support or business inquiries
• Legitimate interests — security monitoring, abuse prevention, service reliability
• Legal obligation — where applicable law requires retention or disclosure

6. Your Rights Under GDPR

As a resident of the EU (or anyone using our services), you have the following rights:

• Right of access — Request a copy of any personal data we hold about you.
• Right to erasure — Request that we delete your personal data.
• Right to rectification — Request that we correct inaccurate data.
• Right to portability — Receive your data in a machine-readable format.
• Right to object — Object to processing of your data.
• Right to withdraw consent — Where processing is based on consent, withdraw it at any time (e.g., unsubscribe from newsletters).

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You may also file a complaint with your local supervisory authority.

7. Data Retention

8. International Transfers

MokingBird Oy is based in Finland, within the EU. If infrastructure services we use process data outside the EU/EEA, we apply appropriate safeguards as required by GDPR (including standard contractual clauses or reliance on adequacy decisions where applicable).

9. Cookies and Similar Technologies

Our websites aim to minimize cookie usage. Where cookies are used, they are for:

• Technical operation and session management
• Security (e.g., CSRF protection)

We do not use third-party advertising cookies. If optional analytics cookies are introduced in the future, we will update this policy and provide cookie controls. Our current direction is to use cookieless, privacy-friendly analytics tools where analytics are needed at all.

10. Children's Privacy

Jogg Mini is specifically designed for children aged 5 to 15.

We take children's privacy extremely seriously. In compliance with COPPA (Children's Online Privacy Protection Act) and GDPR:

• We do not collect personal information from children under 13 without verifiable parental consent.
• Jogg Mini contains no advertising of any kind.
• Jogg Mini does not connect children to social features that could expose them to strangers.
• Parents can contact us at [email protected] to request deletion of any data related to their child.
• A dedicated Parent Dashboard allows parents to monitor usage, control settings, and manage their child's account.

For other products (Sortify, Jogg, MokingBird AI, MB Viewer), our services are not intended for users under 13. If we become aware that a child under 13 has provided us with personal information without parental consent, we will delete it promptly.

11. Security

We implement appropriate technical and organizational measures to protect your data:

• HTTPS on all websites
• AES-256-GCM encryption in Sortify for synced data
• No central database holding personal data for desktop apps
• Access to any collected data (e.g., contact form submissions) is restricted to authorized personnel only

Despite these measures, no internet transmission or electronic storage is 100% secure. We encourage you to contact us immediately at [email protected] if you believe there has been a security incident.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will post a notice on our website. Your continued use of our services after any changes constitutes your acceptance of the updated policy.

13. Contact Us

For any privacy-related questions or requests:

MokingBird Oy Business ID: 3615646-1 Finland

• Privacy inquiries: [email protected]
• General inquiries: [email protected]
• Security issues: [email protected]