Privacy Policy

1. Who we are

Mango Connections is a product operated by Mango Dog Pty Ltd (ACN 628 425 481, ABN 33 628 425 481), a company incorporated in Australia.

When we say "we," "us," or "our," we mean Mango Dog Pty Ltd. When we say "you," we mean anyone who uses Mango Connections — whether you're signed in or just viewing someone's public page.

2. What we collect

When you create or access an account:

• Your email address and authentication identifier
• Your name and profile photo when supplied by Google or Microsoft
• Authentication and account-security records needed to operate email/password, Google, or Microsoft sign-in

When you create one or more Mango profiles:

• The purpose, title, display name, photo, country context, page text, links, video and optional public contact details you choose
• Purpose-specific information, which may include dating preferences, professional or commercial information, finder/return instructions, or medical and safety information
• Private source notes, imported files, extracted text, Aimee interview answers and generated drafts
• Publication state, profile versions, QR slugs and presentation records for each profile
• For a Dating Mango, a boolean confirmation that you are 18 or older; we do not collect your date of birth for this check

When you use FREE creation before signing in: we temporarily store the purpose, display name, answer, session secret, draft state and bounded abuse-prevention/rate-limit data needed to generate a requested preview and recover a provider failure. Anonymous draft/session records expire after no more than 24 hours unless you save the draft to an account.

When an external agent sends an inbound enquiry: we store the receiving Mango, PageAgent/client identifiers, broad counterparty summary, purpose/objective, request state, owner decision, bounded audit information and notification/outbox state needed to authenticate, review, rate-limit, expire and reconcile that request. We do not accept outbound Scout discovery or automatic introductions in this release.

When you use the messaging feature:

• The content of messages you send and receive
• Timestamps of messages

When you express interest in printed cards: the current card-ordering control is a non-fulfilling test stub. It records limited product-interest information such as quantity, currency and profile context. It does not collect payment or shipping details and does not place a supplier order.

Automatically:

• Bounded product events such as QR profile views, Connect starts and social-card actions, with session or pseudonymous identifiers and abuse-prevention data
• Standard server logs for security and debugging

3. What we do not collect

• We do not build advertising profiles
• We do not track you across other websites
• We do not sell, rent, or trade your personal information to third parties
• We do not use your messages or profile content to train AI models
• We do not store your payment card details

4. How we use your information

We use your information only to:

• Operate your account and keep you signed in
• Publish your public profile page (if you choose to publish it)
• Deliver messages between users
• Prepare the QR and presentation outputs you request
• Send transactional emails such as new-message notifications and security notices
• Improve the product through aggregate, anonymised usage data

5. Your public page

When you publish a profile, all owner-approved public fields for that Mango are accessible to anyone with the link. This includes both approved text sections and any photo, links, video or contact details you enabled. Mango does not publish a profile-level street or home address. If you choose to mention a broad city or region in approved page text or an objective, that broad context is public. Dating profiles are also open to read without an account; signing in is required only to Connect and send a message.

You may maintain separate Dating, Résumé, Business, Vendor, Creator, Medical ID, safety, pet, lost-property, bicycle, equipment or other Mangos. Each has its own public link and QR. Medical and safety profiles are passive information pages, not monitored medical devices, tracking services or emergency-response services.

If you unpublish your page, it becomes inaccessible to the public immediately. You can delete your page and all its contents at any time from your account settings.

6. Aimee conversations

The conversation you have with Aimee is used to generate and refine a draft. Interview turns and imported source material are stored privately in the relevant profile so you can return to them. Adaptive interview follow-ups, draft generation, profile critique and translation may send the necessary text to DeepSeek. Bounded image OCR may send an image to Google Gemini. Local extraction is used for supported document formats where available. Provider output can be incomplete or wrong and is not independent verification.

The pre-account FREE journey uses the same DeepSeek Aimee provider for a requested preview, but it keeps the answer/session separate from a generated draft. If the provider is unavailable, your answer can be retained briefly for retry while Mango shows that no Aimee preview was generated. A valid preview is not created or counted as viewed until schema validation succeeds.

Inbound PageAgent/A2A processing: an eligible published Mango can receive a voluntary request from an external agent. The request is authenticated to a PageAgent/client boundary and may contain only the bounded task and broad counterparty information needed for the owner decision. The owner can approve, decline, clarify, block or report it. No private contact detail is disclosed and no introduction is automatic. Pending requests expire after seven days by default; task/proposal/invitation and notification records are bounded, audit records are retained for 30 days, and rate-limit records for 48 hours before cleanup or minimisation.

7. Third-party services

We use the following third-party services to operate Mango Connections:

• Google Firebase — authentication, database, and hosting (Google Privacy Policy applies)
• Google and Microsoft — optional identity providers when you choose their sign-in method
• DeepSeek — Aimee draft generation and public-profile translation when those features are used
• Google Gemini — bounded image text extraction when OCR is required and you import an image
• Mailgun — transactional email delivery, including new-message notifications
• Google Fonts — typography (standard Google Fonts terms apply)

Gelato is not currently connected to the card-ordering test stub, and no payment, shipping data or supplier order is sent from that control.

We choose service providers carefully and limit the data shared with them to what is necessary to perform their function.

8. Data storage and security

Your data is stored on configured Firebase infrastructure. The first-release deployment target is a United States Functions region; the active region and any storage-location choices should be confirmed from the deployed operator configuration. We use encrypted connections (HTTPS), Firebase Security Rules to restrict database access, and server-side authentication checks on write operations.

No system is perfectly secure. If we become aware of a security incident affecting your data, we will notify you as required by Australian law.

Email/password accounts can request verification and password-recovery messages. You may connect more than one supported sign-in method to the same Firebase identity. Mango does not merge separate accounts merely because their email text matches. Security operations and session revocation records are retained as needed to protect the account.

9. Your rights

Under the Australian Privacy Act 1988 and the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Opt out of any non-essential communications

To exercise any of these rights, email us at info@mangoconnections.com. We will respond within 30 days.

10. Account deletion

You can delete your account from within the app at any time while signed in. On deletion, we will permanently remove your profile page, private profile material, and account details within 30 days. Your messages in shared conversations are anonymised, and the other participant's conversation remains available without your identity. Order and abuse-prevention records are retained only for the legally required or safety-related period. Accounts terminated for serious safety violations may be retained or restricted as required to prevent re-entry and protect members.

11. Age information

Mango Connections does not collect a date of birth. Dating creation, publication and first contact require a server-checked confirmation that the user is 18 or older; the confirmation is private and is removed with the relevant account/profile data. Other purpose pages do not use this Dating eligibility field, but every user must follow applicable law and our safety rules.

12. Changes to this policy

If we make material changes to this policy, we will notify you by email or via a prominent notice within the app at least 14 days before the changes take effect. The effective date at the top of this document will be updated accordingly.

13. Contact

Privacy enquiries: info@mangoconnections.com
Mango Dog Pty Ltd, Australia

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au.