mbot Privacy Policy

Effective Date: February 26, 2026 | Last Updated: February 26, 2026

Palank ("we", "us", or "our") operates the mbot application (the "App"). This Privacy Policy explains how we collect, use, and protect information when you use the App.

1. Information We Do NOT Collect

We do not collect any personal information directly. The App does not require account creation, login, email, name, phone number, or any other personally identifiable information from our side.

2. Information You Provide

You may enter the following information to configure the App:

API keys (OpenRouter, OpenAI, Anthropic, Google): Stored only on your device. Never transmitted to Palank servers.
Messaging channel tokens (WhatsApp, Telegram, Discord): Stored only on your device and used to connect to respective messaging platforms.

All user-provided configuration is stored in the App's private storage on your device and is deleted when you uninstall the App.

3. Information Collected by Third-Party SDKs

3-1. Google AdMob (Advertising)

Data Collected	Purpose
IP address	Approximate location estimation, ad delivery
Android Advertising ID	Personalized advertising, analytics
App interaction data	Ad performance measurement
Diagnostic information	Performance monitoring

3-2. Firebase Crashlytics (Crash Reporting)

Data Collected	Purpose
Crash stack traces	Crash analysis and debugging
Device metadata (model, OS version)	Crash environment analysis
Crashlytics installation UUID	Measuring number of affected users
App information (version, state)	Crash context

4. AI Model Provider Data Processing

When you use the App, messages from your connected channels are processed by the AI model provider you select (e.g., OpenRouter, OpenAI, Anthropic, Google). This processing occurs directly between your device and the provider's servers.

We do not route, store, or have access to any message content.
Data handling by AI providers is governed by their respective privacy policies.
You can review provider privacy policies at their official websites.

5. Messaging Channel Integration

The App can connect to WhatsApp, Telegram, and Discord at your request. When connected:

Messages are received and processed on your device.
Responses generated by AI models are sent back through the respective messaging platform.
We do not have access to your messages, contacts, or channel content.
Channel connections are managed entirely on your device.

6. How We Use Information

AdMob data: To display advertisements and measure ad performance
Crashlytics data: To identify and fix app crashes and improve stability
On-device data: To provide AI assistant functionality (local processing only)

7. Third-Party Data Sharing

We do not share your personal information with third parties. However, the SDKs and services used transmit data to:

Recipient	Purpose	Data Shared
Google LLC (AdMob)	Advertising	IP address, Advertising ID, interaction data
Google LLC (Crashlytics)	Crash reporting	Crash logs, device metadata
AI Provider (user-selected)	AI processing	Message content (device-to-provider direct)

8. International Data Transfer

Data collected by third-party SDKs is transferred to and processed by Google LLC in the United States. AI model requests are sent to the provider's servers in their respective locations. All transfers are encrypted using TLS.

9. Data Retention and Deletion

On-device data: Automatically deleted when you uninstall the App.
AdMob data: Managed by Google per their retention policies. Reset via Android Settings > Google > Ads.
Crashlytics data: Automatically deleted after 90 days.
AI provider data: Governed by the selected provider's data retention policy.

10. Your Rights and Choices

Opt out of personalized ads: Android Settings > Google > Ads > Opt out of Ads Personalization
Reset Advertising ID: Android Settings > Google > Ads > Reset advertising ID
Delete all local data: Uninstall the App
Revoke channel access: Disconnect channels in the App settings

11. Children's Privacy

This App is not directed at children under the age of 13 (or 14 in South Korea, 16 in the EU). We do not knowingly collect personal information from children.

12. Data Security

All network communications use TLS encryption.
API keys and tokens are stored in the App's private storage, inaccessible to other apps.
We do not operate any data collection servers.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last Updated" date. Continued use of the App constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy:

Email: privacy@palank.co.kr