Privacy Policy

This Privacy Policy explains how OneMgl ("OneMgl", "we", "us") handles your information across the OneMgl mobile app and the OneMgl Copilot browser extension (together, the "Services"). By using the Services you agree to this policy.

Who we are

OneMgl is a lifestyle AI assistant that lets you chat with AI models, connect your apps (such as email and calendar), discover and book local businesses, and — via the OneMgl Copilot extension — operate websites on your behalf. Contact: info@onemgl.com.

Information we process

• Account details — your email, display name, and (if you use phone sign‑in) your phone number, used to create and secure your account.
• Authentication tokens — access tokens stored on your device to keep you signed in. We do not store third‑party passwords in plain text.
• Chat & task content — the messages and instructions you send to the assistant, so it can respond and perform the tasks you request.
• Connected services — when you link a provider (e.g. Gmail, Calendar), we access only the data needed for the actions you ask for, under the permissions you grant. You can disconnect at any time.
• Saved website logins (Copilot extension) — if you choose to save a site's username/password, it is encrypted at rest (AES‑256‑GCM) and returned only to you to fill that site. The extension never reads your browser's saved passwords, the OS keychain, or passkeys — those are inaccessible to any extension by design.
• Page content (Copilot extension) — when you run a task on a web page, a compact snapshot of that page's interactable elements and its URL is sent to our backend so the assistant can decide the next action. This happens only for the task you start; we do not continuously monitor your browsing.
• Device & push tokens — to deliver notifications you enable.
• Usage information — counts such as messages sent, to show your remaining allowance and to operate the Services.

How we use information

We use your information solely to provide, secure and improve the Services you request. We do not sell your data, and we do not use it for advertising or for any purpose unrelated to the Services.

Payments

In‑app payments (e.g. bookings) are processed by QPay and your bank. We do not collect or store your card or bank credentials; payment providers process that data under their own terms.

Sharing

We share data only with:

• Infrastructure processors that host our Services (for example Vercel, Turso, Cloudflare, Apple Push Notification service, and email delivery), acting on our behalf.
• AI model providers that power the assistant — they receive your prompt and, for browser tasks, the page snapshot, to compute a response or next action.
• Providers you connect — only as directed by you when you use those integrations.
• Legal — where required by law or to protect rights and safety.

Security

Data is transmitted over TLS. Secrets and saved credentials are encrypted at rest with AES‑256‑GCM. Access is scoped to your authenticated account.

Retention & your choices

• Delete any saved login from the Copilot extension's 🔑 Passwords panel at any time.
• Disconnect any linked provider from the app.
• Sign out to remove local access tokens from a device.
• Request deletion of your account and associated data by emailing info@onemgl.com.

Children

The Services are not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their data.

International

OneMgl operates from Mongolia and may process data on infrastructure located in other regions. By using the Services you consent to such processing.

Changes

We may update this policy; material changes will be posted here with a new "last updated" date.