Mad Monkey AI

Effective Date: May 10, 2026

Last Updated: May 4, 2026

1. Introduction

Mad Monkey AI Inc. ("we," "our," "us") operates the Mad Monkey AI mobile application (the "App"). We are committed to protecting your privacy and ensuring transparency in how we collect, use, store, and share your personal information.

This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights and controls you have over your information. This policy applies to all users of the App, including users under the age of 18.

Mad Monkey AI Inc. is incorporated in Delaware, USA, with its principal office at 131 Continental Dr, Suite 305, Newark, Delaware 19713, USA.

By downloading, accessing, or using the Mad Monkey AI App, you consent to the practices described in this Privacy Policy. If you are under 18, you confirm that your parent or legal guardian has reviewed and consented to this Privacy Policy on your behalf.

2. Age Requirements and Minors' Privacy

2.1 Minimum Age

The Mad Monkey AI App is designed for users aged 13 and above. We do not knowingly collect personal information from children under the age of 13. If we discover that we have inadvertently collected personal information from a child under 13, we will promptly delete that information.

If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at contact@madmonkey.ai and we will take immediate steps to delete such information.

2.2 Users Aged 13–17 (Minor Users)

We recognize that users between 13 and 17 years of age require additional protections. For all Minor Users worldwide, we implement the following safeguards:

• Screen Time Cap: The App automatically enforces a daily usage cap of 60 minutes for users under 17 through our Brain Rot Meter feature. Once the 60-minute cap is reached, the user is logged out for the remainder of the 24-hour period.

• Limited Data Collection: We collect the minimum data necessary to provide the App's functionality for Minor Users.

• No Targeted Advertising: We do not serve targeted or behavioral advertising to users under 18.

• Content Safety: All user-generated content is moderated to ensure a safe and positive environment for younger users.

• No Data Selling: We never sell, trade, or share Minor User data for commercial or advertising purposes.

2.3 Parental Consent — Region-Specific Requirements

2.3.1 Users in India — Parental Consent Required for ALL Users Under 18

In compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), we require verifiable parental or legal guardian consent before collecting or processing personal data of any user under the age of 18 in India. This means:

• During registration, users in India who indicate they are under 18 will be prompted to provide their parent's or legal guardian's contact information (email or mobile number).

• We will send a consent request to the parent/guardian. The user's account will not be fully activated until parental consent is received and verified.

• Parents/guardians can provide consent via email confirmation, SMS verification, or an in-app consent mechanism.

• Parents/guardians can withdraw consent at any time by contacting us at contact@madmonkey.ai, which will result in the deactivation and deletion of the minor's account and associated data.

• We do not process the personal data of any Indian user under 18 without verified parental consent. Any data collected during the registration process before consent is obtained will be deleted if consent is not received within 7 days.

2.3.2 Users in the United States — Parental Consent Mandatory for Users Under 13

In compliance with the Children's Online Privacy Protection Act (COPPA) as amended in 2025-2026, we require verifiable parental consent before collecting personal information from any user under the age of 13 in the United States. This means:

• During registration, users in the United States who indicate they are under 13 will be required to provide a parent's or legal guardian's email address.

• We will send a direct notice and consent request to the parent/guardian before collecting any personal information from the child.

• The child's account will not be activated until verifiable parental consent is obtained through an approved COPPA-compliant method (email plus consent confirmation, signed consent form, or other FTC-approved verification method).

• Parents/guardians have the right to review their child's personal information, request its deletion, and refuse further collection at any time.

• If parental consent is not obtained within 7 days of registration, any data collected during the registration attempt will be permanently deleted.

• We do not condition a child's participation in any activity on the disclosure of more personal information than is reasonably necessary for that activity.

For users in the United States aged 13–17, parental consent is not legally required under COPPA. However, we encourage parents and guardians to review this Privacy Policy and be aware of their teenager's use of the App. The Brain Rot Meter's 60-minute daily cap for users under 17 provides an additional layer of protection.

2.4 Parental/Guardian Rights (All Regions)

Regardless of region, parents and legal guardians of Minor Users have the right to:

• Review all personal information we have collected from their child

• Request correction of inaccurate information

• Request deletion of their child's personal information and account

• Refuse to permit further collection or use of their child's information

• Withdraw previously granted consent at any time

• Contact us at contact@madmonkey.ai with the subject line 'Parental Request' to exercise any of these rights — we will respond within 48 hours for parental requests

2.5 Age Verification

We implement age verification at the point of registration. Users are required to provide their date of birth during account creation. Based on the user's age and region:

• Users under 13 worldwide: Account creation is blocked unless verifiable parental consent is obtained (mandatory under COPPA for US users).

• Users aged 13–17 in India: Account creation requires verifiable parental consent under the DPDP Act before the account is activated.

• Users aged 13–17 in the United States: Account creation is permitted without parental consent, but the 60-minute daily screen time cap is automatically enforced for users under 17.

• Users aged 13–17 in other regions: We apply the more protective standard applicable to the user's jurisdiction.

• Users 18 and above: Full account access with no parental consent required.

3. Data We Collect

3.1 Information You Provide Directly

• Account Information: Name, mobile number, email address, date of birth, and campus/university affiliation. Used for account creation, authentication, age verification, personalization, and customer support.

• Profile Information: Profile photo, username, bio, and university/school name. Used to create your public profile visible to other users.

• Spark Content: Text, images, and videos you post through Spark posts and regular posts. Used to display your content to other users based on your visibility settings.

• Chat Messages: Messages sent through Monkey Talk (direct messaging) and Mission Chat (Spark collaboration chats). Used to facilitate private and group communications.

• Bills and Receipts: Photos of receipts you upload through the Bill Snap feature. Used solely to process Monkey Cash rewards. We extract vendor name and purchase date for reward validation. We do not extract or store financial account details from receipts.

• Survey Responses and Feedback: Any feedback, survey responses, or suggestions you provide. Used to improve the App.

3.2 Information Collected Automatically

• Device Information: Device model, operating system version, unique device identifiers, and app version. Used for app optimization, bug fixes, and customer support.

• Usage Data: In-app interactions including features used, Sparks created, Sparks joined, Monkey Cash earned, Brain Rot Meter readings, session duration, and Builder Score activity. Used to improve features, personalize your experience, and calculate rewards.

• Location Data: With your explicit permission, we collect approximate location data (city-level) to provide campus-specific Spark Radar results and to enable the Deals Near Me feature when launched. We do not collect precise GPS coordinates continuously. Location data is collected only when you actively use location-dependent features.

• Log Data: IP address, access times, pages viewed, and crash reports. Used for security, troubleshooting, and analytics.

3.3 Information We Do NOT Collect

• We DO NOT collect social security numbers, Aadhaar numbers, or government-issued identification numbers.

• We DO NOT collect financial account details, bank account numbers, or credit/debit card information.

• We DO NOT collect biometric data (fingerprints, facial recognition, voiceprints).

• We DO NOT collect health or medical information.

• We DO NOT use facial recognition or voice analysis technologies.

4. How We Use Your Data

We use the information we collect for the following purposes:

• Account Management: To create and maintain your account, verify your identity and age, and provide customer support.

• App Functionality: To display Sparks, power the Spark Radar, facilitate Monkey Talk messaging and Mission Chat, and manage your Builder Score.

• Monkey Cash Rewards: To calculate, track, and manage your Monkey Cash earnings from Circle Power, Spark creation, referrals, Bill Snap uploads, and daily challenges. To process reward redemptions during redemption windows.

• Brain Rot Meter: To track your in-app session duration and display your screen time status. To enforce the 60-minute daily cap for users under 17.

• Personalization: To customize Spark Radar results based on your campus, city, language, and interests. To suggest relevant Sparks you might want to join.

• AI Features: When you use the Maddyy AI assistant for Spark creation, your text input is processed by our AI service provider to generate content suggestions. These interactions are logged to improve suggestion quality over time.

• Safety and Security: To detect and prevent fraud, abuse, spam, and violations of our Terms of Service. To moderate user-generated content for safety.

• Analytics and Improvement: To understand how users interact with the App, identify bugs, and improve features. We use aggregated and anonymized data for analytics wherever possible.

• Communications: To send you essential notifications about your account, Spark activity, Monkey Cash updates, and App updates. We do not send marketing emails without your opt-in consent.

5. How We Store and Protect Your Data

5.1 Data Storage

Your data is stored on encrypted cloud servers using industry-standard security protocols. Our primary data storage infrastructure is hosted on secure cloud platforms with data centers in the United States and India, as applicable to your region.

5.2 Data Transmission

All data transmitted between the App and our servers is encrypted using SSL/TLS (Secure Socket Layer / Transport Layer Security) protocols to prevent unauthorized interception.

5.3 Security Measures

• Encryption of data at rest and in transit

• Access controls limiting employee access to user data on a need-to-know basis

• Regular security audits and vulnerability assessments

• Secure development practices including code review and penetration testing

• Incident response procedures for data breach notification

5.4 Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by law.

• Account Data: Retained for the duration of your active account plus 30 days after deletion request to allow for account recovery.

• Spark Content: Retained for 90 days after a Spark expires, then permanently deleted from active systems.

• Chat Messages: Retained for the duration of your account. Deleted within 30 days of account deletion.

• Bill/Receipt Images: Retained for 90 days after upload for reward verification, then permanently deleted.

• Usage Analytics: Retained in anonymized, aggregated form for up to 24 months for product improvement purposes.

• Minor Users (13-17): Data is retained for the minimum duration necessary and is deleted within 14 days of an account deletion request.

6. Data Sharing

6.1 We Do Not Sell Your Data

Mad Monkey AI DOES NOT sell, rent, or trade your personal information to any third party for marketing, advertising, or any other commercial purpose. We do not engage in data brokerage.

6.2 Limited Sharing With Service Providers

We may share limited data with trusted third-party service providers who help us operate the App. These providers are contractually obligated to use your data only for the specific services we engage them for and to maintain appropriate security measures. Our service providers include:

• Cloud hosting and storage providers

• AI service providers (for Maddyy Spark creation assistant — your text inputs are processed to generate suggestions)

• Analytics providers (using aggregated, anonymized data only)

• Push notification service providers

• Reward fulfillment partners (for Monkey Cash redemption — limited to information necessary to process your reward)

6.3 Legal Requirements

We may disclose your information if required by law, in response to a valid legal process (such as a court order or subpoena), to protect the safety of any person, to address fraud or security issues, or to protect our legal rights.

6.4 Business Transfers

If Mad Monkey AI Inc. is involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you via email or prominent notice in the App before your information is transferred and becomes subject to a different privacy policy.

6.5 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so. We will always inform you about what data is being shared and with whom before requesting your consent.

7. Third-Party Services and Links

The App may contain links to third-party websites, services, or products (such as Amazon product links through Ask Maddyy, or merchant websites through Deals Near Me). We are not responsible for the privacy practices of these third-party services. We encourage you to read the privacy policies of any third-party service you access through our App.

8. Your Rights and Controls

8.1 Access and Portability

You have the right to request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format within 30 days of your request.

8.2 Correction

You can update or correct your personal information at any time through the App settings. If you need assistance, contact us at contact@madmonkey.ai.

8.3 Deletion

You can request deletion of your account and all associated personal data by contacting us at contact@madmonkey.ai. We will process deletion requests within 7 business days for general users and within 14 days for Minor Users. Certain data may be retained as required by applicable law.

8.4 Opt-Out

• You can disable location services for the App through your device settings at any time.

• You can opt out of non-essential push notifications through the App settings.

• You can choose not to upload bills/receipts — the Bill Snap feature is entirely optional.

• You can choose not to use the Maddyy AI assistant — manual Spark creation is always available.

8.5 Rights for Users in India

Under the Digital Personal Data Protection Act, 2023, you have the right to access, correct, and erase your personal data. You have the right to nominate a person to exercise your rights in case of your death or incapacity. You may file a complaint with the Data Protection Board of India if you believe your rights have been violated.

8.6 Rights for Users in the United States

Depending on your state of residence, you may have additional rights under state privacy laws (such as the California Consumer Privacy Act, Virginia Consumer Data Protection Act, or other applicable state laws), including the right to know what data is collected, the right to delete, and the right to opt out of data sales. As stated above, we do not sell your data.

9. Cookies and Tracking Technologies

The Mad Monkey AI App does not use browser cookies as it is a mobile application. We may use mobile analytics SDKs to collect anonymized usage data for App improvement purposes. We do not use tracking technologies for targeted advertising or cross-app tracking. We do not share device identifiers with advertising networks.

10. International Data Transfers

Mad Monkey AI operates in both the United States and India. Your data may be transferred to and processed in either country, depending on where you registered. We ensure that any cross-border data transfer is protected by appropriate safeguards, including encryption in transit and contractual obligations with our service providers.

11. Artificial Intelligence (AI) and Automated Processing

The App uses AI-powered features, including:

• Maddyy Spark Assistant: When you use Maddyy to help create Spark posts, your text input is sent to our AI service provider for processing. The AI generates content suggestions based on your input. Your input and the AI's output are logged to improve suggestion quality. No personal data beyond your text input is shared with the AI provider.

• Ask Maddyy (Product Recommendations): When launched, this feature will process your product queries to provide recommendations. Your queries may be processed by third-party AI service providers. Product links may include affiliate tracking.

• Content Moderation: We may use automated systems to detect and flag potentially harmful or inappropriate content for review.

We do not use AI to make decisions that have legal or similarly significant effects on you without human review.

12. Brain Rot Meter and Screen Time Data

The Brain Rot Meter tracks your in-app session duration to promote healthy digital habits. Screen time data is:

• Stored locally on your device and synced to your account for display purposes

• Used to enforce the 60-minute daily cap for users under 17

• Not shared with any third party

• Not used for advertising or marketing purposes

• Visible only to you — no other user can see your Brain Rot Meter data

13. Monkey Cash, Rewards, and Financial Data

Monkey Cash is a virtual in-app reward currency with no independent monetary value outside the App. Monkey Cash:

• Is earned through in-app activities (Circle Power, Sparks, referrals, Bill Snap, daily challenges)

• Can be redeemed for rewards during limited redemption windows (such as gift cards or discounts)

• Cannot be transferred, sold, or exchanged for real currency outside the App

• Monkey Cash balances and transaction histories are stored in your account and visible only to you

When you redeem Monkey Cash for rewards (such as Amazon gift cards, Flipkart gift cards, or mobile recharge), we share limited information (such as your email address or mobile number) with the reward fulfillment partner solely to deliver your reward. We do not share your Monkey Cash balance, earning history, or in-app activity data with reward partners.

14. User-Generated Content

When you create Sparks, post content, or send messages through the App, this content may be visible to other users based on your chosen visibility settings (My Campus, My City, My Language, My Country, or Global). Please be mindful of the information you share in public Sparks and posts.

Content shared in private chats (Monkey Talk direct messages and Mission Chat) is only visible to the participants of that conversation. We do not read or monitor the contents of private messages unless required for safety moderation in response to user reports.

15. Location Data and Deals Near Me

When the Deals Near Me feature is launched, we will use your approximate location (city-level) to display relevant deals from nearby merchants. Location data collection for this feature will:

• Require your explicit opt-in permission

• Only activate when you open the Deals Near Me section of the App

• Not continuously track your location in the background

• Not share your precise location with merchants — merchants see only the number of coupon views and redemptions, not individual user locations

• Be deletable through your account settings at any time

16. Business Partner Program

Users who enroll in the Business Partner (BP) program to onboard local merchants provide additional information including their preferred locality and merchant interaction history. This data is used solely to manage the BP relationship and calculate commissions. BP commission data is visible only to the individual BP and to Mad Monkey AI administrators.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, features, or applicable laws. We will notify you of significant changes through:

• An in-app notification at least 7 days before the changes take effect

• An email to the address associated with your account

• An updated "Last Updated" date at the top of this policy

Your continued use of the App after the updated Privacy Policy takes effect constitutes your acceptance of the changes. If you do not agree with the updated policy, you may delete your account.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Mad Monkey AI Inc.

131 Continental Dr, Suite 305

Newark, Delaware 19713, USA

Email: contact@madmonkey.ai

Website: www.madmonkey.ai

For privacy-specific inquiries related to Minor Users, parental rights, or data deletion requests, please email contact@madmonkey.ai with the subject line "Privacy — Minor User Request" and we will prioritize your request.

For users in India, you may also contact our India office for local support. Details are available on our website.

19. Governing Law

This Privacy Policy is governed by the laws of the State of Delaware, United States of America, without regard to conflict of law provisions. For users in India, applicable provisions of the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 shall also apply.