Privacy
What we hold, and what we don't.
Mongoose asks you to write down the most private things about your drinking. That only works if you know exactly where those words go. This page says so in plain language. Effective September 4, 2026.
The short version
We collect what you type into the app and nothing else. We do not sell it, rent it, or share it for advertising. There are no ad trackers and no analytics tracking you across the internet. You can delete everything from inside the app easily and quickly, in under ten minutes, and deletion means deletion.
What we collect
Your account. Your email address, a scrambled version of your password that cannot be reversed back into the password, and the username you choose for the leaderboard. Your email never appears anywhere public.
Your intake answers. How often you were drinking, how much, what it was costing you per week, why you are doing this, and the safety questions about morning drinking, withdrawal symptoms, and seizure history. The safety answers exist to decide whether to tell you to see a doctor before you stop.
What you log. Your check-ins morning, afternoon and night, the time frames you flag, your anchor statements, your journal notes, every SOS you open and how it went, the triggers you name, which breathwork and rest practices you start and finish and at what time, the daily rewire reps you mark done, and anything you say to the Mongoose companion in chat.
What we generate from it. Your pattern map, your weekly recaps, and the companion's replies are written by an AI reading the entries above. They are stored alongside your other data.
Billing status. Whether your subscription is active, which plan, and when the period ends. Stripe handles the actual payment. Your card number never reaches Mongoose and we could not see it if we wanted to.
Notifications. If you turn them on, the address your browser gives us for delivering them and your time zone, so the morning note arrives in your morning rather than someone else's.
We do not collect your location, your contacts, your photos, or your device identifiers. There is no advertising SDK in this app.
This is sensitive, and we treat it that way
Information about alcohol use is health information. It is kept private, it is never used to target you with advertising, and it is never sold. Mongoose is not a healthcare provider and not a HIPAA covered entity, so HIPAA does not apply here. That is a statement about the law, not a loophole we intend to use: the commitments on this page are what govern your data.
Who else touches it
Four companies, each doing one job:
Anthropic runs the AI behind the companion. To write a reply, your relevant entries are sent to their API. Anthropic does not use data sent through their API to train their models.
Stripe processes payments and holds your card details under their own privacy policy.
Turso hosts the database your entries live in.
Vercel hosts the app itself and keeps standard server logs.
That is the entire list. Beyond these four, your data is disclosed only if we are legally compelled to, or if there is a credible risk of serious harm to you or someone else.
Cookies
One cookie, which keeps you signed in for 90 days. It cannot be read by scripts on the page. There are no advertising cookies and no third-party tracking cookies, which is why this app never shows you a cookie banner.
Deleting everything
Open Account, scroll to Leaving, and delete your account. That removes your entries, your numbers, your chat history, your pattern map, and your login, and it cancels your subscription so you are not billed again. It happens immediately and it cannot be reversed. Stripe keeps its own payment records afterward because tax law requires it to.
You can also email us to ask what we hold on you, to get a copy of it, or to have something corrected.
How long we keep it
For as long as your account exists, because the whole point is a companion that remembers. When you delete your account, it goes. Accounts with no activity for two years may be removed along with their data.
Security
Traffic is encrypted in transit. Passwords are stored as salted scrypt hashes, never as text. No system is perfect, and we will tell you promptly if something happens that affects your data.
Age
Mongoose is for adults, 18 and over. We do not knowingly collect anything from anyone under 18, and we delete it if we find out we have.
Where you are
Mongoose is operated from the United States and your data is stored there. If you use it from elsewhere, you are asking us to process it in the US. Wherever you live, you can see, correct, export, and delete your data by the routes above; we apply those rights to everyone rather than only where a law requires it.
Changes
If this policy changes in a way that matters, the effective date at the top changes and you will see a notice in the app. We will not quietly start doing something this page says we do not do.
Contact
Questions about any of this go to privacy@mongooseapp.co.
One more thing, because it belongs next to everything above: Mongoose is an AI and not a doctor. It does not give medical advice. If drinking has been daily and heavy, stopping suddenly can be medically dangerous, so talk to a doctor first. If you have shakes, confusion, or hallucinations after stopping, call 911. If you are in crisis, call or text 988.