Your things stay yours.

Effective 17 October 2026 · Octag AI LLC · privacy@mogdrive.com

The short version

Today, before launch, there is little to tell. The site, a web preview that runs in your browser on a sample library and uploads nothing, and a waitlist that keeps your email if you join. No accounts and no payments yet. Details below.
On your phone, by default, nothing leaves the device. The on-device engine reads text, speech and documents with what iOS and Android already provide. No upload, no download, no account needed.
Cloud Speed is a stateless service. When you use it, a compressed preview or audio snippet is processed in memory for milliseconds and discarded. It is never stored and never used to train anything.
Cloud Vault is encrypted before upload. Your key stays on your devices. We store ciphertext we cannot read.
The app bar always says which engine is in use. Every item records how it was indexed, and you can switch engines or re-index at any time.
You can export or delete everything. Delete the account from the account page and the record, the plan and any Vault files are gone.

Before launch: what mogdrive.com does today

The MogDrive apps are in development. Until they launch, mogdrive.com offers three things, and only these process anything about you:

The website. Our host, Firebase Hosting (Google LLC), receives the request data every website receives, such as your IP address and browser type, to deliver pages and keep the service secure.
The web preview at mogdrive.com/app/. It runs entirely in your browser on a built-in sample library. Nothing you add, type or search in it is uploaded, and what you add disappears when you reload. It remembers a few choices in your browser’s local storage: the theme, the engine you picked and which notices you dismissed. The engine modes in section 2 are simulated in the preview; they apply to the apps once they launch.
The waitlist. If you join, we store your email address, where on the site you signed up, which plan you were interested in, your browser’s language setting and the time you joined, in Google Cloud Firestore in the United States. We use it only to tell you when MogDrive launches. We do not use it for advertising and we do not share or sell it. We keep it until 12 months after launch or until you ask us to remove it, whichever comes first; to be removed, email privacy@mogdrive.com from that address.

Accounts and payments are not open yet. Sections 3 to 5 describe how they will work once they are.

1. Who we are

MogDrive is made by Octag AI LLC (“we”), the makers of DubMog. This policy covers the website mogdrive.com, the web preview and waitlist described above, and, once they launch, the MogDrive apps for iPhone, Android and Mac and the web app at mogdrive.com/app/. It is written in plain words on purpose; where a word has a specific meaning, we say so.

2. What each engine mode processes

MogDrive turns what you save into a searchable map. Which computer does that work depends on the engine mode you choose. The mode is shown in the app bar at all times and recorded on every item.

Engine	Where it runs	What leaves your device	What we keep
On-device (default on phones)	Your phone, using the text recognition, speech recognition and sentence embeddings built into iOS or Android	Nothing	Nothing
Full model (optional free download)	Your phone, with the optional 0.5 GB model you download once	Nothing. The download itself is served from our content network and logs only the standard request	Nothing about your items
Cloud Speed (default on the web)	Our servers on Google Cloud	A compressed preview of the item or a short audio snippet, plus your search query	Nothing. Processing is in memory; inputs are discarded within seconds. We use Vertex AI with zero data retention and no training on your data
In this browser (WebGPU)	Your browser, with a model cached locally	Nothing	Nothing
Keywords only	Your device, no AI	Nothing	Nothing

Island names are generated on your device by default. If you turn on Nicer names, we send only the keywords of an island (never the items themselves) to the same stateless service. You can turn it off at any time.

Links, songs and books you add are looked up with the service that knows about them (for example Open Library for books, Spotify or Apple Music for songs). That service receives the query or link you added, under its own privacy policy. We store what the item is about, never protected media.

3. Account data

You can use MogDrive on a phone without an account. An account exists so that a Cloud Vault Pro subscription follows you to every device. When you sign in we store:

your email address, and your name if the sign-in provider shares it;
which provider you used (Apple, Google or email), so we can tell you next time;
your plan status, and a Stripe customer reference if you bought something on the web;
the time you last signed in.

Sign-in runs on Firebase Authentication (Google LLC). With Sign in with Apple you may hide your email; the relay address then becomes the email we hold. We never see your password: Firebase stores a salted hash.

4. Cloud Vault

Cloud Vault is optional backup, sync and sharing. Files and the search index are encrypted on your device with a key that is derived on your devices and never sent to us. We store the resulting ciphertext on Cloudflare R2 along with file sizes, timestamps and an opaque identifier, which we need to count storage and sync changes. We cannot read the contents of your Vault, and we cannot recover it if you lose every device and your recovery phrase.

If you share an island with a link, a snapshot is encrypted with a key that lives in the link itself. Anyone with the link can open that snapshot until you revoke it.

5. Payments

Purchases on the web are handled by Stripe. Stripe receives your payment details directly; we never see card numbers. We receive a confirmation that the purchase happened, the plan, and a customer reference so you can manage billing. Purchases inside the iPhone app go through Apple’s App Store under Apple’s terms; we receive a receipt that confirms the entitlement.

6. Analytics and cookies

The website and the web app use Google Analytics 4 to count visits and understand which pages and features are used. IP addresses are anonymised and we use no advertising features. In the European Economic Area, the United Kingdom and Switzerland, analytics stays off until you allow it in the cookie bar, which you can change at any time by clearing the site’s data. Elsewhere it is on by default; you can block it with your browser’s settings. Analytics events never contain the content of your items, your searches or your island names.

Cookies and local storage we set ourselves are functional: your sign-in session, your theme, which engine you chose, and whether you answered the cookie bar.

7. Third parties

Google LLC: Firebase Hosting, Firestore (the waitlist and account records), Firebase Authentication, Cloud Functions and Vertex AI (Cloud Speed), Google Analytics.
Stripe, Inc.: web payments and the billing portal.
Cloudflare, Inc.: R2 storage for Cloud Vault ciphertext and for the downloadable model.
Apple Inc.: Sign in with Apple, App Store purchases, Apple Music lookups when you add a song.
Spotify AB and Open Library (Internet Archive): lookups when you add a song or a book.

We do not sell personal data and we do not share it for advertising.

8. Your rights and choices

Export. Your items live on your device; the app’s Export produces a folder of your files and a JSON file of your map. Vault data can be exported from any signed-in device.
Delete. Delete the account on the account page or inside the app. This removes the account record, the plan and all Vault data within 30 days of the request; backups expire within a further 30 days.
Access and correction. Email privacy@mogdrive.com and we will send what we hold about you or correct it.
Where you live matters. If you are in the EEA, the UK or Switzerland, you have the rights set out in the GDPR, including to object and to complain to your supervisory authority; our legal bases are your consent (the waitlist, which you can withdraw at any time), performing our contract with you (accounts, payments, Vault) and our legitimate interest in running a reliable service (security logs, analytics with consent). If you are in California, you have the rights set out in the CCPA; we do not sell or share personal information as those terms are defined there.

9. Retention and security

Waitlist entries are kept until 12 months after launch or until you ask us to remove them. Account records are kept while the account exists. Cloud Speed inputs are not retained. Vault ciphertext is kept while you subscribe and for 30 days after a subscription ends, so you can resume or export, then deleted. Server logs that contain IP addresses are kept for 30 days. Data is stored in the United States.

All connections use TLS. Vault content is encrypted on your device before transfer and stays encrypted at rest. Access to production systems is limited to the people who run them and is logged.

10. Children

MogDrive is not directed at children under 13, or under 16 where that is the age of digital consent, and we do not knowingly collect their data. If you believe a child has created an account, email us and we will delete it.

11. Changes

When this policy changes we update the date at the top and, for changes that affect what we collect or share, tell signed-in users by email and in the app before they take effect. Earlier versions are available on request.

12. Contact

Octag AI LLC · privacy@mogdrive.com · general questions: hello@mogdrive.com