This Privacy Policy explains how Bloox LLC(“Bloox”, “we”, “us” or “our”), a limited liability company organized under the laws of the State of Delaware, United States, collects, uses, and shares information when you use the Mangomobile application and related services (the “Service”). By using Mango, you agree to this Policy.

1. Information we collect

We collect the following categories of information:

Account information. When you sign in with Google or Apple, we receive your name, email address, and profile photo from that provider. If you use Sign in with Apple and choose to hide your email, Apple gives us a private relay address instead of your real one.
Profile information. The username (handle), display name, and avatar you set up in the app.
Content you create. The lists you build, restaurants you save, places you mark as visited, and reviews you write (including ratings, notes, and any photos you attach).
Location.If you grant permission, we use your device location while you use the app to show nearby places first when you search. This is optional — Mango works without it, and we only request “while in use” access.
Device and notification data. If you enable notifications, we store a push token for your device so we can deliver them, along with basic device information.
Diagnostic data. Limited technical logs used to operate, secure, and troubleshoot the Service.

2. How we use your information

Provide, maintain, and improve the Service.
Authenticate you and keep your account secure.
Show you relevant nearby recommendations when you search.
Send notifications you have opted into (for example, when a friend shares a list).
Develop, train, and improve our features and machine-learning / artificial-intelligence models, and power search and discovery — within the Service and, for public content, through external search engines.
Keep the community safe — review reports, and enforce our Terms.
Comply with legal obligations.

Private lists are excluded. Content you keep in a list marked as private is not made public, indexed by search engines, or used to train AI/ML models. We process it only to provide the Service to you and the people you share that list with.

3. How we share your information

We do not sell your personal information. We share information only in the following circumstances:

With other users. Content you add to a shared list or circle is visible to its members. Content you make public (such as a public list or a review) may be visible to anyone using Mango.
Service providers. We rely on trusted third parties to run the Service: Google (Firebase Authentication and the Google Places API), Apple (Sign in with Apple and push delivery via APNs), and the Expo push notification service (which relays notifications to Apple and Google). These providers process data on our behalf under their own terms.
Legal and safety. When required by law, or to protect the rights, safety, and property of Bloox, our users, or others.
Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this Policy.

4. Data retention and deletion

You can delete your account at any time from within the app (Profile → Account → Delete account). When you delete your account, we schedule it for permanent deletion; you have a 30-day window to recover it by signing back in, after which your personal data is permanently removed from our systems. If you signed in with Apple, we revoke the associated Apple token as part of deletion. We may retain limited information where required by law or for legitimate business purposes such as security and fraud prevention.

5. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, contact us at support@getmango.sh. You may also delete your account and data directly in the app at any time.

6. Children

Mango is not directed to children under 13, and we do not knowingly collect personal information from them. You must be at least 13 years old to use the Service. In the European Economic Area, the United Kingdom, and Switzerland, you must be at least 16 — or the minimum age for consenting to data processing set by your country, which may be lower. If you believe a child has provided us information, contact us and we will delete it.

7. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. International transfers

Bloox is based in the United States, and your information may be processed in the United States and other countries where we or our service providers operate. These countries may have different data-protection laws than your own. When we transfer personal data out of the European Economic Area, the United Kingdom, or Switzerland, we rely on an appropriate safeguard — typically the European Commission’s Standard Contractual Clauses (and the UK Addendum), or a recognized adequacy decision.

9. European Economic Area, United Kingdom, and Switzerland

If you are located in the EEA, the UK, or Switzerland, the EU/UK General Data Protection Regulation applies to our processing of your personal data, and the following additional information applies.

Data controller and representative. Bloox LLC is the controller of your personal data. Where required by Article 27 GDPR, we will designate a representative in the EU/UK; you can request its contact details, or reach us directly, at support@getmango.sh.

Legal bases. We process your personal data on the following bases:

Performance of a contract — to create your account and provide the core features of the Service.
Consent — for optional features such as location access and push notifications. You can withdraw consent at any time (for example, in your device settings).
Legitimate interests — to secure, operate, and improve the Service, to keep the community safe, and to develop and train our AI/ML models and power search and discovery. You can object to processing based on legitimate interests (see below).
Legal obligation — to comply with applicable law.

Your rights. Subject to applicable law, you have the right to access, rectify, erase, restrict, and port your personal data; to object to processing based on legitimate interests (including profiling and use for AI/ML training); and to withdraw consent. You also have the right to lodge a complaint with your local data protection supervisory authority. To exercise these rights, contact support@getmango.sh.

Automated decisions. Mango uses automated processing to personalize recommendations, but we do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.

10. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the “Effective date” above and, where appropriate, notify you in the app. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

11. Contact us

If you have questions about this Policy or your data, contact us at support@getmango.sh.
Bloox LLC, State of Delaware, United States.