Privacy Policy

Last updated: 4 November 2026

This policy explains how Molo collects, uses, shares and protects information when you use the Molo Android app and this website. It is written to meet the Google Play User Data policy and India's Digital Personal Data Protection Act, 2023.

1. Who we are

Molo is operated by Handful Labs, a sole proprietorship of Kaustubh Khandelwal, 17-B, New Colony, Gumanpura, Kota, Rajasthan 324007, India (GSTIN 08CVRPK6564P1ZF). Handful Labs is the data fiduciary under the DPDP Act, 2023. Contact: kaustubh.khandelwal4@gmail.com.

2. Information we collect

• Mobile number, to sign you in with a one-time code. It is your account identifier.
• Name you enter, to greet you in the app.
• Your notes: the text you type, and the notes, folders, tasks and reminders made from it.
• Time zone of your phone, so dates like “tomorrow at 7” are understood correctly.
• Device information (app version, OS version, push notification token) for security, notifications and crash reports.
• Usage events (for example, that a note was organized, and how many tasks it had). These never include the text of your notes.

3. How we use it

To sign you in, store and organize your notes, show your tasks, schedule reminders on your phone, keep the service secure, and understand which features are used. We do not sell your data and do not use your notes for advertising.

4. AI processing

When you send a note, its text, your time zone and your folder names are sent to an AI language model hosted by our provider (Replicate, Inc.) to organize it. The provider processes it to return a result and does not get your phone number or name. If the AI is unavailable, the note is organized on our server without it.

5. Who we share it with

• Hosting and AI providers that run the service for us (cloud hosting and database; the AI provider above).
• Sign-in providers: SMS one-time codes (MSG91, Google Firebase) and, if you choose it, Truecaller, which confirm your number.
• Google Firebase for push notifications and crash reports; analytics providers for usage events without note text.
• Authorities, when the law requires it.

6. Security and retention

Data is encrypted in transit. Notes are kept until you delete them or your account. Deleted notes are removed from active systems at once and from backups within 14 days.

7. Your rights

You can view and edit your notes in the app, and delete your account and all its data at any time. Under the DPDP Act you may also ask us to access, correct or erase your data, or raise a grievance with our Grievance Officer, Kaustubh Khandelwal (kaustubh.khandelwal4@gmail.com).

8. Children

Molo is not directed at children under 13.

9. Changes

We will post changes here and update the date above.