Privacy

The software

Mojulo is a local substrate — a SQLite database and a process supervisor on your own hardware. It is keyless: your agent installs it from npm and runs it on localhost. Because of that:

• No telemetry. Mojulo does not track usage, does not report crashes or metrics, and makes no analytics or "phone-home" calls. There is no install to register and no account to create.
• Your data stays local. Recipes, uploaded documents, and every artifact you mint — objects, worlds, games, exports — live in a SQLite file and folders on your machine. The maintainer never receives them and has no ability to access them.
• Inference is yours. The reasoning runs on the agent you already run, through your own LLM-provider relationship and key. Mojulo does not proxy your prompts through any service of the maintainer's.
• The MCP surface is loopback-only. Mojulo's control plane binds to localhost and is not exposed to the network. It is reachable by agents running on the same machine, not by anyone reaching in.

What this covers — the official package

Everything above is a statement about the mojulo the maintainer publishes: the mojulo package on npm, built from the source at github.com/zombico/mojulo, installed and run on your own hardware. That is the build whose behavior the maintainer can answer for, and the guarantees on this page are guarantees about it.

Mojulo is open source under Apache-2.0, and that license deliberately lets anyone fork it, modify it, redistribute it, or run it as a service for other people. Those are legitimate uses of an open license. They are also outside the maintainer's control, so they are outside this policy:

• A modified build is its author's software. A fork can add telemetry, add an account, or send your data somewhere — and can still be called mojulo. If you did not install it from npm or build it from the published source, the promises on this page are not the ones that apply to it; the party who gave it to you owes you their own answer.
• A hosted mojulo is somebody else's service. If a third party runs mojulo on their infrastructure and gives or sells you access, your prompts, your documents and everything you mint are on their servers — that is what hosting means, whatever this page says. Their privacy policy is the one that governs. The maintainer is not a party to it, receives nothing from it, and can see nothing of it.
• The maintainer hosts nothing. There is no official mojulo cloud, no managed instance, no paid tier. Anything sold as one is not the maintainer's, and is not affiliated with, endorsed by, or vetted by the maintainer.

The check is the same one the rest of this page rests on: install it yourself and read it. The source is public and the release you installed is the one this policy describes.

What you host

When you export something you built — a self-contained HTML file, a Godot project, an app — and put it where people can reach it, it runs on infrastructure you choose: your machine, your cloud account, a static host. Mojulo is not in that path and receives nothing from it.

Any personal data that flows through a thing you built and hosted — visitor traffic, form submissions, messages — is processed on your infrastructure, under your control. The maintainer does not see it. Obligations to the people whose data passes through (notice, consent, retention, deletion) are yours; see the Terms.

This website

mojulo.ai is a static, informational site. It has no login, no account, and no user-generated content.

• No cookies, no cross-site tracking. The site sets no cookies and embeds no third-party trackers, ad pixels, or social widgets.
• No analytics, no off-site requests. Fonts, styles, and every other asset are served from this site itself. Opening a page makes no request to any third party — no analytics service, no CDNs, no ad networks, no social widgets. Check the network tab; it should show only mojulo.ai.
• Outbound links (GitHub, npm, and the like) go to services with their own privacy policies, which govern once you leave this site.

Contact

Mojulo is published by 2364758 Ontario Inc., an Ontario corporation ("the maintainer"). If you email through the contact link, we receive your email address and whatever you write, and use it only to reply. We do not sell, rent, or share it.

Questions about privacy: hello@mojulo.ai.

Found a security issue in the software? Use GitHub's private vulnerability reporting rather than a public issue — the process is in SECURITY.md.

Changes

This policy may be updated as the site changes. The current version is the one published here.