AGR33D by MadMooze

Privacy Policy

Effective: September 14, 2026 · Last updated: September 21, 2026

AGR33D is a mobile app that helps you store agreements, understand their terms, obligations, and important dates, and set reminders (the "Service"). It is made by MadMooze LLC, 108 W Crystal Dr, Sanford, FL 32773 ("MadMooze," "we," "us," or "our"). We are responsible for the personal information described here. This policy explains what information the Service handles, why, who helps us process it, and the choices you have.

1. Information we collect

Information you give us

• Account information. Your email address and, if you choose to add one, a display name. Your password is handled by our authentication provider and is never stored in our application database.
• Beta invitations. During the invite-only beta, we keep a list of email addresses invited to create an account, along with when each invitation was sent and claimed.
• Agreements you upload. The PDF or image files you choose, including photos you take of a document, plus the file name, file type, size, page count where available, and a document fingerprint (a SHA-256 hash) we use to recognize duplicate uploads.
• Your edits and choices. Agreement titles, the party you identify as yourself, and any corrections you make to an analysis.
• Reminders. The event a reminder is for, its date, how far in advance you want to be reminded, the local time, your device's time zone, and the reminder's status.
• Support messages. If you email us, we receive your email address and whatever you include in your message.

Agreements often contain other people's names and may contain financial, health, or other sensitive details. We process that information only because it is inside a document you chose to upload. Please upload only documents you have the right to share, and leave out anything the Service does not need.

Information the Service creates

• Analysis results. The structured summary generated from your agreement: its type, the parties, obligations, payments and other financial terms, important and relative dates, renewal and cancellation terms, supporting quotations from the document, and flags for items that need a closer look.
• Plan and usage records. Your plan (for example, Free, Plus, Pro, or a complimentary beta plan), your analysis counts against plan limits, and for each analysis: its status, start and finish times, the AI provider and model used, the amount of AI processing used and its cost, and request identifiers.
• Diagnostic information. When an analysis fails, we record limited error details so we can fix the problem. Our service providers also keep standard operational logs (such as request times and IP addresses) to run and secure their systems.
• Account identifiers. An internal user ID that links your records to your account.

Information we do not collect

AGR33D does not collect your location, contacts, browsing or search history, or data from health or fitness services, and does not connect to your bank or other financial accounts. The app does not use an advertising identifier. We do not currently process payments; if we add in-app purchases, we will update this policy first.

2. How we use information

We use information to:

• create and secure your account, sign you in, and reset your password;
• store your agreements privately and show them back to you;
• analyze agreements you ask us to analyze and display the results;
• recognize duplicate documents and reuse an existing analysis instead of running it again;
• apply plan limits on storage, pages, and analyses, and control AI costs;
• schedule the reminders you set;
• delete agreements or your account when you ask;
• diagnose failures, prevent abuse, and keep the Service secure;
• answer your support requests; and
• meet legal obligations and enforce our Terms of Use.

We do not use your agreements or analysis results for advertising, and we do not use them to train AI models.

3. AI analysis of your documents

When you ask AGR33D to analyze an agreement, our server retrieves the file from private storage and sends its contents, along with the agreement's title and file name, to OpenAI, our AI provider, in two steps: one to extract the terms and one to check that extraction against the document's own text. Your account ID and email address are not included in what we send for analysis. The results come back to our server, where they are checked and saved to your account.

• No training. Under OpenAI's API terms, content sent through its API is not used to train OpenAI's models unless the customer opts in. We have not opted in.
• Provider retention. We instruct OpenAI not to store analysis responses for later retrieval. OpenAI may still keep API content for a period it sets, for example to complete the request and to monitor for abuse. We do not control that period; see OpenAI's API data controls and policies.
• AI can be wrong. Analysis may be incomplete or incorrect. Always check it against the original document. AGR33D is not a law firm and does not give legal advice.

Analyses created before September 6, 2026 were produced using Google Gemini and remain in your account until you delete them. We no longer send documents to Google for analysis.

4. Service providers and sharing

We share information only with companies that help us run the Service, and only as needed for them to do that work for us:

Each provider handles information under its own privacy policy and terms, which govern how long it keeps data and where it processes it. Follow the links in the table for details.

We may also disclose information when we believe in good faith it is required by law or legal process; to protect the rights, property, or safety of our users, MadMooze, or others; to investigate fraud or security problems; or as part of a merger, acquisition, financing, or sale of assets, in which case this policy will continue to apply to your information or you will be notified of changes.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

5. Device permissions and local data

• Camera and photos. Used only when you choose to photograph a document or pick an image to upload. AGR33D does not browse your photo library and does not use the microphone.
• Files. The system document picker gives the app access only to the file you select.
• Notifications. Reminders are scheduled as notifications on your device. Notification text is kept generic so agreement titles, party names, and amounts do not appear on your lock screen. The app does not use remote push notifications.
• Sign-in session. The app stores your sign-in session on your device so you stay signed in.

You can turn camera, photo, and notification permissions off at any time in your device settings. Some features will not work without them.

6. Advertising, analytics, and tracking

AGR33D contains no advertising, no third-party analytics or crash-reporting tools, and no tracking across other companies' apps or websites. This website sets no cookies and loads no analytics. Because we do not track you, there is nothing for a "Do Not Track" or Global Privacy Control signal to turn off. If that changes, we will update this policy before the change takes effect.

7. Retention and deletion

We keep your account information, documents, analyses, and reminders for as long as your account is active, unless you delete them sooner.

• Deleting an agreement. Deleting an agreement in the app removes its uploaded file, its analysis, and its reminders. We keep a basic record of the analyses you used, without the document or its contents, so plan limits and costs stay accurate.
• Deleting your account. Choosing Delete Account in Settings permanently removes your uploaded files and your account, along with your agreements, analyses, reminders, profile, plan, and usage records. The app also cancels the reminder notifications it scheduled on that device. If deletion fails, the app tells you it failed.
• Beta invitation records. Your invited email address may remain on the beta invitation list after you delete your account. Email us and we will remove it.
• Backups and logs. Copies may remain in our providers' backups and logs until those are overwritten on the providers' own schedules, which we do not control. See Supabase's privacy policy and security page. We may also keep information longer when the law requires it or to resolve a dispute or security incident.

8. Security

We protect your information with measures including encrypted connections, private file storage, database rules that limit each account to its own records, server-side handling of provider keys, and hosting that encrypts stored data. No method of storage or transmission is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and contact us right away if you think your account has been accessed without your permission.

9. Your choices and rights

In the app, you can:

• view and edit your agreements and their analyses;
• delete individual agreements;
• manage camera, photo, and notification permissions; and
• delete your account.

Depending on where you live, you may also have the right to ask us to confirm whether we process your personal information, give you access to or a copy of it, correct it, delete it, or restrict or object to certain processing, and to appeal if we decline your request. You will not be treated differently for using these rights. To make a request, email privacy@madmooze.com from the email address on your account, or tell us how to verify that the account is yours. We will respond within the time required by applicable law. You may authorize an agent to make a request for you where the law allows, and we may ask for proof of that authorization.

If you live in California or another US state with a consumer privacy law, you have the right to know what personal information we collect, use, and disclose; to access, correct, and delete it; and not to be discriminated against for exercising these rights. In the past 12 months we have collected the categories described in Information we collect, for the purposes described in How we use information, and disclosed them only to the service providers listed. We do not sell or share personal information for cross-context behavioral advertising, and we use sensitive information that appears in your documents only to provide the Service.

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your information to provide the Service you requested, for our legitimate interests in securing and improving it, and to comply with the law. You may also complain to your local data protection authority.

10. Children

AGR33D is for adults. You must be at least 18 years old to create an account, because the Service is built for reviewing contracts and other legal documents. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has created an account or given us personal information, contact us and we will delete it.

11. Where data is processed

MadMooze is based in the United States. Our service providers may store and process your information in the United States and other countries whose data protection laws may differ from those where you live. Account emails sent through Resend are processed in the United States. Where and how each provider processes data, and the safeguards it uses for international transfers, are described in its own policies: see Supabase, OpenAI, Resend, and Zoho.

12. Changes to this policy

We will update this policy when the Service, our providers, or the law changes, for example if we add in-app purchases, analytics, or a different AI provider. We will change the date at the top of this page, and if a change materially affects how we handle information you have already given us, we will notify you in the app or by email before it takes effect.

13. Contact us

For privacy questions or requests, contact: