Privacy Policy

Mpalo Inc. builds systems for preserving, representing and using memory across time. Memory can contain some of the most intimate information a person creates. This policy explains what we process, what we create from it, why each category exists, how long it lasts, who may access it, and what happens when you ask us to delete it.

Mpalo Inc. is a Delaware Public Benefit Corporation. Our charter states that Mpalo exists to pursue, with honesty and precision, the question of what it means to preserve, represent, and augment a human mind. A representation is not the person. Greater technical understanding of a person does not give Mpalo greater moral authority over them.

When you use the Mind Platform directly, Mpalo ordinarily determines the purposes and means of processing and acts as the controller or equivalent responsible business under applicable law. When an organization uses the Palo Bloom API under its instructions, Mpalo ordinarily acts as that organization's processor or service provider for that data. The organization remains responsible for its notice, permissions and instructions. A Data Processing Addendum applies when one is agreed for that use.

Privacy questions and requests: privacy@mpalo.com. Operational support runs through the support desk.

Protected Memory Data means memory you provide and representations Mpalo creates from it while they remain associated with you, your account, your workspace, or an identifiable person.

• Source memory. Conversations, notes, recollections, files, images, recordings where supported, and related metadata.
• Portable representations. Embeddings or other representations intentionally made available for export or independent use.
• Generated representations. Summaries, reconstructions, temporal information, episode relationships, labels, relevance or confidence signals, and other derived context where a feature creates them.
• Internal representations. Semantic and episodic latent states, retrieval indexes, caches, graph data and other technical states needed to operate memory. Calling a representation internal, derived, pseudonymous or latent does not remove it from these protections while Mpalo can reasonably associate it with a person.
• Future sensitive inputs. If a specific product or research study supports neural signals, health-related information or another especially sensitive category, that feature receives a separate notice and eligibility or consent flow before collection begins.

We process information to provide the service you request, create and retrieve memories, maintain security and integrity, answer support and privacy requests, manage billing, meet legal obligations, and operate features you enable. Where applicable law requires a lawful basis, the basis depends on the purpose. Core service processing may be necessary to perform our contract. Security and narrowly defined operational processing may rely on legal obligations or legitimate interests. Optional processing is identified separately.

Consent is a condition of operation for material memory and cognition processing under Mpalo's charter. That internal principle is broader than any one statutory legal basis. Accepting general terms does not, by itself, authorize a new category of cognitive representation, research study, neural collection or materially different use. We provide an additional notice and an affirmative choice where our doctrine or applicable law requires one. Declining optional processing does not disable unrelated service functions.

Mpalo does not provide employees with unrestricted access to Protected Memory Data. Staff may access information when necessary for a defined purpose such as a support request you initiated, a security or abuse investigation, a technical incident, a legal obligation or separately authorized research. Access is limited by role, subject to confidentiality obligations, and logged where the relevant system supports access logging. Exceptional access receives additional review.

You can request access to, correction of or deletion of your personal information. We provide these processes to all users, subject to account security, the rights of other people and legally required retention.

A standard memory export includes source memories, available metadata, user-facing summaries, Portable Representations intentionally created for independent use, and a machine-readable manifest describing formats and representation versions. Some proprietary internal Bloom states are not exposed as raw model artifacts. That does not limit an access right that applicable law gives you. We respond to requests for derived information in a form consistent with applicable law while protecting other people's rights, system security and legitimate trade secrets.

Memories can concern people who never created an Mpalo account. We may limit export or access where necessary to protect another person's legal rights or safety.

Mpalo's charter commitment is exact: if Mpalo is ever acquired or changes ownership, all user memory data is automatically deleted. It is not transferred to any acquiring entity. You cannot acquire Mpalo and receive its users' memories.

For this policy, user memory data includes Protected Memory Data and the linked source, portable, internal, graph, summary, index, cache and training representations Mpalo holds. A successor does not receive an independent license to use that data for a product, advertising, training or other commercial purpose. Information that Mpalo is legally prohibited from deleting remains isolated and is used only for the legally required purpose until the restriction ends.

We use measures appropriate to the sensitivity, volume and purpose of the information we process. They include encryption, identity and access controls, security logging, secrets management, vulnerability management, incident response, backup protection and review of privileged access. Current implementation details and certifications are described separately on our Safety & Security page. We do not imply a certification we do not hold.

We notify regulators, customers and affected people when applicable law requires notification. Where we can provide additional information without increasing security risk, compromising an investigation or violating law, we publish what occurred and what we changed.

We preserve every published version of this policy. Material changes receive a new version, a summary and notice inside the product for signed-in users. If a change materially expands how existing Protected Memory Data may be used, continued use alone does not authorize a new optional purpose that requires consent. That processing begins only after the required authorization.