Privacy policy

Last updated: November 4, 2026

Who we are

maku is a virtual pet app for iPhone and Android, made by MONKE BUSINESS INC ("we"). This policy explains what maku collects, why, who else handles it, and how you can see or delete it. It covers the apps, including TestFlight and Play test builds, the server they talk to, and the website at maku.fit. Some test builds still show the old name.

Questions about this policy and your data go to general@maku.fit. For help using the app, write to support@maku.fit.

Deleting your account

maku is published by MONKE BUSINESS INC. You can delete your account and its data in the app, or ask us to by email.

In the app

1. Open Profile and tap Account.
2. Tap Delete account, the red row.
3. Tap Delete to confirm.

This works whether or not you signed in. Your data is erased from our server straight away, and the app starts over as a new player.

By email

If you can't open the app, write to general@maku.fit from the address you signed in with and ask us to delete your account. We reply within 30 days. A player who never signed in is known only by a token on their phone, so we can't match an email to them. Use Delete account in the app on that phone.

To remove an address you gave on the maku.fit signup form, write to the same address and name the email to remove.

What we delete

Everything our server holds under your player. That includes your monke and its care history, your time zone, your daily Health totals and workouts, your Go sessions, your chats and memories, your chat consent records, your coconuts and items, your friends and blocks, your event progress, and your email address and sign-in details.

What we keep

• Data already written to Apple Health or Health Connect stays there, under your control.
• Our database keeps restore points, so deleted data can remain in them for up to 30 days. After that it is gone.
• Cloudflare's request logs for our server, which Cloudflare keeps for a short time under its own rules.
• Copies MiniMax may hold of your chat messages under its own terms. We can't remove them (see Chat).
• A coconut gift's own record, which doesn't name you.
• Event prize records in our admin log, which keep a player id and no name.
• Records of sign-in code requests, for up to two days.
• Brevo's own record of the sign-in emails it sent, under its own rules.
• Summary messages already sent to us on Telegram. The event evening message names the top five monkes.
• Our server's own logs, for a short time. They can hold a player id.
• If you invited a friend, the record of that invite stays without your player id, so your friend is still paid.

What we collect

You can use maku without an account. On first launch the app creates a player for your phone, identified by a random token kept in the phone's secure storage (Keychain on iPhone, an encrypted file with a key in the Android Keystore on Android). Our server keeps only a one-way hash of that token.

We don't collect your contacts, photos, location or advertising identifiers. The apps contain no ads and no analytics or tracking code of ours.

Network addresses

We never store your IP address as it is. We keep a one-way hash of it, made with a secret value, in three places:

• When you ask for a sign-in code, with the code request, for up to two days.
• When you enter a friend code that matches no one, for about a day.
• When you sign up on maku.fit, for 30 days (see The maku.fit website).

Health data

maku reads Health data only after you allow it, and you can turn access off at any time in the Health app (iPhone) or Health Connect (Android).

• What the app reads on iPhone: steps, walking and running, cycling and swimming distance, exercise minutes, active energy, stand hours, mindful minutes, sleep and workouts.
• What the app reads on Android: steps, distance, exercise sessions, active energy, sleep, mindful minutes where Health Connect offers them, and your height. Two background jobs read recent workouts and today's totals, on the phone only, to decide whether to show a reminder.
• What reaches our server: a total per day for steps, distance, exercise minutes, active energy, stand hours, mindful minutes and sleep, with the part of steps, exercise, mindful minutes and sleep that you typed in by hand, and each workout's record id, type, start and end time, energy and distance, and whether it was typed in by hand or saved by maku. Each upload also carries your time zone. The first sync sends up to 35 days; after that the app sends the days of the last week that changed. On iPhone the app also syncs Health in the background now and then. The individual readings behind the totals stay on your phone. Heart rate and medical records are never read.
• What the app writes: each Go session can be saved to Health as a workout, so it counts in your other fitness apps.
• What stays on your phone: your height. On Android the app reads it to estimate distance from steps during Go, and never sends it to our server.

Go uses your phone's motion sensor to count steps while a session runs. Go is currently hidden unless we turn it on for you.

Health data is used to run the game and, if you switch it on, the chat. We never sell it, use it for advertising or share it with data brokers, and we don't use it to train AI models. With the Health switch in Chat turned on, rounded Health figures go to MiniMax with each chat message (see Chat).

Chat

Your monke's replies are written by an AI model from MiniMax, which our server sends each chat message to. The monke is an AI, and the app says so.

Your permission

Chat is for players 13 and over. When you first open Chat, the app asks your age. If you answer 13 or over, it then asks your permission to send your messages to MiniMax. A separate switch, off until you turn it on, lets your monke talk about your day using rounded Health figures. You can change both in Profile, under Chats & memories. If the consent screen changes what is sent, the app asks again. Until you agree, nothing you write goes to MiniMax.

What MiniMax receives

With every message, MiniMax receives:

• your message and up to 20 earlier messages;
• your monke's name, mood, hunger, energy, happiness and hygiene, its stage and age in days, and whether it is asleep or glowing;
• the local time where you are, worked out from your phone's time zone;
• the memories your monke keeps, up to 100;
• a note if you wrote something earlier that day that worried the monke;
• when you ask how the game works, a short guide to the game.

With the Health switch on, MiniMax also receives today's steps, exercise minutes, mindful minutes and sleep, rounded (8,412 steps goes as about 8,500), with a note on whether each is more, less or about the usual for you. It receives your recent workouts and Go sessions with rounded times and distances, your running Go session if you have one, and, for an adult or elder monke, its fitness level. It also receives a summary of your last 30 days of Go sessions, with the number of sessions of each kind, their total minutes and the longest one (these minutes are exact), and the number of days in a row with a session. When today has no Health data yet, it receives the time of your last Health sync. Your last week goes only when your message asks about it. The exact figures stay on our server and are filled into the reply on its way to you.

With the Health switch off, MiniMax receives no Health figures, no Go sessions and no fitness level, and memories learned while the switch was on are left out. Turning the switch off takes effect from your next message. What MiniMax already received stays with MiniMax.

MiniMax never receives your email address, your player id or your device token.

With each chat message the app also sends your phone's country, so the reply can point to a help line near you. We don't store it, and we don't send it to MiniMax.

What MiniMax does with it

MiniMax is run by Nanonoble Pte. Ltd. in Singapore. When we checked its API terms and API privacy policy, both dated March 30, 2026, on October 20, 2026, they said it stores what it receives in the United States and may use that content, and the replies it writes, to provide, maintain, develop and improve its services, for as long as it considers necessary. The chat consent screen tells you before you agree that MiniMax may keep what it receives and use it to improve its services. Deleting your chats or your account removes them from our server but doesn't reach copies MiniMax may keep.

Memories

After a conversation, or when you ask your monke to remember something, the AI notes short facts you mentioned, such as a pet's name or a race you're training for, so your monke can remember you. This is a second request to MiniMax that carries the conversation and the memories already saved. You can read every memory in Profile, under Chats & memories, and remove any of them. A removed memory is no longer used. Our server keeps the hidden record until you use Delete all chats and memories or delete your account.

How long chats are kept

• Messages are kept until you delete them, unless you choose 7, 15, 30, 60 or 90 days in Chats & memories. Older messages are then deleted. Before that, your monke may read them once for memories, if you have agreed to chat.
• Delete all chats and memories, in the same place, erases every message and memory at once. Messages you sent today leave an empty row with no text, so the daily limit of 25 messages can't be reset by deleting.

Safety

Your monke doesn't give medical advice. A message that matches our crisis wording gets a fixed reply written by us and is not sent to the AI. If the AI itself flags a message as a crisis, its draft is thrown away and the fixed reply goes out instead. Neither kind of message is turned into a memory. The reply points to your local emergency number and to findahelpline.com. After about three hours of chat the monke suggests a break. We record when you agree or change a choice, so we can show later what you agreed to. Our admin pages show how many messages a player has sent and never show their text. We store the number of tokens each AI request used and never its text.

Friends

You add a friend by entering their invite code or opening their invite link. A friend can see your monke's name, its stage and kind, the pose and fitness level of an adult or elder, and how many of today's daily quests are done. A friend can't see your chats, your Health figures or your email address. A friend's app receives your player id, which it never shows. You can remove a friend or block a player. A blocked player isn't told, and can't add you again.

An invite link opens a public page for that code.

Events

At an event you join with a code, and you can scan station codes with your phone's camera, which the app uses only to read the code. You can also scan a friend's code the same way. On Android the scan uses the code scanner in Google Play services. Our server receives only the text of the code. In the app you see your own place, the number of players, the crowd's total, and your crew's size and steps against its target. The event's public booth page lists the top ten monke names with their event coconuts, and a short line of recent moments with monke names. It shows no steps. Prizes may need an email address from signing in, so a winner can be reached.

The maku.fit website

Email signup

The signup form on maku.fit stores the email address you type and the time. It also stores a one-way hash of your network address, made with a secret value, which we clear after 30 days. We use that hash to stop one network from flooding the form, and keep the attempt records it needs for up to two days. The form has a hidden field that only spam programs fill in. Whatever is typed into it is thrown away and stored nowhere.

We use the address only to tell you when maku is ready. We send no confirmation or welcome email. We delete an address when you ask us to. By 4 November 2027 we will also delete every address automatically, 12 months after maku launches. We never write signup addresses to our logs.

Invite page

The page a friend's invite link opens shows the code from the link and nothing else about you. It stores nothing and looks up no player, friend or code in our database. The only database read it can make is the page's own translated text. The Apple and Google buttons on it link to maku's TestFlight page on Apple and its testing page on Google Play, which handle your visit under their own terms.

Fonts and cookies

The pages set no cookies and run no analytics. The landing page, this policy, the terms and the invite page load the fonts Comfortaa and DM Sans from Google Fonts, so Google receives your IP address and browser details when one of them loads. The invite page tells your browser not to pass on the address of the page you are on, so Google does not learn which invite code was opened. The other pages pass on only the site name, maku.fit.

Notifications

Reminders and invitations are local notifications scheduled on your phone. Our server sends no push notifications. Go's Live Activity on iPhone is started by the app. You can turn reminders and invitations off in Profile, and all notifications in your phone's settings.

How we use your data

We use your data to run the game: to work out your monke's mood and growth, make it glow on active days, write its chat replies, send its reminders, connect you with friends, and keep your monke when you change phones. We also use it to fix bugs and keep the service working.

We don't sell your data, show ads or build advertising profiles, and we don't train AI models on your data or chats. What MiniMax may do with chat content is described under Chat.

Coconuts and items live only in the game. They have no cash value, and maku has no way to buy them with money.

Providers

These companies handle data for us, each only for its task:

Our server can send sign-in emails through Resend instead of Brevo, and one is used at a time. Brevo is the one set up today. The sign-in email comes from hello@maku.fit, under the sender name maku, and holds your code.

We also send ourselves summary messages through Telegram. They hold no player names or chat text, except the top five monke names at the end of an event evening.

Where your data is

Our database is stored on Cloudflare's infrastructure in Western North America. Chat content that goes to MiniMax is processed by MiniMax as described under Chat.

Deleting your account is described under Deleting your account.

How long we keep data

• Automatic deletion of unused accounts starts by 4 November 2027. From then, a player who never signed in and has not opened the app for 12 months is deleted with everything held under the player. We can't warn these players, because we have no email address for them.
• From the same date, a signed-in account not opened for 24 months is deleted, after we email the address on the account 30 days before. Until then we delete accounts only when you ask.
• You can delete your account in the app, or ask us to, at any time.
• Chat messages are kept until you delete them, unless you choose 7, 15, 30, 60 or 90 days in Chats & memories.
• Email addresses on the maku.fit signup list are deleted when you ask, and from 4 November 2027 automatically 12 months after maku launches. The network hash kept with an address is cleared after 30 days.
• Sign-in codes expire after 10 minutes. Records of sign-in code requests and signup attempts are deleted within two days.

Security

The apps talk to our server over HTTPS. We store your device token, sign-in codes and network addresses only as one-way hashes, and the hashes of codes and addresses use a secret value kept outside the database. Sign-in codes allow five tries, and we limit how many codes, friend codes and signups one email, phone or network can try. No system is perfectly safe, and we can't promise that data will never be exposed.

Your choices

• Health access: change what maku can read in the Health app or Health Connect. The game keeps working without it.
• Chat: turn Chat with AI and the Health switch off in Profile, choose how long messages are kept, remove single memories, or delete everything.
• Notifications: turn reminders and invitations off in Profile, and all notifications in your phone's settings.
• Your account: delete it in Profile, as described above.

You can write to general@maku.fit to ask what we hold about you, to correct it, or to delete it. We'll answer within 30 days.

Children

maku can be used without giving an age. When you start the app we don't ask how old you are, and nothing stops a child from using it. A player of any age can allow Health access, sign in with an email, name a monke, add friends and join events, and we collect the data described above from that player in the same way as from anyone else.

Only Chat has an age limit, 13 and over. When Chat opens, the app asks your age with a number picker from 5 to 99. If you answer under 13, the app says Chat is for players 13 and over and everything else stays available. Our server saves only that you answered under 13 and when, not your age. An answer of 13 or over is saved the same way. maku does not check anyone's age or ask for a parent's consent, and the app can't check the answer. Until a player has answered 13 or over, nothing they write goes to MiniMax and no memory is made. A message that matches our crisis wording still gets the fixed reply described under Chat, and is saved with the player's other messages.

If you are a parent and want a child's data deleted, write to general@maku.fit and we'll delete it, or use Delete account in the app on the child's phone.

Changes

When this policy changes, we'll update the date at the top. For changes to what we collect or who handles it, we'll tell you in the app before they take effect.

Contact

MONKE BUSINESS INC · Privacy and legal: general@maku.fit · Help with the app: support@maku.fit