Mochi Talk Privacy Policy

Last updated: 2026-09-20

Kenya Yasumura ("we", "the operator") provides the mobile app "Mochi Talk" (the "App"). This policy explains how we handle your information.

1. Our core principle — your voice and API keys never reach our servers

Your conversation audio and content never pass through our servers. They are sent directly from your device to the AI provider you choose (e.g., Google).
Your API keys are stored only on your device (in the OS secure storage) and are never transmitted to us.
Conversation history, templates (prompts), edit history, and usage statistics are stored only on your device. We cannot access or collect them.

2. Information we process on our servers

Data	Details	Purpose
Anonymous account ID	Auto-generated identifier (no name or email)	Managing subscription status; support
Subscription status	Purchase/renewal/cancellation state (payments are processed by Apple/Google; we never receive card details)	Providing paid features
Usage analytics	Screen/interaction events tied to the anonymous ID (never conversation content)	Quality improvement
Crash reports	Error logs (never conversation content or API keys)	Bug fixing
Reports	If you report an inappropriate AI response: that response text and your reason	Safety improvement

3. Data that stays on your device only

AI provider API keys (OS secure storage), conversation history and its summaries, templates and their edit history, partner settings (name/avatar/voice), app settings, and usage statistics. You can erase these by deleting them in the app or uninstalling it.

4. Third parties

4.1 Sent directly from your device (not via our servers)

Your chosen AI provider: conversation audio, text, system prompts, and your API key.
- Google (Gemini): https://policies.google.com/privacy
- OpenAI (if selected): https://openai.com/privacy
- xAI (if selected): https://x.ai/legal/privacy-policy
- Each provider's data handling (including training use) is governed by your agreement and settings with that provider.

4.2 Services we use

Supabase (US): anonymous accounts and subscription status — https://supabase.com/privacy
RevenueCat (US): subscription management — https://www.revenuecat.com/privacy
Apple / Google: in-app purchase processing
PostHog (US): usage analytics — https://posthog.com/privacy
Sentry (US): crash reporting — https://sentry.io/privacy/

These services host data primarily in the United States. We rely on their contractual safeguards.

5. Purposes

We use the above information only to (1) provide and maintain the App, (2) manage paid features, (3) improve quality and fix bugs, (4) prevent abuse, and (5) respond to inquiries. We never sell your information.

6. Retention and deletion

"Delete account" in the App removes your anonymous account and associated server data. (Cancel your subscription separately in your App Store / Google Play settings.)
Long-inactive anonymous accounts are periodically deleted.
On-device data can be erased in the App or by uninstalling.

7. Security

Communications are encrypted (TLS). Server data is protected by access controls (row-level security). API keys are stored in the OS secure storage (iOS Keychain / Android Keystore).

8. Age

The App is intended for users aged 17 and older.

9. Your rights

You may request disclosure, correction, suspension of use, or deletion of your information under applicable law. Most actions (such as deletion) are available directly in the App; for anything else, contact us below.

10. Changes

We will announce policy changes in the App, with clear notice for material changes.

11. Contact

Operator: Kenya Yasumura — support@mochitalk.app
(Please include the "Support ID" shown in Settings → Account.)