Privacy Policy

This Privacy Policy explains how [Your Company / Legal Entity Name] (“Mochi”, “we”, “us”) collects, uses, and shares information when you use the Mochi mobile app and this website (together, the “Service”). By using the Service, you agree to this policy.

1. Information we collect

Account information

When you create an account we collect your email address and, if you sign in with Google or Apple, the basic identifiers those providers return. We do not receive or store your social-login password.

Learning data

To personalise and track your learning, we store your chosen HSK level and topics, the essays generated for you, saved vocabulary, quiz and practice results, mastery and streak progress, XP and level, and daily-assignment activity.

Voice recordings (pronunciation practice)

When you use Speak/pronunciation features, your microphone audio is processed to assess your pronunciation. Audio is sent to our speech-assessment provider (Microsoft Azure Speech) for analysis. We use this audio only to score and give feedback on your speech for that session; we do not use it to identify you. [Confirm your retention behaviour here — e.g. “audio is not stored after assessment” — and update accordingly.]

Usage, device, and diagnostic data

We collect analytics about how the Service is used (for example screens viewed and feature interactions), basic device and app information (device type, OS version, app version, language), and crash and error diagnostics to keep the app stable.

Notifications

If you enable notifications, we store a push token so we can send reminders. You can turn notifications off at any time in your device settings.

Purchases

If you subscribe, we record your subscription status and entitlements. Payments are processed by the Apple App Store or Google Play — we do not receive your full payment-card details.

2. How we use information

• To provide, personalise, and improve the Service and your learning experience.
• To generate essays and evaluate your writing, quizzes, and pronunciation.
• To maintain your account, progress, streaks, and entitlements.
• To send notifications you’ve opted into.
• To monitor performance, debug issues, and prevent abuse.
• To comply with legal obligations.

3. AI and automated processing

Mochi uses third-party AI services to generate learning content and evaluate your input. Your essay text, written sentences, and pronunciation audio may be sent to these providers (currently Anthropic’s Claude for text generation and grading, and Microsoft Azure for speech assessment) to produce your results. These providers process the data under their own terms; we encourage you not to submit sensitive personal information in free-text or voice input. AI-generated content can be inaccurate and is provided for learning purposes only.

4. How information is shared

We do not sell your personal information. We share data with service providers who help us run the Service, including:

• Google Firebase — authentication, database, cloud functions, and hosting.
• Anthropic — AI generation and grading of learning content.
• Microsoft Azure — pronunciation/speech assessment.
• PostHog — product analytics.
• Sentry — crash and error reporting.
• Apple / Google — sign-in and subscription processing.

We may also disclose information to comply with the law, enforce our terms, or protect the rights and safety of our users and the Service.

5. Data retention

We keep your information for as long as your account is active or as needed to provide the Service, then delete or anonymise it within a reasonable period, unless a longer retention period is required by law. [Specify your retention periods.]

6. Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can request account deletion in the app or by contacting us at [contact email]. We will respond as required by applicable law (including the GDPR and CCPA where they apply).

7. Children’s privacy

The Service is not directed to children under [13 / the minimum age in your region], and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us and we will delete it.

8. Security

We use reasonable technical and organisational measures to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. International transfers

Your information may be processed in countries other than your own, including by the service providers listed above. Where required, we rely on appropriate safeguards for such transfers.

10. Changes to this policy

We may update this policy from time to time. We will revise the “Last updated” date above and, where appropriate, notify you in the app.

11. Contact us

Questions about this policy? Contact us at [contact email] [or postal address, if required in your jurisdiction].