Mochi privacy policy

This policy explains which data the Mochi app uses, why, how long we keep it and what you can do about it, under Brazil’s General Data Protection Law (LGPD).

What we keep

• Account: e-mail (or the link to Google or Apple), display name and @, and the pet. Guests give no e-mail.
• Study: lessons done, answers, reviews, XP, coins, lives, achievements and your progress.
• Device: a device identifier to sign in safely and prevent fraud, the language and the app version.
• Purchases: the state of the Pro subscription, from the App Store or Google Play. We never see your card.
• Access records: date, time and IP of each use, as Brazil’s Marco Civil da Internet requires.

What we use it for

• To make the app work: signing in, keeping your progress and carrying it between devices.
• For security and against fraud, including limits that stop undue points and rewards.
• To improve Mochi, with usage analytics, unless you turn that option off.
• To notify you, with reminders and notifications, which you can turn off.

Your voice

Mochi uses the microphone only while you hold the speak button, to hear your pronunciation. The audio is sent to a pronunciation analysis service, under a processing contract and without retention, and we never store it. You can turn this analysis off in Settings › Privacy.

Who we share it with

Only with those who help us deliver the app, under contract, each seeing the minimum:

• Sign-in: Google and Apple, if you choose to sign in with them.
• Purchases and subscription: the App Store, Google Play and RevenueCat.
• Ads (only for people who are not Pro): Google AdMob, always non-personalized.
• Usage analytics and errors: PostHog (on from the install and switchable off in Settings › Privacy) and Sentry (with a code that does not show who you are).
• Hosting, e-mail, storage and network protection: Oracle Cloud in Brazil and Cloudflare.
• Technical operation logs: Grafana Cloud and New Relic, outside Brazil, for 14 and 8 days.

We do not sell your data. What other people see of you is only your public card (name, @ and the pet); your presence in the app is visible to friends only.

For how long

• While the account exists, so the app works.
• Deleted account: a backup copy for 180 days and then what identifies you is erased. See the details in Delete account.
• Access records: 6 months, confidential.
• Voice audio: never stored.

Your rights

• Access: Settings › Privacy › Download my data sends a file to your e-mail.
• Correct: edit your profile in the app.
• Delete: in the app (Settings › Delete account) or on the Delete account page.
• Withdraw permissions: turn off usage analytics and speech analysis in Settings › Privacy.
• Talk to us about any other LGPD right: suporte@learnmochi.app.

Children

Mochi is for people aged 13 or older. If you think a child under 13 created an account, write to suporte@learnmochi.app and we will delete it.

Changes

If this policy changes in an important way, we tell you in the app before it applies. Questions: suporte@learnmochi.app.