Get Mochi

Privacy policy

What we collect, and what we never see.

Last updated [date of publication].

Draft for review. Plain-language draft written for the founder to check, complete and have reviewed before launch. Text in square brackets is still to be filled in.

Who is responsible

REPLACE, REPLACE. Contact: REPLACE.

When you buy

Dodo Payments runs the checkout as our merchant of record. They collect your payment details and billing address under their own privacy policy; we never see your card number. From each order we keep your email address, the payment reference, the amount, the currency and which licence key you received, so we can deliver the key, answer support requests and handle refunds.

If email is set up, we send your key through Resend, our email provider, which processes your address to deliver it.

When you activate

Mochi sends our licence server your key and a one-way hash of your Mac’s hardware ID. We store that hash to keep the key on one Mac. The hardware ID itself never leaves your Mac. The server also keeps a short log of activation attempts, with hashed IP addresses, to stop abuse.

Inside the app

Mochi is local-first. Your tasks, notes, agent sessions, usage and dictated audio stay on your Mac. API keys and tokens are kept in an encrypted vault protected by the macOS keychain. We run no analytics or tracking in the app, and it sends no crash reports.

When you connect a service, Mochi talks to it directly from your Mac with your own account: Anthropic (the text of voice requests and mail you choose to triage), Google (Gmail and Calendar), GitHub, YouTube and your Home Assistant hub. Their privacy policies apply to that data. None of it passes through us.

This website

The site sets no advertising or analytics cookies. Our host, Vercel, keeps standard server logs (such as IP address and pages requested) for security and operations.

How long we keep it

Order and licence records are kept for as long as your licence exists, and as long as tax and accounting law requires after that. [Founder to confirm retention periods.]

Your rights

You can ask to see, correct or delete the personal data we hold about you, and object to how we use it. Write to REPLACE. Some records we must keep by law. You can also complain to your local data protection authority.