Privacy Policy

Introduction

MoCHi is a personal AI workspace that allows users to connect AI providers, manage conversations, upload files, generate content, customize their workspace, and access AI-powered tools.

This Privacy Policy explains what information may be collected, how it is used, how it is stored, and the choices available to users.

By using MoCHi, you agree to the practices described in this Privacy Policy.

Age Requirement

MoCHi is intended only for individuals who are at least 18 years old.

By creating an account or using MoCHi, you represent that you are 18 years of age or older.

MoCHi does not knowingly collect personal information from individuals under 18 years of age.

Information MoCHi Stores

MoCHi may store information necessary to operate your workspace, including:

• Account information received through authentication providers.
• User preferences and settings.
• Chat conversations and messages.
• Memories and saved workspace data.
• Pinned conversations.
• Provider configuration information.
• Usage and rate-limit records.
• Uploaded files and attachments.
• Generated images and related metadata.
• Shared conversation snapshots.
• Archived conversations.
• Workspace customization settings.

Storage may vary depending on enabled features, service configuration, and future product updates.

Provider Credentials

Provider API keys and credentials may be stored in encrypted form when necessary to provide service functionality.

MoCHi displays only limited identifying information such as key hints where appropriate.

Provider credentials are used to perform user requests and approved background tasks and are not intentionally disclosed to other users.

While reasonable security measures are implemented, no method of storage, transmission, or processing can be guaranteed to be completely secure.

How Information Is Used

MoCHi may use stored information to:

• Authenticate users.
• Operate the workspace.
• Route requests to selected providers.
• Maintain conversations and memories.
• Synchronize supported settings.
• Generate requested outputs.
• Enforce limits and security protections.
• Improve reliability and functionality.
• Prevent abuse and misuse.

MoCHi does not sell personal information to third parties.

MoCHi does not use private user conversations to train its own AI models.

Third-Party Services

MoCHi relies on third-party services to operate.

These services may include:

• Authentication providers.
• Hosting providers.
• Database providers.
• Storage providers.
• AI model providers.
• Search providers.
• Analytics or infrastructure services.

Examples may include OpenRouter, OpenAI, Anthropic, Google, GitHub Models, Hugging Face, Supabase, Cloudflare, Vercel, and other services selected by users or configured by the deployment operator.

These services operate under their own terms, privacy policies, retention practices, and security procedures.

Once information is sent to a third-party service, its handling is governed by that service's policies.

Google User Data and Gmail

Google integrations are optional. Signing in to MoCHi Web with Google does not by itself connect Gmail or authorize Android Workspace integrations. Each connector requests access through Google's consent screen when you choose to connect it.

MoCHi Web Gmail: the Web connector requests Gmail compose permission to create a draft after you review and confirm the recipient, subject, and message. This Web connector does not read, list, search, or summarize Gmail inbox messages or threads. It does not send email; you review, edit, and send the draft in Gmail.

MoCHi Web stores the connected Google account email, granted scope, token expiration, and encrypted OAuth access and refresh tokens as needed to provide its Gmail connector.

MoCHi Android Workspace: the Android app can connect Gmail, Google Calendar, Google Contacts, Google Docs, and Google Drive. Its access differs from the Web Gmail connector and depends on the integration and permissions you select.

• Android Gmail can read and search messages and threads, including message content and metadata. Manage access additionally permits composing drafts and sending email through approved actions, including approved scheduled sends.
• Android Calendar can read calendar lists and events; manage access permits event changes. Contacts access reads contact information. Docs and Drive can read document or file content and metadata and, with manage access, make supported changes.
• Docs and Drive default to files created by or explicitly opened with MoCHi (drive.file). Optional all-files access requests broader read or manage permissions for the selected integration. The Google consent screen lists the actual permissions requested.
• Android stores connection identity, granted permissions, and OAuth credentials in the active local profile, with credentials encrypted using Android Keystore backed storage. Credentials authorize requests to Google and are not sent as AI prompt content.
• Content returned from Google integrations may be included in the conversation and sent to your selected AI provider to answer your request. This can include email content and metadata, contacts, calendar events, and document or file content. Review your selected provider and the information involved before using an integration in chat.
• Android may retain Google content in local conversation history and tool results. Exports you create may include that content and remain wherever you save or share them. Approved background monitoring and scheduled sends may access Google when the app is not open until the task is completed, cancelled, or access is removed.
• Google user data is not sold or used for advertising. MoCHi does not itself use Google Workspace API data to develop, improve, or train nonpersonalized AI or machine learning models. This describes MoCHi's own processing, not a guarantee about every third-party provider. The Android app does not enforce provider-wide retention or training controls; review your selected provider's policies and account settings before sharing Google content.
• Human access to Google user data is prohibited except with the user's explicit permission for support, when necessary for security or legal compliance, or for internal operations using data aggregated and anonymized in accordance with Google's Limited Use requirements.

You can disconnect Gmail from MoCHi Web at any time. Web then attempts to revoke the Google token and removes stored connector tokens. Drafts already created in Gmail remain under your control and Google's retention rules.

On Android, disconnecting removes locally stored connection credentials; revoking Google access also attempts Google account authorization revocation, which can affect other Google integrations for this app. You can also revoke access in your Google Account permissions. Disconnecting or revoking access does not erase existing local chats, tool results, exports, or data already sent to an AI provider, and does not delete emails, events, or files in Google. Delete local conversations and exported files separately and use the relevant provider's deletion controls for its copies. Cancel approved background tasks you no longer want.

The Google API Services User Data Policy, including the Limited Use requirements, applies to these integrations. A provider's retention, training, and reuse practices require separate review. This policy does not certify that every user-configured AI endpoint meets Google's requirements.

Google API Services User Data Policy

AI Providers and Data Processing

When users send prompts, upload files, generate images, perform searches, or use AI-powered features, relevant content may be transmitted to the selected provider in order to complete the requested task.

Examples may include:

• Prompts and messages.
• Uploaded files.
• Images.
• Search queries.
• Context required for generation.

Users are responsible for selecting providers they trust and for reviewing the privacy policies and terms of those providers.

MoCHi does not control how third-party providers retain, review, process, or store submitted content.

Temporary Chats

Temporary Chat mode is designed to avoid saving conversations to standard MoCHi chat history.

However, temporary conversations may still be processed by selected providers while generating responses.

Users should not assume that Temporary Chat prevents all processing, logging, retention, or storage by third-party providers.

Uploads, Images, and Generated Content

Uploaded files, attachments, generated images, image prompts, and related content may be stored as part of conversations or workspace functionality.

Users should avoid uploading highly sensitive information unless they understand the risks and trust the providers involved.

Examples include:

• Financial information.
• Medical information.
• Legal documents.
• Government identifiers.
• Confidential business information.

Data Retention

Information may be retained for as long as reasonably necessary to:

• Provide service functionality.
• Maintain user workspaces.
• Operate storage systems.
• Protect service integrity.
• Resolve technical issues.
• Comply with legal obligations.

Retention periods may vary depending on infrastructure limitations, backups, service configuration, and third-party provider behavior.

Deleting information from MoCHi does not guarantee deletion from third-party services that may have already processed the information.

User Controls

Users may have the ability to:

• Delete conversations.
• Remove memories.
• Remove uploaded content.
• Rotate API keys.
• Remove provider configurations.
• Adjust workspace settings.
• Export supported conversations and data.

Supported exports may include formats such as HTML, JSON, or other formats provided by the application.

Security

MoCHi is designed to separate user data and implement reasonable security measures appropriate to the service.

Security measures may include:

• Encrypted provider credentials.
• Access controls.
• Authentication protections.
• Abuse prevention systems.
• Security monitoring and rate limiting.

No online service can guarantee absolute security.

Users are responsible for maintaining the security of their accounts, credentials, and connected provider accounts.

If a user believes their account or credentials may have been compromised, they should immediately rotate affected credentials and secure their account.

Access to User Content

The MoCHi operator does not routinely access, monitor, or review private user conversations.

However, access may occur when reasonably necessary for:

• Security investigations.
• Abuse prevention.
• Technical troubleshooting.
• Legal compliance.
• Service maintenance.
• User-requested support.

Any such access is intended to be limited to what is reasonably necessary for the relevant purpose.

International Services

Users understand that data may be processed, stored, or transmitted through services located in different countries depending on the providers, infrastructure, and services selected.

By using MoCHi, users consent to such processing where necessary to provide the service.

Changes to This Privacy Policy

MoCHi may update this Privacy Policy from time to time.

Updated versions will be posted within the service and become effective when published unless otherwise stated.

Continued use of MoCHi after changes become effective constitutes acceptance of the updated Privacy Policy.

Contact

For questions regarding this Privacy Policy or privacy-related concerns, users may contact the MoCHi operator through the official X account:

@Yahiko1239170