Privacy Policy

Effective date: November 2, 2026

The short version: Mochi Mimi collects as little as possible. If you buy her, we keep your email address, a record of your purchase, and (only if you turn on cloud save) her game save. Payments are handled by Stripe: we never see your card details. There are no ads, no analytics, no tracking and no selling of your data. The app itself works entirely on your device.

1. Who we are

Mochi Mimi (the desktop pet app, this website, and the accounts, downloads and cloud saves that go with them) is made and sold by [FILL IN: your full legal name or business name] (“we”, “us”), [FILL IN: mailing address]. We are the “controller” of the personal information described here. Contact us about anything in this policy at [FILL IN: contact email].

2. What we collect, why, and on what legal basis

Information	Why we use it	Legal basis (EU/UK)
Account: your email address and password (stored only as a secure one-way hash, so nobody can read it), when the account was created and when you last signed in.	To let you sign in, buy the app, download it again and use cloud save; to send you account emails (confirming your address, resetting your password).	Contract (providing what you asked for)
Purchase record: which account bought the app, the amount and currency, the date, and Stripe’s reference number for the payment.	To unlock downloads and cloud save for you, handle refunds, and keep the records tax law requires.	Contract; legal obligation (tax and accounting records)
Cloud save (only if you sign in inside the app): Mochi’s game save: her hunger, mood and energy, coins, totals, what you’ve unlocked, the app’s settings, when it was saved, and whether it came from the Windows or Android version.	To back up her progress and restore it when you reinstall or change devices.	Contract
Technical and security information: IP address, browser and device type, and the time of requests, kept in our service providers’ security and server logs.	To deliver the website and downloads, keep accounts secure, and prevent fraud and abuse.	Legitimate interests (keeping the service secure and working)

When you pay, Stripe collects your payment details (such as card number, name, email, billing country and postal code) directly. We never receive or store your full card number. Stripe uses this information under its own privacy policy.

We do not collect your name, address, phone number, location, contacts, photos or any other content from your devices, and we don’t use your information for advertising, profiling or automated decisions.

3. The app on your computer or phone

Mochi’s save file and settings are stored on your device. If you use cloud save, the app also stores a sign-in token on your device so you stay signed in. Signing out deletes it.
Windows: to dance along to your music, the app reads how loud your computer’s sound output is, moment to moment. It does not use your microphone, and nothing is recorded, stored or sent anywhere.
Android: the app asks to “display over other apps” only so Mochi can appear on your screen, and shows a notification because Android requires one for apps that stay on screen. To dance, it only checks whether music is playing (yes or no). It does not use your microphone.
The app connects to the internet only for cloud save, and only when you’ve signed in to it.

4. Cookies and similar technologies

This website does not use advertising or analytics cookies, tracking pixels or third-party trackers. When you sign in, your browser stores a sign-in token (in “local storage”) that is strictly necessary to keep you signed in; it is removed when you sign out. The website’s fonts and code are served from our own site, not from third parties.

5. Who we share information with

We do not sell your personal information and do not “share” it for cross-context behavioural advertising (as those terms are used in California law). We only share it with the service providers we need to run Mochi Mimi, who may only use it to provide their service to us:

Supabase (accounts, account emails, database and server functions).
Cloudflare (website hosting, security, and storage of the download files).
Stripe (payment processing; for payment details, Stripe acts as an independent controller).

We may also disclose information if required by law, to protect our rights or the safety of others, or as part of a sale or transfer of the Mochi Mimi business (in which case this policy will continue to apply to it).

6. International transfers

Our service providers may process information in the United States and other countries. Where information from the European Economic Area, the UK or Switzerland is transferred, it is protected by safeguards recognised under data protection law, such as the European Commission’s Standard Contractual Clauses and/or the EU–U.S. Data Privacy Framework.

7. How long we keep it

Account and cloud saves: until you delete your account (or ask us to). Signing out of cloud save in the app leaves your existing cloud save in place until then.
Purchase records: for as long as tax and accounting laws require (generally up to 7 years), even if you delete your account.
Security logs: kept by our providers for limited periods, normally a few weeks to a few months.

8. Your rights

Depending on where you live, you may have the right to: access the personal information we hold about you and get a copy; have it corrected; have it deleted; restrict or object to certain uses; receive it in a portable format (data portability); and withdraw any consent you have given. California residents and residents of other US states with privacy laws have the right to know what we collect, to delete it, to correct it, and not to be discriminated against for using these rights. We do not sell or share personal information, so there is nothing to opt out of.

To use any of these rights, email [FILL IN: contact email] from the email address on your account (so we can confirm it’s you). You may also use an authorised agent. We will reply within one month (or 45 days where California law applies), and we won’t charge you. You can delete your account and everything tied to it (apart from the purchase records we must keep) by asking us in the same way.

If you are in the EEA or UK and are unhappy with how we’ve handled your information, you can complain to your local data protection authority (in the UK, the Information Commissioner’s Office). We’d appreciate the chance to sort it out first.

9. Children

Mochi Mimi accounts are not intended for children under 13 (or under 16 where local law requires an older age for consent to online services), and we do not knowingly collect personal information from them. Anyone under 18 needs a parent or guardian’s permission to buy. The app itself can be used without an account and collects nothing. If you believe a child has created an account, please contact us and we will delete it.

10. Security

All connections to the website, downloads and cloud save are encrypted (HTTPS). Passwords are stored only as secure hashes. Database rules ensure each account can only read its own saves and purchase. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information and will notify you and the authorities of a breach where the law requires.

11. Changes to this policy

We may update this policy as the app changes. We’ll change the effective date above, and for significant changes we’ll tell you on the website or by email before they take effect.

12. Contact

[FILL IN: your full legal name or business name]
[FILL IN: mailing address]
[FILL IN: contact email]