Privacy policy

What stays on your Mac

Your settings, reminders, limits, chats, and the things Mochi remembers about you are stored only on your Mac. They are never sent to us or to any server we run. Delete the app and its data, and they're gone.

No account, no analytics in the app

You don't need an account to use Mochi. The app has no analytics, no tracking and no advertising. The only diagnostic it can send is a crash report, and only if you say yes (see Crash reports).

This website

We count anonymous page visits with GoatCounter (no cookies, no personal data). It also counts clicks on the Download and Get Pro buttons, so we know roughly how many people are interested. This is the only analytics, and it is on this website only, never in the app.

AI features (Pro)

If you turn on the AI brain, you choose the provider (for example Anthropic for Claude, OpenAI for ChatGPT, or Ollama running on your own Mac) and you add your own key. Your messages, and the page or app content you ask her to help with, go directly from your Mac to that provider. They don't pass through any server of ours. That provider's own privacy policy applies to what you send them. With Ollama, nothing leaves your Mac.

Your API key is kept in your Mac's Keychain, not in Mochi's settings file, and is only sent to the provider it belongs to.

What goes with your message: so she can answer like she knows you, each message also carries a short note for the AI. It holds the time, your name (if you gave one), the app you're in and the website you're on (just the site, like youtube.com), what you seem to be doing (for example coding, and the name of the file you're editing), today's water, breaks and focus, your time limits, and the things Mochi remembers about you. You can see and delete those memories in Mochi's home under Memories. Recent messages from the same chat go too. If "Look at what I'm on" is on, so does what's on the page or app in front (see below).

When Mochi takes a look

Some apps, like games and drawing apps, don't tell your Mac what's in them. When you chat with Mochi while one of those is in front, she takes one screenshot of that app's window and sends it, with your message, to the AI provider you chose, so she can see what you see. The screenshot isn't saved on your Mac or sent to us. With Ollama, it never leaves your Mac.

This is on by default, and it needs macOS Screen Recording permission, which only you can give. To turn it off, open Mochi's home, go to Hands & eyes and switch off "Take a look at apps that don't describe themselves". Apps on your "Never look at" list are never read or looked at.

Browser extension

The Mochi browser extension (for Chrome, Edge, Brave and Arc) is optional. It connects only to the Mochi app on the same computer, over a local connection (127.0.0.1). It never sends anything to us or to any server we run, it has no analytics, and it doesn't load any code from the internet.

What it reads, and why

• The tab you're on: its address, its title, and whether it's playing sound, so your website time limits can count your time and Mochi knows what you're up to. Tabs that are playing sound are reported the same way. This goes only to the Mochi app on your computer. For incognito and private windows, the address and title are left out.
• Page content, only when you chat: when you chat with Mochi while a page is in front (and "Look at what I'm on" is on in Hands & eyes), the extension reads what's visible on it (the text, your selected text, headings, and things like products, buttons and text boxes with their positions on screen), so she can answer, point at things and help. If you ask about an email or chat page, that text can include the messages shown on it.
• Tabs closed for a limit: when one of your own time limits runs out, the extension closes that tab and tells the app its address and title, so you can reopen it later.

What it does on pages: only when you ask Mochi in the app, it highlights things, types drafts into text boxes, and presses buttons or chooses options for you. She asks first, and waits for you to press Do it, before she types or presses anything. In Hands & eyes you can let small things (ticking a box, picking from a list, play and pause) go without asking. She still asks before buttons, links and typing. It never sends a message, buys anything or submits a form unless you've said yes. Text on a page can't tell her to do things: she only takes instructions from you.

What it never reads: pages in incognito or private windows, pages with password fields, banking, sign-in, payment or checkout pages, and password managers like 1Password and Bitwarden.

Where it goes: everything above goes only to the Mochi app on your computer. The extension itself doesn't store anything. The app uses it on your computer to help you, and like the rest of Mochi's data, it stays on your computer. If you've turned on the AI brain (Pro), the page content you ask about is sent from your computer to the AI provider you chose, with your own key, as described above. Nothing is sent to us.

What it's not used for: your data is never sold, never used for advertising, never used to decide creditworthiness or for lending, and never used for anything other than the features above.

Licence checks

When you activate or check a Pro licence, the app sends your licence key and a device id to Mochi's small licence service, which runs on Cloudflare, so it can confirm the licence is valid. The device id is a one-way hash of your Mac's hardware id: the hardware id itself can't be read back from it, and it's used only to tie your licence to your Mac. When you first activate, it also sends your Mac's name (the one in System Settings, such as "Maya's MacBook Air"), so you can tell your Macs apart if you move Pro to a new one. Nothing else about your Mac is sent. The licence service keeps your key, the email you bought with, which Mac it's active on, and your referral code (below), and nothing else.

When you're licensed, the Mochi Pro page also asks the licence service for your referral code and how many times it's been used, by sending your licence key.

Purchases

Payments are processed securely by Paddle, our merchant of record. When you buy Pro, Paddle collects the details needed for the payment (such as your email, payment method, and billing country) and handles them under its own privacy policy. We receive your email address and order details so we can issue and help with your licence.

Emails we send

After you buy Pro, we email your licence key to the address you bought with, once. If you use the Forgot your key? page, we email your key again, only ever to the address it was bought with, and only if that address bought Pro. The page gives the same answer either way, so nobody can use it to find out whether someone bought. To find your key, the licence service keeps a one-way hash of your email address next to it.

These emails are sent through Resend, an email delivery service, which handles your email address and the message only to deliver it. We never send newsletters or marketing, and we never share or sell your email address.

Referral codes

Each Pro licence comes with a personal "give a friend" discount code. It's tied to your licence: we create it in Paddle as a discount, with your licence key attached so we know whose code it is. When a friend buys with your code, the licence service notes that purchase on your licence (as Paddle's transaction id, not your friend's name or email), so the app can show how many times your code has been used. Your friend's own details are handled by Paddle like any purchase. You never have to share your code, and we never tell your friend who you are: they only see the code.

Crash reports (optional)

If Mochi crashes, or something on her screens breaks with an error, the app writes a short crash note on your Mac. The next time she starts, she asks whether she may send it to us. You choose Send, Don't send, or Always send, and you can change this any time in Mochi's home under Permissions & system → Send crash reports (Ask, Always or Never). Nothing is sent unless you say yes or choose Always.

What a crash note contains: the Mochi version, your macOS version, the processor type (for example Apple silicon), the time, the error message, where in Mochi's code it happened, and a technical backtrace. Before it's saved, folder paths in your home folder are shortened to ~, and web addresses, email addresses, licence keys, API keys and other secret-looking codes are removed. Quoted text in the error message is cut short.

What it never contains: your settings, chats, memories, reminders, the pages or apps you use, your name, your licence key, or any device id.

Where it goes: to Mochi's licence service on Cloudflare, where it's kept for 30 days and then deleted automatically. Your IP address is used only for a short-lived counter that stops floods of reports, and is not stored with the report. Crash notes are only used to find and fix bugs.

Downloads and updates

The app is downloaded from GitHub. When you download it, or when the app checks for updates, GitHub sees a normal web request, like any website visit.

Children

Mochi is not directed at children under 13, and it doesn't knowingly collect anyone's personal information.

Changes

If this policy changes, the new version will be posted on this page with a new date.

Contact

Questions about privacy? Email us at hello@toebeanstudio.app.