Privacy

Your book is yours. This page explains, in plain words, what Mochi keeps, why, and who helps us run it.

Last updated: 8 November 2026

Who we are

Mochi (the app and mochidrop.app) is run by Yohhan Dalvi, an individual, based in Maharashtra, India ("we", "us"). We decide how your data is used, and we're who you write to about it: [email protected].

What Mochi stores

• Your account: your name and email address, and your password (stored only as a secure hash). If you sign in with Google, we get your name, email address and Google account ID from Google instead of a password.
• About you: the gender and birthday you choose at sign-up, so Mochi can greet you and send a birthday wish.
• Your check-ins: how you're feeling, when, the choices you pick and any note you add.
• Your book: the pages you write and how you lay them out, plus the photos, voice notes, stickers and doodles you add.
• Mochi Plus extras: the people, places and important days you choose to add.
• Your plan: whether you have Mochi Plus and until when. Payments are handled by Google Play or the App Store; we never see your card or bank details.
• Invites and dewdrops: your invite code, which code you used, whether a friend you invited has settled in, and the dewdrops and closet items you've earned. We never look at a friend's feelings or notes for this.
• Letters to us: anything you send through "Write to us" in the app.
• Your settings: reminders, check-in times, look and feel, and privacy choices. Reminders are scheduled on your phone. Your app lock PIN or fingerprint stays on your phone.
• Technical data: like any website or app, our network and server see your IP address and basic request details, which we use to keep Mochi working and safe. These logs never contain your journal text, notes or letters.

How we protect it

Everything travels over an encrypted connection (HTTPS). Your page text, check-in notes, people and places, and letters are encrypted before they're saved in our database. Photos and voice notes are encrypted on our server before they're stored, so the storage provider only ever holds scrambled files.

What we do with it

We use your data only to run Mochi for you: to show your book, check-ins and recaps, to make your PDF, to keep your plan and rewards in order, to answer your letters, and to keep your account secure. Recaps are built only from what you wrote and added yourself.

We don't sell your data, we don't show ads, we don't use tracking or advertising tools, and we don't use your pages to train AI. Mochi doesn't send your entries to any AI service.

Google sign-in

If you sign in with Google, we use your name, email address and Google account ID only to create and sign in to your Mochi account. We don't ask for access to your Google Drive, contacts, Gmail or anything else. Mochi's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Who helps us run Mochi

Nobody reads your book. A few service providers process data for us, only to provide their service:

• Oracle Cloud hosts our server and database, in Mumbai, India.
• Cloudflare protects and speeds up our website and app connection, and stores your encrypted photos and voice notes (Cloudflare R2).
• Google provides Google sign-in, if you use it.
• Google Play and the Apple App Store take payment for Mochi Plus, and RevenueCat tells us whether your plan is active. They see your purchase, not your book.

Some of these providers work across many countries, so data may pass through servers outside India, protected by their own security commitments. We will only share data beyond this if the law requires it.

How long we keep it

We keep your data while you have an account. When you delete a page, photo, voice note or check-in, it's removed straight away. When you delete your account, everything in it is removed, including your photos and voice notes. Copies in our encrypted server backups are cleared within about two weeks.

Your choices and rights

• You can see, edit or delete any page, photo, voice note or check-in at any time.
• You can export your book as a PDF.
• You can lock the app with a PIN or your fingerprint or face.
• You can delete your account and everything in it at any time in the app (Settings → Your data & account). If you have Mochi Plus, please also cancel it in Google Play or the App Store, since they handle the billing.
• You can ask us for a copy of your data, to correct it, or to delete it, or withdraw a consent you gave, by writing to [email protected]. Under India's Digital Personal Data Protection Act you can also nominate someone to act for you if you can't.

Children

Mochi isn't meant for children under 13. If you're under 18, please use Mochi only with a parent's or guardian's permission. If we learn that a child under 13 has an account, we'll delete it.

Not a medical service

Mochi is a wellness companion. It doesn't diagnose or treat anything. If you're in crisis, please contact your local emergency number or a crisis line near you. The support links in the app are free for everyone.

Changes

If this policy changes, we'll update the date above, and if the change is important we'll tell you in the app first.

Questions and complaints

Write to us at [email protected]. For privacy complaints, our grievance officer is Yohhan Dalvi, at [email protected]. We'll reply within 30 days. If you're not happy with our answer, you can complain to the Data Protection Board of India.