Privacy Policy

Last updated: October 25, 2026

Mochi is a game app for couples. This policy explains, in plain words, what Mochi stores, why, who can see it, and how to delete it. In this policy "we" means the Mochi team, and "you" means the person using the app.

The short version

• We keep only what the games need to work between two phones.
• Your Yes / No / Maybe answers and your private heat limit can only be read by you. Your partner only ever sees ideas you both said yes to.
• No ads. We use Google Analytics for Firebase only to count how Mochi is used (which screens and cards, when) — never card text, your answers, chat or names. If something crashes, a crash report helps us fix it. We never sell your data.
• You can delete your account and everything stored about you from inside the app, at any time.

What we store

Your account. When you sign in with Google, Firebase Authentication (a Google service) stores your email address and a user ID. We also store the first name you type, the time you confirmed you are 18 or older, and when the account was created.

Your couple. When you link phones, we store which two accounts are linked and each person's first name. Invite codes expire after 24 hours.

Private settings, readable only by you. Your heat limit, whether you have blocked coupons or paused messages, and a notification token so your phone can receive notifications from Mochi. Our servers use your heat limit and your partner's to work out the level you both play at — your partner sees that shared level, never your own limit.

Yes / No / Maybe answers, readable only by you. Each answer is stored under your own account. A server function compares your answers with your partner's and records only the ideas you both said yes to. "No" and "Maybe" are never shown to your partner.

Shared with your partner. How many Yes / No / Maybe ideas each of you has answered (a number only — never which ideas or what you answered), mutual-yes matches, love coupons you send each other (title, note, who sent it, and whether it was redeemed), the state of games you play together across two phones (the cards dealt and each of your picks), and whether Mochi is open on your phone right now, so your partner can see when you're free to play live.

Your private chat. Messages you send in the chat are stored on our servers (Cloud Firestore) so they reach your partner's phone: the text, which Mochi card or moment was sent, your answers and picks on cards, emoji reactions, who sent each message and when. We also store when each of you last read the chat and whether you are typing, so the app can show "Seen" and "typing". Security rules allow only the two of you to read the chat from the app. Messages are encrypted in transit and at rest by Google Cloud, but they are not end-to-end encrypted. We don't read your chats and don't use them for anything except showing them to you two. The chat supports text, Mochi cards and animations only — no photos, videos or voice. If you unsend a message, it is deleted from our servers.

Reports. If you report a coupon or a chat message, we store the report (who reported, the coupon or message, its text, and your note) so we can review it. Reports cannot be read from the app.

Today's question, on two phones. Your answer and your guess of your partner's answer are stored under your couple so you can reveal them together. Security rules only let your partner read yours after they have sealed their own. Your emoji reaction and your verdict on their guess are stored too. Who has answered a given day is shared, never what.

Saved moments. If either of you taps Save after a reveal of today's question, that day's question, both answers and your emoji reactions are copied into your couple's keepsakes, so you both see them on any phone. Only the two of you can read them, and either of you can remove one.

Our story. The day you got together and the nickname you give your partner are stored with your couple, so you both see them. Your couple photo is not uploaded: it stays in Mochi's private folder on the phone you added it on.

Your play history, readable only by you. So Emi can suggest what fits the two of you, Mochi remembers which games you open, how often and for roughly how long, the hour and weekday you play, the heat level you play at, how many days you answered today's question, and how often your guess was judged "nailed it". It is kept on your phone and saved in your own private space on your account, so it follows you to a new phone. Your partner cannot read it, and it is never used for ads. It is erased when you delete your account.

Evening reminder. If reminders are on, your phone sends us only your time-zone offset and the evening hour you usually open Mochi (worked out on your phone), so a server function can send one reminder when today's question is still unanswered. Turn it off in Profile → Evening reminder and that record is deleted.

Your progress. Playing on one phone without an account, your two names, relationship stage, heat level, sparks and streak stay on your device. If you sign in, we save a copy of them to your account, readable only by you, so you can get them back on a new phone. Once you link phones, your couple's sparks and streak are shared between the two of you.

Usage stats. Mochi uses Google Analytics for Firebase to understand how the app is used, so we can make it better: which screens and games are opened, when (time of day and weekday), how long a visit lasts, whether the paywall was shown and a plan bought, that today's question was answered, and which cards were shown, skipped or done, so we learn which questions couples enjoy. Each event carries only the screen or game name, a card's number (such as "t01", never its text), the paywall reason or the plan name. Yes / No / Maybe answers are never counted. With it, Google Analytics collects a random app-instance ID, your device model, OS version, app version, language and an approximate country (from your IP address, which Google does not store). We never send card text, your answers, chat, names, your heat limit or matches, and we turned off the advertising ID and ad personalisation. We use this only for understanding usage, never for ads. There is no switch for this in the app; if you object to it, email support@boldblue.tech and we will help.

Crash reports. If Mochi crashes or hits an error, Firebase Crashlytics (a Google service) sends us a report so we can fix it: what went wrong and where in the app's code, your device model, OS and app version, free memory and disk space, whether the app was in front, and a random install ID. Reports never contain card text, your answers, chat, names or your heat limit. We use them only to fix bugs. Reports are kept for 90 days.

New questions and pictures. Mochi downloads new question packs and idea pictures from our website now and then. This is a plain download: it sends no account, name or answer.

On your phone only. Badges and app settings stay on your device and are not uploaded to our servers.

What we don't do

• We don't show ads and don't include any advertising SDK.
• We don't use the advertising ID, and usage stats are never used for ads or shared with advertisers.
• We don't sell or rent your data, and we don't share it for advertising.
• We don't ask for photos, videos, contacts or your location.

Notifications

When your partner sends a coupon or a chat message, answers today's question, invites you to play a game, is waiting for you in Yes / No / Maybe, or you have a new match — or, if you turned it on, when today's question is still waiting in the evening — we send a notification through Firebase Cloud Messaging. The lock-screen text is deliberately discreet: it says "Mochi" and a gentle line, never the message, card, coupon or match itself.

Purchases

Mochi Premium is sold through Google Play. Google handles your payment details; we never see your card. We use RevenueCat to check whether a subscription is active. RevenueCat receives your Mochi account ID (a random code, not your name or email) and your purchase records.

Who processes your data

Your data is stored with Google Firebase (Authentication, Cloud Firestore, Cloud Functions, Cloud Messaging, Google Analytics for Firebase, Crashlytics and App Check) on servers in the United States, and purchase status with RevenueCat. These providers process data for us under their own privacy and security terms.

Security

Access to your data is enforced on our servers by security rules — not just hidden in the app. Firebase App Check (with Google Play Integrity) lets our servers check that requests come from the real Mochi app on a genuine device; it sends no personal data of yours. Data is encrypted in transit (HTTPS) and at rest by Google Cloud. No system is perfectly secure, but we keep the data we hold to a minimum.

How long we keep it

We keep your data while your account exists. If you or your partner unpair, the shared couple data (matches, coupons, chat messages and game state) is deleted. When you delete your account, everything stored about you — including your sign-in account and any reports you filed — is deleted from our servers right away.

Deleting your account

In the app: Profile → Delete account. This removes your account, your answers, your private settings and your couple's shared data. If you can't open the app, email us at support@boldblue.tech from the address you signed in with and we will delete it for you. More details: https://ember-58c01.web.app/delete-account

Your rights

Depending on where you live (for example the EU, UK or California), you may have the right to access, correct, delete or get a copy of your data, and to object to how it is used. Email support@boldblue.tech and we will help. We do not sell personal information.

Adults only

Mochi is for adults aged 18 and over. We don't knowingly collect data from anyone younger. If you believe a minor has an account, email us and we will delete it.

Changes

If we change this policy, we will update the date at the top and, for important changes, tell you in the app.

Contact

Questions about privacy: support@boldblue.tech