Privacy Policy

Last updated: 23 October 2026

Introduction

This Privacy Policy describes how Mochiwise ("we," "us," "our") collects, uses and protects your personal information when you use the website at mochiwise.com and the Mochiwise apps (the "Services"). It is part of our Terms of Service.

Questions? Write to support@emails.mochiwise.com.

Summary

What we collect: your email address; if you sign in with Apple or Google, which Apple ID or Google account that is; and what you put into the Services: your messages to the assistant, your photos, your foods and meals, your weight and your calorie budget.

Why: to run the Services for you. We do not show ads, do not sell your data, and do not use it for marketing.

Who else sees it: Anthropic, whose Claude model is the assistant, Amazon Web Services, which hosts the Services, Crisp, if you chat with us for support, Apple or Google, if you sign in with them, and, if you subscribe, Apple, which takes the payment, and RevenueCat, which keeps track of the subscription for us.

Your rights: you can ask us for a copy of your data, or to correct or delete it, at any time.

1. What information do we collect?

Information you give us

• Your account: your email address, settings such as the time your day ends, and the Apple ID or Google account you sign in with, if any (see below).
• Your conversations with the assistant: every message you send and every reply, including the assistant’s calls to look up, create or change your data.
• Photos you send in a conversation, such as photos of food and nutrition labels.
• Your food log: the foods you eat and what is in them, what you ate and when, and how sure the estimates are.
• Your weight: the weigh-ins you record.
• Your calorie budgets and when each one started.
• What you tell the assistant about yourself, for example where you live, or foods you can’t or don’t eat. This may include information about your health, such as an allergy.
• Messages you send us in the support chat or by email.

Your food log, your weight and what you tell us about your diet are information about your health. We process it only to provide the Services to you, on the basis of your explicit consent, which you give by entering it. You can withdraw that consent at any time by deleting the information or your account.

Information collected automatically

• Request logs: our servers record each request, including your IP address, the address requested and your browser’s user agent, for security and troubleshooting.
• A record of each request to the AI model, including what was sent, what came back and what it cost, so we can investigate a reply that went wrong.
• Cookies: a session cookie that keeps you signed in, and a security cookie that protects your account against cross-site request forgery; and, once you open the support chat on the website, Crisp’s cookie that keeps your conversation. We use no advertising or analytics cookies.
• On your device: the app and the website remember, in your device’s or browser’s storage, the email address and the way you last signed in (email, Apple or Google), so the sign-in screen can offer them again. This stays on your device; it is removed when you choose “Forget this” on the sign-in screen or delete your account.

Information about your subscription

If you subscribe, you buy the subscription from Apple, in the app. Apple reports the purchase, and later its renewals, cancellation, refunds and billing problems, to RevenueCat, which tells us whether your account is subscribed. We do not receive your payment details or your Apple ID.

Once Mochi has offered you the free week, our server asks RevenueCat every hour, until you have had the reminder, whether your account is in a free week, when it ends, and whether it is set to renew. If it is, and its last moment to cancel for free is a day away, we email you a reminder, and keep a record that we did (which free week it was about, and when), so it is sent only once.

Information from Apple or Google, if you sign in with them

You can sign in with an emailed code, or with Sign in with Apple or Sign in with Google. If you use Apple or Google, you sign in to them, on their own screen, and we never see your Apple or Google password. In the iPhone app, the phone’s own Apple or Google sign-in hands the app a signed token, which the app sends to our server; with Apple, the app also sends a one-time code, which our server exchanges with Apple. On the website, Apple or Google sends your browser back to our server with a one-time code, which our server exchanges with them for that token.

What the token tells us, and what we use from it: the account’s identifier at Apple or Google (a fixed string of characters, not your name or email), its email address, and whether Apple or Google has verified that the address is yours. We use nothing else in it.

• Apple: we ask Apple for your email address only, not your name. If you choose Apple’s “Hide My Email”, the address we receive is an Apple relay address, not your real one.
• Google: on the website we ask Google for your email address only. In the iPhone app, Google’s sign-in always asks for your basic profile too, so Google’s screen says it will share your name and profile picture, and the token it gives the app contains them. We do not read or keep them.

What we do with the email address: if it is verified and is already the email address of a Mochiwise account, we connect the Apple ID or Google account to that account. If you sign up with Apple or Google, the verified email address becomes your account’s email address; with Hide My Email, that is the relay address, and our emails to you, such as sign-in codes, go through Apple’s relay. Otherwise we do not keep it: the Apple or Google account stays connected even if its email address later changes.

What we keep: for each Apple ID or Google account connected to your account, whether it is Apple or Google, its identifier, and when you connected it. For an Apple ID we also keep a token that Apple issues to us when you sign in. We use it for one thing only: to tell Apple, when you disconnect the Apple ID or delete your account, that we no longer use it to sign you in, which Apple requires. We never use it to ask Apple for anything else. From Google we keep no token.

If you sign in and have no account yet: so that you can sign up without going back to Apple or Google, we keep the identifier, the email address, whether it is verified and, for Apple, the token described above in your session on our server. It can be used to sign up for 10 minutes, and is removed when you sign up or sign out, or when the session ends.

What Apple and Google learn: that your Apple ID or Google account signs in to Mochiwise, and when you sign in with it. Apple and Google list Mochiwise in your Apple ID’s or Google Account’s settings, where you can stop using it to sign in. They handle this under their own privacy policies (Apple, Google). We tell them nothing else about you or about how you use Mochiwise.

What Apple tells us later: Apple notifies our server when you stop using Sign in with Apple for Mochiwise, or delete your Apple ID, and when you turn forwarding from your Hide My Email address off or on. We read only what kind of notification it is and which Apple ID it is about. When you stop using it or delete your Apple ID, we disconnect it from your account at once; you can still sign in with an emailed code. The forwarding notifications change nothing: our server’s log records the notification, with your account’s number.

Disconnecting: you can disconnect an Apple ID or Google account in the app’s Settings. We delete what we kept about it at once, and, for an Apple ID, first tell Apple that we no longer use it. Google keeps listing Mochiwise in your Google Account until you remove it there. Deleting your account does the same for every Apple ID and Google account connected to it.

Apart from Apple and Google as described here, and Apple and RevenueCat for a subscription as described above, we do not collect information about you from other sources.

2. How do we use your information?

• To provide the Services: to sign you in, with an emailed code or with Apple or Google, to have the assistant estimate and record what you eat, to show you your days, your foods and your weight trend, and to check whether your account has a subscription.
• To fix and improve the Services: we may read conversations and the AI request records to find out why the assistant made a mistake, and to make it better.
• To keep the Services secure: to prevent abuse and to enforce our Terms.
• To communicate with you: to send sign-in codes, to remind you before a free week turns paid, to answer you, and to tell you about important changes to the Services.
• To comply with the law.

3. Legal bases (EU, UK and similar jurisdictions)

• Contract: most processing is necessary to provide the Services you signed up for.
• Explicit consent: for information about your health, as described above.
• Legitimate interests: to keep the Services secure and to fix and improve them, where these interests are not outweighed by your rights.
• Legal obligation: where the law requires us to process or keep information.

4. Who do we share your information with?

We share your information only with the service providers who run parts of the Services for us:

• Anthropic (the AI assistant): to write each reply, the assistant receives your conversation, including your photos, what you have told it about yourself, and whatever of your food log, weight and budget it looks up to answer you. When it searches the web for a product or a menu, its search queries go to Anthropic’s search provider. Anthropic processes this under its commercial terms, which do not allow it to train its models on this data.
• Amazon Web Services: hosts our servers, database and photo storage, and sends our emails. Your data is stored in the United States.
• Crisp (the support chat): if you chat with us, Crisp, based in France, receives your messages and the email address on your account. On the website, the chat stores a cookie so a conversation continues where you left it; it is only loaded when you open the chat.
• Apple (sign-in and payments): if you use Sign in with Apple, Apple confirms who you are to us, and our server exchanges sign-in codes and tokens with Apple, as described in section 1. If you subscribe, Apple sells you the subscription and takes the payment. Apple does both under its own terms and privacy policy. We never see your payment details.
• Google (sign-in): if you use Sign in with Google, Google confirms who you are to us, as described in section 1, under its own terms and privacy policy.
• RevenueCat (subscriptions): keeps track of subscriptions for us. The app tells it your account’s number with us (not your email address or name), along with technical details of the app and the device, such as the operating system and the app’s version; Apple tells it about your purchases, renewals and refunds. RevenueCat is based in the United States.

We may also disclose information when the law requires it, to protect our rights or the safety of others, or to a successor if the Services are transferred to a new owner.

We do not sell your personal information, and do not share it for advertising.

5. International transfers

Our service providers process your information in the United States and possibly other countries, which may not have the same data protection laws as yours. Where the law requires it, these transfers are covered by appropriate safeguards, such as the European Commission’s standard contractual clauses.

6. How long do we keep your information?

We keep your account and everything in it for as long as your account exists, because your past days and foods are what the Services are built on. You can delete your account at any time in the app’s Settings, or by asking us to. Deleting it deletes your data at once, including your conversations, photos and AI request records, and what we kept about the Apple IDs and Google accounts connected to it. We keep that for a connected Apple ID or Google account until you disconnect it, stop using it for Mochiwise at Apple, or delete your account. Copies in our database backups, and copies of photos cached by our image delivery network, are deleted within 30 days. Request logs are deleted after 90 days.

Support conversations live in Crisp, separately from your account, and are kept until they are deleted. Deleting your account does not delete them; ask us in the chat, or write to us, and we will.

RevenueCat keeps the history of a subscription, under your account’s number, until it is deleted. Deleting your account does not delete it there either; write to us, and we will. Apple keeps its own record of your purchases.

7. How do we keep your information safe?

Your information is encrypted in transit and at rest. Photos are stored privately and shown only through signed links that expire. Access to our systems is restricted to the people who run the Services. No system is perfectly secure, though, and we cannot guarantee that your information will never be accessed without authorization.

8. Children

The Services are not meant for anyone under 18, and we do not knowingly collect information from them. If you believe someone under 18 has given us information, write to support@emails.mochiwise.com and we will delete it.

9. Your privacy rights

Depending on where you live, you may have the right to:

• Access the information we hold about you, and get a copy of it in a portable format
• Correct information that is wrong
• Delete your information, or your whole account, which you can also do yourself in Settings
• Object to or restrict some processing
• Withdraw your consent at any time, without affecting processing that happened before

Much of your information you can see and change in the Services directly. For anything else, write to support@emails.mochiwise.com from the email address on your account, and we will respond as applicable law requires. If you are in the EU or the UK, you may also complain to your local data protection authority.

10. Do-Not-Track

We do not track you across other websites, so there is nothing for a browser’s Do-Not-Track signal to turn off.

11. Changes to this policy

We may update this Privacy Policy. When we do, we change the "Last updated" date above, and if the change is significant we will tell you by email or in the Services.

12. Contact us

Email: support@emails.mochiwise.com
Website: mochiwise.com