Privacy Policy

Last updated October 26, 2026

Mochiverse Inc. (“Mochiverse,” “we,” “us” or “our”) operates the Mochiverse website at mochiverse.ai, the Mochiverse mobile applications, and related features and tools that link to this Privacy Policy (together, the “Services”). This policy describes the personal information we collect, how we use and disclose it, and the choices available to you. Mochiverse Inc. is responsible for the processing described here.

The Services are intended only for adults aged 18 or older. For privacy questions or requests, contact hello@mochiverse.ai.

Key points

We process account details, your chosen profile and preferences, and your conversations to provide interactive AI stories.
AI features send relevant messages, story context and other inputs to external AI providers.
We do not sell personal information or share it for cross-context behavioral advertising.
You can update your profile, control notifications and delete your account. Additional rights may apply where you live.

1. Information we collect

Information you provide

Account and profile details: your email address, account identifier, display name, username, bio and optional profile photo.
Personalization: the name characters use for you, your selected gender (including “prefer not to say”), preferred story genres and other settings you choose.
Conversations and creations: messages and prompts, AI responses, story progress and memories used to continue a scene, generated images, and scenes you play, like or pin. If you use creation tools we make available, this also includes descriptions, reference images and other material you submit to those tools.
Gems and transactions: your balance, rewards, spending history and, if you make a purchase, the transaction and entitlement information needed to credit your account. Payment details are handled by the applicable checkout or app-store provider.
Support and safety reports: your correspondence, feedback, report reasons and notes. Reporting a scene also sends recent conversation excerpts with the report so our team can investigate.

Information from sign-in providers

When you sign in with Apple or Google, we receive an account identifier, an email address (which may be an Apple relay address), and any name or profile details the provider supplies with your permission. We use this information to authenticate you and maintain your account. We do not receive your Apple or Google password. Those providers separately process information under their own privacy policies.

Device, usage and notification information

Our systems and hosting providers process request information such as IP address, browser or app information, request times, pages or features accessed, and diagnostic or security logs. Your interactions with scenes help us maintain your history and personalize the experience. If you enable push notifications, we process your device’s push token, platform, time zone, notification preferences, usual playing hour and notification-open events. Some preferences, such as text size and haptics, are stored locally on your device.

Sensitive information

Conversations and uploads may contain sensitive personal information if you include it, such as information about health, beliefs or sexual orientation. Please avoid submitting sensitive details about yourself or other people, government identifiers, financial credentials or other information that is unnecessary for a fictional story. Information you submit is processed as described in this policy, including by the AI providers used for that feature.

2. How we use your information

Set up and secure accounts, authenticate sign-ins, and maintain profiles and settings.
Generate dialogue, reply suggestions, story events, images and other requested content, and save enough context to continue your stories.
Personalize scenes and recommendations using your preferences and activity.
Manage gem balances, rewards and any purchases or paid features you choose.
Deliver notifications you enable, including gem reminders and AI character messages based on recent story context.
Respond to support requests, investigate reports, prevent fraud and abuse, and enforce our Terms of Use.
Diagnose problems, assess how features work and improve the Services.
Send necessary service or policy notices, meet legal obligations and protect legal rights and safety.

We do not sell your personal information, share it for cross-context behavioral advertising, or use it to track you across other companies’ apps and websites. Mochiverse Inc. does not use your conversations to train its own generative AI models. External AI providers’ processing is described below.

3. Legal bases for processing

Where applicable law requires a legal basis, we process information to perform our agreement with you (for example, providing your account and requested stories); for legitimate interests such as securing and improving the Services, subject to your rights; to comply with legal obligations; and with consent where required, including for optional features or processing that requires separate permission. In an emergency, applicable law may also permit processing to protect a person’s vital interests. You can withdraw consent by changing the relevant setting or contacting us; this does not affect processing that was lawful before withdrawal.

4. AI features and providers

Mochiverse uses third-party AI services to generate fictional characters’ replies, story developments, suggestions, images and other content. Text requests use OpenRouter, which routes requests to model providers, including providers of models such as DeepSeek and Google Gemini. Image and character generation features use services such as fal and their underlying model providers.

Depending on the feature, requests include your message or prompt, relevant conversation history, story memories, scene and character details, your chosen character name and gender, and any reference images you submit for generation. Character-message notifications also use recent story context to generate a message. We do not add your account email address or authentication credentials to story-generation prompts, but personal information you put into a message or upload can be included in the request.

Requests and outputs pass through these providers’ systems. Their retention and any use for model improvement depend on the provider, its policies and the settings that apply to the request. Our statement about our own model training is not a guarantee that every external provider has identical practices or retains no data. Do not use AI conversations as a place to store confidential information.

We disclose information where needed for the following purposes:

Operating the Services. Providers include Supabase for authentication and database services; Cloudflare for hosting, network security and media storage; the AI services described above; Expo and Apple or Google for push delivery; and email providers, including Google Workspace, for support and report delivery. Notification delivery includes the notification content and device routing information.
Processing purchases. If you buy a paid feature, the app store or payment provider processes the payment and provides relevant transaction information. Its own privacy policy applies to information you give it directly.
Your instructions. If you choose to share content or authorize a connected tool, we disclose the information needed to carry out that action.
Legal and safety needs. We may disclose information to comply with lawful requests, investigate fraud or abuse, protect people’s safety, or establish, exercise or defend legal rights.
Business transactions. Information may be disclosed in connection with financing, a merger, an acquisition or a transfer of business assets, subject to applicable confidentiality and data-protection requirements.

Authorized team members may access information as needed for operations, support, security and report review.

6. Conversations, profiles and shared content

Your conversation history is not published to other users by default. It is processed by our systems and relevant providers, and recent excerpts are included when you report a scene. A conversation with an AI character is not a confidential professional relationship.

Profile photos are stored at accessible media URLs: anyone who obtains the URL can view the image. If you choose to publish or share other material through an available feature, recipients may copy or redistribute it. We cannot control copies another person makes or information you give directly to a third-party website or application.

7. Cookies and device storage

The website uses cookies and similar storage for sign-in and session security. The website and apps also use local storage for settings and preferences. You can remove stored data through your browser or device, but this may sign you out or reset preferences. We do not use advertising cookies to track you across other companies’ services. Browser “Do Not Track” settings do not change these essential storage practices. This is separate from legally recognized opt-out signals such as Global Privacy Control; we do not sell or share personal information for cross-context behavioral advertising regardless of whether such a signal is enabled.

We use first-party website analytics to understand how visitors find Mochiverse, select stories, sign in, and start playing. We store a random browser identifier and visit information for up to 90 days. Analytics events include the page path, referring site or campaign label, and the action taken. They do not include your conversation text, email address, authentication credentials, or full referring URLs. Our website analytics respect Do Not Track and Global Privacy Control signals. Clearing website storage resets the browser identifier.

If you write or choose a reply before signing in, we may temporarily keep that unsent reply in this tab’s session storage. We restore it as a draft when you return to the same story after signing in within 30 minutes; it is not sent automatically or included in analytics.

8. International processing

Our providers may process and store information in the United States and other countries. These countries may have different data-protection laws from your country. Where applicable law requires safeguards for an international transfer, the transfer must be supported by a permitted legal mechanism, such as an adequacy decision or appropriate contractual protections. Contact hello@mochiverse.ai for information about the locations and safeguards applicable to your information.

9. Retention and account deletion

We retain account details and story history while your account is active so that you can return to your stories. Other information is retained for the purpose it serves, taking account of support needs, security, legal requirements and the need to resolve disputes. We do not promise one retention period for every type of record.

You can delete your account in Settings → Delete account or request deletion by emailing hello@mochiverse.ai. Deletion removes your account, profile, saved conversations, gem records, likes, history and registered notification devices from our active account database. We also request removal of the profile photo associated with the account. Backup, cache and log copies may persist until removed through their normal retention processes.

Safety reports, including the conversation excerpts attached to them, and support or report emails can remain after account deletion where needed to investigate an issue, prevent abuse, meet legal obligations or resolve a dispute. Removing the account link from a report does not necessarily remove identifying details in its text. External providers’ retention and deletion practices also apply, subject to applicable law and our obligations to pass on deletion requests. Deletion cannot recall copies of material you have already shared with others.

10. Security

We use measures such as encryption in transit and access controls to protect information. No online service or storage system can guarantee complete security. Keep your sign-in credentials secure and contact us if you believe someone has accessed your account without permission.

11. Adults only

People under 18 may not use Mochiverse, including with parental permission. We do not knowingly collect personal information from minors. If we learn that an account belongs to someone under 18, we will disable it and take steps to delete their personal information, subject to any legal preservation requirements. To report an underage account, contact hello@mochiverse.ai.

12. Your settings and choices

Profile and preferences: update available fields and personalization choices in the Services.
Notifications: turn off available notification categories in the app or disable notifications in your device settings. Previews may appear on your lock screen according to your device settings.
Photos: choose whether to upload a profile photo and manage photo-library or camera permissions through your device.
Connected tools: grant only the access you want a third-party client to have and revoke access through the available account or client controls.
Account deletion: use Settings → Delete account or contact us. Uninstalling the app alone does not delete your account.

13. Your privacy rights

Depending on your location and the law that applies, you may request access to your information, a portable copy, correction of inaccurate information, deletion, or restriction of or objection to certain processing. You may withdraw consent where processing relies on it, and may have rights concerning decisions made solely by automated means that have legal or similarly significant effects.

United States residents

Applicable state laws, including California law, may give you rights to know the categories and specific pieces of information collected, the sources, purposes and recipients; to correct or delete information; and to opt out of sale, targeted advertising or certain profiling. You may also have the right to limit certain uses of sensitive information. We do not sell personal information or share it for cross-context behavioral advertising. The information categories, sources, uses, recipients and retention practices relevant to the Services are described in the sections above. We will not discriminate against you for exercising applicable privacy rights.

EEA, United Kingdom and other regions

Where applicable, you may object to processing based on legitimate interests and complain to your local data-protection authority, including an EEA supervisory authority, the UK Information Commissioner’s Office or Switzerland’s Federal Data Protection and Information Commissioner. Residents of Canada and other regions may also have access, correction, consent and complaint rights under local law.

Making a request

Email hello@mochiverse.ai with your request and enough information to identify your account. We may verify your identity and, if someone acts for you, their authority. We will respond within the time required by applicable law and explain any permitted extension or reason we cannot fulfill a request. If applicable law gives you a right to appeal a refusal, reply to our decision asking for an appeal. You may also contact the relevant regulator. These rights are subject to applicable legal exceptions.

14. Changes to this policy

We may update this policy as the Services or our practices change. We will post the revised version with an updated date. For material changes, we will provide an appropriate notice, such as an in-app message or email, and obtain consent where required before applying a new use of information.

15. Contact us

Mochiverse Inc.
Privacy questions and requests: hello@mochiverse.ai
Website: mochiverse.ai