Privacy Policy

Last updated: August 25, 2026

1. Information We Collect

Parent Account

When you create a parent account, we collect:

• Display name — used to personalize the experience
• Device token (APNs) — used solely to deliver push notifications about your child's access requests
• Children profiles — name and avatar choice for each child you add

We do not collect your email address, phone number, or Apple ID.

Child Device

The child app collects only the minimum data necessary:

• App access request history — which apps were requested, when, and the parent's response
• Device token (APNs) — to deliver approval/denial notifications
• Screenshots — when the child requests access to an app, a screenshot may be captured and sent to the parent for context. Screenshots are stored temporarily on our server and automatically deleted after the parent reviews the request (maximum 2 days).

We do not track browsing history, location, messages, contacts, photos (beyond the access request screenshot), or any personal content on the child's device.

Analytics and Advertising (Parent Device Only)

On the parent device only, we use PostHog for product analytics (screen views, feature usage) and RevenueCat to measure subscriptions. We also use the Meta SDK to measure the performance of our own advertising campaigns.

Nothing of this runs on the child's device. No analytics, no advertising and no tracking SDK is ever initialised there.

On the parent device, the Apple advertising identifier (IDFA) is used only if the parent explicitly grants permission through the App Tracking Transparency prompt. If permission is declined, no advertising identifier is collected and the app works exactly the same. This prompt is never shown on a child's device.

2. How We Use Your Information

• To provide the core service: processing access requests between parent and child devices
• To send push notifications related to access requests, approvals, denials, and time expirations
• To improve the app through product analytics, and to measure our advertising campaigns (parent device only)

We do not use your data for advertising, profiling, or any purpose unrelated to the service.

3. Data Sharing

We do not sell, rent, or share your personal information with third parties. The only third-party services that process data on our behalf are:

• Apple Push Notification service (APNs) — to deliver notifications
• PostHog — product analytics, parent device only
• RevenueCat — subscription measurement, parent device only
• Meta — advertising campaign measurement, parent device only, and only with ATT consent
• Hosting provider — our server infrastructure

All third-party services operate under strict confidentiality and data processing agreements.

4. Children's Privacy (COPPA Compliance)

Mochi is designed with children's privacy as a priority:

• The child app is installed and configured by the parent
• The child cannot create an account — they can only join via a parent-generated pairing code
• We do not knowingly collect personal information from children under 13 without verifiable parental consent
• No analytics, advertising or tracking are collected on the child's device
• Communication is limited to the family circle (parent and child only — no social features, no UGC)
• The parent can delete a child's profile and all associated data at any time from within the app

5. Apple Family Controls & Screen Time

Mochi uses Apple's Family Controls framework (Screen Time API) to manage app access on the child's device. This requires:

• Family Sharing to be set up between the parent and child's Apple IDs
• Screen Time permission granted by the parent on the child's device

Mochi does not access Screen Time usage data, app usage statistics, or web browsing history. It only uses the framework to block and unblock apps as approved by the parent.

6. Subscriptions & Payments

Mochi offers auto-renewable subscriptions managed entirely through the Apple App Store. We do not collect or store any payment information — all billing is handled by Apple. You can manage or cancel your subscription at any time in Settings > Apple ID > Subscriptions.

7. Data Security

• All data is transmitted over HTTPS (TLS encryption)
• Authentication tokens are hashed (SHA-256) before storage — we never store plain-text tokens
• Auth tokens on the device are stored in the iOS Keychain (not UserDefaults)
• Screenshots are stored as temporary files and automatically deleted within 2 days

8. Data Retention & Deletion

• Active accounts: data is retained while your account is active
• Access requests: denied/expired requests are automatically deleted after 1 day; approved requests after 7 days
• Screenshots: automatically deleted after the parent reviews the request (maximum 2 days)
• Account deletion: you can delete your entire account and all associated data (including all children profiles and request history) from within the app at any time via Settings > Account > Delete my account. Deletion is immediate and irreversible.

9. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (available in-app or by contacting us)

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app. The "Last updated" date at the top indicates the latest revision.

11. Contact

For privacy-related questions or data requests, contact us at support@browwwser.com.