Privacy Policy

MoCHi is a personal AI workspace that allows users to connect AI providers, manage conversations, upload files, generate content, customize their workspace, and access AI-powered tools.

This Privacy Policy explains what information may be collected, how it is used, how it is stored, and the choices available to users.

By using MoCHi, you agree to the practices described in this Privacy Policy.

MoCHi is intended only for individuals who are at least 18 years old.

By creating an account or using MoCHi, you represent that you are 18 years of age or older.

MoCHi does not knowingly collect personal information from individuals under 18 years of age.

MoCHi may store information necessary to operate your workspace, including:

• Account information received through authentication providers.
• User preferences and settings.
• Chat conversations and messages.
• Memories and saved workspace data.
• Pinned conversations.
• Provider configuration information.
• Usage and rate-limit records.
• Uploaded files and attachments.
• Generated images and related metadata.
• Shared conversation snapshots.
• Archived conversations.
• Workspace customization settings.

Storage may vary depending on enabled features, service configuration, and future product updates.

Provider API keys and credentials may be stored in encrypted form when necessary to provide service functionality.

MoCHi displays only limited identifying information such as key hints where appropriate.

Provider credentials are used only to perform requests initiated by the user and are not intentionally disclosed to other users.

While reasonable security measures are implemented, no method of storage, transmission, or processing can be guaranteed to be completely secure.

MoCHi may use stored information to:

• Authenticate users.
• Operate the workspace.
• Route requests to selected providers.
• Maintain conversations and memories.
• Synchronize supported settings.
• Generate requested outputs.
• Enforce limits and security protections.
• Improve reliability and functionality.
• Prevent abuse and misuse.

MoCHi does not sell personal information to third parties.

MoCHi does not use private user conversations to train its own AI models.

MoCHi relies on third-party services to operate.

These services may include:

• Authentication providers.
• Hosting providers.
• Database providers.
• Storage providers.
• AI model providers.
• Search providers.
• Analytics or infrastructure services.

Examples may include OpenRouter, OpenAI, Anthropic, Google, GitHub Models, Hugging Face, Supabase, Cloudflare, Vercel, and other services selected by users or configured by the deployment operator.

These services operate under their own terms, privacy policies, retention practices, and security procedures.

Once information is sent to a third-party service, its handling is governed by that service's policies.

When users send prompts, upload files, generate images, perform searches, or use AI-powered features, relevant content may be transmitted to the selected provider in order to complete the requested task.

Examples may include:

• Prompts and messages.
• Uploaded files.
• Images.
• Search queries.
• Context required for generation.

Users are responsible for selecting providers they trust and for reviewing the privacy policies and terms of those providers.

MoCHi does not control how third-party providers retain, review, process, or store submitted content.

Temporary Chat mode is designed to avoid saving conversations to standard MoCHi chat history.

However, temporary conversations may still be processed by selected providers while generating responses.

Users should not assume that Temporary Chat prevents all processing, logging, retention, or storage by third-party providers.

Uploaded files, attachments, generated images, image prompts, and related content may be stored as part of conversations or workspace functionality.

Users should avoid uploading highly sensitive information unless they understand the risks and trust the providers involved.

Examples include:

• Financial information.
• Medical information.
• Legal documents.
• Government identifiers.
• Confidential business information.

Information may be retained for as long as reasonably necessary to:

• Provide service functionality.
• Maintain user workspaces.
• Operate storage systems.
• Protect service integrity.
• Resolve technical issues.
• Comply with legal obligations.

Retention periods may vary depending on infrastructure limitations, backups, service configuration, and third-party provider behavior.

Deleting information from MoCHi does not guarantee deletion from third-party services that may have already processed the information.

Users may have the ability to:

• Delete conversations.
• Remove memories.
• Remove uploaded content.
• Rotate API keys.
• Remove provider configurations.
• Adjust workspace settings.
• Export supported conversations and data.

Supported exports may include formats such as HTML, JSON, or other formats provided by the application.

MoCHi is designed to separate user data and implement reasonable security measures appropriate to the service.

Security measures may include:

• Encrypted provider credentials.
• Access controls.
• Authentication protections.
• Abuse prevention systems.
• Security monitoring and rate limiting.

No online service can guarantee absolute security.

Users are responsible for maintaining the security of their accounts, credentials, and connected provider accounts.

If a user believes their account or credentials may have been compromised, they should immediately rotate affected credentials and secure their account.

The MoCHi operator does not routinely access, monitor, or review private user conversations.

However, access may occur when reasonably necessary for:

• Security investigations.
• Abuse prevention.
• Technical troubleshooting.
• Legal compliance.
• Service maintenance.
• User-requested support.

Any such access is intended to be limited to what is reasonably necessary for the relevant purpose.

Users understand that data may be processed, stored, or transmitted through services located in different countries depending on the providers, infrastructure, and services selected.

By using MoCHi, users consent to such processing where necessary to provide the service.

MoCHi may update this Privacy Policy from time to time.

Updated versions will be posted within the service and become effective when published unless otherwise stated.

Continued use of MoCHi after changes become effective constitutes acceptance of the updated Privacy Policy.

For questions regarding this Privacy Policy or privacy-related concerns, users may contact the MoCHi operator through the official X account: