MOCHILAB / GUIDE

MochiBot Privacy Policy

How MochiBot handles connections, chats, files, push, system speech, optional statistics and data controls.

Updated and effective: October 26, 2026. Applies to the MochiBot Android app. Developed and operated by Zhou Chungang (MochiLab), the individual developer listed for this app. Contact: MochiLab support ↗.

1. Connection and chat

No MochiBot account is required. Server addresses, connection keys, chat history and assistant preferences are stored in the app's local storage. Connection keys are encrypted using Android Keystore. Messages, selected files and identifiers needed for your connection are sent over HTTPS to the server you confirm. Its operator, retention and model providers depend on your chosen service; check before pairing. MochiLab does not automatically receive your chats, files or assistant server address through the app.

2. Reminders and speech

Local reminder schedules and text are stored on your phone. Speech passes reminder text to your selected system text-to-speech engine. Some engines may use online services under their provider's policy. You can turn speech or ringing off and select an offline system voice. Others may see or hear lock-screen reminders; choose settings suitable for your situation.

3. Optional Huawei push service

Huawei Push SDK, version 6.13.0.301, provided by Huawei Software Technologies Co., Ltd., is used only after you enable remote push reminders. To deliver messages, it may process app information (App ID, package, Push and HMS Core versions), app-scoped identifiers (AAID and Push Token), device type/model, operating system type/version, country code and related system settings, and information required to send and receive messages, including network status, carrier, SSID and IP address. The SDK processes system settings, carrier, SSID and IP address locally without uploading them to Huawei. On non-Huawei devices it may start HMS Core to establish a shared connection and authenticate the service. See the Huawei Push SDK privacy statement ↗.

A random push installation identifier and Push Token are registered with your configured assistant server. Huawei carries an event identifier or a generic notification without the reminder body. The app retrieves the body from your assistant server. Huawei processes related information according to its statement and the push project's processing location. Turning remote reminders off stops local processing and attempts to revoke server registration. Retry online or contact the server administrator if revocation fails. The app has no advertising SDK.

4. Skills, website and updates

Opening Skills requests the public catalogue from mochilab.bz with the interface language and an Android client marker, and caches results locally. The service counts app catalogue requests separately from website visits; these counts do not identify unique active users. Checking updates requests release metadata. Packages are downloaded only after confirmation, verified for integrity and signer, and installed through Android confirmation. Requests reveal normal network information, such as the client IP address, to their destination; servers may keep security and access logs. Website accounts, payments and downloads follow the website privacy policy.

5. Optional usage statistics

Share anonymous usage is off by default and is not needed for other features. If enabled, the app sends a random installation identifier, app version and interface language to MochiLab at most hourly to count active installations. This is not a hardware ID and is not a guarantee of irreversible anonymity. No chats, files, server addresses, IMEI, contacts or precise location are included. Daily records are retained for 90 days; installation records expire after 365 inactive days. Turning it off stops new reports. To request deletion of existing records, view your statistics ID in Settings and provide it to support; do not send connection keys.

6. Feature permissions

The camera reads pairing QR codes locally; camera frames are not uploaded. Manual connection remains available if camera access is refused. System pickers grant access only to files or avatar images you select; broad storage access is not requested. Notifications, vibration, exact alarms, restart recovery, background execution, wake locks and foreground services support the reminders you enable. Full-screen lock-screen reminders require system permission. Package installation permission is used only for confirmed MochiBot updates. Refusing or revoking optional permissions affects the corresponding feature; manage them under your phone's app settings. The app does not request microphone recording, contacts, SMS or location permission.

7. Retention, deletion and security

Local chats, settings and reminders remain until you delete them or clear app data. Clearing a chat removes local records and does not automatically erase remote jobs or data. Removing a saved connection deletes its local key. Uninstalling or clearing app data removes local app data. Ask the relevant server operator to access, correct or erase remote records. You can disable push and statistics, remove your connection and withdraw app privacy consent in Settings. Withdrawal stops new app network functions; you will be asked again before resuming. Previously sent information is not automatically erased from servers. We use HTTPS, restricted app storage and key protection; security also depends on your phone and chosen server.

8. Your rights and minors

Use the support link above to request access, correction or deletion of information held by MochiLab, or raise privacy questions. Verification should require only necessary details, never model or assistant connection keys. MochiBot is intended for people able to use it independently. Minors should use it with guardian guidance and avoid unnecessary personal information. A guardian should contact support regarding children's information.

9. Changes

We will update this notice and seek a renewed choice where required if purposes, data types or recipients materially change. General privacy consent does not enable optional usage statistics or remote push; these remain separate choices.