Updated and effective: October 28, 2026. Applies to the MochiBot Android app. Developed and operated by MochiLab. Contact: MochiLab support ↗.
1. Connection and chat
No MochiBot account is required. Server addresses, connection keys, chat history and assistant preferences are stored in the app's local storage. Connection keys are encrypted using Android Keystore. Messages, selected files and identifiers needed for your connection are sent over HTTPS to the server you confirm. Its operator, retention and model providers depend on your chosen service; check before pairing. MochiLab does not automatically receive your chats, files or assistant server address through the app.
2. Reminders and speech
You may separately enable direct reception. The app maintains an HTTPS connection to your confirmed agent server and a reception status notification, without vendor push. This may increase battery use and requires notification and background allowances. Received reminders are queued on your phone for serial speech and retries. Offline catch-up is limited by server retention. Force stop, blocked background operation or unavailable networks can prevent timely delivery. You can stop direct reception at any time.
Local reminder schedules and text are stored on your phone. Speech passes reminder text to your selected system text-to-speech engine. Some engines may use online services under their provider's policy. You can turn speech or ringing off and select an offline system voice. Others may see or hear lock-screen reminders; choose settings suitable for your situation.
All Skills are free. Skills access keys are no longer collected or verified.
3. Skills, website and updates
Opening Skills requests the public catalogue from mochilab.bz with the interface language and an Android client marker, and caches results locally. The service counts app catalogue requests separately from website visits; these counts do not identify unique active users. Checking updates requests release metadata. Packages are downloaded only after confirmation, verified for integrity and signer, and installed through Android confirmation. Requests reveal normal network information, such as the client IP address, to their destination; servers may keep security and access logs. Website accounts, payments and downloads follow the website privacy policy.
4. Optional usage statistics
Share anonymous usage is off by default and is not needed for other features. If enabled, the app sends a random installation identifier, app version and interface language to MochiLab at most hourly to count active installations. This is not a hardware ID and is not a guarantee of irreversible anonymity. No chats, files, server addresses, IMEI, contacts or precise location are included. Daily records are retained for 90 days; installation records expire after 365 inactive days. Turning it off stops new reports. To request deletion of existing records, view your statistics ID in Settings and provide it to support; do not send connection keys.
5. Feature permissions
The camera reads pairing QR codes locally; camera frames are not uploaded. Manual connection remains available if camera access is refused. System pickers grant access only to files or avatar images you select; broad storage access is not requested. Notifications, vibration, exact alarms, restart recovery, background execution, wake locks and foreground services support the reminders you enable. Package installation permission is used only for confirmed MochiBot updates. Refusing or revoking optional permissions affects the corresponding feature; manage them under your phone's app settings. The app does not request contacts, SMS or location permission.
6. Retention, deletion and security
Local chats, settings and reminders remain until you delete them or clear app data. Clearing a chat removes local records and does not automatically erase remote jobs or data. Removing a saved connection deletes its local key. Uninstalling or clearing app data removes local app data. Ask the relevant server operator to access, correct or erase remote records. You can disable agent reminders and statistics, remove your connection and withdraw app privacy consent in Settings. Withdrawal stops new app network functions; you will be asked again before resuming. Previously sent information is not automatically erased from servers. We use HTTPS, restricted app storage and key protection; security also depends on your phone and chosen server.
7. Your rights and minors
Use the support link above to request access, correction or deletion of information held by MochiLab, or raise privacy questions. Verification should require only necessary details, never model or assistant connection keys. MochiBot is intended for people able to use it independently. Minors should use it with guardian guidance and avoid unnecessary personal information. A guardian should contact support regarding children's information.
8. Changes
We will update this notice and seek a renewed choice where required if purposes, data types or recipients materially change. General privacy consent does not enable optional usage statistics or agent reminders; these remain separate choices.
Model configuration
Each workspace user can configure their own cloud model API in the app. Keys are sent over the paired encrypted connection and stored on your own server, not on your phone or MochiLab. Testing sends a short prompt to your chosen model provider and may incur a small API charge.