Privacy policy

This notice explains what personal data Mouichido collects, why, who receives it, how long it is kept, and your rights. It applies to the website at mouichido.com, the web app and the iOS app.

We collect the information you provide when you create an account, contact us or use learning features. Sign-in providers supply account identifiers and profile details; billing providers supply purchase and subscription status. We also collect request, device and usage information as described below. Payment details entered at checkout are handled by our payment providers.

Draft for review. Controller identity and vendor contract facts await confirmation; this notice has not received legal approval.

Controller

<H1 legal name> (“Mouichido”) is the controller of personal data processed through the Mouichido website, web app and iOS app.

Postal address: <H1 postal address>.

Privacy contact: <H1 mailbox>.

Mouichido plans to launch worldwide without an EU or UK representative. No data protection officer is appointed. These decisions await legal review. Rem owns privacy.

Questions go to <H1 mailbox>.

Purposes and legal bases

  • Provide the learning service, accounts, subscriptions and support — contract.
  • Free Talk chat and voice, including conversation memory used to pitch the next session — contract.
  • Capture photo recognition and word tools — contract.
  • Product analytics (PostHog; website also Google Analytics) — legitimate interests, subject to legal review.
  • Security, fraud prevention and keeping the service reliable — legitimate interests.
  • Send sign-in, verification and password-reset email — contract.

Recipients

The processors and independent recipients below receive personal data as described. Fish Audio and Google Input Tools have no data-processing contract. Other contract facts marked unrecorded await confirmation.

Convex

Role
Processor
Categories
Account details: email, name and sign-in identifiers; Learning progress and review history; Words, decks and captures learners create; Word-enrichment workflow arguments and journals until account deletion; Free Talk conversations, recaps and conversation memory; Subscription status
Purposes
Run the Mouichido service and store learner data
Retention
Until the learner deletes the item or the account

Anthropic

Role
Processor
Categories
Free Talk messages with first name, level, learning goal and conversation memory; Learner text for translation, explanations and word examples
Purposes
Generate Free Talk replies; Check learner lines and suggest corrections; Translate and write word examples
Retention
Standard API inputs and outputs are deleted within 30 days, with exceptions for legal requirements, usage-policy enforcement and separately agreed retention (Anthropic Privacy Center, read 2026-10-21). Account-specific contractual terms remain unrecorded; zero retention is not confirmed.

Convex AI Gateway

Role
Processor
Categories
Free Talk messages with first name, level, learning goal and conversation memory; Capture photos when Gemini recognition fails
Purposes
Generate Free Talk replies when Anthropic cannot; Check learner lines and suggest corrections; Recognize capture photos
Retention
unrecorded

OpenAI

Role
Processor
Categories
Vocabulary and grammar text, including words learners add
Purposes
Embeddings for search and related words
Retention
unrecorded

Google Gemini API

Role
Processor
Categories
Capture photos; Learner text for translation and word examples; Live voice audio and transcripts; Text for narration audio
Purposes
Recognize captures; Translate and write word examples; Live voice conversations; Narration audio
Retention
unrecorded

TypeSafe AI

Role
Processor
Categories
Free Talk learner messages
Purposes
Check learner lines and suggest corrections
Retention
unrecorded

Fish Audio

Role
Processor
Categories
Published sentence and story text written by Mouichido; no learner text
Purposes
Voice audio for published sentences and stories
Retention
unrecorded

Google Input Tools

Role
Independent controller
Categories
Up to 64 hiragana and a 16-character clause typed in the Free Talk composer
Purposes
Kanji candidates in the Free Talk composer
Retention
unrecorded

RevenueCat

Role
Processor
Categories
Account id; Purchase and subscription history
Purposes
Sell and verify Mouichido Pro and AI top-ups
Retention
unrecorded

Stripe

Role
Sub-processor
Categories
Payment details and billing email entered at web checkout
Purposes
Take web payments through RevenueCat Billing
Retention
unrecorded

Apple

Role
Independent controller
Categories
Sign in with Apple identifier and email; App Store purchases
Purposes
Sign in; App Store billing
Retention
unrecorded

Google sign-in

Role
Independent controller
Categories
Google account id, email and name
Purposes
Sign in
Retention
unrecorded

Resend

Role
Processor
Categories
Email address; Sign-in, verification and password reset emails
Purposes
Send account emails
Retention
Email records removed 1 week after they finalize, or 4 weeks if abandoned (cleanupResend in backend/convex/notifications/mutations.ts, scheduled hourly by backend/convex/crons.ts)

PostHog

Role
Processor
Categories
Account id; Product events with ids and counts; Error reports, whose messages can hold learner text; IP address and device details; Convex function logs (planned PII scrubbing and 14-day retention; setup unverified)
Purposes
Product analytics; Error tracking
Retention
Account deletion requests person/event erasure one hour later, with bounded retries. Provider completion is asynchronous; deployment setup and completion timing remain unverified.

Google Analytics

Role
Processor
Categories
Pages visited, IP address and device details
Purposes
Website traffic analytics
Retention
unrecorded

Vercel

Role
Processor
Categories
IP address and request details; Japanese text sent to the web tokenizer
Purposes
Host the web app, Studio and website; Tokenize Free Talk text
Retention
unrecorded

Cloudflare Workers

Role
Processor
Categories
Backend API requests and responses, including account details, session credentials and learner content; IP address and request metadata
Purposes
Route and protect backend API traffic
Retention
Request and response bodies stream without Worker storage or logging; security metadata retention is unrecorded

Cloudflare R2

Role
Processor
Categories
Capture photos, voice clips and other media files; IP address of devices loading media
Purposes
Store and serve media files
Retention
Until the learner deletes the item or the account

International transfers

When a recipient stores data outside the EEA, the mechanism below applies where confirmed. Not recorded means the transfer mechanism has not yet been confirmed.

Convex

Region
unrecorded
Transfer mechanism
Not recorded

Anthropic

Region
unrecorded
Transfer mechanism
Not recorded

Convex AI Gateway

Region
unrecorded
Transfer mechanism
Not recorded

OpenAI

Region
unrecorded
Transfer mechanism
Not recorded

Google Gemini API

Region
unrecorded
Transfer mechanism
Not recorded

TypeSafe AI

Region
unrecorded
Transfer mechanism
Not recorded

Fish Audio

Region
unrecorded
Transfer mechanism
Not recorded

Google Input Tools

Region
unrecorded
Transfer mechanism
Not recorded

RevenueCat

Region
unrecorded
Transfer mechanism
Not recorded

Stripe

Region
unrecorded
Transfer mechanism
Not recorded

Apple

Region
unrecorded
Transfer mechanism
Not recorded

Google sign-in

Region
unrecorded
Transfer mechanism
Not recorded

Resend

Region
unrecorded
Transfer mechanism
Not recorded

PostHog

Region
US
Transfer mechanism
Not recorded

Google Analytics

Region
unrecorded
Transfer mechanism
Not recorded

Vercel

Region
unrecorded
Transfer mechanism
Not recorded

Cloudflare Workers

Region
unrecorded
Transfer mechanism
Not recorded

Cloudflare R2

Region
unrecorded
Transfer mechanism
Not recorded

Retention

Learning content, Free Talk conversations and voice clips, capture photos and product history are kept until you delete the item or delete your account.

  • AI provider attempt rows: a 90-day limit is planned; it is not yet verified as enforced.
  • Resend email records: 1 week after they finalize, or 4 weeks if abandoned.
  • RevenueCat customer mirror after account deletion: the app requests customer deletion and schedules removal of its local mirror with a two-hour target. Live completion of that target and provider-side deletion still need confirmation.
  • PostHog person and events: account deletion requests erasure one hour later, with retries if it fails. The provider processes erasure asynchronously; deployment setup and completion timing are still unverified. Email-only objections need approved manual handling.
  • Convex backup retention and PostHog function-log retention await confirmation.
  • A tombstoned account row remains so author references stay valid, with email replaced and status deactivated.

Your rights

You can ask for access, rectification, erasure, restriction, portability or objection, and you can complain to a supervisory authority. Email <H1 mailbox>. We answer within one month of receipt, with identity verification where needed; complex cases may take up to three months with notice and reasons inside the first month.

In Settings, you can edit your display name under Profile and delete your account. You can also delete a Free Talk conversation and opt in to voice clips per session. Review or withdraw your saved AI choice under AI features; the account controls also let you review and withdraw after Pro expires. For other rights requests, email us.

Complaints

You may lodge a complaint with a supervisory authority in your country of residence, place of work, or place of the alleged infringement. Because Mouichido has no EU lead authority, notifications for European residents go to each relevant authority.

Data needed for the contract

We cannot run the service without an email address or Sign in with Apple / Google identifier, subscription status for paid features, and the learning data you create while using the product. Voice clips are optional per session. Analytics have no in-app objection switch today.

Automated decisions

We do not make decisions based solely on automated processing that produce legal or similarly significant effects.

AI providers

Your Free Talk partner is an AI. Card recognition and Japanese checking also use AI. These are their purposes and the data they receive.

Anthropic (Claude)

Purpose
Writes your partner’s replies, tasks and recaps, checks your Japanese, translates and explains, and writes example sentences for your words.
Data
First name, level, learning goal; conversation memory; conversation and practice items

Convex AI Gateway (OpenAI and TypeSafe AI models)

Purpose
Takes over your partner’s replies, tasks and recaps when Anthropic can’t answer, checks your Japanese with TypeSafe AI’s Jev model, and recognizes photos Gemini can’t.
Data
First name, level, learning goal; conversation memory; conversation and practice items; photos

Google Gemini

Purpose
Runs Live talk, reads your partner’s and tutor’s lines and your saved words aloud, recognizes photos and writes example sentences for your words.
Data
First name, level, learning goal; conversation memory; conversation and practice items; live voice; photos; words

TypeSafe AI via Convex AI Gateway

Purpose
Its Jev model checks your Japanese and suggests corrections through Convex AI Gateway.
Data
Conversation and practice items

Fish Audio

Purpose
Reads Mouichido’s own example sentences and stories aloud.
Data
Published Mouichido content; nothing you write, say or photograph

OpenAI

Purpose
Finds related words when you search or save a word.
Data
Words saved or searched for

Conversation memory is always on. The last recap summary and difficulty answer from recent finished sessions go into the next chat or voice prompt. Deleting a conversation removes it from memory. Prompts also carry first name, level, learning goal and the latest tutor note.

Sensitive information

We do not ask for health, religion, politics or other special-category data. If you type such details in chat or voice, we process them to reply and keep them with that conversation until you delete it. Product events hold no conversation text, but unhandled exception reports can include learner text. The legal basis for incidental sensitive information awaits counsel review.

Children

Mouichido is for adults 18 and over. The product does not ask for or verify age. Do not use the service if you are under 18.

Analytics and cookies

The website loads Google Analytics (gtag) and PostHog. The web and iOS apps use PostHog. There is no consent banner. PostHog product events use account ids and counts; web autocapture masks text and attributes, and identify sends no email or name. Console-error capture is disabled on web; unhandled exception capture remains. Backend events disable GeoIP, but client IP collection is not claimed to be disabled. Google Analytics uses its own cookies on the website.

California notice

We collect identifiers, commercial information (subscription status), internet activity (product events) and user content you create. We do not sell personal information or share it for cross-context behavioral advertising. California residents may request access or deletion at <H1 mailbox>.

Last updated

Last updated 2026-10-21.