Privacy policy
This notice explains what personal data Mouichido collects, why, who receives it, how long it is kept, and your rights. It applies to the website at mouichido.com, the web app and the iOS app.
We collect the information you provide when you create an account, contact us or use learning features. Sign-in providers supply account identifiers and profile details; billing providers supply purchase and subscription status. We also collect request, device and usage information as described below. Payment details entered at checkout are handled by our payment providers.
Draft for review. Controller identity and vendor contract facts await confirmation; this notice has not received legal approval.
Controller
<H1 legal name> (“Mouichido”) is the controller of personal data processed through the Mouichido website, web app and iOS app.
Postal address: <H1 postal address>.
Privacy contact: <H1 mailbox>.
Mouichido plans to launch worldwide without an EU or UK representative. No data protection officer is appointed. These decisions await legal review. Rem owns privacy.
Questions go to <H1 mailbox>.
Purposes and legal bases
- Provide the learning service, accounts, subscriptions and support — contract.
- Free Talk chat and voice, including conversation memory used to pitch the next session — contract.
- Capture photo recognition and word tools — contract.
- Product analytics (PostHog; website also Google Analytics) — legitimate interests, subject to legal review.
- Security, fraud prevention and keeping the service reliable — legitimate interests.
- Send sign-in, verification and password-reset email — contract.
Recipients
The processors and independent recipients below receive personal data as described. Fish Audio and Google Input Tools have no data-processing contract. Other contract facts marked unrecorded await confirmation.
Convex
- Role
- Processor
- Categories
- Account details: email, name and sign-in identifiers; Learning progress and review history; Words, decks and captures learners create; Word-enrichment workflow arguments and journals until account deletion; Free Talk conversations, recaps and conversation memory; Subscription status
- Purposes
- Run the Mouichido service and store learner data
- Retention
- Until the learner deletes the item or the account
Anthropic
- Role
- Processor
- Categories
- Free Talk messages with first name, level, learning goal and conversation memory; Learner text for translation, explanations and word examples
- Purposes
- Generate Free Talk replies; Check learner lines and suggest corrections; Translate and write word examples
- Retention
- Standard API inputs and outputs are deleted within 30 days, with exceptions for legal requirements, usage-policy enforcement and separately agreed retention (Anthropic Privacy Center, read 2026-10-21). Account-specific contractual terms remain unrecorded; zero retention is not confirmed.
Convex AI Gateway
- Role
- Processor
- Categories
- Free Talk messages with first name, level, learning goal and conversation memory; Capture photos when Gemini recognition fails
- Purposes
- Generate Free Talk replies when Anthropic cannot; Check learner lines and suggest corrections; Recognize capture photos
- Retention
- unrecorded
OpenAI
- Role
- Processor
- Categories
- Vocabulary and grammar text, including words learners add
- Purposes
- Embeddings for search and related words
- Retention
- unrecorded
Google Gemini API
- Role
- Processor
- Categories
- Capture photos; Learner text for translation and word examples; Live voice audio and transcripts; Text for narration audio
- Purposes
- Recognize captures; Translate and write word examples; Live voice conversations; Narration audio
- Retention
- unrecorded
TypeSafe AI
- Role
- Processor
- Categories
- Free Talk learner messages
- Purposes
- Check learner lines and suggest corrections
- Retention
- unrecorded
Fish Audio
- Role
- Processor
- Categories
- Published sentence and story text written by Mouichido; no learner text
- Purposes
- Voice audio for published sentences and stories
- Retention
- unrecorded
Google Input Tools
- Role
- Independent controller
- Categories
- Up to 64 hiragana and a 16-character clause typed in the Free Talk composer
- Purposes
- Kanji candidates in the Free Talk composer
- Retention
- unrecorded
RevenueCat
- Role
- Processor
- Categories
- Account id; Purchase and subscription history
- Purposes
- Sell and verify Mouichido Pro and AI top-ups
- Retention
- unrecorded
Stripe
- Role
- Sub-processor
- Categories
- Payment details and billing email entered at web checkout
- Purposes
- Take web payments through RevenueCat Billing
- Retention
- unrecorded
Apple
- Role
- Independent controller
- Categories
- Sign in with Apple identifier and email; App Store purchases
- Purposes
- Sign in; App Store billing
- Retention
- unrecorded
Google sign-in
- Role
- Independent controller
- Categories
- Google account id, email and name
- Purposes
- Sign in
- Retention
- unrecorded
Resend
- Role
- Processor
- Categories
- Email address; Sign-in, verification and password reset emails
- Purposes
- Send account emails
- Retention
- Email records removed 1 week after they finalize, or 4 weeks if abandoned (cleanupResend in backend/convex/notifications/mutations.ts, scheduled hourly by backend/convex/crons.ts)
PostHog
- Role
- Processor
- Categories
- Account id; Product events with ids and counts; Error reports, whose messages can hold learner text; IP address and device details; Convex function logs (planned PII scrubbing and 14-day retention; setup unverified)
- Purposes
- Product analytics; Error tracking
- Retention
- Account deletion requests person/event erasure one hour later, with bounded retries. Provider completion is asynchronous; deployment setup and completion timing remain unverified.
Google Analytics
- Role
- Processor
- Categories
- Pages visited, IP address and device details
- Purposes
- Website traffic analytics
- Retention
- unrecorded
Vercel
- Role
- Processor
- Categories
- IP address and request details; Japanese text sent to the web tokenizer
- Purposes
- Host the web app, Studio and website; Tokenize Free Talk text
- Retention
- unrecorded
Cloudflare Workers
- Role
- Processor
- Categories
- Backend API requests and responses, including account details, session credentials and learner content; IP address and request metadata
- Purposes
- Route and protect backend API traffic
- Retention
- Request and response bodies stream without Worker storage or logging; security metadata retention is unrecorded
Cloudflare R2
- Role
- Processor
- Categories
- Capture photos, voice clips and other media files; IP address of devices loading media
- Purposes
- Store and serve media files
- Retention
- Until the learner deletes the item or the account
International transfers
When a recipient stores data outside the EEA, the mechanism below applies where confirmed. Not recorded means the transfer mechanism has not yet been confirmed.
Convex
- Region
- unrecorded
- Transfer mechanism
- Not recorded
Anthropic
- Region
- unrecorded
- Transfer mechanism
- Not recorded
Convex AI Gateway
- Region
- unrecorded
- Transfer mechanism
- Not recorded
OpenAI
- Region
- unrecorded
- Transfer mechanism
- Not recorded
Google Gemini API
- Region
- unrecorded
- Transfer mechanism
- Not recorded
TypeSafe AI
- Region
- unrecorded
- Transfer mechanism
- Not recorded
Fish Audio
- Region
- unrecorded
- Transfer mechanism
- Not recorded
Google Input Tools
- Region
- unrecorded
- Transfer mechanism
- Not recorded
RevenueCat
- Region
- unrecorded
- Transfer mechanism
- Not recorded
Stripe
- Region
- unrecorded
- Transfer mechanism
- Not recorded
Apple
- Region
- unrecorded
- Transfer mechanism
- Not recorded
Google sign-in
- Region
- unrecorded
- Transfer mechanism
- Not recorded
Resend
- Region
- unrecorded
- Transfer mechanism
- Not recorded
PostHog
- Region
- US
- Transfer mechanism
- Not recorded
Google Analytics
- Region
- unrecorded
- Transfer mechanism
- Not recorded
Vercel
- Region
- unrecorded
- Transfer mechanism
- Not recorded
Cloudflare Workers
- Region
- unrecorded
- Transfer mechanism
- Not recorded
Cloudflare R2
- Region
- unrecorded
- Transfer mechanism
- Not recorded
Retention
Learning content, Free Talk conversations and voice clips, capture photos and product history are kept until you delete the item or delete your account.
- AI provider attempt rows: a 90-day limit is planned; it is not yet verified as enforced.
- Resend email records: 1 week after they finalize, or 4 weeks if abandoned.
- RevenueCat customer mirror after account deletion: the app requests customer deletion and schedules removal of its local mirror with a two-hour target. Live completion of that target and provider-side deletion still need confirmation.
- PostHog person and events: account deletion requests erasure one hour later, with retries if it fails. The provider processes erasure asynchronously; deployment setup and completion timing are still unverified. Email-only objections need approved manual handling.
- Convex backup retention and PostHog function-log retention await confirmation.
- A tombstoned account row remains so author references stay valid, with email replaced and status deactivated.
Your rights
You can ask for access, rectification, erasure, restriction, portability or objection, and you can complain to a supervisory authority. Email <H1 mailbox>. We answer within one month of receipt, with identity verification where needed; complex cases may take up to three months with notice and reasons inside the first month.
In Settings, you can edit your display name under Profile and delete your account. You can also delete a Free Talk conversation and opt in to voice clips per session. Review or withdraw your saved AI choice under AI features; the account controls also let you review and withdraw after Pro expires. For other rights requests, email us.
Withdrawing consent and AI permission
Analytics run on legitimate interests without a consent banner; there is no in-app analytics objection switch today. Object by emailing <H1 mailbox>.
Before AI features run, the app asks you to agree to one versioned disclosure of the services and data they receive. In Settings, open AI features and choose Withdraw to turn off AI features. You can withdraw a saved choice during a processing restriction too; lifting the restriction does not restore a choice you withdrew. Withdrawal stops new permission-gated requests, but cannot retract data already sent to a provider. Searching for or saving a word still sends that word to OpenAI for search embeddings when AI features are off.
Complaints
You may lodge a complaint with a supervisory authority in your country of residence, place of work, or place of the alleged infringement. Because Mouichido has no EU lead authority, notifications for European residents go to each relevant authority.
Data needed for the contract
We cannot run the service without an email address or Sign in with Apple / Google identifier, subscription status for paid features, and the learning data you create while using the product. Voice clips are optional per session. Analytics have no in-app objection switch today.
Automated decisions
We do not make decisions based solely on automated processing that produce legal or similarly significant effects.
AI providers
Your Free Talk partner is an AI. Card recognition and Japanese checking also use AI. These are their purposes and the data they receive.
Anthropic (Claude)
- Purpose
- Writes your partner’s replies, tasks and recaps, checks your Japanese, translates and explains, and writes example sentences for your words.
- Data
- First name, level, learning goal; conversation memory; conversation and practice items
Convex AI Gateway (OpenAI and TypeSafe AI models)
- Purpose
- Takes over your partner’s replies, tasks and recaps when Anthropic can’t answer, checks your Japanese with TypeSafe AI’s Jev model, and recognizes photos Gemini can’t.
- Data
- First name, level, learning goal; conversation memory; conversation and practice items; photos
Google Gemini
- Purpose
- Runs Live talk, reads your partner’s and tutor’s lines and your saved words aloud, recognizes photos and writes example sentences for your words.
- Data
- First name, level, learning goal; conversation memory; conversation and practice items; live voice; photos; words
TypeSafe AI via Convex AI Gateway
- Purpose
- Its Jev model checks your Japanese and suggests corrections through Convex AI Gateway.
- Data
- Conversation and practice items
Fish Audio
- Purpose
- Reads Mouichido’s own example sentences and stories aloud.
- Data
- Published Mouichido content; nothing you write, say or photograph
OpenAI
- Purpose
- Finds related words when you search or save a word.
- Data
- Words saved or searched for
Conversation memory is always on. The last recap summary and difficulty answer from recent finished sessions go into the next chat or voice prompt. Deleting a conversation removes it from memory. Prompts also carry first name, level, learning goal and the latest tutor note.
Sensitive information
We do not ask for health, religion, politics or other special-category data. If you type such details in chat or voice, we process them to reply and keep them with that conversation until you delete it. Product events hold no conversation text, but unhandled exception reports can include learner text. The legal basis for incidental sensitive information awaits counsel review.
Children
Mouichido is for adults 18 and over. The product does not ask for or verify age. Do not use the service if you are under 18.
California notice
We collect identifiers, commercial information (subscription status), internet activity (product events) and user content you create. We do not sell personal information or share it for cross-context behavioral advertising. California residents may request access or deletion at <H1 mailbox>.
Last updated
Last updated 2026-10-21.