Privacy Policy
Last updated: May 9, 2026
Controller: The Software Company of Barcelona, S.L. ("KaikuLabs", "we", "us")
1. Who We Are
Mochi: Couples Corner ("Mochi", "the App") is operated by The Software Company of Barcelona, S.L., a company incorporated in Spain. If you have any questions about this Privacy Policy, you can contact us at: contact@kaikulabs.com.
2. What Data We Collect
2.1 Data you provide directly
- Account information: name and email address when you sign in with Google or Apple.
- Journal entries: text, drawings, and mood logs you create within the App.
- Countdown events: event names, dates, and related content you add.
- Partner connection data: any shared content visible to your connected partner.
2.2 Data collected automatically
- Usage analytics: how you interact with the App (screens visited, features used, session duration), collected via Countly.
- Attribution data: which marketing channel or campaign brought you to the App, collected via AppsFlyer.
- Subscription data: purchase and subscription status, managed via RevenueCat. We do not store your payment card details — these are handled by Apple App Store or Google Play.
- Technical data: device type, OS version, app version, crash logs.
3. How We Use Your Data
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing and syncing the App's features | Performance of contract |
| Authentication via Google or Apple Sign-In | Performance of contract |
| Managing your subscription | Performance of contract |
| Improving the App and fixing bugs | Legitimate interests |
| Understanding how users discover the App (attribution) | Legitimate interests |
| Complying with legal obligations | Legal obligation |
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.
4. Third-Party Services
We share data with the following trusted providers, solely to operate the App:
| Provider | Purpose | Privacy Policy |
|---|---|---|
| Supabase | Database and backend infrastructure | supabase.com/privacy |
| RevenueCat | Subscription management | revenuecat.com/privacy |
| Countly | In-app analytics | countly.com/privacy |
| AppsFlyer | Attribution and ad analytics | appsflyer.com/legal/privacy-policy |
| Google (Sign-In) | Authentication | policies.google.com/privacy |
| Apple (Sign-In) | Authentication | apple.com/legal/privacy |
These providers act as data processors and are contractually bound to process your data only on our instructions.
5. Data Storage and Transfers
Your data is stored on servers provided by Supabase. Some of our third-party providers operate outside the European Economic Area (EEA). Where this is the case, we rely on the European Commission's Standard Contractual Clauses or equivalent safeguards to protect your data.
6. Data Retention
We retain your account and content data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory reasons.
7. Your Rights (GDPR)
If you are located in the EEA or the UK, you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data ("right to be forgotten").
- Restrict or object to certain processing.
- Portability — receive your data in a structured, machine-readable format.
- Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact us at contact@kaikulabs.com. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at aepd.es.
8. Children's Privacy
Mochi is available to users of all ages. We do not knowingly collect personal data from children under 13 (or under 16 in the EEA) without verified parental consent. If you believe a child has provided us data without consent, please contact us and we will delete it promptly.
9. Security
We implement appropriate technical and organisational measures to protect your data against unauthorized access, loss, or disclosure. All data in transit is encrypted using TLS.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via the App or by email. Continued use of the App after the effective date constitutes acceptance of the updated policy.