GDPR Information

Last updated: 11 January 2026

This document explains how Mochi processes personal data under GDPR for users in the EEA.

Data Controller

Martin Malek Czech Republic, European Union Email: support@madebymochi.app

Data Type	Purpose	Legal Basis	Retention
Pseudonymous User ID	Usage limits, purchases	Contract (Art. 6(1)(b))	Stored on device
Device Information	Compatibility, improvement	Legitimate Interest (Art. 6(1)(f))	With request logs
Photos	AI image transformation	Consent (Art. 6(1)(a))	Deleted within 24 hours
Push Notification Token	Image-ready notifications	Consent (Art. 6(1)(a))	Until token refresh
Purchase Information	Credit management	Contract (Art. 6(1)(b))	Duration of service
Aggregated Analytics	Service improvement	Legitimate Interest (Art. 6(1)(f))	Indefinitely, non-identifiable

Data Type	Purpose	Legal Basis	Retention
Name	Respond to inquiry	Legitimate Interest	Up to 12 months
Email	Respond to inquiry	Legitimate Interest	Up to 12 months
Message	Handle request	Legitimate Interest	Up to 12 months

Consent may be withdrawn at any time by discontinuing photo uploads or notifications.

Your photos may be temporarily processed outside the EEA:

You have the right to access, rectify, erase, restrict, port, object, and withdraw consent.

Requests: support@madebymochi.app (include pseudonymous user ID). Response time: within 30 days.

You may lodge a complaint with your local supervisory authority. Czech Republic: ÚOOÚ – www.uoou.cz

AI is used solely to transform images based on user request. No profiling or automated decision-making with legal effects occurs.

We do not knowingly process data of children below the age required by applicable law (typically 13–16).

Data Controller: Martin Malek Email: support@madebymochi.app

For general privacy information see the Privacy Policy.