Privacy policy
Last updated 9 October 2026
mochiboost sends you kind little notifications, written by you and by people you choose. This page explains, in plain English, what information we keep to make that work, who can see it, and what you can do about it.
The short version
- We keep only what the app needs: your email, the name you choose, your lists and messages, and your boost buddies.
- No adverts, no tracking across other apps or websites, and we never sell your information.
- Your boost buddies see only the name you choose, never your email.
- You can delete your account in the app (Settings, then Delete account). That deletes your information.
Who we are
mochiboost is made by Pipkin Labs, based in the United Kingdom, and is the “controller” of your information under UK data protection law. You can reach us at hello@pipkinlabs.com.
What we keep, and why
| Information | Why we need it |
|---|---|
| Your email address and password | To create your account and let you sign in. Your password is handled by Google’s Firebase Authentication; we never see it, and it is stored scrambled (hashed). |
| Your display name | The name your boost buddies see on invites and Boosts. You choose it, so it does not have to be your real name. |
| Your lists and the messages in them | So your lists are there when you sign in on another phone or the website. |
| Your boost buddies, anyone you have blocked, and Boosts sent to you | So buddies can send you Boosts, you can choose which to keep, and blocked people cannot reach you. |
| A daily count of Boosts you have sent | To limit how many Boosts one person can send in a day, which helps stop abuse. |
| Reports | If you report a Boost, we keep the message, who sent it and who reported it, so we can review it and protect people from unkindness. |
| Crash reports | If the app crashes on your phone, a short report is sent to Google’s Firebase Crashlytics: what went wrong and where in the code, your phone model, its operating system and app version, and a random installation ID. It never includes your lists or messages. We use it to find and fix bugs. You can switch this off in Settings. |
| Invite links and codes | To connect you with a buddy. Each works once and expires after 7 days. |
Our legal reasons for using this information are that it is needed to provide the app you asked for (“contract”), and our legitimate interest in keeping the app safe and kind. If we ever want to use your information for something else, we will ask you first.
Kept on your phone only
Your boost schedules (which list, what time), your light or dark choice, and whether you have opened today’s Mochi are stored on your device, not on our servers. Notifications are created by your phone itself at the times you set.
Who else handles your information
We use Google’s Firebase (Authentication, Cloud Firestore, Hosting and Crashlytics) to run mochiboost. Google acts on our behalf and keeps our database in London (europe-west2). Google may process some information elsewhere in the world, using approved safeguards. Apart from Google, and anyone the law requires us to tell, we do not share your information with anyone.
How long we keep it
We keep your information while you have an account. When you delete your account in the app, we delete your profile, lists, buddies, blocked list, Boosts waiting for you, and your open invites. Crash reports are kept by Crashlytics for 90 days. A report you made, or a report about a Boost you sent, may be kept for a reasonable time afterwards so we can finish looking into it. Backups are cleared out on Google’s normal schedule.
Your rights
Under UK data protection law you can ask to see the information we hold about you, correct it, delete it, or object to how we use it, and in some cases take a copy to move elsewhere. Most of this you can do yourself in the app. For the rest, email hello@pipkinlabs.com and we will reply within a month. If you are unhappy with how we have handled things, you can complain to the Information Commissioner’s Office at ico.org.uk, though we hope you will let us try to put it right first.
Children
mochiboost is for people aged 13 and over. If you are under 18, please ask a parent or carer before using it. If we learn that someone under 13 has an account, we will delete it. If you think that has happened, please tell us.
Looking after your information
Connections to mochiboost are encrypted. Our database rules mean you can only read your own lists, and a buddy can only send you a Boost if you have accepted each other. No system is perfectly safe, but we take care to keep what you share with us private.
Not medical advice
mochiboost is a gentle app for encouragement. It is not a medical or mental health service. If you are struggling, please speak to someone you trust or a health professional. In the UK you can call Samaritans free on 116 123, any time.
Changes
If we change this policy in a way that matters, we will tell you in the app before it takes effect. The date at the top always shows when it was last updated.