Privacy policy
Version 2026-10-11 · Mochi practice
This site is for children in Years 4 to 6 practising for selective school tests. Because it is for children, this policy is written to be read by one, and by their parents too.
Who we are. A small private project, not a company, not a school, and not connected to any examination authority. Contact: reply to the email your sign-in codes come from.
What we collect
When you sign in
- your email address
- a sign-in code, stored only as a scrambled version of itself, deleted when you use it
When a grown-up sets you up
- your first name, if one is entered
- your age, as stated, since we cannot check it
- a parent or guardian's email address, if you are under 13, or if you are 13 to 17 and choose to give one
When you practise
- which papers you sat, when, what you answered, and your score
- whether the pet helped you
- experience points, coins, and which pet and avatar you own and wear
When you talk to the pet
- not the recording. It is never saved, uploaded or written to a file.
- not what you said. No written copy is kept. It is used to answer you and then it is gone.
- pronunciation scores, which are numbers out of 100 for accuracy, fluency and clarity
- what the pet said back, so it does not repeat itself and so we can check it behaves
When you write
- the piece you write, which is kept so you can read it back later and a parent can see it
- the feedback your pet gives: the bands and the written comments
- your writing is read by the model only to give you that feedback, and is not used to train anything
- how you wrote it, as a few numbers: how long you thought before starting, your typing speed, how long you paused, how much you changed, how many words you had every 10 seconds, and whether you tried to paste or left the page. Never the keys you pressed, and never your writing as it was halfway through. It is kept with the piece, so it is exported and deleted with it
Always
- a record of accepting these terms, stating an age, and a parent unlocking an account, including who did it, to whom, and when
Where it goes
To answer you, some things leave this server for the moment it takes:
| What | Where | Kept there? |
|---|---|---|
| Your voice, to be scored | Microsoft Azure Speech, Sydney, Australia | No |
| What you said and the question, so the pet can answer | Microsoft Azure OpenAI, Sydney, Australia | No |
| Your writing, so the pet can give feedback | Microsoft Azure OpenAI, Sydney, Australia | No |
| Your email address, to send a sign-in code | Mailgun, a mail service outside Australia | Yes, as a sent email |
| How the site is used, so we can see what to make better | PostHog, an analytics service in the European Union | Yes, see below |
How the site is used. We count things like which pages are opened, which buttons are pressed, when a paper is started or handed in, its score and how long it took, and the kind of device and browser. This goes to PostHog without your name, your email address or anything you wrote or said, and without the words on the buttons you press. Your internet address is not kept. Nothing records your screen. It is tied only to a random number kept in your browser, which is reset when you sign out. If your browser is set to "Do Not Track", nothing is sent at all.
Everything else stays on one server in Sydney, Australia. We do not sell anything to anybody, and there is no advertising anywhere on this site.
How long we keep it
- Voice recordings and what you said: not kept at all.
- Practice results, scores and pet replies: while the account is in use, and for 24 months after the last sign-in, after which they are deleted.
- The writing you do, and its feedback: kept with your practice results for the same 24 months, so you can read it back. A parent can export or delete it at any time.
- Sign-in codes: 10 minutes.
- Sign-in sessions: up to 60 days, or until signed out.
- The consent record: kept as long as the account is, because it is the evidence a grown-up said yes.
A parent can delete a child's account and everything in it at any time, from the parent portal, without asking us.
What you can ask for
- See it, which means a parent can download everything held about their child, as a file.
- Fix it, which means anything wrong can be corrected.
- Delete it, which means a parent can erase a child's account and its records from the parent portal. It is immediate and it cannot be undone.
Children
Under 13, a named parent or guardian has to unlock the account before it works at all, and they can lock it again whenever they like. They see what is collected before they unlock it. From 13 to 17 the account works on its own, and a parent or guardian is involved only if the student names one; that parent then has the same view and the same controls. They can see their own children's records and nobody else's, so not other families', and not other children's.
An administrator running this site cannot read what any child said to the pet.
Keeping it safe
Sign-in is by one-time code; there are no passwords to lose. Traffic is encrypted. Keys are held on the server and never in the browser. If something did go wrong in a way that could seriously harm someone, we would tell the people affected and the Office of the Australian Information Commissioner, as the law requires.
Complaints
Tell us first by replying to the sign-in email. If that does not resolve it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
If this policy changes in a way that matters, you will be asked to read it again. The version above is recorded against your account when you accept it.