Privacy policy

Version 2026-09-16 · Mochi practice

This site is for children in Years 4 to 6 practising for selective school tests. Because it is for

children, this policy is written to be read by one — and by their parents.

Who we are. A small private project, not a company, not a school, and not connected to any

examination authority. Contact: reply to the email your sign-in codes come from.

What we collect

When you sign in

your email address
a sign-in code, stored only as a scrambled version of itself, deleted when you use it

When a grown-up sets you up

When you practise

When you talk to the pet

not the recording. It is never saved, uploaded or written to a file.
not what you said. No written copy is kept. It is used to answer you and then it is gone.
pronunciation scores — numbers out of 100 for accuracy, fluency and clarity
what the pet said back, so it does not repeat itself and so we can check it behaves

When you write

the piece you write — it is kept, so you can read it back later and a parent can see it
the feedback your pet gives: the bands and the written comments
your writing is read by the model only to give you that feedback, and is not used to train anything

Always

a record of accepting these terms, stating an age, and a parent unlocking an account — who did it, to whom, and when

To answer you, some things leave this server for the moment it takes:

What	Where	Kept there?
Your voice, to be scored	Microsoft Azure Speech, Sydney, Australia	No
What you said and the question, so the pet can answer	Microsoft Azure OpenAI, Sydney, Australia	No
Your writing, so the pet can give feedback	Microsoft Azure OpenAI, Sydney, Australia	No
Your email address, to send a sign-in code	Mailgun, a mail service outside Australia	Yes, as a sent email

Everything else stays on one server in Sydney, Australia. We do not sell anything to anybody,

and there is no advertising anywhere on this site.

Voice recordings and what you said: not kept at all.
Practice results, scores and pet replies: while the account is in use, and for 24 months after the last sign-in, after which they are deleted.
The writing you do, and its feedback: kept with your practice results — the same 24 months — so you can read it back. A parent can export or delete it at any time.
Sign-in codes: 10 minutes.
Sign-in sessions: up to 60 days, or until signed out.
The consent record: kept as long as the account is, because it is the evidence a grown-up said yes.

A parent can delete a child's account and everything in it at any time, from the parent portal,

without asking us.

See it — a parent can download everything held about their child, as a file.
Fix it — anything wrong can be corrected.
Delete it — a parent can erase a child's account and its records from the parent portal. It is immediate and it cannot be undone.

Under 18, a named parent or guardian has to unlock the account before it works at all, and they

can lock it again whenever they like. They see what is collected before they unlock it. They can

see their own children's records and nobody else's — not other families', and not other children's.

An administrator running this site cannot read what any child said to the pet.

Sign-in is by one-time code; there are no passwords to lose. Traffic is encrypted. Keys are held on

the server and never in the browser. If something did go wrong in a way that could seriously harm

someone, we would tell the people affected and the Office of the Australian Information

Commissioner, as the law requires.

Tell us first — reply to the sign-in email. If that does not resolve it, you can complain to the

Office of the Australian Information Commissioner at oaic.gov.au.

_If this policy changes in a way that matters, you will be asked to read it again. The version above

is recorded against your account when you accept it._