Privacy Policy

Information We Collect

Depending on how you use MohChat, we may collect:

• Account details such as email, name, and optional profile information.
• Conversation content and files you provide to generate responses and sync chats across devices.
• Security and usage data (for example: IP address, user agent, timestamps, and feature usage) to prevent abuse and improve reliability.
• Cookie and local storage preferences (for example: cookie choice and UI state like sidebar collapse).
• Billing information is handled by our payment processor; we may store non-sensitive billing metadata (for example: subscription tier and Stripe customer IDs).

How We Use Information

We use collected information to:

• Provide and operate the service (authentication, chat syncing, file uploads, and subscription management).
• Improve product quality and performance, and troubleshoot issues.
• Protect against fraud, abuse, and unauthorized access.
• Support customer requests and billing support.

Third-Party Services

MohChat may use third-party service providers to deliver the service. For example:

• AI providers to process message content and generate responses when you use AI features.
• Stripe to process subscriptions and payments.
• Infrastructure providers (hosting, storage, email, and security services).

We do not sell your personal information.

Customer source reporting

Support requests and internal signup and payment alerts include account status and basic browser or app and operating-system information. With advertising measurement enabled, we also record campaign labels and the referring domain to explain how a customer found MohChat. We do not include full referring URLs, raw ad click identifiers or device fingerprints in these emails. Untagged visits and app installs without attribution are reported as unknown. Withdrawing measurement prevents this stored attribution being used in future alerts; emails already delivered remain in our support records.

Optional iOS and Android measurement

In supported app versions, Advertising measurement in Settings is off until you choose to enable it. With your permission, MohChat can link your account to Apple Ads campaign information verified with Apple, or install-referrer information supplied by Google Play. We also record app opens, upgrade views and checkout outcomes, along with the app version and language. These events contain no conversation text, recordings or document contents. We do not use an advertising identifier or device fingerprint for this feature.

After you delete your account, signup with the same email or linked Apple, Google, or Microsoft identity is unavailable for 7 days. To enforce this cooldown, we retain keyed, non-readable fingerprints of those identifiers with an expiry time, separate from your deleted profile and chats. The restriction expires automatically after 7 days; expired fingerprints are removed by scheduled housekeeping within 5 minutes.

Optional app events and attribution are retained for up to 90 days. Events may wait on your device while it is offline. Turning measurement off stops collection, removes the queued events, and removes the stored optional event and attribution records when the change reaches our server. If the connection is unavailable, the app retries your withdrawal. You can continue using MohChat with measurement off. Store and advertising platforms also provide aggregate install reports, which are reported separately from individual account matches.

Purchase verification, subscription access and financial records are necessary to operate paid subscriptions and are separate from optional advertising measurement. A free trial or sandbox test is not counted as a verified customer payment.

Cookies, Local Storage, and Advertising

MohChat uses cookies and similar technologies for essential functionality and, if enabled, for analytics and advertising.

• Essential: sessions, authentication, and security.
• Non-essential: product analytics and measurement (if enabled).
• Optional Google Ads measurement: after explicit consent, a Google ad click identifier is linked to your first actual paid website subscription. We send Google the click identifier, payment amount, currency, time and a pseudonymous identifier to prevent duplicate reporting. This server-to-server upload does not include your name, email, IP address or conversations, and does not enable ad personalization.
• Optional sign-up and chat measurement: if you accept the updated advertising notice, verified sign-up and first successful chat events can be shared separately with Google using the click identifier, event time and pseudonymous event identifier. These have zero revenue and are not counted as paid subscriptions. Chat contents, uploaded files and contact details are not shared. Earlier purchase-only permission is not silently expanded.
• Optional Google Ads tag: only after you accept the current advertising notice, our pages load Google's tag (gtag.js from googletagmanager.com). It sets first-party cookies on mohchat.com such as _gcl_au, and _gcl_aw or _gcl_gb when you arrive from a Google ad, for up to 90 days. Google may also read or set its own cookies (for example on googleadservices.com, google.com and doubleclick.net) to match your ad click. When you create an account on the website, the page sends Google one sign-up event with a pseudonymous event identifier; we do not send your name, email, account ID or chats. Like any web request, Google receives your browser's IP address and user agent when the tag loads. Ad personalization signals are turned off. Google processes this data under its own terms (business.safety.google/privacy). Earlier advertising permission does not load this tag; you are asked again. Our legal basis is your consent.
• Optional TikTok measurement: only after you accept the notice naming TikTok, a separate measurement page loads the TikTok Pixel from analytics.tiktok.com. It shares page-view signals and, after a verified new website account is created, a CompleteRegistration event with a pseudonymous event ID. A TikTok ad click identifier (ttclid), cookie identifiers, browser IP address and user agent help match ads to registrations. We do not send your name, email, account ID, chat content or uploaded files. Automatic advanced matching, automatic event setup and enhanced page-content collection are disabled. TikTok may use this information to measure and improve advertising and personalize ads under its Privacy Policy. This integration disables TikTok first-party cookies and isolates its code from account and chat pages. After consent, a TikTok click ID can be kept in the secure MohChat server session for up to 90 days to match a later registration. Depending on your browser settings, requests to TikTok may include TikTok’s own third-party cookies; TikTok lists advertising-cookie lifetimes of up to 13 months after last use. Our consent expires after 90 days, and earlier Google-only consent never enables TikTok.
• Retention and withdrawal: browser consent and attribution last up to 90 days. Rejecting or withdrawing advertising consent stops future uploads and the Google and TikTok tags, removes click identifiers from this browser's stored consent records, and deletes the Google _gcl and any legacy TikTok first-party cookies from this browser. Previously sent data is subject to Google’s and TikTok’s retention policies. Cookies on another company’s domain cannot be deleted by MohChat. Old essential-cookie settings do not authorize this measurement.

You can allow, reject or withdraw advertising measurement at any time on our Cookie Policy and preferences page without losing access to the app.

Meta · Facebook · Instagram

With your permission, Meta (Facebook and Instagram) measures visits, verified sign-ups and first paid subscriptions using ad and cookie identifiers and browser information. No names, emails or chats.

Meta’s browser requests reveal your IP address. Purchase events include value and currency. The isolated Meta Pixel has automatic events and advanced matching disabled.

Meta consent and identifiers (_fbp, _fbc) expire after 90 days. Withdrawing permission stops tracking and removes identifiers and unsent events. Previously sent data follows Meta’s retention policy.

Earlier permission does not enable Meta. Meta may use received data for advertising personalization. MohChat cannot delete cookies on Meta’s own domains.

Your Choices

You can:

• Choose whether to enable non-essential cookies using the in-app cookie prompt.
• Use your browser settings to block or delete cookies.
• Contact us to request access, correction, or deletion of account data where applicable.

Last updated: October 3, 2026