Privacy Policy

1. Who is responsible for your data

Zero Innovavi Limited publishes the Moshimo app and is its Application Provider. Kenichi LLC. operates and supports the Moshimo service on behalf of Zero Innovavi Limited. In this policy, ‘Moshimo,’ ‘we,’ and ‘us’ refer to these entities in their respective roles. Kenichi LLC. is the primary contact for the personal data described here.

This policy covers the iOS and Android apps, moshimocall.com, customer support, Call for Me, Call Pass purchases, and affiliate program requests. Call Passes are offered through Apple In-App Purchase on iOS and Google Play Billing on Android under the same service rules.

2. Data we collect and how we collect it

We collect information directly from you when you create an account, enter or save a call request, choose a place, contact support, or otherwise submit information. We collect some information automatically when the app communicates with our systems, receives a call result, delivers a notification, or records limited security and diagnostic events. We also receive information from the service providers listed below and from the business called on your behalf.

Optional information does not have to be provided, but we cannot place or complete a call without the details necessary for that request.

On moshimocall.com we use Google Analytics 4, provided by Google, to measure aggregate website traffic, such as pages viewed, approximate location, device and browser type, and the referring site. It uses cookies or similar identifiers and does not receive the details of your call requests, which are handled only in the app. Google Signals and advertising personalization are disabled. In the European Economic Area, the United Kingdom, and Switzerland, analytics storage is denied by default, so Google receives only limited cookieless signals. You can block analytics through your browser settings or Google's opt-out add-on.

In the iOS and Android apps we use AppsFlyer and Google Analytics for Firebase to measure which of Moshimo's own advertising campaigns (for example on Google, Meta, or TikTok) led to an install, sign-up, referral-code entry, call request, or Call Pass purchase. On iOS, the advertising identifier is used only if you allow tracking when the app asks after sign-in.

• Account and contact data: email address, account identifier, name, telephone number, authentication records, sign-in provider identifier, and saved preferences. If you choose Sign in with Apple or Google sign-in on a supported platform, we receive the identity token and profile fields you authorize through that provider.
• Affiliate program requests: the name, email address, and sharing channel or description you submit on the website, along with the request and review status. If you join the program, we may keep your affiliate code and records needed to calculate and pay commissions.
• Giveaway data: if you join a giveaway on moshimocall.com, your Moshimo account identifier and email, the round you entered, entry time, the campaign source of your visit (utm parameters), an anonymous visitor identifier stored in your browser, any free-entry email you send, and, for winners, the prize status, receipts, payment details you provide to receive the prize, and the answer to any skill-testing question.
• Call-request content: the target business name, address and telephone number; your instructions; dates, times, party size, booking name, contact details, accessibility needs, allergies, health or pharmacy context, and other information you choose to submit.
• Call records: provider call identifier, status, timestamps, duration, recording, transcript, summary, analysis, outcome, follow-up details, and error or cancellation information.
• Purchase and access data: Moshimo account identifier, product and entitlement identifiers, store and environment, purchase and expiration times, price and currency, Apple or Google Play transaction identifiers, restoration, refund, cancellation, and remaining Call Pass time and minutes. Apple processes payment credentials for App Store purchases, and Google processes them for Google Play purchases. Moshimo and RevenueCat do not receive your full payment-card or bank-account details.
• Location and search data: precise or approximate device location only when you grant permission, map area, place-search text, and the selected place. Foreground location is used to help search and is not treated as the location of the Japanese business you select. The Google Maps native SDK may collect device metadata, IP address, a Maps SDK identifier, map interactions, and performance and crash diagnostics as described by Google.
• Device, notification, support, and diagnostics data: an app-generated device identifier, push token, notification preferences, app version, support messages, and limited security or failure records. To limit free calls to one per device, the iOS app sends an Apple DeviceCheck token, and Apple keeps the device's status without giving us a device identifier; the Android app sends a Google Play Integrity token and the Android ID, and we store the Android ID only as a one-way hash.
• Advertising measurement data: advertising identifier (IDFA on iOS only with your permission; Android advertising ID), vendor and app-instance identifiers, IP address, device model and OS, install and open times, the ad network, campaign and ad that led to the install, your Moshimo account identifier, and the events listed above, including Call Pass purchase product and price. On iOS, Google's on-device conversion measurement compares your sign-in email with ad interactions on your device; the email itself is not sent to Google. IP-derived approximate country or region may be used for analytics and advertising attribution without device-location permission. Call-request content, recordings, transcripts, health information, precise device location, and contact details supplied for a call are never used for advertising measurement. Sign-in email may be processed only on the device for the Google measurement described in our Privacy Policy; the raw email is not sent to advertising platforms.

3. How we use data

• Create and secure your account, authenticate requests, and sync your preferences and saved targets.
• Review affiliate program requests, contact applicants, issue referral links, and administer any accepted affiliate relationship.
• Run giveaways: record entries, decide eligibility from your account's call and Call Pass records for the round, draw and contact winners, verify receipts, pay prizes, publish winners with masked email addresses as described in the Official Rules, and measure which channels brought entrants.
• Find Japanese businesses, prepare and place the call you request, communicate the details you authorized, and display results in My Calls / Activity.
• Record, transcribe, summarize, and analyze calls for the requested service, subject to applicable law and the permission described below.
• Deliver service notifications, respond to support, diagnose failures, prevent abuse, protect users and the service, and comply with legal obligations.
• Verify App Store and Google Play purchases, activate and restore Call Pass access, calculate expiration and remaining minutes, prevent duplicate redemption, and handle refunds or purchase support.
• Limit free calls to one per device and prevent repeated sign-ups for free calls.
• Maintain and improve service reliability using operational records.
• Measure and improve the effectiveness of Moshimo's own advertising. When you allow tracking on iOS, or on Android unless you delete or limit your advertising ID, this involves linking app events with data from ad networks, which Apple defines as tracking. We do not sell personal data, and we do not provide advertising partners with call-request content, recordings, transcripts, health information, precise device location, or contact details supplied for a call. This exclusion does not cover the IP-derived approximate region or the on-device sign-in-email processing described above.

4. AI calls, recordings, and your permission

Call for Me uses Retell AI and its telephony and model subprocessors. Before the first user-initiated call under the current disclosure version, the app shows the full disclosure and asks for affirmative agreement. This account-level choice applies to later new calls, follow-ups, and retries, while each call surface continues to show a concise reminder before you proceed. We ask again after withdrawal or if the relevant purpose or recipients materially change.

The disclosure covers the target business and the details you entered—including contact, health, or other sensitive information—that are sent to these providers. The business called receives the information needed to handle your request. Calls may be recorded, transcribed, summarized, and analyzed. The automated caller is instructed to identify that it is calling on a traveler's behalf.

You must have authority to share information about every person included in a request and should not submit information that is not needed. You can decline by not placing the call. You can later withdraw the account-level choice under Account / Me → Call Privacy; Moshimo will ask again before a later AI-assisted call. Withdrawal does not erase earlier records, which you can manage using the controls below.

5. Who receives data

We share only what is reasonably necessary for the stated service, security, or legal purpose. We require service providers that process personal data for Moshimo to use it only under our instructions and to provide the same or equivalent protection described in this policy, subject to applicable law.

• The Japanese business, service provider, authority, or other call recipient selected by you.
• Retell AI and its telephony and model subprocessors for automated outbound calling, recording, transcription, analysis, and summaries. The particular subprocessor can depend on Retell's agent configuration and call routing; Retell's current list is linked below.
• Supabase for authentication, databases, realtime updates, storage, and server-side account administration; Vercel for API hosting and operational logs.
• Apple for iOS sign-in, App Store distribution, in-app purchase processing, and purchase or refund records; Google for optional platform sign-in, Google Play distribution and billing, purchase or refund records, and Google Places business search and place details; RevenueCat for purchase validation and synchronization between Apple App Store, Google Play, and Moshimo. Expo, Apple Push Notification service, and Firebase Cloud Messaging support app distribution and push delivery.
• AppsFlyer and Google (Google Analytics for Firebase and Google Ads) for advertising measurement; connected ad networks receive the attribution data described above for Moshimo's campaigns. Google Ads is currently connected. Other networks, such as Meta or TikTok, receive such data only if their integrations are enabled for a campaign. RevenueCat forwards Call Pass purchase events to AppsFlyer and Firebase for the same purpose.
• Professional advisers, regulators, law enforcement, or transaction counterparties when required by law, needed to protect rights and safety, or involved in a legitimate corporate transaction subject to appropriate confidentiality.

6. International processing

Moshimo is operated from Japan. Providers may process data in Japan, the United States, or other countries where they or their subprocessors operate. Privacy and government-access rules may differ from those in your country. We limit the data sent, use encrypted transport and access controls, and use contractual or other safeguards required by applicable law.

7. Retention

• Account and profile data remain while your account is active and are removed through account deletion, subject to the limited exceptions below.
• A call request, transcript, summary, outcome, and provider identifiers remain while the related My Calls / Activity record exists. A call recording is retained for no more than 30 days after the call and may be deleted earlier when you delete an eligible My Calls / Activity record or your account. Deleting an eligible record removes it from active Moshimo systems and requests deletion of associated Retell provider call resources.
• Search text and foreground location used for a search are not intentionally added to your account history. Limited logs may remain under security and troubleshooting schedules.
• Support messages remain while an issue is active and afterward only as reasonably needed for follow-up, security, disputes, or legal duties.
• Affiliate requests remain while we review them and, if accepted, while the affiliate relationship is active. Afterward, we keep only what is reasonably needed for commission accounting, disputes, security, or legal duties. You may ask us to remove an unaccepted request by contacting support.
• After account deletion, Moshimo may retain an account-unlinked, access-restricted store transaction and refund record, including the store transaction identifier, store, product, environment, purchase or refund timestamps and status, and related Pass grant terms, only as reasonably necessary for duplicate-redemption prevention, refund handling, fraud or security controls, financial reporting, legal claims, or compliance. This is pseudonymous transaction data, not anonymous data. It is not retained to restore deleted access or for advertising, and active access and unused Call Pass minutes are forfeited. Moshimo also keeps a one-way hash of each sign-in identity (Apple or Google account identifier, or normalized email address) from a deleted account, used only to stop the same identity from receiving free calls or a referral bonus again; it cannot be used to restore the account. If you entered a referral code, the record that the code was used is kept without any link to you so the referral partner's counts stay accurate. The device record used for the one-free-call-per-device rule (the Android ID hash, or the status Apple keeps for an iOS device) also remains after account deletion, only to prevent free calls from being granted again on that device.
• Deletion from active systems is prompt. Limited encrypted backups and provider backups expire through their normal rotation unless preservation is legally required. We may retain de-identified or legally required security records that cannot reasonably be linked back to you.

8. Your choices and rights

• Review or correct profile information under Account (Me in earlier versions) in the app.
• Control location and notification permissions in device Settings.
• Decline advertising tracking: on iOS choose Ask App Not to Track when prompted, or turn it off later under Settings → Privacy & Security → Tracking; on Android delete or reset your advertising ID under Settings → Privacy → Ads (or Settings → Google → Ads). Aggregated measurement that does not identify you, such as Apple's SKAdNetwork and Google's on-device measurement, may still be used.
• Withdraw AI data-sharing permission under Account / Me → Call Privacy. You will be asked again before a later call.
• Delete an eligible individual call or My Calls / Activity record from My Calls / Activity, including associated provider call data where deletion is supported.
• Delete your account in the app under Account / Me → Delete Account. Ordinary account deletion does not require an email or support request.
• Ask for access, correction, deletion, restriction, objection, or an explanation of handling by contacting us. We may verify your identity and may retain data where law permits or requires it.
• A privacy complaint may also be submitted to the competent privacy authority in your region.

9. Security

We use safeguards designed for the sensitivity of the data, including encrypted network transport, authentication, restricted administrative access, server-side secret storage, database access controls, provider-request verification, and deletion safeguards. No system is completely secure; contact us if you believe your account or data has been compromised.

10. Age requirement

Moshimo is intended for adults aged 18 or older and is not directed to children. Do not submit a child's personal, health, or contact information unless you are the parent or legal guardian, have authority to provide it, and it is necessary for the request.

11. Changes and contact

We may update this policy as the service, providers, or law changes. We will update the date above and provide additional notice when a change materially affects your rights or a permission you previously gave.

Questions and privacy requests can be sent to info@zeroinnovavi.com.