Privacy Policy

1. Who is responsible for your data

Zero Innovavi Limited publishes the Moshimo app and is its Application Provider. Kenichi LLC. operates and supports the Moshimo service on behalf of Zero Innovavi Limited. In this policy, ‘Moshimo,’ ‘we,’ and ‘us’ refer to these entities in their respective roles. Kenichi LLC. is the primary contact for the personal data described here.

This policy covers the iOS and Android apps, moshimocall.com, customer support, Call for Me, and Call Pass purchases. Call Passes are offered through Apple In-App Purchase on iOS and Google Play Billing on Android under the same service rules.

2. Data we collect and how we collect it

We collect information directly from you when you create an account, enter or save a call request, choose a place, contact support, or otherwise submit information. We collect some information automatically when the app communicates with our systems, receives a call result, delivers a notification, or records limited security and diagnostic events. We also receive information from the service providers listed below and from the business called on your behalf.

Optional information does not have to be provided, but we cannot place or complete a call without the details necessary for that request.

On moshimocall.com we use Google Analytics 4, provided by Google, to measure aggregate website traffic, such as pages viewed, approximate location, device and browser type, and the referring site. It uses cookies or similar identifiers and does not receive the details of your call requests, which are handled only in the app. Google Signals and advertising personalization are disabled. In the European Economic Area, the United Kingdom, and Switzerland, analytics storage is denied by default, so Google receives only limited cookieless signals. You can block analytics through your browser settings or Google's opt-out add-on.

• Account and contact data: email address, account identifier, name, telephone number, authentication records, sign-in provider identifier, and saved preferences. If you choose Sign in with Apple or Google sign-in on a supported platform, we receive the identity token and profile fields you authorize through that provider.
• Call-request content: the target business name, address and telephone number; your instructions; dates, times, party size, booking name, contact details, accessibility needs, allergies, health or pharmacy context, and other information you choose to submit.
• Call records: provider call identifier, status, timestamps, duration, recording, transcript, summary, analysis, outcome, follow-up details, and error or cancellation information.
• Purchase and access data: Moshimo account identifier, product and entitlement identifiers, store and environment, purchase and expiration times, price and currency, Apple or Google Play transaction identifiers, restoration, refund, cancellation, and remaining Call Pass time and minutes. Apple processes payment credentials for App Store purchases, and Google processes them for Google Play purchases. Moshimo and RevenueCat do not receive your full payment-card or bank-account details.
• Location and search data: precise or approximate device location only when you grant permission, map area, place-search text, and the selected place. Foreground location is used to help search and is not treated as the location of the Japanese business you select. The Google Maps native SDK may collect device metadata, IP address, a Maps SDK identifier, map interactions, and performance and crash diagnostics as described by Google.
• Device, notification, support, and diagnostics data: an app-generated device identifier, push token, notification preferences, app version, support messages, and limited security or failure records.

3. How we use data

• Create and secure your account, authenticate requests, and sync your preferences and saved targets.
• Find Japanese businesses, prepare and place the call you request, communicate the details you authorized, and display results in My Calls / Activity.
• Record, transcribe, summarize, and analyze calls for the requested service, subject to applicable law and the permission described below.
• Deliver service notifications, respond to support, diagnose failures, prevent abuse, protect users and the service, and comply with legal obligations.
• Verify App Store and Google Play purchases, activate and restore Call Pass access, calculate expiration and remaining minutes, prevent duplicate redemption, and handle refunds or purchase support.
• Maintain and improve service reliability using operational records. We do not sell personal data or use it for third-party advertising or cross-app tracking.

4. AI calls, recordings, and your permission

Call for Me uses Retell AI and its telephony and model subprocessors. Before the first user-initiated call under the current disclosure version, the app shows the full disclosure and asks for affirmative agreement. This account-level choice applies to later new calls, follow-ups, and retries, while each call surface continues to show a concise reminder before you proceed. We ask again after withdrawal or if the relevant purpose or recipients materially change.

The disclosure covers the target business and the details you entered—including contact, health, or other sensitive information—that are sent to these providers. The business called receives the information needed to handle your request. Calls may be recorded, transcribed, summarized, and analyzed. The automated caller is instructed to identify that it is calling on a traveler's behalf.

You must have authority to share information about every person included in a request and should not submit information that is not needed. You can decline by not placing the call. You can later withdraw the account-level choice under Account / Me → Call Privacy; Moshimo will ask again before a later AI-assisted call. Withdrawal does not erase earlier records, which you can manage using the controls below.

5. Who receives data

We share only what is reasonably necessary for the stated service, security, or legal purpose. We require service providers that process personal data for Moshimo to use it only under our instructions and to provide the same or equivalent protection described in this policy, subject to applicable law.

• The Japanese business, service provider, authority, or other call recipient selected by you.
• Retell AI and its telephony and model subprocessors for automated outbound calling, recording, transcription, analysis, and summaries. The particular subprocessor can depend on Retell's agent configuration and call routing; Retell's current list is linked below.
• Supabase for authentication, databases, realtime updates, storage, and server-side account administration; Vercel for API hosting and operational logs.
• Apple for iOS sign-in, App Store distribution, in-app purchase processing, and purchase or refund records; Google for optional platform sign-in, Google Play distribution and billing, purchase or refund records, and Google Places business search and place details; RevenueCat for purchase validation and synchronization between Apple App Store, Google Play, and Moshimo. Expo, Apple Push Notification service, and Firebase Cloud Messaging support app distribution and push delivery.
• Professional advisers, regulators, law enforcement, or transaction counterparties when required by law, needed to protect rights and safety, or involved in a legitimate corporate transaction subject to appropriate confidentiality.

6. International processing

Moshimo is operated from Japan. Providers may process data in Japan, the United States, or other countries where they or their subprocessors operate. Privacy and government-access rules may differ from those in your country. We limit the data sent, use encrypted transport and access controls, and use contractual or other safeguards required by applicable law.

7. Retention

• Account and profile data remain while your account is active and are removed through account deletion, subject to the limited exceptions below.
• A call request, transcript, summary, outcome, and provider identifiers remain while the related My Calls / Activity record exists. A call recording is retained for no more than 30 days after the call and may be deleted earlier when you delete an eligible My Calls / Activity record or your account. Deleting an eligible record removes it from active Moshimo systems and requests deletion of associated Retell provider call resources.
• Search text and foreground location used for a search are not intentionally added to your account history. Limited logs may remain under security and troubleshooting schedules.
• Support messages remain while an issue is active and afterward only as reasonably needed for follow-up, security, disputes, or legal duties.
• After account deletion, Moshimo may retain an account-unlinked, access-restricted store transaction and refund record, including the store transaction identifier, store, product, environment, purchase or refund timestamps and status, and related Pass grant terms, only as reasonably necessary for duplicate-redemption prevention, refund handling, fraud or security controls, financial reporting, legal claims, or compliance. This is pseudonymous transaction data, not anonymous data. It is not retained to restore deleted access or for advertising, and active access and unused Call Pass minutes are forfeited.
• Deletion from active systems is prompt. Limited encrypted backups and provider backups expire through their normal rotation unless preservation is legally required. We may retain de-identified or legally required security records that cannot reasonably be linked back to you.

8. Your choices and rights

• Review or correct profile information under Account (Me in earlier versions) in the app.
• Control location and notification permissions in device Settings.
• Withdraw AI data-sharing permission under Account / Me → Call Privacy. You will be asked again before a later call.
• Delete an eligible individual call or My Calls / Activity record from My Calls / Activity, including associated provider call data where deletion is supported.
• Delete your account in the app under Account / Me → Delete Account. Ordinary account deletion does not require an email or support request.
• Ask for access, correction, deletion, restriction, objection, or an explanation of handling by contacting us. We may verify your identity and may retain data where law permits or requires it.
• A privacy complaint may also be submitted to the competent privacy authority in your region.

9. Security

We use safeguards designed for the sensitivity of the data, including encrypted network transport, authentication, restricted administrative access, server-side secret storage, database access controls, provider-request verification, and deletion safeguards. No system is completely secure; contact us if you believe your account or data has been compromised.

10. Age requirement

Moshimo is intended for adults aged 18 or older and is not directed to children. Do not submit a child's personal, health, or contact information unless you are the parent or legal guardian, have authority to provide it, and it is necessary for the request.

11. Changes and contact

We may update this policy as the service, providers, or law changes. We will update the date above and provide additional notice when a change materially affects your rights or a permission you previously gave.

Questions and privacy requests can be sent to info@zeroinnovavi.com.