Privacy Policy

1. About This Policy and MosMos

MosMos is a product and service operated by Shanghai Mosi Intelligence Technology Co., Ltd. (the “Company,” “we,” “us,” or “our”). In this Policy, “MosMos” refers to the MosMos website, client applications, voice input, text refinement, personal vocabulary, meeting transcription and note-generation features, and related services (collectively, the “Services”), rather than the legal entity operating them.

This Policy explains how we process personal information when providing the Services and how you can manage that information. It applies to the Services that we currently provide to users in Mainland China. For purposes of this Policy, “Mainland China” excludes the Hong Kong Special Administrative Region, the Macao Special Administrative Region, and Taiwan.

“Personal information” means information recorded electronically or otherwise that relates to an identified or identifiable natural person, excluding anonymized information.

“Sensitive personal information” means personal information that, if leaked or unlawfully used, could easily harm a person’s dignity or endanger personal or property safety. It includes biometric information, religious beliefs, specifically designated status, medical and health information, financial accounts, location tracking information, and the personal information of children under 14.

“User Content” includes audio, text, personal vocabulary, contextual information, meeting materials, and other content that you provide through the Services, together with resulting transcripts, refined text, summaries, meeting notes, action items, and other output.

Where a function processes information solely on your device and neither the Company nor its service providers receive or access that information, we do not collect that information. We nevertheless describe relevant local processing in this Policy so that you can understand how the MosMos software uses device permissions and locally stored content.

We process only the information necessary for specific, reasonable, and directly related purposes. Where applicable law requires consent or separate consent, we will request it through the relevant interface. Reading or accepting this Policy does not mean that you consent to every optional processing activity.

2. Information We Process

2.1 Account and Mobile Number

You must register and sign in to use MosMos. To create and maintain your account, authenticate sign-in, recover your account, protect account and service security, and send necessary account or security notices, we process your mobile number, verification status, account identifier, registration and sign-in times, IP address, device and operating-system type, client version, and necessary account-security records.

We do not use your mobile number for marketing without your consent, sell it, or permit an SMS verification provider to use it for its own marketing. A contracted SMS verification provider may process your mobile number, verification-code request, delivery status, and verification result only as necessary to send and verify the code.

2.2 Voice Input and Text Processing

Voice-input speech recognition is processed locally on your device. Using ordinary voice input does not, by itself, cause the corresponding audio to be uploaded to the Company or an external API provider.

When you use AI text refinement, MosMos temporarily transmits the text or transcript you choose to process, your refinement instructions, formatting or language preferences, and any limited context necessary to produce the requested result to a contracted external API provider located in Mainland China. The provider processes the information only to return the requested result and deletes the User Content after completing the request.

Audio and text may contain personal information about you or other people. Do not provide sensitive personal information that is unrelated to the function you are using. If you submit information about another person, you are responsible for ensuring that you have a lawful basis and any authorization required to do so.

2.3 Context Adaptation and System Permissions

To adapt output to the application or input field you are using, MosMos may process locally on your device the current application name, input-field type, text you select, and a limited amount of context near the insertion point. This information is not uploaded solely because you use context adaptation.

Some operating-system permissions may technically allow access to a broader range of information. MosMos is designed to use only the information necessary for the function you activate. We do not read all information accessible through microphone, accessibility, clipboard, file, or system-audio permissions merely because the operating system grants that access.

The microphone captures sound only when you activate a voice or meeting feature. Accessibility permissions are used to identify an input location and insert text. Clipboard, file, and system-audio permissions are used only when you activate a corresponding function. You may withdraw a permission through the operating-system settings. A function that depends on a withdrawn permission may no longer work.

2.4 Personalized Refinement

Personalized Refinement is optional. When you enable it, MosMos temporarily transmits the voice content and corresponding transcripts necessary to derive your expression preferences. The uploaded content is used only for this purpose and is deleted after processing. The resulting preference profile is stored locally on your device, and we do not maintain a server-side copy of that profile.

We do not use uploaded content or the resulting preference profile for advertising, marketing profiles, sale, or the training or improvement of general-purpose models.

You may stop future uploads at any time through “Settings → Personalization & Privacy → Personalized Refinement.” Disabling the feature does not delete a preference profile already stored on your device. You may delete the local profile through the controls provided in the application or by clearing the relevant application data.

2.5 Diagnostic Information

Diagnostic sharing is optional and is off by default on each device. If you enable it, MosMos may send limited technical information, such as the client version, operating-system version, error codes, crash events, and performance metrics. We use this information only to investigate faults, troubleshoot problems, protect service security, and improve reliability.

Routine diagnostic reports do not include audio, transcripts, meeting content, personal vocabulary, or text submitted for refinement. We do not use diagnostic information for advertising or user profiling. Diagnostic information is deleted when it is no longer necessary for the relevant troubleshooting, reliability, or security purpose, unless a longer period is required by law.

If you voluntarily submit additional diagnostic materials through our official website, those materials may include screenshots, text, audio, or meeting excerpts that you choose to provide. Remove information unrelated to the issue before submission.

2.6 Meeting Transcription and Notes

When you activate a meeting feature, MosMos temporarily transmits the meeting audio and/or transcript, together with any meeting title, processing instructions, or other information necessary to provide transcription, speaker segmentation, summaries, meeting notes, and action items, to a contracted external API provider located in Mainland China. The information is processed only to complete your request and is deleted after the request has been completed.

Meeting content may contain other participants’ personal information, sensitive personal information, confidential information, or trade secrets. Before recording, transcribing, or otherwise processing a meeting, you are responsible for providing all notices and obtaining all consents, permissions, or other legal authority required by applicable law and by any contractual or confidentiality obligations that apply to the meeting. Do not use a meeting feature if you are not authorized to record or process the relevant content. MosMos does not determine whether a recording is lawful or obtain authorization from meeting participants on your behalf.

MosMos does not use meeting audio to identify or authenticate a specific individual or to create a reusable voiceprint. Speaker labels are used only to distinguish speech segments within the relevant meeting content. They do not establish a speaker’s real-world identity, may be inaccurate, and should be reviewed before you rely on or share them.

If you believe that another user has uploaded or processed meeting content containing your personal information without authorization, you may contact us through the privacy-request channel identified in Section 12.

2.7 Device Information, Security Logs, and Cookies

To maintain sign-in, protect account and service security, prevent abuse, and troubleshoot technical problems, we may process IP address, device and operating-system type, client version, language, network state, request time, feature-use counts, error codes, crash information, and performance metrics. Routine network and security logs do not contain complete audio, complete transcripts, complete meeting content, or complete text submitted for refinement.

The website and client may use necessary cookies, local storage, or similar technologies to maintain sign-in, save basic settings, and prevent abuse. We do not use these technologies for advertising, cross-platform behavioral tracking, or marketing profiles, and we do not sell personal information.

2.8 Support and Feedback

When you contact us through our official website, we process the contact details, issue description, screenshots, and other materials you choose to submit. Audio, text, transcripts, or meeting excerpts are included only when you voluntarily submit them. Remove unrelated personal or confidential information before submission.

MosMos is currently free and does not offer paid plans, subscriptions, or in-app purchases. We therefore do not currently collect payment-card, order, or billing information. If we introduce paid features, we will update the relevant notice and provide applicable purchase terms before collecting payment information.

3. How Information Is Processed

3.1 Local Processing

Voice-input speech recognition, personal and hotword vocabulary, and context adaptation are processed locally on your device. Information used solely by these local functions is not transmitted to the Company or an external API provider.

Local processing does not mean that every MosMos function works offline. Account registration and sign-in, AI text refinement, meeting transcription and note generation, software updates, Personalized Refinement when enabled, and optional diagnostic reporting may require an internet connection.

3.2 External APIs and Temporary Cloud Processing

AI text refinement, meeting transcription and note generation, and Personalized Refinement when enabled use contracted external API providers whose relevant servers are located in Mainland China.

For AI text refinement, MosMos transmits only the selected text or transcript, the instructions you provide, and any limited context necessary to produce the requested result. For meeting functions, MosMos transmits only the meeting audio and/or transcript and related instructions necessary to provide the selected function. For Personalized Refinement, MosMos transmits only the content necessary to derive your expression preferences.

The Company does not store a separate long-term copy of User Content transmitted solely to complete an API request. External API providers are contractually required to:

process the information only on our documented instructions and only to provide the requested function;
restrict access to authorized personnel who need it for the assigned task;
protect the information using appropriate security measures;
delete the relevant User Content after completing the request; and
not use User Content to train or improve their own or any other general-purpose models.

Technical request records may be processed only to maintain security and troubleshoot a specific failure. Such records are not intended to contain complete User Content and are retained only for the shortest period necessary for the relevant purpose or as required by law.

3.3 Retention and Human Access

We do not retain User Content as long-term account data. In particular, we do not store users’ voice-input recordings, meeting recordings, transcripts, meeting notes, personal vocabulary, refinement content, or generated results on our servers after the relevant processing request has been completed.

Content processed or stored only on your device remains under your control and is retained until you delete it, clear the relevant application data, or remove it through controls provided by MosMos or the operating system.

Authorized personnel may access information that we actually hold only where necessary to investigate a support request submitted by you, respond to a security incident, maintain account security, or comply with a legal obligation. Access is limited to the minimum information and personnel necessary for that purpose.

We cannot remotely access content that is stored only on your device.

3.4 No Biometric Identification, Advertising, or General Model Training

We do not collect, extract, create, enroll, or store voiceprints, facial templates, or other biometric identifiers. We do not use audio to identify or authenticate a specific individual.

We do not sell User Content to data brokers or use mobile numbers, audio, transcripts, personal vocabulary, contextual information, meeting content, or preference profiles for advertising, cross-platform marketing tracking, or marketing profiles.

We do not use User Content to train or improve general-purpose models for other users, and we do not authorize external API providers to do so. Creating an account, accepting this Policy, using the Services, or submitting ordinary feedback does not enroll you in a model-training or model-improvement program.

4. Purposes and Bases for Processing

We process personal information only where there is a lawful basis under applicable law. Depending on the relevant activity, we process information:

as necessary to enter into or perform our service agreement with you, including creating and maintaining an account and providing the voice, text, personalization, and meeting functions you request;
to comply with legal obligations, including network security, record retention, incident response, and lawful regulatory requirements;
with your consent, including for optional Personalized Refinement and optional diagnostic sharing; or
under another basis permitted by applicable law.

Where we process sensitive personal information, provide personal information to another independent personal information handler, make personal information public, or conduct another activity for which applicable law requires separate consent, we will separately explain the purpose, necessity, information types, processing method, retention, and possible impact on your rights, and obtain the required authorization before the processing begins.

You may withdraw consent for consent-based processing through the relevant function controls or the privacy-request channel identified in Section 12. Withdrawal does not affect the lawfulness of processing completed before the withdrawal. Declining or withdrawing consent for an optional function does not affect functions that do not depend on that processing.

5. Service Providers, Sharing, and Disclosure

We may engage SMS verification, cloud computing, network security, content delivery, website hosting, speech or language processing, and customer-support providers to process information necessary for their assigned tasks. These providers act as entrusted service providers and may not independently determine new purposes for processing User Content.

We review our providers, enter into agreements that limit processing purposes and data scope, require confidentiality and appropriate security, prohibit unauthorized retention and model training, and require deletion of User Content after the relevant request is completed. We supervise providers’ processing activities as required by applicable law. The relevant servers used by these providers for MosMos User Content are located in Mainland China.

If we provide personal information to a third party that independently determines its own processing purposes or methods, we will identify that recipient, explain its contact details, processing purpose and method, information types, and retention arrangements, and obtain separate consent where required by law.

When you insert text into another application or export, send, or share meeting content, the target application and recipients you select process the information under their own privacy rules. You are responsible for reviewing the target application’s rules and confirming that you are authorized to send the relevant content. We do not control how an independent third-party application or recipient processes information after you choose to provide it to them.

We may disclose information to the minimum extent necessary where required by applicable law, a binding court order, or a lawful request from a competent authority, or where another legal basis permits disclosure to protect personal safety or service security.

If personal information is transferred as part of a merger, division, reorganization, dissolution, bankruptcy, or asset transfer, we will notify you of the recipient’s name and contact details as required by law. The recipient must continue to comply with this Policy. If the recipient changes the original processing purposes or methods, it must provide a new notice and obtain any consent required by law.

6. Retention and Deletion

We retain personal information only for the shortest period necessary to achieve the purposes described in this Policy, unless a longer period is required by applicable law.

Our general retention rules are as follows:

Voice-input audio, meeting audio, transcripts, meeting content, refinement content, and generated results: processed only for the duration necessary to complete the requested function and not retained by the Company as long-term account data. Contracted external API providers delete the relevant User Content after completing the request.
Content used for Personalized Refinement: deleted after the expression-preference profile has been generated. The resulting preference profile is stored locally on your device until you delete it or clear the relevant application data.
Local transcripts, personal vocabulary, settings, meeting records, and generated results: stored on your device until you delete them, clear the relevant application data, or uninstall the application and remove its associated data. Operating-system backups may retain copies according to the operating system’s own rules.
Mobile number and account information: retained while your account remains active. Following account closure, it is deleted or anonymized as soon as reasonably practicable after it is no longer necessary for account closure, dispute resolution, security, or legal compliance.
Network and security logs: retained for the period required by applicable law. Where the statutory network-log retention requirement applies, relevant logs are retained for at least six months.
Optional diagnostic information: retained only until the relevant troubleshooting, reliability, or security purpose has been completed, unless a longer period is required by law.
Support requests: information that you voluntarily submit is retained only for as long as necessary to respond to the request, resolve related follow-up issues, protect legal rights, or comply with a legal obligation.
Necessary cookies and local website storage: session cookies expire when the relevant session ends. Other necessary cookies or local-storage items remain until their configured expiration or until you clear them through your browser or device settings.

If deleted information remains temporarily in a securely isolated backup, it will not be used for other purposes and will be removed through the ordinary backup-overwrite cycle, unless retention is required by law.

Where a statutory retention period has not expired or deletion is technically difficult, we will stop processing the relevant information for other purposes and retain it only for storage and necessary security protection.

For information stored only on your device, use the local controls provided by MosMos or your operating system to delete it. For account information or information submitted through our official website, you may request deletion through the privacy-request channel identified in Section 12.

7. Information Security

We use measures proportionate to the nature and risk of the information, including encryption in transit, appropriate storage protection, access controls, authentication, least-privilege access, log auditing, personnel confidentiality requirements, provider management, and security-incident response. Access to identifiable information is limited to personnel who need it for their duties.

No system or method of transmission can guarantee absolute security. You should protect your mobile phone, verification codes, device accounts, and other sign-in credentials and should not share them with others.

If a personal-information security incident occurs or is likely to occur, we will promptly take remedial action and make reports and notifications as required by applicable law. A notification, where required, may include the information affected, the reason for and possible consequences of the incident, the remedial measures we have taken, steps you may take to reduce harm, and a method of contacting us.

8. Your Choices and Rights

Subject to applicable law, you may request access to, a copy of, correction or supplementation of, deletion of, restriction of processing of, or transfer of your personal information. You may also withdraw consent, disable optional Personalized Refinement or diagnostic sharing, manage system permissions, clear locally stored content, ask us to explain our processing rules, or close your account.

You may exercise these rights through the controls available in the MosMos client or through the privacy-request channel identified in Section 12. Account-closure requests may also be submitted through that channel.

To protect your account and personal information, we may verify your identity to the extent reasonably necessary before fulfilling a request. We will respond within the period required by applicable law and ordinarily within 15 business days after completing any necessary identity verification.

If we deny or cannot fully fulfill a request, we will explain the reason and any available complaint route, unless applicable law permits us not to provide that explanation. A request may be limited where necessary to protect another person’s lawful rights, comply with a legal obligation, preserve information relevant to a dispute or investigation, or address another exception permitted by law.

Withdrawing consent for optional processing does not affect functions that do not depend on that processing. We will not refuse unrelated functions merely because you decline or withdraw consent for an optional function.

9. Special Rules for Minors

MosMos is not designed specifically for minors, but minors are not categorically prohibited from using the Services.

If you are under 18, you should use the Services with the guidance and supervision of your parent or legal guardian. If you are under 14, you may use the Services only after your parent or legal guardian has read this Policy and provided the consent required by applicable law. Where a separate guardian-consent process or additional notice is required, we will provide it before the relevant processing begins.

The categories of personal information and the purposes, methods, and retention rules applicable to minors are described in this Policy. We do not collect additional personal information merely because a user is a minor. We apply data minimization, strict access controls, and appropriate security measures to minors’ personal information. We do not use minors’ personal information for advertising, marketing profiles, biometric identification, or general-purpose model training.

Parents and guardians should help minors understand the privacy risks associated with voice input, meeting recording, text processing, and submitting information about other people. A minor should not submit sensitive personal information or record another person without the necessary authorization. A user must not submit a child’s personal information or record a child’s voice without the consent or other lawful authorization required from the child’s guardian.

If we learn that we have processed the personal information of a child under 14 without the required guardian consent, we will stop the relevant processing and delete, anonymize, or otherwise handle the information as required by law.

A parent or guardian may use the privacy-request channel identified in Section 12 to request access to, correction of, or deletion of a minor’s personal information, withdraw consent, close the relevant account, or submit a complaint. We may request information reasonably necessary to verify the requester’s identity and relationship to the minor.

10. Third-Party Websites and Services

Third-party websites, applications, and services that you choose to visit, connect to, or receive content from may apply their own privacy rules. Review those rules before providing information. A third party’s separate privacy policy does not remove our legal responsibilities for processing conducted by the Company or by an entrusted service provider acting on our instructions.

11. Changes and Language

We may update this Policy when our functions, technology, processing activities, or applicable law changes. We will display the updated and effective dates whenever we publish a revised version.

If a change materially affects processing purposes, processing methods, information types, disclosures, retention, or your rights, we will provide prominent notice through the client, a pop-up, the website, or another appropriate method before the change takes effect. Where renewed consent or separate consent is required, we will begin the relevant processing only after obtaining it.

The Chinese and English versions of this Policy are intended to express the same rules. If the versions differ, the Chinese version controls, without reducing any rights you have under applicable law.

12. Contact Us

For questions, comments, or suggestions concerning this Policy, personal-information protection, account cancellation, permissions, complaints, infringement, or AI generation services, contact us through:

Email: mosi@mosi.cn;
Website: https://mosmos.io/;

We will verify and process requests promptly and generally complete processing or provide a clear response within 15 working days.