Privacy Policy

Neon Mochi is operated by Rahmun Aung Khin, who is the data controller for the personal data described here. This means we decide how and why your data is used. Neon Mochi is intended for players aged 13 and older.

• Account details (email address, login credentials, and your Google or Apple sign-in identifier if you use one): to create and secure your account. Legal basis: performance of our contract with you.
• Profile (display name, chosen mascot avatar, friend code): to show your profile in the game. Legal basis: contract.
• Gameplay data (quiz answers, scores, XP, streaks, Daily Challenge attempts): to run quizzes, check answers on our server and save your progress. Legal basis: contract.
• Purchase records (Premium status, order reference, amount, currency and date, received from Paddle): to unlock and restore Premium and handle refunds. Legal basis: contract and legal obligations (tax and accounting).
• Security and technical data (IP address, device and browser information, sign-in and admin activity logs): to prevent fraud, cheating and abuse. Legal basis: our legitimate interest in keeping the service safe.
• Support messages: to answer your questions and reports. Legal basis: legitimate interests.

Guests' progress and sound settings are stored only in their own browser. We do not collect location, contacts, microphone access or birth dates, and we do not run behavioural advertising or sell your data. We never see or store your card details.

• Paddle, our Merchant of Record, which handles the sale of Premium, payments, tax compliance, invoicing and refunds. Paddle processes your payment details under its own privacy notice.
• Service providers who host our app, database and sign-in, and who provide the AI tools we use to draft trivia questions (no personal data is sent for that).
• Professional advisers such as legal and accounting advisers.
• Authorities where required by law.

Some providers may process data outside your country. Where that happens, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

We keep account, profile and gameplay data while your account is open. When you delete your account, this data is deleted. Purchase records are kept in anonymised form for as long as tax and accounting law requires. Security logs are kept only as long as needed to protect the service, then deleted or anonymised.

Depending on where you live, you may have the right to access, correct, delete, restrict or object to the use of your data, to data portability, and to withdraw consent at any time. You can delete your account and data directly from your Profile, or contact us through our Contact page. We aim to respond within one month. You also have the right to complain to your local data protection authority.

We use appropriate technical and organisational measures to protect your data, including encrypted connections, access controls, server-side permission checks, two-step verification for admin access and audit logs.

We use only essential browser storage: to keep you signed in, remember your progress and sound settings, and make checkout work. We don't use analytics or marketing cookies.

We may update this policy and will change the date above when we do. See also our Terms of Service and Refund Policy.