// Legal

Privacy notice

Last updated: October 2026

This notice explains what personal data we process on mochalabs.mx and in our Mac apps, what we use it for, who we share it with and how you can exercise your rights, under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares), published on March 20, 2025. This is a translation of the aviso de privacidad; if they differ, the Spanish version prevails.

1. Data controller

Mocha Labs, located in Guadalajara, Jalisco, Mexico, is responsible for processing your personal data. For anything related to this notice, write to us at contacto@mochalabs.mx.

2. Data we process

  • Identification and contact: your name, your email address and, if you give it to us, the name of your company.
  • About your project: the service you are interested in, the message you write to us and, if we send you a project questionnaire, the answers you give there.
  • If you ask for help with an app: the app, the versions you tell us (of the app and of macOS) and what you tell us in the support form.
  • Technical: an encrypted version of your IP address to protect the forms against spam, and browsing data that does not identify you (the page you visit, the page you came from, your screen width and your approximate country).
  • What you share by email: if you write to us directly, we process the data you include in your message.

We do not request or process sensitive, financial or property-related personal data. Please do not include them in your messages.

3. What we use it for

Purposes needed to serve you, which do not require your consent:

  • Answering your message and understanding your project.
  • Answering your questions about our apps and fixing the problems you report.
  • Preparing proposals and quotes.
  • Following up on the services you hire from us.
  • Protecting the site and the forms against automated or abusive submissions.
  • Counting how many people visit the site and which pages are useful to them, always without identifying you.

We do not use your data for advertising or to send you promotions, and we do not sell it. If we ever wanted to use it for something else, we will ask for your consent first.

4. Who we share it with

To run the site we use providers that process data only on our behalf and to provide their service to us: Zoho Mail, which receives the messages from the forms in our inbox; Hostinger, which hosts the site; and Google, which measures visits with Google Analytics. We do not transfer your data to other people or companies, unless a competent authority requires it under the law.

5. How long we keep it

  • Messages, support requests and project answers, for as long as they are needed to handle your request and our relationship, and afterwards for the periods the law requires.
  • The encrypted version of your IP address from the forms, 24 hours.
  • Visit details, 48 hours; after that only aggregated daily figures remain, which do not identify anyone.

6. Your ARCO rights and how to limit the use of your data

You can request access to, rectification or cancellation of your data, object to its processing, revoke your consent or limit its use or disclosure (in Mexico these are known as ARCO rights). Write to us at contacto@mochalabs.mx with:

  • your name and a way to reply to you;
  • a copy of an official ID, or that of your representative and the document that proves the representation;
  • which right you want to exercise and over which data.

We reply within 20 business days at most and, if your request applies, we make the change within the 15 business days after our reply.

7. Cookies and tracking technologies

To count visits we use our own pixel (an image of a single dot, also called a web beacon) that stores nothing in your browser. Your IP address is not stored: it is combined with a value that changes every day and turned into an identifier that cannot recognize you or follow you from one day to the next.

We also use Google Analytics, by Google LLC, to know how many people visit the site, from what kind of device and how they move through it (page views and clicks on contact, email, WhatsApp and client sites). Google Analytics stores its own cookies in your browser to tell visits apart and processes that information on our behalf, under its privacy policy (policies.google.com/privacy). We do not use it for advertising or to identify you. You can delete or block cookies in your browser settings.

If your browser sends a do-not-track signal (Do Not Track or Global Privacy Control), we do not count your visit with either tool.

Your browser keeps two things only on your device: during the session, whether you already saw the intro animation, and in the project questionnaire, a draft of your answers that is deleted when you send them. None of that is sent to us.

Links to WhatsApp, to our clients' sites and to other services take you outside mochalabs.mx; there, each one's own privacy notice applies.

8. Online stores built with mochapp

Each store that runs on mochapp belongs to the business that publishes it, and that business is responsible for its customers' data. Mocha Labs only processes that data on the business's behalf to run the platform. If you bought from one of those stores, check its own privacy notice.

9. Mac apps: MochaCut, MochaRecords, MochaDesk and MochaFiles

Our Mac apps work without accounts and do not collect personal data: Mocha Labs receives nothing of what you do in them.

  • MochaCut (screenshots and screen recordings): your captures, your recordings, their edits and the text the app reads in them are stored only on your Mac, in the folder you choose. While recording, your Mac's audio and, if you turn it on in Settings, your microphone are heard only while the recording lasts and are saved in the same file. If you choose to show keystrokes, the app shows the shortcuts you use (for example ⌘C), never what you type. Reading text, QR codes and sensitive data happens on your Mac, with Apple's tools. If you use the button to send a capture to an AI assistant, the app copies it and opens that service; the image only reaches it if you paste it there, and that service's own privacy notice applies.
  • MochaRecords (audio recordings): your recordings and the conversations you keep as text are stored only on your Mac, in the folder you choose. The microphone and the Mac's audio are only listened to while you record, or when you turn on waiting for the first sound or keeping what just played. Transcribing and summarizing happen on your Mac, with Apple's models.
  • MochaDesk (window arrangement): it reads the position, size and title of your windows to arrange them; it doesn't read what you type or what's inside your apps. Thumbnails and floating crops are made on the spot and stay in memory while you look at them: they're never saved or sent. Your layouts and workspaces are saved only on your Mac.
  • MochaFiles (files and clipboard): it keeps only on your Mac the history of what you copy (texts, images and the location of files you copy in the Finder), the location of what you put in the box (the files are never moved or copied), the moves you make with the app and your settings. You can pause or clear the history and exclude apps, and what password managers mark as concealed is never kept. A file's card reads, only when you open it, what macOS already knows about the file (where it was downloaded from, dates, dimensions and signature). Its Finder extension adds options to the right-click menu and only passes the app the paths you choose.

All four download for free from mochalabs.mx. The installer file is stored on GitHub, which delivers it when you click download; GitHub handles that download under its own privacy policy. On the site, the click to download is counted like any other visit, with the measurement described in this notice.

None of the four has analytics, advertising or tracking, and none of them connects to the internet. The macOS permissions they ask for (Device Control and Data Access, called Accessibility on macOS 26; Finder automation; screen or system audio recording; microphone; folders; and Full Disk Access, optional in MochaFiles) are used only for what each app does, and you can remove them at any time in System Settings › Privacy & Security. If you ask us for help, through the support form or at soporte@mochalabs.mx, we use the data in your message only to reply to you and solve the problem, as this notice explains.

10. Minors

This site is meant for businesses and adults. We do not knowingly collect data from people under 18.

11. How we protect your data

Your data travels over an encrypted connection (HTTPS) and is kept in our email and our work systems, with access limited to the Mocha Labs team and administrative, technical and physical security measures.

12. Authority

If you believe your right to the protection of your personal data has been violated, you can turn to the Secretaría Anticorrupción y Buen Gobierno (Mexico's Ministry of Anti-Corruption and Good Governance), the authority in this matter.

13. Changes to this notice

Any change will be published on this same page with its update date. See also the site's legal notice (in Spanish).