Moki Privacy Policy

Last Updated: December 2024

Overview

Moki ("we", "our", or "the extension") is a Chrome extension that helps users learn languages while watching YouTube videos. This privacy policy explains how we collect, use, and protect your information.

We are committed to data minimization and transparency. We only collect data necessary to provide our core functionality and will never use your data for purposes not described in this policy.

Data Collection Summary

Data We Collect

For Registered Users

When you register for a Moki account, we collect:

• Email address: Used for account identification and login
• Password: Encrypted and securely stored, never stored in plain text
• Username (optional): For display purposes only

For All Users (Including Non-Registered)

Local Storage + Server Sync:

• Language preferences (native, target, interface language) - synced to server when logged in
• Authentication tokens (JWT) - sent with each API request for authentication

Note: Users who are not logged in cannot use Moki's translation features. The extension requires an account to access our translation services.

Data Processed But Not Stored

When you use Moki's features, we process the following data in real-time:

• YouTube subtitle text (for translation and linguistic analysis)
• Dictionary lookup requests (word + context sentence)

This data is processed immediately and not permanently stored on our servers.

Data Stored on Our Servers (For Registered Users)

• Account information (email, hashed password)
• Your saved vocabulary items (words, phrases, associated video metadata)
• Video learning history (video ID, title, timestamps of videos you've studied with Moki)

Data We Do NOT Collect

• Browsing history (we only operate on YouTube)
• YouTube viewing history beyond videos you actively use Moki with
• Personal identification beyond email
• Payment card details (handled securely by Stripe, never touches our servers)
• Location data
• Device identifiers or fingerprints
• Data from any website other than YouTube

How We Use Your Data

Your data is used exclusively for the following purposes:

1. Provide real-time subtitle translation - Subtitle text is sent to our server, translated, and returned immediately
2. Display word definitions and phrase explanations - Context-aware dictionary lookups
3. Save vocabulary items - Store words you choose to save to your collection
4. Track learning progress - Record videos you've studied to help you review and continue learning
5. Maintain your login session - Authenticate your requests
6. Remember your language preferences - Stored locally for convenience
7. Export to Anki - Transfer your saved vocabulary to your local Anki application (see AnkiConnect section below)

Data Usage Restrictions

We will NOT use your data for:

• Any purpose not listed in this privacy policy
• Advertising or marketing
• User profiling or personalization beyond language preferences
• Cross-site tracking
• Sale to third parties
• Training AI models (see OpenAI section below)

Third-Party Services

Moki Backend API (api.mokiedu.com)

Our backend server processes:

• Translation requests
• Dictionary lookups
• NLP (Natural Language Processing) analysis
• User authentication

Server Logging: Our servers maintain minimal technical logs for security and performance monitoring purposes. These logs may include:

• IP addresses
• Request timestamps
• Error information

These logs are used solely for security monitoring and debugging, are not used to identify individual users, and are automatically deleted within 30 days.

AI Language Processing (OpenRouter)

Our backend uses OpenRouter as our AI service provider for translation and language processing. OpenRouter routes requests to various AI models (such as OpenAI, Anthropic, etc.) based on availability and performance.

Important:

• Only subtitle text and dictionary queries are sent to the AI service
• Data is processed in real-time and not permanently stored
• Per OpenRouter's data policy, API requests are not used for model training
• No personal information (email, account data) is ever sent to the AI service

Payment Processing (Stripe)

We use Stripe for secure payment processing. When you subscribe to Moki:

• Payment card details (card number, CVV, expiration) are collected directly by Stripe and never touch our servers
• We store only: Stripe Customer ID, subscription status, and billing email
• All payment transactions are encrypted and processed according to PCI-DSS standards

For Stripe's privacy practices, see: https://stripe.com/privacy

Anki Export (AnkiConnect - Local Only)

Moki allows you to export your saved vocabulary to Anki, a popular flashcard application. This feature uses AnkiConnect, a local plugin for Anki.

Important - No data leaves your device:

• All communication happens locally between the extension and your Anki application (localhost:8765)
• Exported data (words, definitions, sentences, audio, images) is transferred directly to your local Anki
• No vocabulary data is sent to Moki servers or any third party during export
• You must have Anki and the AnkiConnect plugin installed on your computer

For AnkiConnect documentation, see: https://foosoft.net/projects/anki-connect/

Chrome Extension Permissions

We request only the minimum permissions necessary:

We do NOT request:

• history - We don't need your browsing history
• bookmarks - We don't access your bookmarks
• downloads - We don't download files
• geolocation - We don't track your location

Data Security

• All data transmission uses HTTPS/TLS encryption
• Passwords are hashed using industry-standard algorithms before storage
• JWT tokens are securely managed with automatic expiration
• We follow industry-standard security practices
• Regular security audits of our infrastructure

Data Retention

Your Rights & Data Deletion

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and all associated data
• Export your vocabulary collections
• Opt out by uninstalling the extension

How to Delete Your Data

You can delete your data through the following methods:

1. Delete saved vocabulary: Use the "My Collection" feature in the extension popup to remove individual items
2. Delete your account: Contact us at hello@mokiedu.com to request account deletion

Upon account deletion, all your data (account information, saved vocabulary) will be permanently removed from our servers within 30 days.

Children's Privacy

Moki is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

Changes to This Policy

We may update this privacy policy from time to time. When we make changes:

• The "Last Updated" date at the top will be revised
• For significant changes, we may notify you through the extension
• Continued use of the extension after changes constitutes acceptance

Contact Us

If you have questions about this privacy policy or our data practices:

• Email: hello@mokiedu.com
• GitHub Issues: https://github.com/InfQuest/moki/issues

Consent

By installing and using Moki, you consent to this privacy policy and agree to its terms. If you do not agree with this policy, please uninstall the extension and do not use our services.