חזרה לסקירה

מדיניות פרטיות

מידע על איסוף והגנה על נתונים

עודכן לאחרונה

מדיניות פרטיות

Effective Date: October 4, 2026

This Privacy Policy explains how Moon App ("Moon", "we", "our" or "us"), developed by Roman Mahda, collects, uses, shares and protects information when you use the Moon app for iPhone and Apple Watch, its widgets, and this website.

In short:

  • Your detailed health data from Apple Health stays on your iPhone. Moon only reads it and never writes to Apple Health.
  • An account is optional. You only need one for challenges, shared alarms and some purchases.
  • Moon AI is optional. Your question and a summary of your sleep go to OpenAI only after you allow it, and you can withdraw that permission at any time.
  • No ads, no cross-app tracking, no advertising identifier. We never sell your data.

1. Data that stays on your device

The following is stored only on your iPhone (or Apple Watch) and is not sent to us:

  • Health data you allow Moon to read from Apple Health: sleep analysis, heart rate, heart rate variability, resting heart rate, respiratory rate, blood oxygen, wrist temperature, environmental sound exposure, steps, active energy, exercise and stand time, walking and cycling distance, workouts, activity rings, caffeine, blood alcohol content, height, weight, biological sex and date of birth.
  • Detailed sleep analysis: sleep stages, scores, trends and night details computed from that data.
  • Alarms, wake tasks, naps, Sleep Correction programs and sleep sounds settings.
  • Notes and your Moon AI conversations.
  • Your sleep profile (age, sex, height, weight, chronotype, caffeine sensitivity, work schedule, sleep goal, usual bed and wake times) — unless you save it to your account (see section 3).
  • Camera and motion: the "Turn on light" task measures room brightness on the device; no photo is taken or stored. The "Walk" task counts steps with the motion sensor on the device.

Deleting the app removes this data from your device. Data in Apple Health belongs to Apple Health and is not removed by Moon.

You can change Moon's access to Apple Health at any time in Settings → Health → Data Access & Devices → Moon.

2. Apple Health (HealthKit)

We use data from Apple Health only to show you your sleep and to give you insights and features you ask for. In particular:

  • Health data is never used for advertising or marketing, never sold, and never shared with data brokers.
  • Health data is not sent to analytics services and is not stored in iCloud by Moon.
  • Values derived from health data leave your device only in the cases described below: your public profile and challenges (section 3–4), shared alarms (section 5, wake-up times only) and Moon AI (section 6, only with your permission).

3. Account and public profile (optional)

You can use most of Moon without an account. An account is created when you choose Sign in with Apple — for example to join challenges, shared alarms or to use a referral offer.

Account data (Firebase Authentication): your Apple user identifier, the email address Apple shares with us (this can be a private relay address) and your name if you choose to share it. We use them only to sign you in and to operate your account.

Public profile. When you are signed in, your profile is stored in our database (Cloud Firestore) and can be seen by other signed-in Moon users — for example in search, challenges and shared alarms:

  • username, display name and profile photo (if you add one);
  • privacy settings (profile visibility, whether you accept invitations, whether social notifications are on);
  • achievements, challenge totals and badges;
  • 30-day averages of your sleep score and sleep duration and the number of nights they are based on;
  • your subscription level (Free / Premium / Premium+).

Setting your profile visibility to Private removes you from search. Your display name may default to the name you entered in Moon or shared via Apple; you can change it at any time.

Private profile. If you save your sleep profile in Profile → Your Profile, it is stored in a part of your account only you can access: date of birth, sex, chronotype, caffeine sensitivity, work schedule, height, weight and sleep goal. We also store your app language there to send notifications in your language.

Consent. Before you first use social features, Moon shows you what other users will see and asks you to confirm.

4. Sleep challenges

When you take part in a challenge, one value per night is uploaded for each day of the challenge, depending on the challenge type: your sleep score, your sleep duration, your wake-up time, or a consistency score. Participants of that challenge can see these values, your average and whether you completed the challenge. Detailed sleep stages, heart rate and breathing are never uploaded.

5. Shared alarms (Social Wake)

Shared alarms let a group of friends wake up at the same time. To make this work, we store:

  • The alarm: its owner, time, days, title, wake task settings (for example, your own affirmation texts), snooze settings, participants and their status (invited, joined, declined, left, removed).
  • Each participant's details: time zone, notification preferences for the alarm, wake-up streak, and a device identifier used to keep the alarm on one device.
  • Each morning: whether you got up (and when), how many times you snoozed, whether you skipped the alarm or moved it for one night (and to what time), who got up first, emoji reactions.
  • Invitation codes and links you create.

All participants of a shared alarm can see this information about each other. Other users cannot.

How long we keep it:

  • Morning statuses and reactions: deleted automatically about 30 days after that morning.
  • Live reaction animations: deleted after 1 day.
  • A cancelled shared alarm with its members and mornings: deleted 7 days after it was cancelled.
  • Unanswered invitations: expire after 7 days.
  • Invitation codes and links: expire after 14 days, then deleted.

Reports and blocks. You can report or block another user. A report contains your user ID, their user ID, the reason and any details you add. We review reports manually and may remove content or restrict accounts that break our Terms of Use. Blocks are stored so blocked users cannot invite you.

6. Moon AI (optional, with your permission)

Moon AI is an assistant that answers questions about your sleep. It is powered by OpenAI. Before Moon AI sends anything, the app asks for your permission and explains what is sent. Without that permission nothing is sent to OpenAI.

What is sent when you use Moon AI (chat, insights in reports and post-wake voice notes):

  • your question or message, a few previous messages and a short summary of the conversation;
  • your first name (so the assistant can address you);
  • a summary of your sleep: for example duration, sleep stages, awakenings, efficiency, average heart rate, respiratory rate, wrist temperature deviation, bed and wake times, naps, weekly averages, Sleep Correction progress;
  • basic profile information: age or age group, sex, BMI, chronotype, caffeine sensitivity, work schedule, sleep goal and main sleep concern, your local time and time zone;
  • for voice messages and post-wake voice notes: the audio recording, which is transcribed by OpenAI's speech-to-text service.

This data is sent to our server (Google Cloud Functions in the EU), which forwards it to OpenAI. We do not attach your name, email or account ID to the request; we use a random device-based identifier to apply usage limits.

What happens to it:

  • Your conversations are stored only on your device.
  • Our server does not store your messages or recordings. Audio is deleted from our server immediately after transcription (including when an error occurs). Technical server logs may contain the device-based identifier and are kept for up to 30 days.
  • OpenAI processes the data under its API data usage policies: it does not use API data to train its models and may keep it for up to 30 days to detect abuse, after which it is deleted.

Your choice: you can turn Moon AI off at any time in Profile → Content & Data → Moon AI. After that, nothing is sent to OpenAI until you allow it again. Declining or turning off Moon AI does not affect other features.

Other speech recognition: the "Affirmations" wake task uses Apple's speech recognition, which may process audio on Apple's servers under Apple's privacy policy.

7. Notifications

Moon sends local notifications from your device (bedtime reminders, sleep summaries, achievements and similar). For social features — challenges and shared alarms — our server sends push notifications through Firebase Cloud Messaging. For this we store, with your account, a push token for each of your devices, the app version, and your app language. You can turn notification categories on or off in Profile → Notification Settings and in iOS Settings.

8. Subscriptions, purchases and the referral program

Purchases are processed by Apple. We never receive your payment card or billing details.

To verify subscriptions and to run the referral program, the App Store sends our server information about purchases made with Moon: the product, transaction identifiers, purchase and expiration dates, offers used and refunds. It is linked to your account through an anonymous token generated by the app. We store your verified subscription status with your account.

If you use or share a referral link, we store the referral code, who invited whom, when the link was used, eligibility and reward status, and the App Store offer code issued as a reward.

9. Analytics, security and app operation

Analytics. We use Google Analytics for Firebase to understand how the app is used and to improve it: which screens and features are used, app version, device model, iOS version and language, subscription status, and onboarding answers you give (such as age group, main sleep concern and your planned sleep schedule). Analytics data is not linked to your account, does not include health data from Apple Health, and does not use the advertising identifier. We do not track you across other companies' apps or websites.

Security. We use Firebase App Check (with Apple's App Attest) to make sure requests come from a genuine copy of Moon. To prevent abuse, our servers count requests per account, device and IP address; these identifiers are stored only in a hashed form and the counters are deleted after a short period.

Content delivery. Sleep sounds and melodies are downloaded from Firebase Storage. Profile photos are stored there as well. Firebase Remote Config is used to show in-app announcements.

10. This website

The website is hosted by Vercel. We use Vercel Web Analytics and Speed Insights, which collect aggregated, anonymous visit and performance statistics without cookies. Your cookie preferences, if you set them, are stored in your browser.

11. Who we share data with

We do not sell or rent your data and do not share it for advertising. Data is shared only:

  • with other users, as described above (your public profile, challenge results, shared alarm statuses);
  • with service providers that process data on our behalf:
    • Google (Firebase and Google Cloud) — authentication, database, cloud functions, storage, push notifications, analytics, Remote Config, App Check. Privacy Policy
    • OpenAI — Moon AI and speech-to-text, only with your permission. Privacy Policy
    • Apple — Sign in with Apple, Apple Health, App Store purchases, App Attest, speech recognition. Privacy Policy
    • Vercel — website hosting and analytics. Privacy Policy
  • when required by law or to protect the rights and safety of our users.

12. Where data is stored and how it is protected

Our database and server functions run on Google Cloud in the European Union (Firestore multi-region in Europe, Cloud Functions in Belgium). Some providers, including OpenAI and parts of Firebase, process data in the United States; such transfers rely on the providers' safeguards, such as the EU Standard Contractual Clauses.

Data is encrypted in transit. Access to the database is restricted by security rules: for example, only you can read your private profile, and only participants can read a shared alarm.

13. How long we keep data

  • Data on your device: until you delete it or uninstall the app.
  • Account, public and private profile: until you delete your account.
  • Shared alarms: see section 5.
  • Moon AI: not stored on our server; OpenAI up to 30 days.
  • Server logs: up to 30 days.
  • Purchase and referral records: as long as needed for accounting, refunds and fraud prevention.
  • Analytics: according to Google Analytics retention settings.

14. Your rights and choices

  • See and correct your data: your profile, photo, username and sleep profile can be edited in the app.
  • Withdraw consent: turn off Moon AI in Profile → Content & Data → Moon AI; hide your profile from search with Private visibility; turn off notification categories; revoke Apple Health access in iOS Settings.
  • Delete your account: in the app go to Profile → Your Profile → ⋯ → Delete account. This permanently deletes your sign-in, username, profile photo, private profile and push tokens; you leave your shared alarms, and shared alarms you created are cancelled for everyone. So that challenges you took part in remain valid, your past challenge results and the statistics in your former profile are kept without your name, username or photo. Purchase and referral records and safety reports are kept as described above. Data on your device stays until you uninstall the app.
  • Other requests: you can ask us for a copy of your data, to restrict or object to processing, or to delete data you cannot delete in the app, by emailing us (section 18). If you are in the EU/EEA or the UK, you also have the right to lodge a complaint with your local data protection authority.

Legal bases (EU/EEA and UK users): your consent (Apple Health, social features, Moon AI, notifications); performance of our agreement with you (your account, shared alarms, subscriptions); our legitimate interests (security, abuse prevention, anonymous analytics to improve the app); and legal obligations (accounting).

15. Children

Moon is not intended for children under 13 and we do not knowingly collect data from them. If you believe a child under 13 has created an account, please contact us and we will delete it.

16. Changes to this policy

We may update this Privacy Policy. When we do, we change the effective date above and, for significant changes, we let you know in the app. The current version is always available at withmoon.app/docs/privacy-policy.

17. Governing law

This Privacy Policy is governed by the laws of Ukraine, without prejudice to the mandatory data protection rights you have where you live.

18. Contact us

For privacy questions and requests: 📧 roman.mahda100@gmail.com

© 2026 Roman Mahda. All rights reserved. Moon App — Sleep Tracking & HealthKit Integration