moonmoov · 8 October 2026
Operator: INDIVIDUALURI METSARME VLADIMIR TRUBENKOV, Georgia. Privacy and deletion requests: admin@moonmoov.com. This policy describes the Android app moonmoov, a personal planner for people aged 16 and older.
Your plans stay on your device
Tasks, notes, lists, spaces, habits, progress, budget entries, images and settings are stored locally. moonmoov has no account or cloud sync. We do not receive the content of your plans or images. Android automatic backup is disabled. Copies that you export remain under your control.
Permissions and files
With your permission, moonmoov reads selected device calendars for import and schedules local notifications. It does not edit system calendar events. You choose images and import files through system pickers. Export and sharing happen only when you request them; the destination you choose handles the exported data under its own rules.
Nearby shared spaces
After both people confirm the same code on their devices, the selected shared space is sent to the partner over an encrypted local Nearby Connections link. This includes tasks, notes, lists, images and subsequent changes. A copy is stored on each device; no moonmoov server is involved. Nearby devices/Bluetooth/Wi-Fi permissions are needed (location on older Android versions). The active foreground service displays a notification with a Stop action. Stopping the exchange does not delete the copy already received by your partner.
Google Nearby collects performance metrics, device model, country, build version and application package name. This is a separate Google Play services mechanism; the Firebase analytics switch in moonmoov does not control it. Users can control collection in Android Settings → Google → Usage & diagnostics. Details: https://developers.google.com/nearby/connections/overview.
Optional analytics
Google Analytics for Firebase is off by default. With your separate consent, it processes app interactions, sessions, theme and Premium screen views, an app-instance identifier, technical app/device information and approximate location derived from masked IP addresses. We use this to understand usage and improve the app. Advertising ID collection and advertising personalization are disabled. We do not attach your name, email, task text, dates, images, financial amounts or other plan content to analytics events.
Optional crash reports
Firebase Crashlytics is also off by default and has a separate consent. If enabled, Google processes crash logs, diagnostics, app and device information and installation identifiers to help us fix errors. JavaScript reports use sanitized error codes and numeric positions; native reports may include technical exception stacks. A diagnostic report you export yourself contains schema checks and aggregate counts, not plan content.
Providers and retention
Google processes telemetry on our behalf and may use infrastructure and subprocessors outside your country. Transport to Firebase is encrypted. Analytics user/event data retention is set to 2 months without renewal on new activity; aggregated reports may be kept longer. Google documents 90-day retention for Crashlytics before deletion from active and backup systems begins. Details: https://firebase.google.com/support/privacy and https://support.google.com/analytics/answer/11582702. We do not sell your data or use it for advertising.
Your choices and deletion
Both consents are optional and can be withdrawn in Settings → Your data and export without losing app features. Withdrawal stops the relevant collection; queued analytics are cleared, the local Analytics identifier is reset, and pending crash reports are deleted. It does not by itself erase data already sent to Google. Delete local records in the app or remove the app to delete its local storage. Delete exported copies separately. Contact admin@moonmoov.com for access, correction or deletion requests and privacy questions. Because telemetry is pseudonymous, we may need information to identify the relevant installation; do not send backups or private plan content.
Purchases and Premium
In versions that support purchases, RevenueCat starts with the app to verify and restore access through Google Play. It processes an anonymous customer identifier, purchase history and purchase tokens, subscription status, and technical app and device information. Google Play handles payment; we do not receive your card details. We do not send plan content, your name, email or advertising identifiers to RevenueCat. Firebase consent switches do not control purchase verification. This data supports access, customer support and subscription reporting. For deletion requests, contact admin@moonmoov.com. Uninstalling the app does not delete the provider’s records or cancel your Google Play subscription. Details: https://www.revenuecat.com/privacy. In builds marked as offering free Premium during beta testing, RevenueCat is not initialized, no subscription is created and no payment is taken.
How to request data deletion
1. Email admin@moonmoov.com with the subject “moonmoov data deletion” and say whether your request concerns purchases, analytics or crash reports.
2. For a purchase request, include your Google Play order ID if available so we can locate and verify the record. Do not send card details, backups or private plan content. We may ask for limited installation information to identify pseudonymous telemetry.
3. After identifying the relevant record, we request deletion of the RevenueCat customer identifier, subscription record and purchase history, or the relevant identifiable telemetry. RevenueCat processes deletion asynchronously; we confirm the result by email. Its customer records are retained until an identified deletion request is processed. Analytics and Crashlytics retention periods are described above; aggregate reports may remain.
4. Delete local records and exported copies separately. Google Play controls its payment records. Data deletion does not cancel a Google Play subscription: cancel it in Google Play → Payments & subscriptions → Subscriptions. Using the app again may create a new anonymous RevenueCat record for access verification.