Privacy Policy

1. Our Privacy Principles

We know Moonpair holds some of the most personal content two people share with each other — photos, voice notes, diary entries, private notes. The following principles guide how we handle it:

• Information you provide is private. We only use it to run the Service, and share it with your linked partner where the App is designed to do so.
• We do not sell your personal information to third parties.
• We do not use your personal information to advertise third-party products or services to you, and we do not run third-party ads inside Moonpair.
• We only work with third-party service providers under contracts that prohibit them from reusing or selling your data for their own purposes.
• We collect limited usage data to fix bugs and improve the App.
• If you have any questions or concerns, contact us at support@moonpairapp.com.

2. Introduction

This Privacy Policy explains what information Everarc LLC ("Moonpair," "we," "us," or "our") collects through the Moonpair mobile application and any associated website (together, the "Services"), why we collect it, how we use it, and the rights and choices available to you.

By creating an account or using Moonpair, you agree to the collection and use of information as described in this Policy. If you do not agree, please do not use the Services.

3. Types of Data We Collect

3.1 Account & Profile Data

Email address, password (stored in hashed/encrypted form via our authentication provider), display name, chosen "star," and answers to onboarding prompts (e.g., "what matters" to you). If you choose to sign in with Google or Apple, we receive basic account information from that provider, such as your name, email address, and profile identifier. We do not receive your Google or Apple password.

3.2 Partner-Linking Data

The pairing code used to connect two accounts, and the resulting couple relationship record.

3.3 Content You Create ("User Content")

Photos and images, voice notes, diary entries, answers to relationship prompts (e.g., "Secret Book"), notes, gestures and messages sent to your partner, special dates, milestones, and memory descriptions.

3.4 Purchase & Subscription Data

When you subscribe to Moonpair Pro or purchase Stardust, the transaction is processed by the Apple App Store or Google Play. We do not receive or store your full payment card details — only transaction metadata (product purchased, date, subscription status, renewal date) via our subscription management provider.

3.5 Usage & Device Data

Device type, operating system and version, app version, unique device/installation identifiers, general in-app usage and interaction data, and crash/error logs.

3.6 Push Notification Data

A device token used to deliver notifications to you via Firebase Cloud Messaging (FCM). You can disable push notifications at any time in your device settings.

3.7 Communications

The content of any support request or message you send us.

3.8 Cookies (Website Only)

If you visit our website, we may use cookies or similar technologies (e.g., anonymous identifiers) to understand site traffic and improve the site. The mobile App itself does not use browser cookies.

3.9 Distance (Optional Location Data)

Distance is an optional feature, and it is off until you turn it on. Only then does Moonpair ask your phone for location permission. If you turn it on, the app reads your phone's location only while Moonpair is open: when you launch the app, when you return to it, or when you tap the Distance widget. It never reads your location in the background, and it does not track you continuously.

Your phone sends its coordinates, rounded to about 110 metres, to our own backend (Supabase). Nothing is sent to any other company. We store only your latest point, which overwrites the previous one, along with its timestamp. We keep no location history. No Moonpair user can read these stored points, not even you. Only our server functions return results, and those results are rounded.

Your partner sees only the distance in miles or kilometres and whether you are "together" or "apart". They never see your coordinates or a map. The same goes for the Distance widget and notification.

You can turn Distance off in the app, or revoke location permission in your phone's settings, at any time.

4. Information About Your Partner

Moonpair is built for two people to connect. By design, certain content you create (photos, notes, shared memories, milestones, gestures) is visible to your linked partner, and content they create may reference you. Please only upload content and imagery you're comfortable sharing with your partner, and get their consent before uploading anything that includes them. If either of you deletes your account, the content you share is deleted for both of you (see Section 6).

We do not knowingly collect information about anyone who is not a registered Moonpair user, except where a user includes it within their own content (e.g., a photo).

5. How We Use Your Data

We use collected data to:

• Provide and maintain the Service, including account creation, partner pairing, and syncing shared content in real time
• Provide customer support
• Process subscriptions and Stardust purchases, and propagate Moonpair Pro access to both partners in a couple
• Send push notifications you've enabled
• Analyze usage to detect bugs, prevent abuse, and improve the App
• Comply with legal obligations
• Any other purpose with your consent

We use information received from Google sign-in only to create and authenticate your account and to provide the Service. We do not use it for advertising, do not sell it, and do not share it with third parties except our authentication provider (Supabase) as needed to operate sign-in. Moonpair's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use Distance location data only to calculate the distance between you and your partner, not for advertising, and we do not sell it or share it with third parties.

We do not use your personal content (photos, diary entries, voice notes, messages) to train AI/machine learning models.

6. Retention of Data

We retain your Personal Data and User Content for as long as your account is active. Usage/device data is generally retained for a shorter period, except where needed for security, functionality, or legal reasons.

Distance location data is handled separately. It is deleted immediately when you turn Distance off or when either of you unpairs. Any point older than 30 days is cleared by a daily job. It is also deleted along with your account when your account is deleted.

If you delete your account:

• You can delete your account in the app (Settings, Delete account) or at moonpairapp.com/delete-account. Your account is then scheduled for deletion. For 30 days you can change your mind by signing back in and choosing to restore it.
• After 30 days we permanently delete your profile, your login credentials and your content. Content you share with your partner (memories, photos, chat messages, voice notes, special dates, notes and other shared content) is deleted for both you and your partner, because it forms part of your shared record.
• Your partner is told when you delete your account and can see the date their shared content will be deleted.
• Files are removed from our storage shortly after that date, and any copies in backups are removed as those backups roll over on our normal schedule.
• Deleting your account does not cancel a subscription made through Apple or Google. Cancel it in the App Store or Google Play.
• Unpairing from your partner disconnects you but does not delete content. Content from a past pairing is kept until one of you deletes your account, and is no longer visible to either of you once you pair with someone else.
• We may retain limited data as required for legal, tax, fraud-prevention, or dispute purposes.

7. Transfer of Data

Your information may be stored and processed in countries other than your own, including the United States, where our service providers operate. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for international transfers.

8. Disclosure of Data

We may disclose your information:

• To your linked partner, as a core function of the shared features of the App.
• For legal reasons — if required by law, subpoena, or valid request by public authorities, or to protect the rights, property, or safety of Moonpair, our users, or others.
• In a business transaction — if we're involved in a merger, acquisition, financing, or asset sale, your data may be transferred as part of that transaction; we'll notify you of any change in control over your data.
• With third-party service providers who support our business (see Section 9) — they only access your data as needed to perform their function for us and are contractually barred from using or disclosing it for any other purpose.

9. Service Providers

We use the following categories of third-party service providers, each contractually restricted to using your data solely to provide services to us:

• Supabase — database, authentication, file storage, and real-time sync (stores account data, app content, and media).
• RevenueCat — subscription and purchase entitlement management.
• Apple App Store / Google Play — process payments for subscriptions and in-app purchases under their own privacy policies.
• Google Sign-In and Sign in with Apple — optional authentication methods that let you create and access your account using your Google or Apple account, under their own privacy policies.
• Firebase Cloud Messaging (Google) — delivers push notifications.
• Mixpanel — behavioral product analytics (e.g., screen views, feature usage). Configured to never receive the content of your notes, diary entries, chats, or photos — only anonymized usage events tied to an internal user ID.
• Firebase Crashlytics (Google) — crash and error diagnostics, tied to an internal user ID only, never your name or email.
• Meta Platforms, Inc. — we share subscription and purchase event data (such as trial starts, purchases, and renewals) with Meta via its Conversions API, to measure and improve the performance of our advertising. This may occur even if you have not granted app tracking permission.

Our analytics tool (Mixpanel) and other SDKs may derive an approximate location, such as a city or country, from your device's IP address on their servers. This is not GPS and is separate from the optional Distance feature in Section 3.9.

10. Security of Data

We use end-to-end encryption for chat messages, voice notes, and photos shared between you and your partner — meaning this content is encrypted on your device before it's sent, and even we cannot read it. We also use encryption in transit, database-level access controls scoped to you and your linked partner, and restricted employee access to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

In the event of a data breach affecting your personal information, we will notify affected users and any required regulators in accordance with the New York SHIELD Act and other applicable law.

11. Your Data Protection Rights Under GDPR

If you are a resident of the EU/EEA, you have the right to:

• Access, update, or delete the information we hold about you
• Rectify inaccurate or incomplete information
• Object to our processing of your Personal Data
• Restrict our processing of your Personal Data
• Receive a copy of your Personal Data in a structured, machine-readable format (data portability)
• Withdraw consent at any time where we rely on consent to process your data

We may ask you to verify your identity before acting on these requests, and note that we may not be able to provide the Service without certain necessary data. You may also lodge a complaint with your local Data Protection Authority.

To exercise these rights, email support@moonpairapp.com.

12. Your Rights Under CalOPPA (California)

In accordance with CalOPPA:

• You can browse our website anonymously.
• This Privacy Policy is clearly linked and labeled "Privacy" from our website's home page.
• You'll be notified of policy changes on this page.
• You can update your personal information by emailing support@moonpairapp.com.

"Do Not Track" Signals: We are committed to giving you meaningful choices about your data, but we do not currently recognize or respond to browser "Do Not Track" signals.

13. Your Rights Under CCPA/CPRA (California)

If you are a California resident, you have the right to ask us:

• What categories and specific pieces of personal information we've collected about you, the sources, the business purpose for collecting it, and the categories of third parties we've shared it with
• To delete the personal information we hold about you
• Whether we've sold or shared your personal information: we do not sell your personal information. We do share limited purchase/subscription event data (such as trial starts and purchases) with Meta via its Conversions API, to measure and improve our advertising performance.

You're entitled to make an access request up to two times in a rolling 12-month period. To exercise these rights, email support@moonpairapp.com. We will not discriminate against you for exercising them.

14. Children's Privacy

Moonpair is not directed at, and is not intended for use by, anyone under 18 years old. We do not knowingly collect personal information from anyone under 18. If we learn that someone under 18 has created an account or provided us with personal information, we will take steps to delete it. If you believe this has happened, contact us at support@moonpairapp.com.

15. Links to Other Sites

Our Services may contain links to other sites not operated by us (e.g., App Store/Play Store listings). We have no control over, and assume no responsibility for, the content or privacy practices of third-party sites. Review their policies before providing information to them.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time by posting the revised version on this page. If changes are material, we will provide more prominent notice (e.g., in-app notification or email) or seek your consent before they take effect. Continued use of the Services after changes take effect constitutes acceptance of the revised Policy.

17. Contact Us

Everarc LLC Email: support@moonpairapp.com