Privacy Policy

Effective Date: March 28, 2026

Milk & Moon (also referred to as the App, we, us, or our) provides a community app. This Privacy Policy explains what information we collect, how we use it, and your choices.

1. Information We Collect

• Account and sign-in data: identifiers from Apple, Google, or guest access, and account metadata such as user ID and sign-in method.
• Profile data: nickname, nickname color, country, date of birth, timezone, status, child details you choose to add, visibility settings, and onboarding/rules acceptance state.
• Profile media data (optional): if you unlock Moonlight Mom Product and upload a profile photo and/or photo wall photos, we store file metadata (for example file path, URL, timestamps) and the image content you choose to upload. Photo wall uploads are limited in app to a capped number of pinned photos.
• Account verification selfie data (required for onboarding): a live camera selfie image submitted during onboarding for moderator verification, along with verification metadata (for example private storage path and submission timestamp). This verification data is private and not visible in-app to other users or to the submitting user account.
• Community content: messages, thread replies, reactions, support gift activity, direct messages (pen pal letters), reports, moderation actions, and related timestamps.
• Purchase data: product IDs, transaction/receipt metadata, and entitlement or inventory updates for digital gifts and Moonlight Mom Product (for example `moonlightTierActive`, `moonlightTierUpdatedAt`, and Moonlight grant records linked to a store transaction ID). Payments are processed by Apple and purchase tooling providers (for example, RevenueCat); we do not store full payment card numbers.
• Location data (optional): approximate map presence only when you choose to share.
• Technical data: device/app diagnostics, crash data, and basic usage logs to keep the service stable and secure.
• Contact data: information you provide when you email us.

2. How We Use Information

• Provide, maintain, and improve Milk & Moon.
• Operate chat rooms, threads, map presence, notifications, and gift features.
• Process purchases, verify transactions, maintain digital gift balances, and sync Moonlight Mom Product.
• Enable features tied to Moonlight Mom Product such as supporter badge display, ad suppression on Home, and profile media tools (including photo wall).
• Verify account authenticity and support safety/moderation review during onboarding.
• Enforce rules, detect abuse, investigate reports, and protect user safety.
• When required for safety/rule enforcement, revoke Moonlight Mom Product and related gift purchase entitlements on banned/restricted accounts.
• Respond to support requests and legal obligations.

3. How Information Is Shared

• With other users: profile and message information you choose to post/share in the App, subject to your visibility settings, including profile media you choose to make visible in public profile surfaces.
• Moonlight Mom Product visibility: supporter badge status and your uploaded profile photo and pinned photo wall photos (if any) are visible to other users where public profile or profile/avatar surfaces are shown.
• Private profile fields: country and date of birth are account-level profile fields and are not shown to other users in chat/profile views.
• Verification selfie privacy: verification selfies and related verification metadata are private. They are hidden from all client users (including the account that submitted them) and are accessible only to authorized moderators/admins through trusted internal operational access for verification, safety, and rule enforcement.
• With App admins/moderators: authorized admins may view all data in the App, including profile information, room messages, thread replies, direct messages (pen pal letters), reactions, gifts, reports, and related metadata, using internal operational/back-office tools to operate the service, provide support, enforce rules, and protect user safety.
• With service providers: hosting/backend, analytics, notifications, authentication, and in-app purchase infrastructure needed to run the App.
• For legal/safety reasons: when required by law, legal process, or to prevent fraud, harm, or abuse.
• Business transfers: in connection with a merger, acquisition, financing, or asset sale.

We do not sell personal information for money.

4. Data Retention

We retain information as long as reasonably necessary for app operation, safety/moderation, purchase records, dispute handling, and legal compliance. We may delete or de-identify data when it is no longer needed. If you remove profile media (including photo wall images), deletion from active surfaces may be near-immediate, while residual copies may persist for a limited period in backups/logs for security, fraud prevention, and operational recovery.

If you request account deletion in-app, access is revoked immediately. We then run deferred cleanup after a 7-day pending-deletion window. During cleanup, we remove or de-link account data stored in Milk & Moon systems (including messages, direct messages you authored, gifts, waves, reactions, reports, blocks, uploads, and verification selfie data), with limited thread-preserving tombstones where needed to keep reply context. We may also cease operating the App (in whole or in part) at any time, with or without notice.

5. Security

We use reasonable technical and organizational safeguards. No method of storage or transmission is 100% secure, and we cannot guarantee absolute security.

We are not responsible for data loss, data deletion, data corruption, or failure to store/retrieve any content, whether caused by technical issues, third-party services, user actions, or other events.

6. Your Choices and Rights

• Update profile details and visibility controls in-app.
• Add, change, or remove your profile photo and pinned photo wall images in-app (when Moonlight Mom Product is active).
• You can request account deletion in-app from Profile > Account. This immediately signs you out and starts a 7-day pending-deletion window before cleanup completes.
• Some records maintained by external providers (for example Apple, Google, or RevenueCat billing systems) may remain outside Milk & Moon systems under those providers' own policies.
• Disable location sharing and push notifications through device/app settings.
• Use in-app restore options to re-sync eligible digital purchases (including Moonlight Mom Product).
• Depending on your location, you may have additional rights (for example access, correction, deletion, portability, or appeal rights under applicable law).

7. Medical Disclaimer

Milk & Moon is not a medical service and does not provide medical advice, diagnosis, or treatment. If you are in crisis or need urgent support, contact emergency services or a licensed professional immediately.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Updated versions will be posted with a new effective date.

9. Contact

Questions or privacy requests: hello@milkmoonapp.com