Privacy Policy

Effective Date: April 23, 2026

Milk & Moon (also referred to as the App, we, us, or our) provides a community app. This Privacy Policy explains what information we collect, how we use it, and your choices.

1. Information We Collect

• Account and sign-in data: identifiers from Apple, Google, or guest access, and account metadata such as user ID and sign-in method.
• Profile data: nickname, nickname color, country, optional city, date of birth, timezone, status, child details you choose to add, visibility settings, onboarding survey responses (such as partner status, work/stay-at-home status, and selected parenting styles), communication preferences (including email opt-in), and onboarding/rules acceptance state.
• Profile media data (optional): if you unlock Moonlight Mom Product and upload a profile photo and/or photo wall photos, we store file metadata (for example file path, URL, timestamps) and the image content you choose to upload. Photo wall uploads are limited in app to a capped number of pinned photos.
• Moonlight attachment media (optional): if you unlock Moonlight Mom Product, you may attach one image to a room message, thread reply, direct message (pen pal letter), Who Is Up note, or nightly check-in note. Attachments are processed before upload (resized/compressed) and must meet the in-app post-processing limit (currently 500 KB). We store one processed file per attachment and related metadata (for example file path, URL, owner, type); preview and full-size in-app views reference that same stored file.
• GIF integration data (optional): when you open GIF search and selection, we request GIF metadata and URLs from KLIPY using a public app key. Requests can include your search query, locale/country hint, and standard network metadata needed by that provider to serve results. Selected GIF URLs are stored directly in your message/note content.
• Account verification selfie data (required for onboarding): a live camera selfie image submitted during onboarding for moderator verification, along with verification metadata (for example private storage path and submission timestamp). This verification data is private and not visible in-app to other users or to the submitting user account.
• Community content: messages, thread replies, reactions, support gift activity, direct messages (pen pal letters), reports, moderation actions, optional selected GIF URLs, and related timestamps.
• Nightly check-in data (optional): selected mood tags, tiny moments (including custom Other text), and optional notes you choose to save, plus timestamps used to support nightly prompt behavior and history views in your profile.
• Purchase data: product IDs, transaction/receipt metadata, and entitlement or inventory updates for digital gifts and Moonlight Mom Product (for example `moonlightTierActive`, `moonlightTierUpdatedAt`, and Moonlight grant records linked to a store transaction ID). Payments are processed by Apple and purchase tooling providers (for example, RevenueCat); we do not store full payment card numbers.
• Location data (optional): approximate map presence only when you choose to share.
• Technical data: device/app diagnostics, crash data, and basic usage logs to keep the service stable and secure.
• Contact data: information you provide when you email us.

2. How We Use Information

• Provide, maintain, and improve Milk & Moon.
• Operate chat rooms, threads, map presence, notifications, and gift features.
• Send welcome and other product emails only when you have opted in.
• Provide optional nightly mood and tiny-moments prompts, saved check-ins, and profile history views.
• Process purchases, verify transactions, maintain digital gift balances, and sync Moonlight Mom Product.
• Enable features tied to Moonlight Mom Product such as supporter badge display, ad suppression on Home, and profile media tools (including photo wall).
• Verify account authenticity and support safety/moderation review during onboarding.
• Enforce rules, detect abuse, investigate reports, and protect user safety.
• When required for safety/rule enforcement, revoke Moonlight Mom Product and related gift purchase entitlements on banned/restricted accounts.
• Respond to support requests and legal obligations.

3. How Information Is Shared

• With other users: profile and message information you choose to post/share in the App, subject to your visibility settings, including profile media you choose to make visible in public profile surfaces.
• Anonymous mood indicators: when you use nightly check-ins, we may show anonymous aggregate copy (for example, "2 more moms are also feeling sad tonight") derived from same-day mood selections. These indicators do not reveal identity and do not share note content.
• Attachment visibility scope: room/thread attachment images are visible to eligible viewers in those surfaces, note attachments are visible in Who Is Up note surfaces, direct-message attachment images are visible only to participants in that DM conversation, and nightly check-in note attachments are private to your account and shown only in your own nightly history surfaces. Selected GIF URLs follow the same room/thread/DM/Who Is Up visibility scope as the message/note where they are posted.
• Moonlight Mom Product visibility: supporter badge status and your uploaded profile photo and pinned photo wall photos (if any) are visible to other users where public profile or profile/avatar surfaces are shown.
• Profile visibility controls: country and city are account-level profile fields that are shown to other users only when you enable their visibility toggles. Date of birth and onboarding survey responses are private account fields and are not shown to other users in chat/profile views.
• Verification selfie privacy: verification selfies and related verification metadata are private. They are hidden from all client users (including the account that submitted them) and are accessible only to authorized moderators/admins through trusted internal operational access for verification, safety, and rule enforcement.
• With App admins/moderators: authorized admins may view all data in the App, including profile information, room messages, thread replies, direct messages (pen pal letters), reactions, nightly check-ins (including moods, tiny moments, optional notes, and nightly note image attachments), gifts, reports, and related metadata, using internal operational/back-office tools to operate the service, provide support, enforce rules, and protect user safety.
• With service providers: hosting/backend, analytics, notifications, authentication, GIF search/content delivery provider (KLIPY), and in-app purchase infrastructure needed to run the App.
• For legal/safety reasons: when required by law, legal process, or to prevent fraud, harm, or abuse.
• Business transfers: in connection with a merger, acquisition, financing, or asset sale.

We do not sell personal information for money.

4. Data Retention

We retain information as long as reasonably necessary for app operation, safety/moderation, purchase records, dispute handling, and legal compliance. We may delete or de-identify data when it is no longer needed. If you remove profile media (including photo wall images), deletion from active surfaces may be near-immediate, while residual copies may persist for a limited period in backups/logs for security, fraud prevention, and operational recovery.

For Moonlight attachment images, we do not intentionally keep separate preview/full variants or retain an additional uncompressed original in app storage after upload; temporary local processing artifacts may exist briefly on your device before upload completes.

If you request account deletion in-app, access is revoked immediately. We then run deferred cleanup after a 7-day pending-deletion window. During cleanup, we remove or de-link account data stored in Milk & Moon systems (including messages, direct messages you authored, gifts, waves, reactions, reports, blocks, nightly check-ins and optional notes, uploads, and verification selfie data), with limited thread-preserving tombstones where needed to keep reply context. We may also cease operating the App (in whole or in part) at any time, with or without notice.

5. Security

We use reasonable technical and organizational safeguards. No method of storage or transmission is 100% secure, and we cannot guarantee absolute security.

We are not responsible for data loss, data deletion, data corruption, or failure to store/retrieve any content, whether caused by technical issues, third-party services, user actions, or other events.

6. Your Choices and Rights

• Update profile details and visibility controls in-app.
• Add, change, or remove your profile photo and pinned photo wall images in-app (when Moonlight Mom Product is active).
• You can request account deletion in-app from Profile > Account. This immediately signs you out and starts a 7-day pending-deletion window before cleanup completes.
• Some records maintained by external providers (for example Apple, Google, or RevenueCat billing systems) may remain outside Milk & Moon systems under those providers' own policies.
• Disable location sharing and push notifications through device/app settings.
• Turn emails on or off in-app from Profile > Preferences, or unsubscribe directly from any email.
• Use in-app restore options to re-sync eligible digital purchases (including Moonlight Mom Product).
• Depending on your location, you may have additional rights (for example access, correction, deletion, portability, or appeal rights under applicable law).

7. Medical Disclaimer

Milk & Moon is not a medical service and does not provide medical advice, diagnosis, or treatment. If you are in crisis or need urgent support, contact emergency services or a licensed professional immediately.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Updated versions will be posted with a new effective date.

9. Contact

Questions or privacy requests: hello@milkmoonapp.com