Moon Way

Privacy Policy

Effective 2026-10-15

Who we are

This Privacy Policy explains how Kailasa Apps (“we”, “us”) handles information when you use the Moon Way mobile application (the “App”). We are based in Ukraine.

The App works without an account, and we do not run servers that store your personal data, apart from the messages you choose to send us through the feedback form. Your profile, observations and settings stay on your device. The few services described below receive only what they need to do their job.

Information stored on your device

Profile. The name, status and date of birth you enter in Settings are stored only on your device. They are never transmitted to us or to any of the services described in this policy.

Observations. The notes you write in the observation journal — their text, mood, date and the lunar day and phase they refer to — are stored only on your device and are never transmitted.

Settings and activity. Notification preferences, language, theme, the date of first launch and the number of practices you have completed are stored on your device.

Device backup. If you have turned on your device’s own backup (iCloud Backup on iPhone, Google backup on Android), it may include the App’s data, so that it can be restored on a new device. That backup is kept in your Apple or Google account under their terms; we have no access to it.

Location and city search

With your permission, the App reads your device location to calculate moonrise, moonset and the current lunar day for your place. Coordinates are kept on your device. To display a city name, the App asks the location service built into your operating system (Apple or Google) to turn coordinates into a place name; that request is governed by the platform provider’s privacy policy. You can turn automatic location off in Settings and pick a city by hand instead.

When you search for a city manually, the text you type is sent to the OpenStreetMap Nominatim service (operated by the OpenStreetMap Foundation) to find matching places. No other information about you is included in the request.

Lunar day content and notifications

Descriptions, recommendations and practices are downloaded from our content database hosted on Google Firebase (Cloud Firestore). To protect this database from abuse we use Firebase App Check, which sends a device attestation token (Apple App Attest or DeviceCheck, or Google Play Integrity) together with each request. Google may also receive standard technical data such as your IP address and request time. These requests do not contain your name, profile, observations or location.

Lunar day and Ekadashi reminders are scheduled locally on your device. We do not operate a push notification server and do not receive any notification data.

Purchases

Moon Way Premium is bought through the Apple App Store or Google Play. Payment is handled entirely by Apple or Google; we never receive your payment card details, and the store does not give us your name or email address.

To know which purchases unlock Premium, the App uses RevenueCat (RevenueCat, Inc., United States) as our processor. RevenueCat receives an anonymous user ID that the App generates on your device, your purchase and subscription history in the App (products, dates, prices, store transaction identifiers and receipts), and basic technical data such as the app version, operating system, store country and IP address. The anonymous ID is not linked to your name or email. Settings → Moon Way Premium shows it, so that you can quote it to us if you need help with a purchase.

Feedback

When you send us an idea or a problem report from Settings → Feedback, the App stores your message in our database hosted on Google Firebase (Cloud Firestore), together with the type you picked, the App language and technical details that help us reproduce a problem: platform, operating system version, App version, whether Premium is active and the current lunar day. The request goes through the same App Check protection as the content database.

Leaving an email address is optional. If you do, we use it only to reply to that message. Please do not include other personal data in the text unless it is needed to answer you.

Messages are kept for up to 12 months and then deleted; write to us at moonway.kailasapps@gmail.com to have one deleted earlier.

Analytics and crash reports

Usage analytics. When enabled, the App sends pseudonymous usage events to Google Analytics for Firebase — for example which screens are opened, which features are switched on, and whether the Premium screen was shown — together with an app-instance identifier, device model, operating system, app version and an approximate location (country and region) derived from your IP address. Google does not store the IP address itself. We use this to understand how the App is used and to improve it. The data is kept for 14 months.

Crash reports. When the App crashes or runs into an internal error, it sends a technical report to Firebase Crashlytics: the error trace, the state of the device at that moment (such as model, operating system version and free memory) and an installation identifier. We use it only to find and fix problems. Reports are kept for 90 days.

What these services do not receive: your name, date of birth, observations, coordinates or city. Your profile is reflected only as yes-or-no facts (for example, “a name is filled in”) and counts only as ranges. One exception: when a manual city search finds nothing, the first 24 characters of what you typed are sent so that we can improve search; text that looks like an email address or contains a long number is never sent.

Your choice. In the European Economic Area, the United Kingdom and Switzerland, usage analytics starts only after you agree to it in the App; elsewhere it is on by default. Crash reports are on by default everywhere. You can switch either of them off at any time in Settings → Analytics & diagnostics. Switching analytics off also resets its identifier.

We do not use advertising identifiers (Apple IDFA, Google Advertising ID), and we have turned off Google signals and ad personalisation. Google processes this data on our behalf.

What we do not do

We do not require an account, do not show advertising, do not use advertising identifiers, do not track you across other companies’ apps or websites, and do not sell, rent or share personal data with third parties for their own purposes.

Third-party services

The App relies on the following services, each with its own privacy policy: Google Firebase (Cloud Firestore, App Check, Google Analytics for Firebase and Crashlytics) — policies.google.com/privacy; RevenueCat — revenuecat.com/privacy; Apple App Store — apple.com/legal/privacy; Google Play — policies.google.com/privacy; Apple location services — apple.com/legal/privacy; Google Play services location — policies.google.com/privacy; OpenStreetMap Nominatim — osmfoundation.org/wiki/Privacy_Policy. City search results are © OpenStreetMap contributors.

Google and RevenueCat may process data in the United States and other countries. Where the law of your country requires it, such transfers rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.

Legal bases

Where the law requires a legal basis (for example in the European Economic Area, the United Kingdom and Switzerland), we rely on your consent for usage analytics; on our legitimate interest in keeping the App stable and secure for crash reports and App Check; on our legitimate interest in answering you for feedback messages; and on the performance of a contract for processing your purchases.

Storage and deletion

Data on your device stays under your control: you can edit or delete it in the App, and deleting the App removes it from the device. Your device backup, if you use one, is managed in your Apple or Google account settings.

Usage analytics data is deleted automatically after 14 months and crash reports after 90 days. RevenueCat keeps purchase records for as long as they are needed to provide Premium and to meet accounting and legal obligations. To ask us to delete your purchase records, send us the ID shown in Settings → Moon Way Premium. Deleting these records does not cancel a subscription — that is done in your store account. Feedback messages are kept for up to 12 months (see “Feedback”).

Your rights

Depending on where you live, you may have the right to access, correct or delete your personal data, to restrict or object to its processing, to withdraw consent at any time, and to lodge a complaint with a data protection authority.

You can exercise most of these rights directly: edit or delete the data on your device in the App, and switch analytics and crash reports off in Settings → Analytics & diagnostics. For anything else, contact us using the details below. Analytics and crash data are pseudonymous and we cannot link them to you; for purchase records, include the ID shown in Settings → Moon Way Premium.

Children

The App is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can address it.

Security

Data on your device is stored using the standard application storage of your operating system and is protected by your device’s security features (passcode, encryption). Communication with our content database, Google and RevenueCat travels over encrypted connections (HTTPS).

Changes to this policy

We may update this Privacy Policy from time to time, for example when the App gains new features. The effective date at the top of this page shows the latest version. Continued use of the App after an update means you accept the revised policy.

Contact

Questions about privacy or this policy can be sent to Kailasa Apps at moonway.kailasapps@gmail.com.