MoonSays · Privacy Policy
This policy covers the MoonSays Android app and the moonsays.app website, including its waitlist. It explains what data the app uses, where it goes, and what you can do about it. The short version: your birth details, your name and your chart stay on your phone.
Who we are. MoonSays is made by Kuntay Erkuş, an individual developer based in İzmir, Turkey, publishing as Grio Works ("we", "us"). We decide how the app handles data. Contact: info@grio.works.
In short
- Your personal details stay on your phone. Birth date, time and place, your name, your chart, your interests, reminders, your "How did it go?" answers and your settings are stored and calculated on your device. We don't receive them, sell them or share them.
- No account. The app uses an anonymous ID for its few cloud features.
- Crash reports are collected to fix bugs. You can turn them off.
- Usage data is off unless you say yes. You choose in onboarding, and you can change it anytime in the Me tab.
- No ads in this version, and we don't use your data for advertising.
- The waitlist is the only place we ask for your email. If you join it on moonsays.app, we use your email to tell you when MoonSays launches. That's all.
- You're in control. Me › Download my data gives you a copy of everything stored on your phone. Me › Delete my data erases it and resets your anonymous ID.
What stays on your phone
| Data | Why |
|---|---|
| Birth date, time and place; your name; your chart | To calculate your personal score and windows |
| The city you use for times (picked by you or suggested from your phone's time zone) | To calculate the day's windows where you are |
| Interests, reminders, "How did it go?" answers, settings | To run the app for you |
| Subscription status | To unlock Premium |
The app doesn't ask for your device's location (no GPS permission). Cities are searched in a list built into the app. Reminders are scheduled on your phone.
This data stays on your phone until you delete it in the app or uninstall the app. It isn't backed up to our servers, so it doesn't move to a new phone.
What leaves your phone
| Data | Why | Who processes it |
|---|---|---|
| Anonymous user ID; app integrity token | To keep the cloud features working and stop abuse | Google (Firebase Authentication, App Check) |
| Usage data: events (for example "onboarding step seen", "paywall opened") with device model, OS version, language and country. Never your birth details, name or anything you type | To learn which screens work, only if you agree | Google (Google Analytics for Firebase) |
| Crash reports (error log, device model, OS version) | To find and fix bugs (you can turn this off) | Google (Firebase Crashlytics) |
| Remote settings request | To manage screens and pricing tests | Google (Firebase Remote Config) |
| Anonymous community counts, such as "one person asked about a haircut this week" or "one person said it went well". No ID is attached; counts are kept by task type and week. | To show lines like "312 people asked about a haircut this week" | Google (Cloud Firestore, stored in the EU) |
| Sky data download: your IP address and the data range requested. Your birth date isn't sent; the piece the app needs is fetched together with random decoy pieces, so the server can't tell which one is yours | To calculate your birth chart | Google (Firebase Hosting) |
| Purchases and subscriptions | To sell and manage Premium | Google Play |
Google acts as our service provider for Firebase. Google Play handles payments under its own privacy policy; we never see your card details.
We don't collect sensitive information (such as health, religion or beliefs) and we don't send what you ask about to the cloud.
Waitlist (moonsays.app)
Before the app is out, you can join our waitlist on moonsays.app. It's the only place we ask for your email address.
| Data | Why | Who processes it |
|---|---|---|
| Your email address, the country you pick, when you signed up, and which version of the consent text you agreed to | To email you about the MoonSays launch on Google Play, and to keep a record that you asked us to | Google (Cloud Firestore, stored in the EU) |
The campaign tag in the link you used, if any (for example utm_source=tiktok) | To count which videos and posts bring people in. We look at totals, not at you | Google (Cloud Firestore, stored in the EU) |
| Your IP address and browser details, when you load the page | To deliver the page | Google (Firebase Hosting) |
- We only email you if you tick the box. Launch news only: no newsletter, no ads. We never sell, rent or share the list.
- Getting off the list. Every email we send has an unsubscribe link. You can also write to info@grio.works and we'll delete your address.
- Sending the emails. We may use an email service to send the launch email; it then handles your address for us, under contract, and only for that. We will name that service here before the first launch email goes out.
- The website itself sets no cookies and runs no analytics or ad trackers. Your browser keeps the campaign tag for the current visit only (session storage), and it's sent to us only if you join.
- Under 13? Please don't join. If a child under 13 has signed up, write to us and we'll delete the address.
Where the data is processed
We're based in Turkey. Firestore data is stored in the European Union. Analytics and crash data are processed on Google's global infrastructure, including the United States. Your data may therefore be processed outside your country. We rely on Google's data processing terms and security commitments for these transfers.
How long we keep it
| Data | How long |
|---|---|
| Data on your phone | Until you delete it or uninstall the app |
| Waitlist email and its details | Until the launch emails are sent, and no longer than 6 months after the app launches; sooner if you unsubscribe or ask us |
| Analytics events | 14 months |
| Crash reports | 90 days |
| Anonymous ID | Until you use Delete my data or clear the app's data |
| Community counts | Kept only as totals; not linked to you |
| Purchase records | As long as tax and commercial law requires (kept by Google Play and in our sales reports) |
Your choices and rights
Wherever you live, you can:
- see and copy your data: Me › Download my data (a JSON file of everything on your phone);
- delete it: Me › Delete my data (data on your phone, your anonymous ID and your analytics data);
- turn usage data and crash reports off: in the Me tab;
- leave the waitlist: use the unsubscribe link in any of our emails, or write to us;
- ask us about the data we hold, or ask us to correct or delete it, at info@grio.works. We answer within 30 days, free of charge. Because we don't hold your name or birth details, we may ask you for your anonymous ID (shown as Support ID in the Me tab) to find anything linked to you.
United States, including California. We don't sell or share your personal information, and we don't use it for targeted advertising. The app doesn't respond to browser "Do Not Track" signals because it isn't a browser; the choices above cover the same ground. We'll post any change to this policy here and in the app, with a new date at the bottom.
Canada. We follow PIPEDA's fair information principles. If you're not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).
Australia. We handle personal information in line with the Australian Privacy Principles, including when it's processed overseas (see above). If you're not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
New Zealand. You have the right to access and correct your personal information under the Privacy Act 2020. If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner (privacy.org.nz).
Children
MoonSays isn't meant for children under 13, and we don't knowingly collect data from them. If you think a child under 13 has used the app, write to us and we'll help delete anything linked to them.
Security
Every connection is encrypted (TLS). Cloud access is limited by app integrity checks (App Check) and access rules. Logs never contain your personal details. No system is perfectly secure, but we keep what leaves your phone to the minimum above.
Changes
If we change this policy, we'll update the date below and tell you in the app when the change matters.
Version 1.0 · Last updated: 29 October 2026.