Privacy Policy

1. Information We Collect

We collect the following information to provide the Service.

• Account information: email address and display name
• Family information: family name, members, and each member's role
• Pet information: name, species, birthday, photos, and health / care records
• Posted content: photos, videos, and comments shared within your family
• Document information: photographed or registered vaccination certificates, receipts, prescriptions, insurance policies, and similar documents (which may include your pet's medical and insurance information)
• Location information: GPS routes recorded during walks, including collection in the background (see Section 4)
• Purchase information: subscription purchase, renewal, and expiration status (payments are processed by the App Store / Google Play; we never receive your credit card number)
• Usage and device information: usage logs such as screen views, OS and app version, device type, and advertising identifiers (IDFA / Advertising ID)
• Inquiry content: the email address, topic, message, and device / OS / app version you send us through the contact form or by email

2. How We Use Information

We use the collected information for the following purposes.

• To provide the Service, verify your identity, and manage your account
• To automatically classify and extract data from documents using AI (document images are used solely for analysis)
• To deliver push notifications such as reminders
• To manage your subscription status
• To display advertising on the free plan
• To improve quality, investigate issues, and analyze usage
• To respond to inquiries
• To prevent fraud and abuse

3. Third-Party Services

The Service uses the following third-party services, and information is sent to them only to the extent necessary for their purposes.

• Supabase: database, authentication, and file storage
• Google Gemini API: AI analysis of document images (images are used solely for analysis)
• Google AdMob: advertising (free plan only)
• PostHog: usage analytics
• OneSignal: push notification delivery
• Adapty: subscription status management
• Mapbox: map display
• Google Forms: hosting the contact form on our website and storing the responses you submit

Each of these providers acts as our processor or partner. Under our service agreements and data processing addenda (DPAs) with them, we require each provider to protect your information to a standard equal to or higher than the one stated in this Policy, and not to use it beyond what is necessary for the purposes above; we verify their compliance. The specific safeguards each provider applies are described in its own privacy policy.

4. Transfers to Third Parties Abroad

All of the services listed in Section 3 are provided by companies located in the United States. As required by Article 28 of Japan's Act on the Protection of Personal Information, we disclose the following information about these transfers.

• Destination country: the United States of America
• Data protection framework of that country: the United States has no comprehensive data protection law equivalent to Japan's Act on the Protection of Personal Information; instead, protection is provided by sector-specific federal laws and by state laws. For more detail, please contact us at the address in Section 14.
• Safeguards applied by the recipients: under our service agreements and data processing addenda (DPAs), we require each provider to protect your information to a standard equal to or higher than the one stated in this Policy. The safeguards each provider applies are described in its own privacy policy.

Note that data stored in Supabase is held in the Tokyo (Japan) region; because the provider itself is located outside Japan, we treat it as a transfer abroad under this Section.

5. Location Information

Location information is collected only when you start the walk-recording feature. To keep recording your route while the screen is off, location is also collected in the background during a recording. Collection continues only until you stop the recording.

We never use your location for advertising or analytics. You can revoke location permission at any time in your device settings.

6. Advertising and Tracking

Ads are shown on the free plan. On iOS we ask for your permission via App Tracking Transparency; if you decline, non-personalized ads are shown.

In the European Economic Area (EEA) and other applicable regions, we obtain advertising consent through Google's consent management platform (UMP). You can change your consent at any time in the app.

7. Sharing with Third Parties

We do not share personal information with third parties without your consent, except as required by law or where necessary to protect life, safety, or property (and except for the service providers listed in Section 3). We never sell your personal information.

8. Retention and Deletion

We retain personal information only as long as necessary for the purposes above. You can delete your account at any time from Settings → "Delete account" in the app, which deletes your account and personal data.

Specific retention periods are as follows. Account information, pet information, documents, health and care records, and album posts are retained until you delete your account. Walk history is retained for 90 days from the recording on the free plan, and until you delete your account on the premium plan. Usage analytics data and records of your inquiries are retained only as long as necessary for the purposes above and are deleted once no longer needed.

Posts you shared with other family members may remain in the family album after deletion. If you can no longer use the app, see the Account Deletion page for how to request deletion.

9. Security

We take reasonable security measures — including encryption in transit and access controls — to protect the information we collect against unauthorized access, loss, alteration, and leakage.

10. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

11. Your Rights

You may request disclosure, correction, suspension of use, or deletion of your personal information held by us. Please contact us at the address in Section 14; we will respond promptly in accordance with applicable law.

12. Notice for Residents of the EEA and the United Kingdom

If you are located in the EEA or the United Kingdom, we act as the controller of your information under the GDPR and the UK GDPR. Our identity and contact details as controller are set out in Section 14.

We rely on the following legal bases:

• Performance of a contract: providing your account, family sharing, records, the album and walk tracking, and managing your subscription
• Consent: AI analysis of documents, collection of location in the background, sending push notifications, and personalized advertising (you may withdraw consent at any time)
• Legitimate interests: preventing fraud and abuse, improving quality and analyzing usage, and responding to inquiries
• Compliance with legal obligations: retaining and disclosing records as required by law

Transfers of information from the EEA and the UK to the United States are made under the Standard Contractual Clauses adopted by the European Commission and the UK International Data Transfer Agreement / Addendum, or other appropriate safeguards under Article 46 of the GDPR.

You have the rights of access, rectification, erasure, restriction of processing, data portability, and objection, as well as the right to withdraw consent (which does not affect the lawfulness of processing before withdrawal). To exercise them, contact us at the address in Section 14. You also have the right to lodge a complaint with the supervisory authority (data protection authority) in your country.

13. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will notify you through the app or other appropriate means.

14. Contact

The personal information handling business operator and controller is MoonTechnica. Our address and the name of our representative will be disclosed without delay upon request.

For questions about this Policy, and to exercise the rights described in Sections 11 and 12, please contact: support@moon-technica.com