Legal

Privacy Policy

Last updated: March 26, 2026  ·  Effective: March 26, 2026

1. Who We Are

Moondis is a language exchange platform that connects people who want to learn each other's languages through real conversations. The app is operated by Moondis ("we", "us", or "our"). For privacy-related questions, contact us at [email protected].

2. Information We Collect

Account information

• Name and profile photo
• Email address (via Firebase Authentication)
• Native language and languages you are learning
• Proficiency level and learning goals
• Bio / about text you choose to share

Location data

• Approximate location to show you nearby language partners
• Your exact GPS coordinates are never stored — we apply a ±200 metre randomisation before saving
• Location is only used for the "Nearby" discovery feature; it is never shared with advertisers
• You can disable location access at any time in your device Settings

Content you create

• Posts and comments in the community feed
• Vocabulary progress, game scores, and learning streaks
• AI tutor conversation history (see Section 9)

Payment information

• Moondis Pro subscriptions are processed by Stripe and Google Play Billing
• We do not store full card numbers — only a transaction ID, subscription status, and billing period

Technical data

• Device type, model, OS version, and app version
• Firebase Cloud Messaging (FCM) token for push notifications
• Anonymised crash reports and error logs
• Connection quality metrics during calls (packet loss, latency) — not linked to your identity

3. Messaging & Chat

Moondis provides one-on-one text chat between matched language partners.

• Message content is transmitted over an encrypted connection (TLS) and stored on our servers to deliver messages when your partner is offline.
• Messages are stored until you or your partner deletes the conversation, or until you delete your account.
• We do not read the content of private messages except when required to investigate a reported abuse or safety issue.
• Images and files sent in chat are stored in our object storage (MinIO) and served via our CDN. They are deleted when the message is deleted.
• You can report or block any user at any time from the chat screen.

4. Voice & Video Calls

One-on-one voice and video calls are powered by Agora (Agora.io, Inc.), a real-time communications platform.

• Audio and video streams are transmitted directly between participants via Agora's infrastructure. Moondis does not record, store, or have access to the content of your calls.
• To make a call, Moondis requests access to your device's microphone (voice calls) and camera (video calls). You are always asked for permission before the first call.
• You can enable or disable your camera and microphone at any time during a call.
• Call metadata (duration, timestamp, participants) may be logged for abuse prevention. This metadata is not shared with third parties.
• Agora may process technical data (IP address, device info, call quality) to provide the service. See Agora's Privacy Policy for details.
• Bluetooth permissions are used solely to route audio to connected Bluetooth headsets and earbuds during calls.
• The Read Phone State permission is used to detect incoming phone calls so we can pause your Moondis call gracefully.

5. Audio Rooms

Audio Rooms are live, multi-participant voice sessions where users can practise conversation with multiple speakers at once, also powered by Agora.

• Audio Rooms are not recorded by Moondis.
• Participation in a public room is visible to other room members.
• Room hosts can mute or remove participants who violate community guidelines.
• The same microphone and Bluetooth permissions described in Section 4 apply.

6. App Permissions

The following table lists every Android permission requested by the Moondis app, why it is needed, and whether it is requested at install time or at runtime (when you first use the relevant feature).

Permission	When asked	Why it is needed
CAMERA	Runtime	Taking profile photos, uploading avatar images, and video calls. Camera access is optional — you can use the app without granting it.
RECORD_AUDIO	Runtime	Voice calls, video calls, and Audio Rooms. Microphone is only active while you are in a call or room; it is not accessed at any other time.
MODIFY_AUDIO_SETTINGS	Install	Adjusting speaker/earpiece routing and audio volume during voice and video calls.
INTERNET	Install	Required for all network communication: chat, calls, API requests, and push notifications.
ACCESS_NETWORK_STATE	Install	Checking whether a network connection is available before making API calls or starting a call.
ACCESS_FINE_LOCATION	Runtime	Showing you language partners near your location in the Nearby tab. Location is fuzzed by ±200 m before being stored. You can use the app without granting this permission.
BLUETOOTH_CONNECT	Runtime	Connecting to paired Bluetooth headsets and earbuds so you can use them during voice and video calls.
BLUETOOTH_SCAN	Runtime	Detecting available Bluetooth audio devices during calls. The neverForLocation flag ensures this permission is never used to infer your location.
BLUETOOTH (Android ≤11)	Install	Legacy Bluetooth permission required on Android 11 and below for the same audio-routing purpose.
BLUETOOTH_ADMIN (Android ≤11)	Install	Legacy Bluetooth admin permission required on Android 11 and below.
READ_PHONE_STATE	Runtime	Detecting incoming phone calls so that an active Moondis call can be paused without abruptly disconnecting your language partner.
POST_NOTIFICATIONS	Runtime	Sending push notifications for incoming calls, new messages, and other alerts. You can manage notification categories in your device Settings.
USE_FULL_SCREEN_INTENT	Install	Displaying an incoming call screen when your device is locked, so you can answer or decline a call without unlocking first.
VIBRATE	Install	Vibrating the device for incoming call alerts and notification haptics.

You can review and revoke any runtime permission at any time in Android Settings → Apps → Moondis → Permissions. Revoking a permission disables the related feature but does not affect the rest of the app.

7. How We Use Your Data

• To match you with compatible language exchange partners based on your languages and location
• To deliver text messages, voice calls, and video calls between users
• To provide and improve the AI language tutor
• To process subscription payments and manage Moondis Pro benefits
• To send push notifications you have opted into (calls, messages, reminders)
• To detect, investigate, and prevent abuse, harassment, and policy violations
• To generate anonymised, aggregated statistics about app usage (no individual user is identifiable)
• To comply with applicable laws and legal obligations

8. Sharing Your Data

We do not sell or rent your personal data. We share data only in the following circumstances:

• Other Moondis users: Your public profile (display name, photo, languages, bio) is visible to users you match with or who view your profile. Your precise location is never shared — only a fuzzy city-level indicator.
• Agora (real-time calls): Audio and video streams are routed through Agora's infrastructure. Agora processes minimal technical data (IP address, device info) to deliver the call. No call content is retained by Agora beyond the duration of the call.
• Firebase / Google: We use Firebase Authentication, Firebase Cloud Messaging, and Firebase Crashlytics. Google processes data in accordance with their Privacy Policy.
• Stripe: Payment processing for Moondis Pro. Stripe handles card data under PCI-DSS compliance. We never receive or store full card details.
• Google Play Billing: In-app purchases on Android are processed by Google Play. Subject to Google's Terms of Service.
• Legal obligations: We may disclose data if required by law, court order, or to protect the safety and rights of our users.

9. AI Tutor & Gemini

The AI language tutor is powered by Google Gemini. When you interact with the tutor, your messages are sent to Google's Gemini API for processing.

• We do not use your tutor conversations to train Moondis's own models.
• Google may process your messages according to their Privacy Policy and Gemini API terms.
• Do not share sensitive personal information (passwords, financial data) in the AI tutor chat.
• You can delete your tutor conversation history in Settings → Learning → Clear Tutor History.

10. Data Retention

• Account data is retained for as long as your account is active.
• Chat messages are retained until deleted by you or until account deletion.
• Call metadata (no audio) is retained for 90 days for abuse-prevention purposes, then deleted.
• Payment records are retained for up to 7 years as required by financial regulations.
• When you delete your account, all personal data is deleted within 30 days, except data subject to a legal retention obligation.

11. Your Rights

Depending on your location, you may have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your account and associated data
• Restriction — ask us to limit processing in certain circumstances
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interests

To exercise any right, email [email protected]. We will respond within 30 days. You can also delete your account directly inside the app via Settings → Account → Delete Account.

12. Security

• All data in transit is protected with TLS encryption
• Passwords are never stored — authentication is handled by Firebase (Google)
• Access to production systems is restricted to authorised personnel only
• We conduct regular security reviews of our infrastructure

No system is 100% secure. If you discover a security vulnerability, please report it responsibly to [email protected].

13. Children's Privacy

Moondis is not directed at children under the age of 13 (or 16 in the EU/EEA). We do not knowingly collect personal data from children. If you believe a child has created an account, please contact us at [email protected] and we will delete the account promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via in-app notification or email at least 14 days before taking effect. The "Last updated" date at the top of this page always reflects the most recent revision. Continued use of the app after changes take effect constitutes acceptance of the updated policy.

15. Contact Us

For privacy questions, data requests, or concerns:

• Email: [email protected]
• General: [email protected]
• Website: www.moondis.com