Privacy Policy

Who we are

Moonlit is run by MayR Labs (“Moonlit”, “we”, “us”). We decide why and how your personal data is used when you use the Moonlit app and website, which makes us the “controller” of it. This policy explains our practices in plain language. If you are under 13, please read it with a parent or guardian, and see our Kids Policy as well.

What we collect

Information you give us

• Account details: your name, email address and date of birth, and your gender if you choose to share it. If you sign in with Google, we receive your name, email address and profile picture from Google. If you browse as a guest, we collect only a date of birth and gender, with no email.
• Your choices: the genres you pick, reading settings, notification and download preferences.
• What you post: comments, ratings and reviews, and reports you send us.
• Username: the public name you choose. It is shown to other readers on leaderboards, comments and reviews, so please don’t use your real name or anything private. Kids accounts do not have a public username.
• Messages to us: problem reports and support requests, including the app version and phone model we attach to help fix the problem.
• Waitlist: if you ask to be told when Moonlit launches on iPhone, we keep your email address for that purpose only.

Information collected as you use Moonlit

• Reading and listening activity: stories opened, chapters read, progress, saved and liked stories, coins earned and spent, and listening time.
• Streaks: the days you read in a row and your time zone, used to keep your streak and to send a reminder if it is at risk. Your streak length is shown next to your username on the leaderboard.
• Purchases: a record of your purchases and subscription status from Google Play or the Apple App Store, through our payments partner. We never see your card or bank details.
• Device and security data: a device identifier, app version, operating system, and signals that confirm the app is a genuine copy running on a real device. We use these to prevent fraud and abuse.
• Approximate location: your IP address, which we use to secure the Service and to estimate your country. We do not collect precise location.
• Advertising data (teens and adults only): if you watch rewarded ads, our advertising partner may use your device’s advertising identifier. You can reset or limit it in your phone’s settings.
• Error reports: technical information when the app crashes or fails, such as device model, operating system, app version and what went wrong.
• Push notification token: if you turn on notifications, so we can reach your device.

We do not collect your contacts, photos, microphone, or precise location.

How we use it

We use personal data to:

• provide the Service: create your account, keep your library and progress in sync across devices, unlock chapters and process your purchases;
• show age-appropriate content: your date of birth sets your age band and the stories you can see. Gender, if you share it, only adjusts recommendations. It never limits what you can read;
• personalise: put the genres you pick first and suggest stories you may like. You can change your picks in Profile at any time;
• keep Moonlit safe: detect fraud and abuse, enforce our rules, moderate comments and protect children;
• communicate: send service messages and, only if you opt in, push notifications. You can choose which kinds you receive;
• improve and fix Moonlit: understand what is broken and what is used, using error reports and aggregated statistics;
• meet legal duties: keep records, respond to lawful requests and protect our rights.

We do not make decisions about you that have a legal or similarly significant effect using fully automated processing.

Why we are allowed to use it

Depending on where you live, we rely on:

• contract: to provide the Service you asked for;
• legitimate interests: to keep Moonlit secure, prevent fraud, fix problems and improve the Service, balanced against your rights;
• consent: for push notifications and personalised ads where required. You can withdraw consent at any time in Profile or your device settings;
• legal obligation: where the law requires us to keep or share information.

Who we share it with

We do not sell your personal data. We do not share it with advertisers for their own use. We share it only with:

• service providers who work for us under contracts that limit how they use it. They include: hosting and database providers; our sign-in provider; a payments and subscriptions provider and the app stores; an error-monitoring provider; an image and media hosting provider; email and push notification providers; and Google’s advertising service for rewarded ads shown to teens and adults;
• writers, who see aggregated information about how their stories perform, never your identity or contact details. If you post a comment or review, your username is shown with it. Your username and streak are also public on leaderboards;
• authorities and advisers, when the law requires, to protect children or to protect our rights, or when a court or regulator asks. We report child sexual abuse material to the relevant authorities;
• a buyer or successor, if Moonlit is ever merged or sold, in which case we will tell you and this policy will keep applying to your data.

Some of these providers are outside your country, including outside Nigeria and the European Economic Area. Where data leaves your country, we use contracts and safeguards that the law accepts to protect it.

How long we keep it

We keep account data while your account is open. When you delete your account we remove your personal data within 30 days, except records we must keep by law (for example payment records) and information needed to prevent abuse, which we keep only as long as necessary. Backups are overwritten on their normal cycle. Comments you posted are removed or anonymised. Error reports are kept for a limited time and then deleted. Waitlist emails are deleted once the launch email is sent or if you ask us to remove them.

Keeping it safe

We protect personal data with encryption in transit, access controls, device checks and monitoring, and we limit who on our team can see it. No system is perfectly secure. If a breach puts your rights at risk, we will tell you and the regulator as the law requires.

Your choices and rights

You can manage most of this yourself in Profile › Settings: edit your details, change your genres, turn notifications on or off, limit the ad identifier through your phone, download a copy of your data, and delete your account.

Depending on your country, including under the Nigeria Data Protection Act 2023 and, where it applies, the GDPR, you also have the right to:

• ask for access to the personal data we hold about you;
• have inaccurate data corrected, including a wrong date of birth;
• have your data erased;
• restrict or object to certain uses of it;
• receive your data in a portable format;
• withdraw consent where we rely on it;
• complain to your data protection regulator, such as the Nigeria Data Protection Commission, though we hope you will give us the chance to put things right first.

To use a right, contact us through Help & Support in the app. We may ask you to confirm who you are, and we aim to reply within 30 days.

Children

We take extra care with readers under 13. A Kids account collects the minimum needed to run the app, shows no ads, has no comments, ratings, push notifications or purchases, and is not used to profile the child. Our Kids Policy explains what we collect and the rights parents have. Moonlit does not knowingly allow a child under 13 to give us more information than a Kids account needs. If you believe a child has done so, tell us and we will delete it.

Changes to this policy

We may update this policy. If a change is significant we will tell you in the app and ask you to accept it before it takes effect. The version you accepted is recorded.

Contact

Use Help & Support in the app, or the contact details on our website, for any privacy question or request.