Privacy Policy

This policy explains what information Moppy collects, why, who helps us process it, how long we keep it and what you can do about it. It covers the Moppy app for iPhone and Android, moppyapp.com and the sign-up pages on start.moppyapp.com.

Short version: we collect what we need to run your cleaning plan and your subscription. We don’t sell your data, we don’t show ads in the app, and we don’t use advertising or tracking cookies. Room photos are analysed and then discarded by our servers — they are not stored there.

1. Who is responsible

The controller of your personal data is Oleksii, the developer of Moppy. Contact: hello@moppyapp.com.

2. What we collect

Account. When you first open the app or the sign-up page, an anonymous account with a random ID is created, so your progress can be saved before you sign up. If you sign up, we store your email address and a password (kept only in hashed form by our authentication service — we never see it in plain text). If you use Sign in with Apple, Apple gives us an identifier and, if you choose to share it, your email address (which may be an Apple relay address).

What you put into Moppy. Rooms and their types, tasks and steps, the icons and names you choose, when you completed steps, your step size and reminder settings, the mascot’s state, and your answers to the welcome quiz (for example, which rooms are hardest for you and how much time you have). This data lives on your phone first; while you’re signed in, a copy is synced to our servers so it isn’t lost and can be restored.

Room photos. When you use the room scan, you take one photo with your phone’s camera (or pick one from your gallery). Here is exactly what happens to it:

1. The photo is sent over an encrypted connection to our scan server.
2. The server passes it, in memory, to the AI service that analyses the photo and describes the room. Our own code then turns that description into your plan.
3. Our servers don’t save the photo — not on disk, not in the database. Once the plan is returned, the photo is discarded.
4. The photo file stays on your phone, where you can delete it.

The AI service processes the photo only to return the result to us. Under its terms for business customers, it doesn’t use the photo to train its models; it may keep request data for a limited period for safety and abuse monitoring and then deletes it. We don’t use your photos to train any AI.

For each scan we keep a usage record: when it happened, whether it worked, the reason if it failed, how many steps the plan had and what the analysis cost us. This record contains no image. We use it to apply the monthly scan limit and to watch our costs.

Purchases. We receive your subscription status from the store or payment provider: which plan you have, trial and renewal dates, and whether it is active. We never receive your card number.

Sign-up page visits. On start.moppyapp.com we record which quiz steps were viewed, when you go to checkout and which plan you chose, together with the campaign tags in the link you came from (utm tags). These records are linked to your anonymous account ID, not to your name. Your quiz progress is kept in your browser’s local storage so you can continue later.

Website visit statistics. On moppyapp.com we use Google Analytics 4 to count visits and see which pages are opened and whether visitors tap the App Store or Google Play button. It runs without cookies and without any storage on your device: nothing is saved in cookies or local storage for it, so it cannot recognise you on a later visit, and every visit is counted separately. We turn off advertising features and ad personalisation. The page address is cleaned before it is sent — only the page path and campaign tags (utm) are included, never other parameters or anything after a ”#”. Google also receives technical data such as your IP address and browser details to deliver the service, and acts as our processor. The app itself has no such analytics.

Messages to us. If you use the contact form or write to us, we receive your name, email address and message.

Technical data. Like any website or server, ours write short technical logs (IP address, time of the request, page or address requested, browser or app version). We use them to keep the service secure and to fix errors.

Apart from the cookie-free website statistics described above, we don’t use analytics SDKs, advertising pixels, cross-app tracking or the advertising identifier of your phone. The app doesn’t access your contacts or location.

3. Why we use it (legal bases)

• To provide Moppy — your account, plans, sync, scan, sign-in emails and subscription (performance of our contract with you).
• To keep Moppy secure, prevent abuse and control costs — logs, scan limits, usage records (our legitimate interest).
• To improve the sign-up page — anonymous step counts and campaign tags show us where people stop (our legitimate interest). You can object at any time.
• To understand how the website is used — anonymous visit counts and store-button taps (our legitimate interest; no cookies or device storage are used, and you can object at any time).
• To answer you when you contact us (our legitimate interest, or steps before a contract).
• To meet legal duties, for example tax and accounting records (legal obligation).
• Camera access is asked by your phone’s system dialog, and you can withdraw it at any time in your phone’s settings.

We don’t use your data for automated decisions that have legal or similarly significant effects on you.

4. Who we share it with

We don’t sell or rent your personal data, and we don’t share it for advertising. We share it only with providers who process it on our behalf and under our instructions, bound by contracts that require them to protect it:

• cloud hosting and database provider — stores your account and synced data;
• AI service that analyses the photo you take — receives the room photo only for the duration of the scan;
• payment processors and a subscription management provider — handle purchases and tell us whether your subscription is active;
• email delivery provider — sends sign-in codes and our replies, and delivers contact form messages to us;
• website statistics provider (Google Analytics) — counts visits to moppyapp.com as described above;
• domain and network infrastructure providers — route traffic to our servers.

Two companies are independent controllers of the payment data you give them:

• Apple — if you subscribe in the iPhone app or use Sign in with Apple. Apple handles payment under its own privacy policy.
• Paddle — if you subscribe on our website. Paddle.com is the Merchant of Record for our web orders: it processes your payment details, billing address and tax information under its own privacy policy, and tells us only the subscription details we need.

We may also disclose data if the law requires it, to protect people’s safety, or as part of a sale or merger of the service (in which case this policy keeps applying).

5. Where it is stored

Your data may be stored and processed in countries other than the one where you live. When data from the EU, EEA, UK or Switzerland is transferred abroad, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy framework.

6. How long we keep it

• Account and Moppy data: as long as you have an account. When you delete your account, it is removed from our live systems within 30 days and from backups when they expire.
• Room photos: not stored on our servers at all (see above).
• Scan usage records and sign-up page records: deleted together with your account.
• Anonymous accounts that are never used again: kept like any other account until you ask us to delete them; they contain no name or email address.
• Messages to us: as long as needed to help you, and up to 2 years after that.
• Technical logs: a short period, normally a few weeks.
• Payment and tax records: kept by Apple or Paddle as the law requires.

Data stored only on your phone is removed when you delete the app.

7. Your rights

Depending on where you live (including under the GDPR, UK GDPR and the California Consumer Privacy Act), you have the right to:

• access the personal data we hold about you and get a copy, including in a portable format;
• correct data that is wrong;
• delete your data and account — see Delete my account;
• object to or restrict processing based on our legitimate interests;
• withdraw consent where we rely on it (for example, camera access);
• complain to your local data protection authority.

California residents: we don’t sell or “share” personal information for cross-context behavioural advertising, and we don’t use sensitive personal information to infer characteristics about you. We won’t treat you differently for using your rights.

To use any of these rights, email hello@moppyapp.com from the address linked to your account. We answer within 30 days (in California, within 45 days) and may ask you to confirm it’s you.

8. Children

Moppy is a general-audience app that people of any age can use, including children helping to keep their home tidy. It is not designed specifically for children, and it has no ads, no tracking across other apps and no chat with other people.

If a child under 13 (or under the age of digital consent where they live — up to 16 in the EU and the UK) uses Moppy, a parent or guardian should set it up and manage the account and any subscription; purchases in the iPhone app follow Apple’s family rules, such as Ask to Buy. We don’t knowingly collect more personal data from a child than Moppy needs to work. A parent or guardian can ask us at any time to see or delete their child’s data — write to hello@moppyapp.com and we’ll do it.

9. Security

Connections to our servers are encrypted (HTTPS). Access to your data in our database is limited to your own account by access rules, and our team accesses it only when needed to run or fix the service. No system is perfectly secure, but we work to protect your data and will tell you and the authorities about a breach where the law requires it.

10. Changes to this policy

When we change this policy, we update the date at the top. For important changes we’ll tell you in the app or by email before they apply.

11. Contact

Oleksii

Email: hello@moppyapp.com