Privacy Policy

1. Who we are

Moss is made by Steven Ly, an independent developer ("we", "us"). We are responsible for the information described in this policy. You can reach us at hello@mosscare.app.

This policy covers the Moss app for iPhone, its widgets, and this website.

2. Apple Health

Read only, on your iPhone, and only what you allow.

If you connect Apple Health, Moss asks to read:

• Sleep: your sleep analysis records, including which app or device recorded them, so you can pick a sleep source.
• Steps: your step count.
• Workouts: completed workouts, only if you turn on workout reactions. Workout routes are never requested.

Moss uses this to set your pet's mood, show your recent nights and days, and track the care goals you choose. Moss never writes, changes or deletes anything in Apple Health.

Your Health information is processed on your iPhone. It is never sent to us, to a server, to an analytics or advertising company, or to an AI service. We do not use it for advertising, marketing or data mining, we do not sell it, and we do not share it with anyone. Moss does not store Health information in iCloud.

You choose what Moss can read in the Health permission screen, and you can change that any time in the Health app or in Settings → Privacy & Security → Health. Moss works without Health access; missing data is treated as unknown, never as zero.

3. What stays on your iPhone

Your pet and everything about it live on your device.

Moss saves your pet, its garden and album, your Dream Shards, your targets, sleep source and other settings, and short summaries worked out from Apple Health (such as whether last night met your sleep target). These files stay on your iPhone, use iOS file protection, and are excluded from iCloud and computer backups. We cannot see them.

Because of this, deleting Moss deletes your pet and all of its saved information, and restoring a backup does not bring it back.

4. Moss Plus purchases

Apple takes the payment; RevenueCat keeps the receipt.

Moss Plus is an optional subscription. When you subscribe:

• Apple handles the payment through your Apple Account. We never see your name, email, card or billing details. Apple's handling is covered by the Apple Privacy Policy.
• RevenueCat, Inc., our subscription service provider, receives the purchase and subscription records from the App Store so Moss knows whether Plus is on. With them it receives a random, anonymous ID created by Moss, basic technical details such as the app version, device type, iOS version, language, region, currency and the IP address the request came from. RevenueCat never receives Health information. Its use of this information is described in the RevenueCat Privacy Policy.

If Moss can't reach RevenueCat or no purchases are set up, Moss simply plays as free.

5. Beta testing with TestFlight

If you test a beta version of Moss through Apple's TestFlight, Apple shares with us the name and email address you were invited with, the feedback and screenshots you choose to send, and crash reports and basic device information from the beta. We use these only to run the beta and fix problems. Apple's handling of beta data is described in its TestFlight & Privacy notice.

6. Notifications, widgets and the Mac companion

• Notifications. If you allow them, Moss's reminders (such as bedtime or your pet's afternoon walk) are scheduled on your iPhone. Nothing is sent to a server to deliver them.
• Widgets. Moss's widgets read a small pet summary, and any numbers you choose to show, from storage shared only between Moss and its widgets on the same iPhone.
• Mac companion (not yet available). If you later pair Moss with its optional Mac companion, the camera is used only to scan the pairing code shown on your Mac, and no images are saved. Moss then sends a minimal pet display directly to your paired Mac over your local network while both apps are open, encrypted and only to the Mac you paired. No Health records are sent.

7. How we use information

The only information we, or our service providers on our behalf, receive is described in sections 4 and 5, plus anything you send us by email. We use it to:

• provide Moss Plus and restore it on your devices (to perform our contract with you);
• prevent fraud and abuse of purchases, and find and fix problems (our legitimate interest in a working, fair app);
• answer your messages (our legitimate interest, or to take steps you ask for);
• keep records and meet our legal duties, such as tax and accounting rules (legal obligation).

We do not use your information for advertising or profiling, and we do not sell or "share" it for cross-context behavioral advertising.

8. How long information is kept

• Information on your iPhone stays until you delete Moss. Disconnecting Apple Health in Moss's settings also clears its Health summaries.
• Purchase records held by RevenueCat are kept while your subscription is active and afterwards for as long as needed for refunds, disputes, and tax and accounting duties.
• Beta feedback and crash reports are kept for the beta and deleted when no longer needed to fix problems.
• Emails are kept as long as needed to answer you, then deleted.

9. Your choices and rights

• Health access: change or remove it any time in the Health app, or use Disconnect Apple Health in Moss's settings.
• Everything on your device: delete Moss to remove it.
• Your subscription: manage or cancel it in your iPhone's Settings → your name → Subscriptions. Refunds are requested from Apple.
• Notifications: turn them off in Settings → Notifications → Moss.

Depending on where you live, including the European Economic Area, the United Kingdom and several US states such as California, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict how it is used, and to withdraw consent. To use these rights, email hello@mosscare.app. Because Moss has no accounts, include your App Store order ID for a Plus purchase (found in the email receipt from Apple) so we can find the matching record. We will answer within 30 days, will not treat you differently for asking, and may need to confirm the request is yours. You can also complain to your local data protection authority.

Consumer health data. Laws such as Washington's My Health My Data Act give extra protection to health information. Moss reads health information only on your iPhone; we do not collect, receive, share or sell it.

10. Children

Moss is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect personal information from them. If you believe a child has sent us personal information, contact us and we will delete it.

11. Security and transfers

Moss keeps your information on your device with iOS file protection, and anything that travels over the internet is encrypted in transit. RevenueCat is based in the United States, so purchase records may be processed there; where the law requires it, this relies on safeguards such as the European Commission's Standard Contractual Clauses. No method of storage or transfer is perfectly secure, but we keep what we hold to the minimum.

12. Changes to this policy

If we change this policy, we will update the date at the top. If a change affects what Moss collects or how it is used, we will tell you in the app or in the update notes before it takes effect, and we will ask for your consent where the law requires it.

13. Contact

Questions or requests: hello@mosscare.app