Only to operate the service: authenticate you, generate AI responses (which requires sending your content to Google's Gemini API — see section 4), store your content, enforce quotas, grant subscription entitlements, prevent fraud and abuse, and comply with law. We do not use your data for advertising, ad targeting, or marketing, and we do not use your conversations to train AI models.
How we collect it: directly from you when you type, dictate, attach a photo or document, or make a purchase; from Apple or Google when you choose to sign in with them (email and display name only); and automatically from the app itself for the technical identifiers and usage counters described in section 1. We do not collect anything from third-party data brokers, and we run no tracking or analytics SDKs.
Who processes your content. Moomo AI's responses are generated by Google LLC using the Gemini API. Your content does not go directly from the app to Google: the app sends it over an encrypted (TLS) connection to Moomo's own backend (Firebase Cloud Functions), which forwards it to the Gemini API and returns the response. Our API keys stay on the server and are never shipped to the app.
Exactly what is sent to Google.
What is never sent to Google. Your name, email address, account identifier, purchase history, and usage counters are not included in requests to the Gemini API. Voice dictation is transcribed by iOS (on-device where your language supports it) and only the resulting text is ever sent — no audio is ever uploaded to us or to Google. We do not send your contacts, location, photos you did not attach, or any advertising identifier.
We ask your permission first. Before any of your content is sent to Google, Moomo AI shows a dedicated in-app screen that names Google as the recipient, itemizes what will be sent, and asks you to Accept or Decline. Nothing is sent to the Gemini API unless you accept. If you decline, AI features are switched off and the rest of the app keeps working; you can change your decision at any time in Settings → AI data sharing, which also shows you what is shared and lets you turn it back off. Turning it off stops all further transmission of your content to Google.
Retention and training. Google processes this content as our service provider to generate the response you asked for. Under the Gemini API terms that apply to our paid API usage, Google does not use the content submitted through our API key to train its models, and does not retain it beyond the transient processing needed to serve the request (Google may retain content briefly for abuse monitoring as described in its terms). Moomo does not use your conversations to train any AI model.
Equal protection commitment. We share personal data only with the service providers listed below, only for the purposes listed, and only under contractual terms (Google Cloud / Gemini API terms and Apple's developer terms) that require them to protect that data to a standard at least equal to the protections described in this policy. None of them is permitted to use your data for their own advertising or profiling.
None of these integrations are used for advertising, analytics, attribution, or conversion measurement in Moomo AI. We do not sell personal data or share it for cross-context behavioral advertising.
Data is stored in Moomolab's Firebase project in the United States. Your account records, conversations, and messages are protected by default-deny security rules: they are readable and writable only by your authenticated account, and sensitive records are writable only by our server code. All traffic is encrypted in transit.
Generated and edited images are the one exception to rule-based access: each is served over an unguessable, randomly-generated link (a 122-bit token). The link does not expire, and anyone who obtains it could view that image, so it is only ever delivered to you through your rules-protected conversation. Deleting your account deletes the underlying images and their links.
Your data is retained until you delete your account. Deleting your account in the app (Profile → Delete Account) removes your authentication record and wipes your server-side data: profile, conversations and messages (including attached-photo thumbnails), memory, generation log, generated images, usage counters, and purchase-entitlement mappings.
Two things outlive account deletion, neither of which identifies you to a person: (a) operational server logs, which record account identifiers, request counts and sizes — never your prompts, messages, or image content — and are automatically discarded on our hosting provider's standard 30-day schedule; and (b) Apple's own transaction records, retained by Apple under Apple's policies. You can also delete individual conversations, or all of them, at any time.
You may access your content in the app, delete it, or delete your entire account in the app. For any privacy request (access, deletion, correction, complaint), contact us at the address below and we will respond within 30 days. Depending on your jurisdiction (e.g., GDPR, CCPA), you may have additional rights to access, portability, correction, deletion, and objection; we honor these on request.
The app stores your chat sessions and preferences locally on your device. The app does not use advertising or analytics cookies. This policy site itself sets no cookies and runs no analytics.
Moomo AI is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.
Data is processed and stored in the United States. By using the service you understand your data is transferred to and processed in the US, subject to the safeguards of our service providers listed above.
We will post any changes on this page and update the effective date. Material changes will be highlighted in the app or on this page.
Moomolab LLC — moomolab@gmail.com