Privacy Policy

1. Purposes

moonshot (the “Operator”) processes only the personal information needed to provide Couple Massage:

• Identifying guests and members, and signing in
• Providing features such as favorites, massage records, partner connection, and shared records
• Stabilizing and improving the app: crash analysis and usage statistics
• Responding to support and deletion requests

2. Information we process

• Guest (required): an anonymous Firebase user ID (UID), created automatically at first launch.
• Linked account (optional): if you link Google or Apple, your email address, sign-in method, UID, and the name and profile photo URL the provider shares.
• Profile and settings: display name, email, profile photo URL, notification setting, preferred language, and theme.
• Massage records: favorite courses, course views and attempts, and massage logs (course, duration, rating, notes, partner name).
• Partner connection: invite code, your display name, both members’ UIDs, and shared records (course, duration, steps completed, and the short notes and feelings each person chooses).
• Collected automatically: app usage events and screen views, app instance ID, device and OS information, approximate region from IP address, and crash logs (Google Analytics for Firebase, Firebase Crashlytics).

Some settings and credits are stored only on your device.

We do not collect precise location, contacts, photos, camera, microphone, or payment information. The app does not use advertising identifiers or third-party ad SDKs.

3. Retention and deletion

We keep personal information until you delete your account or ask us to delete it. Deleting your account in the app removes your sign-in account and the data on your device and ends the partner connection. Records stored on our servers that are linked to your account (profile, massage records, shared records) are deleted by the Operator when you request it as described on the account deletion page.

Analytics and Crashlytics data are deleted automatically after a period set by Google’s retention settings. Support and deletion emails are deleted without delay once handled, and kept only as long as needed for disputes or legal obligations.

4. Processors and international transfers

The Service stores and processes data with Google LLC’s Firebase (Authentication, Cloud Firestore, Cloud Storage, Analytics, Crashlytics). Data is processed in Google data centers, which may be outside your country, including in the United States. The Operator restricts access with Firebase security rules, and data is encrypted in transit.

When you sign in with Google or Apple, that company handles authentication. If you do not want your data transferred abroad, you can stop using the Service or delete your account; the Service will then be unavailable to you.

Google LLC contact: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA · https://support.google.com/policies

5. Information visible to others

When you connect with a partner, your display name and the notes you add to shared records are visible to them. Do not put sensitive personal information in notes.

6. Your rights

You can access, correct, or delete your personal information, or ask us to stop processing it, at any time. You can change settings in the app and delete your account under Profile › Account › Delete account. If you cannot use the app, contact us through the account deletion page or by email.

If you live in the European Union or the United Kingdom, you have the right under the GDPR to access, rectify, erase, restrict, port, and object to processing, and to lodge a complaint with your supervisory authority.

7. Children

The Service is intended for adults and is not directed to children under 14. If we learn that a child’s information has been processed, we delete it without delay.

8. Changes

When this policy changes, we post the new effective date on this page.

Contact

Operator: moonshot · Email: moonshot5730@gmail.com