PICKFRUIT / PRIVACY
Privacy Policy
Effective · October 14, 2026
1. Purposes
moonshot (the "Operator") processes only the personal data needed to provide PickFruit.
- Identifying guests and members, signing in, keeping records across devices
- Providing features such as basket, storage and eating logs and price reports
- Running Fruit Talk: posts, comments and photos, likes and bookmarks, handling reports and blocks, preventing abuse
- Stability and improvement: crash analysis and usage statistics
- Responding to inquiries and deletion requests
2. Data we process
| Category | Data | How collected |
|---|---|---|
| Guest (required) | Firebase anonymous user ID (UID) | Created automatically on first launch |
| Member (required) | Email address, sign-in method (Apple, Google, email), UID. Email passwords are stored encrypted by Firebase; the Operator cannot see them. | When you sign in or sign up |
| Fruit Talk profile (required) | Nickname, avatar type, guidelines version and time of agreement | When you accept the guidelines |
| Your content | Posts (fruit, price, currency, unit, store type, rating, tags, text), comments, photos, likes, bookmarks | Entered by you |
| Reports & blocks | Report reason and details, reported item, list of blocked users | Entered by you |
| Records | Basket, storage and eating logs, price reports (price, unit, quantity, quality score) | Entered by you |
| Automatic | App events and screen views, app instance ID, device and OS info, approximate country/region (IP-based), crash logs and device state, UID | Google Analytics for Firebase, Firebase Crashlytics |
Your profile bio, country, currency, app language and onboarding progress are stored only on your device and are not sent to our servers. Photos are re-encoded before upload, removing metadata (EXIF) such as location.
We don't collect precise location, contacts or payment information, and we don't track you with advertising identifiers (IDFA/AAID).
3. Retention and deletion
Data is kept until you delete your account (or, as a guest, "Delete all my data") and is deleted immediately when you do so in the app. Posts, comments and photos you delete are removed right away.
Analytics and Crashlytics data is kept in a form that does not directly identify you and is deleted automatically according to Google's retention settings. Inquiry and deletion request emails are deleted promptly once handled, or kept only until a dispute is resolved. If the law requires us to keep certain data, it is stored separately only for that period.
Electronic files are deleted in a way that cannot be recovered.
4. Processors and international transfers
The Service stores and processes data using Firebase by Google LLC. Data is transmitted over the network when you use the app, and access is restricted with Firebase security rules.
| Recipient | Location | Data | Purpose | Retention |
|---|---|---|---|---|
| Google LLC (Firebase Authentication) | USA and other Google data centers | UID, email, sign-in method | Sign-in and account management | Until account deletion |
| Google LLC (Cloud Firestore) | Japan (Tokyo) | Profile, records, Fruit Talk posts and comments, reports and blocks | Storing service data | Until account deletion |
| Google LLC (Cloud Storage) | USA | Photos you upload | Storing and showing photos | Until deleted |
| Google LLC (Analytics · Crashlytics) | USA and others | Usage events, device info, crash logs, UID | Statistics and crash analysis | Per Google's retention settings |
Google LLC: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA · https://support.google.com/policies
When you sign in with Apple or Google, that company handles authentication. If a member who signed up with Apple deletes their account, the app revokes the Apple sign-in token.
If you don't want your data transferred abroad, you may choose not to use the Service or delete your account; the Service can't be used without it.
5. Public information
Posts, comments and photos on Fruit Talk, along with your nickname and avatar, are visible to other signed-in users. Please don't post personal information such as phone numbers or addresses.
6. Your rights
You may access, correct or delete your data or ask us to stop processing it at any time. You can edit your profile and nickname in the app, delete posts and comments from the ⋯ menu, and delete your account under Profile › Account. If you can't use the app, use the Delete account page or email us.
If you live in the EU or UK, you have rights under the GDPR to access, rectify, erase, restrict, port and object, and may lodge a complaint with your local supervisory authority. We process data to provide the Service (performance of a contract) and for security, abuse prevention and improvement (legitimate interests).
7. Children's privacy
The Service is intended for users aged 14 and over and does not accept member sign-ups from children under 14. If we learn that we have collected data from a child under 14, we delete it promptly.
8. Security
- All communication is encrypted with TLS.
- Firebase security rules restrict reading and writing to your own data.
- Administrative access is limited to the minimum number of people.
- Metadata such as location is removed from uploaded photos.
9. This website
This website doesn't use cookies; it only stores your chosen language in your browser (localStorage). The deletion request form only creates a draft in your mail app and sends nothing to a server.
10. Privacy contact
Privacy officer: moonshot · Email: moonshot5730@gmail.com
11. Changes
If we change this policy, we will announce it in the app or on the website at least 7 days in advance (30 days for significant changes).