Privacy Policy

Moldi ("Moldi", "we", "us", "our") provides an app for adults to discover local or online activities, join or request to join plans, chat with the group and create their own plans. This Privacy Policy explains what data we collect, how we use it, and your choices.

1. Eligibility

Moldi is intended only for users who are 18 years of age or older.

2. Versions of Moldi this policy covers

This policy covers the Moldi app and website.

• Plans is the current Moldi experience, in the iPhone app and in Android versions that include Plans. Nothing can be bought in these versions and they contain no purchase or billing software.
• Earlier Android versions of Moldi have a different, profile-discovery experience and include purchases. Some Android devices still run one of those versions until the app is updated. Where an earlier version collects or uses data differently from Plans, this policy says so.
• Historical records. If you used an earlier version, data you provided or that was created there may still be stored with your account, as described in section 5.

3. Information we collect in Plans

Account information

• Your email address and password (stored in hashed form), or the account identifier provided when you sign in with Apple or Google.
• Your name, date of birth and city.

Profile information you choose to add

• Profile photos (optional; up to five).
• A short bio (optional).
• The activities you like.

Plans, group chats and safety reports

• Plans you create: the activity, title, date and time, city, area or venue (or that the plan is online), group size, who can join and any details you add.
• Your participation in plans: plans you join, requests you send, approve, decline or withdraw, and plans you leave or cancel.
• Messages you send in plan group chats, and which messages you have read.
• Reports you submit, including the reason, any note you add and, if you choose, the related conversation; and the people you block.

Device and technical information

• Push notification tokens, so we can send notifications you have turned on.
• Device and app information such as device model, operating system, app version and language.
• IP address and technical logs created when your device connects to our servers.
• Crash, error and performance reports, sent to our error-monitoring provider so we can find and fix problems. They are part of running the app and are not affected by the privacy choices in section 10. They include device and app information (such as model, operating system, app version, language and time zone, memory, storage and battery level, and whether the device was online and on which kind of connection) and the screen you were on, with identifiers removed from addresses. Reports of crashes in the app's native code are prepared by the monitoring software itself and include these device details as it collects them. They, and the app-session summaries the software sends to measure crash rates, also include a random identifier that the monitoring software creates for this installation of the app; it is not your account identifier and we do not link it to your account. They do not include your account identifier, a screenshot, or a recording of your screen, and the app does not add your IP address to them. Like any request over the internet, a report reaches the provider from your device's network address, so the provider receives that IP address.

Optional analytics and advertising attribution

These are off until you turn them on, in every country and region. On Android, the app asks when you first open it, and you can change your answer at any time (see section 10). On iPhone, the app does not ask when it opens and offers only "Product analytics", in Settings. There are two separate choices:

• Product analytics. If you turn it on: usage events sent through Google Firebase Analytics, with a Firebase app instance identifier (not your account identifier); and product-usage events recorded on our own servers, such as signing up, onboarding steps, opening plans and chats, and creating, joining or messaging in a plan, together with an age range derived from your date of birth (for example "21-25") and your country.
• Marketing & attribution (Android only). If you turn it on: install and campaign attribution through AppsFlyer, including the advertising campaign or source that led to your install and device identifiers (such as the AppsFlyer identifier and your device's advertising identifier), but not your account identifier. We record the result with your account on our own servers. With this choice on, we may also report your sign-up and completed onboarding to the advertising platform whose campaign brought you to Moldi (see section 8). The iPhone app does not offer this choice, does not include AppsFlyer, does not access the advertising identifier (IDFA) and does not track you.

The app shares your current choices with our servers when you sign in and whenever you change them, so that events our servers generate themselves follow the same choices; if that cannot be sent at the time, for example while you are offline, the app tries again. When you use more than one device, your most recent choice on any of them is the one kept with your account. Each request from the app also carries the choices set on that device. An event is recorded only when both the device it comes from and that most recent choice allow it, so a choice you turn on on one device does not apply to another device where it is off. While a choice is off, the related events are not recorded or sent, and they are not kept to be sent later.

Support information

• What you send us when you contact support, and our replies.

Information we do not collect in Plans

• Plans does not request access to your device's location. Plans are shown based on the city you choose.
• Plans does not ask for your gender, the gender of people you want to meet, what you are "looking for", or social media accounts.

4. Purchases and billing

Plans versions. Moldi is free. Nothing can be bought in the Plans versions of the app, and they contain no purchase or billing software, so they do not collect purchase information.

Earlier Android versions. Earlier Android versions of Moldi, which some devices still run, include a subscription and in-app items (such as boosts and super likes) sold through Google Play and managed through our subscription provider, RevenueCat. For as long as such a version is installed:

• it connects to RevenueCat each time it starts, using your Moldi account identifier, and, if you have allowed attribution in the app's privacy choices, also shares device and advertising identifiers with RevenueCat;
• if you buy or restore a purchase, or a subscription renews or ends, we receive purchase and subscription records from Google and RevenueCat, such as the product, transaction identifiers, status and dates. We use them only to keep your purchase history and honour what you bought, not for analytics or advertising.

Existing records. Purchase and subscription records we already hold are kept with your account, and we continue to receive status updates from Apple, Google and RevenueCat for any subscription that is still active.

• Payments are handled by Apple or Google. We do not receive your full card details.
• An existing subscription stays active until you cancel it in your App Store or Google Play account. Deleting your Moldi account does not cancel a store subscription.

5. Earlier versions and historical records

Earlier versions of Moldi collected and used information that Plans does not, including gender and the gender of people you wanted to meet, what you were "looking for" and similar profile answers, social media handles, device location for showing nearby profiles, likes, passes and matches, one-to-one messages, profile verification photos, and boost and super like balances.

• If you provided this information in an earlier version, it may still be stored with your account. Plans does not show it to other people and does not use it to show you plans.
• Android devices that still run an earlier version continue to collect and use this information as that version did, until the app is updated.
• Earlier Android versions handle analytics and attribution differently from the choices described in section 10. In those versions, Google Firebase Analytics and AppsFlyer were on by default unless the phone's region setting was in the European Economic Area, the United Kingdom or Switzerland, where they waited for agreement; some of those versions started Firebase Analytics when the app opened, before any choice was made; and product events were recorded on our servers regardless of the choice. Their crash reports could include a screenshot of the screen at the moment of the error.
• When an earlier version is updated to a Plans version, earlier analytics and attribution settings that were set automatically are not carried over, and you are asked again.
• You can ask us to delete your account and associated data as described in section 10.

6. How we use information

We use information to:

• Create and run your account, and confirm you are 18 or older.
• Show you plans in your city and online plans, and show plans in the activities you like first.
• Run plans and group chats: joining, requests, approvals, participant lists, messages, read status and plan changes.
• Send notifications you have turned on, such as join requests, approvals, new group messages and plan reminders.
• Keep Moldi safe: review reports, apply blocks, moderate content, enforce our Terms, and prevent fraud and abuse. Uploaded profile photos are checked by an automated moderation service.
• Understand how Moldi is used and measure the results of our advertising, including deriving an age range (for example "21-25") from your date of birth for analytics.
• Provide support, and manage subscriptions and purchases from earlier versions.
• Comply with legal obligations and respond to lawful requests.

7. What other people can see

• People in the same plan can see your name and your main profile photo, if you added one.
• A plan you host shows your name as the host to people who can see the plan.
• Messages you send in a plan's group chat are visible to the people in that plan.
• Before someone joins a plan, they see how many people are going, not who.
• Your date of birth is not shown to other people in Plans.
• People you block, and people who block you, do not see each other's plans or messages.

8. Sharing of information

We may share information:

• With service providers who help us operate the app, for example hosting and databases (Render), photo storage and delivery (Cloudinary), automated photo moderation (Sightengine), push notification delivery (Expo, Apple and Google), transactional email, crash and error monitoring (Sentry), analytics (Google Firebase), install and campaign attribution on Android (AppsFlyer), sign-in (Apple and Google), and subscription management (RevenueCat) for earlier Android versions and existing purchase records.
• With the advertising platform whose campaign brought you to Moldi, if you turned on "Marketing & attribution" on Android: we may report that you signed up and completed onboarding, identified by a one-way hash of your email address.
• With other users, as described in section 7.
• When required by law, legal process, or to protect rights and safety.
• In connection with mergers, acquisitions, or business transfers.

We do not sell personal data for money.

9. Data retention

We retain data as needed to provide services, meet legal obligations, resolve disputes, and enforce terms.

10. Your choices

You can:

• Edit your name, city, activities, bio and photos in the app, and remove your photos.
• Turn notifications on or off in the app's Settings and in your device settings.
• On Android, choose "Product analytics" and "Marketing & attribution" separately when the app first asks. On iPhone, "Product analytics" is the only choice. Change your choices at any time in Settings under "Manage privacy choices". They are off unless you turn them on. Turning a choice off stops further collection and sending for it, but does not delete data that was already sent.
• Block people, and unblock them under Blocked people.
• Request account and data deletion (see /legal/account-deletion). When you delete your account, plans you host are cancelled, you are removed from plans you joined, and your plan group chat messages are removed.
• Contact support for privacy requests at support@moldi.tr.

11. Security

We use reasonable technical and organizational safeguards. No method of transmission or storage is 100% secure.

12. International processing

Your information may be processed in countries other than where you live. Our main servers are located in the United States, and some service providers process data in other countries.

13. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the date above.

14. Contact

For privacy questions, contact support@moldi.tr.