Privacy Policy for Moombee

Last updated: 21 October 2026

1. Controller

The controller responsible for data processing relating to the website moombee.com, the Moombee waitlist and the mobile app Moombee is 2Day Communications GmbH, Dornacherstrasse 172, 4053 Basel, Switzerland.

2. Scope of this Privacy Policy

This Privacy Policy applies to the website moombee.com (including the waitlist) and to the Moombee app for iOS and Android ("the App"), a self-care companion in which you care for a small creature by taking care of yourself.

It explains which personal data we process, for what purpose, how long we keep it, who receives it and what rights you have under Swiss data protection law, in particular the revised Federal Act on Data Protection (FADP / revDSG) of 1 September 2023, and, where it applies to you, the EU General Data Protection Regulation (GDPR).

The App is not released yet. Sections 3.2 to 3.8 describe how the App will process data when it launches. We will update this policy before launch if anything changes.

Separate privacy terms of app stores (Apple App Store, Google Play) and sign-in providers (Google, Apple) apply when you download, buy or sign in through them.

3. Categories of personal data we process

3.1 Website and waitlist

• your email address, when you join the waitlist
• the date you joined and which form on the page you used
• your approximate country, derived by our hosting provider from your connection
• a one-way scrambled (hashed) version of your IP address and email, kept for at most two days only to limit spam and abuse; we do not store your IP address itself
• a spam-protection check by Cloudflare Turnstile, which tells us whether a visitor is likely a human

The website sets no tracking or advertising cookies.

3.2 Account and sign-in (App)

You can use the App's core self-care features without an account. If you create an account, for example to back up your progress or to use friends features, we process:

• your email address (sign-in with an email link) or the identifier provided by Google or Apple
• a unique user identifier
• the sign-in method used

If you use Sign in with Apple with email relay, we only receive the relay address provided by Apple.

3.3 Your companion and progress (App)

• your companion's name, pronouns and personality, and the character you chose
• goals, quests, completed self-care steps, streaks and energy
• Moonbeams balance, outfits, furniture and other items
• App settings such as reminders, sounds, light or dark mode and reduced motion

This data is stored on your device. If you are signed in, a backup of your progress is stored on our servers so you can restore it on a new phone.

3.4 Journal and mood check-ins

Your journal stays on your device. Journal entries are never sent to our servers, never included in backups, never used for analytics and never sent to an AI service. If you change phones, you can export your journal yourself as a file.

Mood check-ins and reflection answers are self-care information. They are stored on your device and used only to show you your own history.

3.5 Optional AI conversations

Some features let you talk with your companion using AI. These features are off until you turn them on. If you use them, the messages you write in those chats, and the companion details needed to answer you, are sent through our server to an AI provider to generate a reply. Your journal is never included. You can turn AI features off at any time; the rest of the App keeps working.

3.6 Friends features

If you use friends features, such as visiting a friend's companion or sharing a note, we process your display name, your companion's name and appearance, and the content you choose to share with the friends you connect with.

3.7 Purchases

Moombee Plus and Moonbeam packs are bought through the Apple App Store or Google Play. We receive the product purchased, the purchase status and an anonymous purchase identifier. We never receive your card or payment details.

3.8 Reminders

If you allow notifications, the App sends you gentle reminders. You can turn them off in the App or in your phone's settings.

3.9 Support and contact

If you email us, we process your email address, your name if you give it, the content of your message and any technical details you choose to include.

4. Purposes of processing

• to run the waitlist and tell you when Moombee launches and about early access
• to provide the App's features: your companion, goals, sounds, journal, check-ins and stories
• to back up and restore your progress if you have an account
• to provide optional AI conversations and friends features you choose to use
• to provide Moombee Plus and Moonbeam purchases
• to answer your questions and requests
• to protect our services against spam, abuse and attacks
• to fix errors and keep the App stable
• to comply with our legal obligations

5. Legal basis

• Consent, for the waitlist, optional AI features and notifications. You can withdraw consent at any time with effect for the future.
• Performance of a contract (our Terms of Use), for accounts, backups, purchases and support.
• Legitimate interests, for spam protection, security and keeping the service stable.
• Legal obligations, for example accounting rules.

6. Recipients and data sharing

We only share personal data with service providers we need to run Moombee, and only under appropriate contractual and data protection obligations:

• Cloudflare, Inc.: hosting of moombee.com, the waitlist database, spam protection (Turnstile), access protection and email forwarding.
• Supabase (servers in the United States): accounts and progress backups for the App.
• AI providers such as Groq and Mistral: only for optional AI conversations you turn on.
• Apple and Google: sign-in, app distribution, purchases and notifications.
• Email providers we use to send launch emails and answer your messages.

No sale and no advertising. We do not sell your personal data, we do not use it for advertising and we do not share it with advertising networks.

7. Cross-border transfers

Some providers, in particular Cloudflare, Supabase, Apple, Google and AI providers, are based in or process data in the United States or other countries outside Switzerland and the European Economic Area. Where a country does not offer an adequate level of data protection in the view of the Swiss Federal Data Protection and Information Commissioner (FDPIC), we protect the transfer with appropriate safeguards, such as Standard Contractual Clauses recognised by the FDPIC or the provider's certification under the Swiss-US Data Privacy Framework. You can ask us for a copy of these safeguards.

8. How long we keep data

• Waitlist: until Moombee has launched and you have received the launch emails, or until you leave the waitlist, whichever comes first.
• Hashed spam-protection data: two days.
• Account and backups: until you delete your account in the App or ask us to delete it.
• Data on your device (including your journal): until you delete it in the App or uninstall the App. Removing a website shortcut from your home screen does not delete browser data; use your browser settings for that.
• AI conversations: only as long as needed to show your chat history in the App, and deleted with your account.
• Purchases: as long as required by app store rules and accounting and tax law.
• Support emails: usually up to 24 months after the last contact.

9. Age

Moombee is made for people aged 16 and older. We do not knowingly collect personal data from anyone under 16. If you believe a child under 16 has given us personal data, please contact us and we will delete it.

10. No automated decisions

We do not make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects. Mood check-ins and reflection questions are self-care tools, not a diagnosis.

11. Data security

We use appropriate technical and organisational measures to protect your data, following privacy by design and privacy by default. These include encrypted connections (HTTPS/TLS), strict access controls for our admin tools, hashing instead of storing IP addresses, spam protection, and keeping your most personal content, your journal, on your device only. No system is completely secure; please also keep your phone and sign-in accounts secure.

12. Your rights

Under Swiss data protection law, and the GDPR where it applies to you, you have in particular the right to:

• get information about the personal data we process about you
• have inaccurate data corrected
• have your data deleted
• restrict or object to processing, where applicable
• receive your data in a common electronic format, where applicable
• withdraw your consent at any time with effect for the future
• complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, CH-3003 Berne, or to the data protection authority in your country

To use your rights or to leave the waitlist, write to [email protected]. In the App you can also delete your data directly in Settings. We may ask for reasonable information to confirm your identity.

13. Data breaches

If a security breach affects personal data we process, we handle it in line with Swiss law. Where it is likely to result in a high risk for the people affected, we notify the FDPIC as soon as possible and inform those affected where required.

14. Changes to this Privacy Policy

We may update this policy when Moombee's features, our service providers or legal requirements change. The date at the top shows the current version. If changes are important, we will tell you through the App or by email before they take effect.

Controller: 2Day Communications GmbH, Dornacherstrasse 172, 4053 Basel, Switzerland · [email protected]