Privacy Policy

Moyamap is operated by MoyaCode Limited (“we”, “us”, “our”), a company registered in the United Kingdom. This Privacy Policy explains how we collect, use, store and share personal data when you visit our website, use the Moyamap app, join our waitlist, or otherwise interact with our services.

Building your map happens on your device. With your permission, Moyamap reads your photo library on your iPhone and uses each photo’s metadata (such as the location and time it was taken) to place it on a map of your trip. This processing takes place on your device. Your photos are not uploaded to, or stored on, Moyamap’s servers. You can grant or withdraw photo access at any time in your iOS Settings; without it, the automatic map cannot be built.

We collect the following, depending on how you use Moyamap:

Waitlist (website): your email address.

Contact form (website): your email address and the message you send us.

Account: when you create an account we process an account identifier and, if you use Sign in with Apple, the email address Apple shares with us (which may be a private relay address).

Purchases: Moyamap uses Apple in-app purchases. Apple processes the payment and shares a transaction receipt or identifier with us so we can unlock the trips or features you bought. We do not receive your card or bank details.

Your journal content: the map, photos, notes and trips you create live on your device. We do not collect or store your photos.

Location: location information comes from the metadata of the photos you choose to include and, if you enable it, from your device’s location services, and is used on-device to place pins. We do not need your continuous or background location to build your map.

Usage and diagnostics: we use Firebase Analytics and Crashlytics to understand how the product is used and to fix crashes. This may include screens viewed, actions taken, app version, device type, and crash reports.

Device and technical data: IP address, browser or app version, device type, operating system, and general (approximate) location inferred from your IP.

Marketing (optional): if you opt in, we use your contact details to send updates about Moyamap. Where we run advertising, we may use the Meta Pixel on our website to measure its effectiveness, in line with your cookie choices.

We process personal data only where we have a valid lawful basis under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018:

Consent: for optional marketing communications, certain cookies or similar technologies where required, and any other processing we expressly ask you to agree to. Your device-level permission for photo and location access is granted and withdrawn through iOS, not through us.

Contract: to create and run your account, to fulfil purchases (unlocking the content you buy through Apple), and to manage your waitlist entry.

Legitimate interests: to operate, secure and improve Moyamap, to understand aggregated usage, to prevent abuse and fraud, and to respond to you, balanced against your rights and freedoms.

Legal obligation: where we must retain or disclose information to comply with the law (for example tax, accounting or regulatory requests).

Your journal, including your photos, stays on your device. The limited data we do hold (such as your account identifier, purchase records, waitlist and contact entries) is stored and processed using Google Firebase and Firestore, which run on Google Cloud infrastructure. We apply technical and organisational measures appropriate to the risk, such as access controls and encryption in transit where supported, to protect your information against unauthorised access, loss or alteration.

We use trusted providers who process data on our behalf or as part of delivering the service. Each has its own privacy notice. Key parties:

Firebase and Google Cloud: hosting, database, authentication, analytics and crash reporting.

Apple: Sign in with Apple, in-app purchases and billing, and other operating system services (for example the photo and location permissions, and weather data) you use on your device.

Mapbox: serves the interactive map; it receives the requests needed to deliver map tiles (including your IP address and the area you view).

Meta: the Pixel on our website for advertising measurement, only where you consent and only if we are running advertising.

On our website we use cookies and similar technologies for essential functionality, for analytics (including Firebase Analytics), and, where you consent, for marketing measurement (such as the Meta Pixel). The app uses analytics and diagnostics SDKs rather than browser cookies. You can control non-essential cookies through our cookie banner or settings where available, and through your browser or device settings.

Your data may be processed in the United Kingdom, the European Economic Area, the United States and other countries where our providers operate. When we transfer personal data outside the UK or EEA, we use appropriate safeguards recognised under UK law, such as the UK International Data Transfer Agreement, standard contractual clauses approved by the ICO, or other legally permitted mechanisms, so that your data remains protected.

We keep personal data only as long as necessary for the purposes above. For example: waitlist data for as long as we need it to manage launches, unless you ask us to delete it sooner; account and transaction records for the life of your account and for a period afterwards to meet legal, tax and accounting requirements; and analytics data according to the retention settings in our analytics tools. Your journal content is kept on your device under your control. When data is no longer needed, we delete or anonymise it where possible.

Under UK data protection law you have the right to: access a copy of your personal data; rectification of inaccurate data; erasure (“right to be forgotten”) in certain circumstances; restriction of processing; data portability for data you provided where processing is based on consent or contract and carried out by automated means; object to processing based on legitimate interests (including profiling) or for direct marketing; and to withdraw consent at any time where processing is based on consent (without affecting earlier lawful processing).

You can lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection: ico.org.uk. We would appreciate the chance to resolve your concern first, so please contact us using the details below.

We will only send you marketing emails or messages where you have opted in or where the law otherwise allows. You can opt out at any time via the link in our emails or by contacting us at privacy@moyamap.com.

You can ask us to delete your personal data where applicable law allows. Email privacy@moyamap.com from the address you used with us, describe your request, and we will respond within a reasonable period (usually within one month, subject to any extension permitted by law). We may need to keep certain information if we are legally required to do so. To remove your journal content, delete it in the app or remove the app from your device.

We do not sell your personal information to third parties for money. Where we use advertising or analytics partners, they process data to provide their services to us, not so that they can sell your personal data on to others.

Moyamap is not directed at children under 13 (or under the digital consent age in your country). We do not knowingly collect personal data from children. If you believe we have collected a child’s data, please contact us and we will delete it promptly where appropriate.

We may update this Privacy Policy from time to time. When we do, we will change the effective date at the top of this page. We encourage you to review it periodically. If we make material changes, we will provide notice as required by law.

Questions about this policy or your personal data: privacy@moyamap.com

You may also contact the ICO (Information Commissioner’s Office) if you have concerns about how we process personal data: https://ico.org.uk