Privacy Policy
Effective date: 5 April 2026
Who we are
Moyamap is operated by MoyaCode Limited (“we”, “us”, “our”), a company registered in the United Kingdom. This Privacy Policy explains how we collect, use, store and share personal data when you visit our website, use our apps, join our waitlists, apply as a creator, or otherwise interact with our services.
What data we collect
We may collect the following types of information, depending on how you use Moyamap:
Travellers (waitlist): email address.
Creators (applications): name; Instagram or TikTok handle; follower count range; and the destination you tell us you would create a journal for.
Accounts, journals and purchases: if you create an account, buy journals or use paid features, we process data needed to deliver the service (such as account identifiers, purchase history and payment references). Payments may be processed by Stripe (card payments) or Apple (in-app purchases), who receive the data required to complete the transaction.
Usage and analytics: we collect usage events and diagnostics through Firebase Analytics (and similar tools) to understand how the product is used and to improve it. This may include pages or screens viewed, actions taken in the app, and approximate timestamps.
Device and technical data: IP address, browser or app version, device type, operating system, and general location inferred from IP (not precise GPS unless you later allow it in the app and we describe that separately).
Marketing: if you opt in, we use your contact details to send updates about Moyamap. We may use Meta Pixel to measure whether our advertising is effective and to build aggregated audiences, in line with your cookie choices where applicable.
Why we use your data and lawful bases
We process personal data only where we have a valid lawful basis under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018:
Consent — for optional marketing communications, certain cookies or similar technologies where required, and any other processing we expressly ask you to agree to.
Legitimate interests — to operate, secure and improve Moyamap; to understand aggregated usage; to prevent abuse and fraud; and to communicate with you about the service, balanced against your rights and freedoms.
Contract — to provide features you have signed up for, to process applications and waitlist entries, and to fulfil purchases (including taking payment and delivering content).
Legal obligation — where we must retain or disclose information to comply with the law (for example tax, accounting or regulatory requests).
How we store and protect your data
We store and process personal data using Google Firebase and Firestore, which run on Google Cloud infrastructure. We apply technical and organisational measures appropriate to the risk, such as access controls and encryption in transit where supported, to protect your information against unauthorised access, loss or alteration.
Third-party services
We use trusted providers who process data on our behalf. They may only use your data as we instruct them, subject to their role and applicable law. Key categories include: Firebase and Google Cloud (hosting, database, authentication where used, analytics); Stripe (payments); Apple (in-app purchases); and Meta (Pixel for marketing measurement). Each provider has its own privacy notice describing how it handles data.
Cookies and similar technologies
We use cookies and similar technologies for essential site and app functionality, for analytics (including Firebase Analytics), and—where you consent—for marketing measurement (such as Meta Pixel). You can control non-essential cookies through our cookie banner or settings where available, and through your browser or device settings.
International data transfers
Your data may be processed in the United Kingdom, the European Economic Area, the United States and other countries where our providers operate. When we transfer personal data outside the UK or EEA, we use appropriate safeguards recognised under UK law—such as the UK International Data Transfer Agreement, standard contractual clauses approved by the ICO, or other legally permitted mechanisms—so that your data remains protected.
How long we keep data
We keep personal data only as long as necessary for the purposes above. For example: waitlist and application data for as long as we need it to manage launches and creator onboarding, unless you ask us to delete it sooner; account and transaction records for the life of your account and for a period afterwards to meet legal, tax and accounting requirements; and analytics data according to retention settings in our analytics tools. When data is no longer needed, we delete or anonymise it where possible.
Your rights
Under UK data protection law you have the right to: access a copy of your personal data; rectification of inaccurate data; erasure (“right to be forgotten”) in certain circumstances; restriction of processing; data portability for data you provided where processing is based on consent or contract and carried out by automated means; object to processing based on legitimate interests (including profiling) or for direct marketing; and to withdraw consent at any time where processing is based on consent (without affecting earlier lawful processing).
You can lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection: ico.org.uk. We would appreciate the chance to resolve your concern first—please contact us using the details below.
Marketing and communication
We will only send you marketing emails or messages where you have opted in or where the law otherwise allows. You can opt out at any time via the link in our emails or by contacting us at privacy@moyamap.com.
How to request deletion
You can ask us to delete your personal data where applicable law allows. Email privacy@moyamap.com from the address you used with us, describe your request, and we will respond within a reasonable period (usually within one month, subject to any extension permitted by law). We may need to keep certain information if we are legally required to do so.
We do not sell your personal data
We do not sell your personal information to third parties for money. Where we use advertising or analytics partners, they process data to provide their services to us, not so that they can sell your personal data on to others.
Children
Moyamap is not directed at children under 13 (or under the digital consent age in your country). We do not knowingly collect personal data from children. If you believe we have collected a child’s data, please contact us and we will delete it promptly where appropriate.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will change the effective date at the top of this page. We encourage you to review it periodically. If we make material changes, we will provide notice as required by law.
Contact us
Questions about this policy or your personal data: privacy@moyamap.com
You may also contact the ICO (Information Commissioner’s Office) if you have concerns about how we process personal data: https://ico.org.uk