Mozey Privacy Policy
Effective date: 2026-09-24 · Last updated: 2026-10-29
Mozey is a social walking app: you take steps, and they power friendly games with friends. This policy explains what the Mozey mobile app collects, why, who processes it, and the choices you have. It is provided by Goodweather Labs LLC ("Mozey", "we", "us"), 2108 N St, Ste N, Sacramento, CA 95816, United States. Questions: hq@goodweatherlabs.com.
Our posture, in one line: we collect the minimum to run the games, we never sell your data, and we run no advertising or ad-tracking SDKs of any kind.
What we collect, and why
1. Account & profile
- Your email address. We use it to create your account and sign you in. Mozey has no passwords: you sign in with a link or a six-digit code sent to your email.
- A display name and handle. These are how friends find and recognize you.
- An avatar. A small set of style choices that render a cartoon character. It is not a photo and is never built from one. So that your character can appear in the notifications other players receive, our server also draws it as a small image and stores it until you delete your account.
- Your date of birth. We use it to enforce our minimum age and apply protections for minors.
- When you accepted these terms, and which version.
2. Step counts (with your permission)
- With your permission, Mozey reads your step count from Apple Health (iOS) or Health Connect (Android).
- Mozey can also use a second motion permission, "Motion & Fitness" on iOS and "Physical activity" on Android, to show your step count updating live while you walk. When that live figure is ahead of what Health has settled on, it can be saved as your daily total so that reaching a goal unlocks immediately rather than minutes later.
- What leaves your device is a daily total, not your detailed health record. Hourly detail, workouts, heart rate, and every other health metric stay on your device and are never uploaded. Mozey requests step data only.
- On Android, if you place the Mozey widget, we also ask Health Connect for permission to read steps in the background so the widget can update on its own. On iOS the same background read is part of the Apple Health permission. Declining it only means the widget updates when you open the app.
- Your daily total updates the games you're in, your streak, and, unless you turn it off, the seasonal boards.
3. Social & game activity
- The friends and crews you form, the games you join, and your activity in them: step deposits, comments, and reactions.
- Invites you send or receive, and any blocks or reports you make. When a block ends a game you shared with that player, we keep a record of which game it ended and who blocked whom, for our own review of misuse. No other player can see it.
- When you last read each game's chat, so the number on the app icon can count the chats you have not read yet. Only you can see it.
- Notification preferences and your device's push token.
- Your device's time zone, sent when your steps sync, so a day is counted against your local midnight rather than ours.
4. Gameplay & rewards
- In-game currency ("Soles"), your level, and trophies. Today, Soles are not sold: there is no way to buy them with money. You earn them by playing.
- Mozey Plus, an optional paid membership (a Monthly or Yearly subscription, or a one-time Lifetime purchase), if you choose to buy one. It is not required to use Mozey, and it cannot change the outcome of a game: what it unlocks is appearance (avatar items) and a flat monthly credit of Soles. Today that credit is the only way money and Soles touch: a fixed amount that arrives with a paid membership, never a purchase of currency and never a boost to what you earn. What we hold about a membership is described under Subscriptions and payment below.
- Leaderboard standing. Mozey has two public boards: a worldwide steps board, and a monthly league of about thirty players. Both are on by default, and on either one other Mozey players, including players you are not friends with, can see your display name, handle, avatar and step totals. One switch covers both: Settings → Privacy → "Seasons & leaderboard." Turning it off removes you from the worldwide board and from your monthly league, and hides the Season tab. Accounts under 18 are kept off both automatically and cannot opt in.
- Your level. Your level is a number that rises with the steps you have walked and the games you have played. Other signed-in Mozey players can see that number on your player card, including players you are not friends with. If you are under 18, or you have not given us your date of birth, only your friends can see it. They never see the points behind it, how close you are to the next level, or your step history. If you block someone, neither of you can see the other's level. Turning off "Seasons & leaderboard" in Settings → Privacy hides your level from players who are not your friends.
5. Crash diagnostics (on by default; you can turn it off)
- To find and fix bugs, the app sends crash reports through Sentry.
- A report includes the technical crash details, your device model and settings (OS version, app version, available memory and storage, battery state, screen size, locale and time zone), and a breadcrumb trail of recent app activity.
- Sentry sends something only when the app crashes or hits an error. It does not send session records or performance timings.
- Before a report leaves your device we redact known identifying fields, including email addresses, display names, step counts and sign-in tokens, from the report's structured data and its breadcrumbs, and we strip query strings from any URL. This is a best-effort filter, not a guarantee. A report can still contain diagnostic text we did not anticipate.
- We record a small number of product events (for example, that the Highlights list was opened) inside that same breadcrumb trail. They carry no identity and are used to understand whether a feature works, never to build a profile.
- Turn all of it off in Settings → Diagnostics → "Send anonymous crash reports."
6. Network and sign-in records
Our backend and hosting providers log the IP address your device connects from, as any server does, and our authentication provider records your sign-in events including that address, as a standard security measure against abuse. We do not use these logs for anything else.
7. Subscriptions and payment
Mozey Plus is an optional paid membership. If you never buy it, the only part of this section that touches you is the account identifier RevenueCat receives when you sign in (below), which is how the app knows you do not have Plus.
- The store takes the payment, not us. Plus is bought and billed through the App Store or Google Play under the account you are already signed into there. They collect and hold the payment details. We never see, receive or store your card number, bank details or billing address, and there is no way for us to charge you directly.
- What we are told. We use RevenueCat, a subscription-management provider, to tell our server whether a subscription is currently active. When you sign in, the app gives RevenueCat an identifier for your Mozey account so it can answer whether you have Plus; if you buy it, what passes through it is the fact of the purchase: which product was bought, whether it is a free trial, and when it renews, lapses, is refunded or moves to another account. It carries none of your step data, none of your game or social activity, and no payment credentials.
- What we store. On our side we keep only what Plus requires: which entitlement you hold, when it expires, and where it came from; and the plan behind it, meaning which product and period (Monthly, Yearly or Lifetime), whether it is a free trial, and whether and when it was refunded or moved to another account, which decide the rewards that come with it. Both are deleted when you delete your account.
- Cancelling. A subscription is cancelled where it was bought, in your App Store or Google Play account settings. Cancelling stops the renewal; access continues to the end of the period you already paid for. Lifetime is a single payment, so there is nothing to cancel.
- Age. Mozey Plus is offered only to accounts we can tell are 18 or over. An account whose age we do not know is treated as under 18 and is not offered a subscription.
What we do NOT collect
- No precise location or GPS. Mozey never requests location access.
- No contacts or address book. You add friends by handle search or a share link.
- No photos, camera, or microphone. Avatars are generated, never photographed. The app bundles no camera, photo-library, or contacts library at all.
- No advertising, attribution, behavioral tracking, or session replay. We ship no advertising or attribution SDK of any kind. Besides our own backend, the app sends something to these outside services, and no others: Sentry, only what the diagnostics section above describes; RevenueCat, only what the subscriptions section above describes, your account identifier from sign-in and your purchase if you make one; Expo's push service and, on Android, Google's Firebase Cloud Messaging, which receive your device's push token so notifications can reach you. The App Store and Google Play handle a purchase, and Apple Health and Health Connect are part of your phone. None of them is used for advertising or tracking.
- No card, bank or billing details. Mozey Plus is billed by the App Store or Google Play, and they handle the payment end to end. We never see, receive or store a card number, a bank detail or a billing address. See Subscriptions and payment.
- We do not sell your personal information and do not share it for advertising.
Children & minors
Mozey is not intended for children under 13, and you must be at least 13 to use it. We ask for your date of birth during setup and our servers reject a date under 13, so you cannot finish setting up an account. If the date entered is under 13, we delete the account and its email address at once. We keep no record of the date or the email; the phone itself remembers the answer, so another account made on it is deleted the same way. We do not otherwise verify age. The under-18 protections below are enforced by our database, not only by the app.
For accounts under 18 we apply additional protections automatically, and they cannot be switched off:
- The account is not discoverable by name.
- The account is kept off both public seasonal boards.
- Comments and reactions are limited to games where every other player is already a friend.
- Your level is visible to friends only.
We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has given us information, contact hq@goodweatherlabs.com and we will delete it.
How we use your information
- Operate the product: run your games, sync your daily step total, show friends and crews, deliver the notifications you've enabled.
- Maintain safety and integrity: enforce blocks and reports, prevent abuse and cheating, enforce the age minimum.
- Fix and improve the app: diagnose crashes and understand whether features work.
We do not use your data to build advertising profiles or to train models.
Who processes your data
We use service providers who process data on our behalf, under contract:
| Provider | Purpose | Data involved |
|---|
| Supabase | Backend, database, authentication, file storage | Account, social and game data; sign-in records including IP address; the avatar images drawn for notifications |
| Resend (our email relay, via Supabase, which delivers through Amazon SES) | Sending sign-in emails | Your email address, and the sign-in link or code itself |
| Cloudflare | Hosting mozey.app and routing sign-in links | IP address and the sign-in link, when a link opens in a browser |
| Sentry | Crash diagnostics (on by default, can be turned off) | Crash and error reports, scrubbed of identifying values |
| Expo, Apple (APNs), Google (Firebase Cloud Messaging) | Push-notification delivery | Push token and notification content, which can include another player's display name, up to 120 characters of a chat message, a link to that player's avatar image that works for 24 hours, and the number shown on the app icon |
| Apple / Google | App stores and health frameworks; billing for Mozey Plus | Health permission is granted and revoked by the operating system. For a subscription, they take and hold the payment; we receive no payment details |
| RevenueCat | Telling our server whether a Mozey Plus subscription is active (an account identifier at sign-in; your purchase, if you make one) | An identifier for your Mozey account (sent at sign-in), which product was bought, and its renewal, lapse or refund. No step data, no game or social activity, no payment credentials. When you delete your account, we ask RevenueCat to delete its record of you |
| Migadu | Hosting our email inboxes | Anything you send us by email, and any sign-in email that bounces back |
Because Mozey signs you in by email, that email contains a working sign-in credential for 15 minutes: its link signs in only the phone that asked for it, but its six-digit code works on any phone. The providers that carry the email can technically access it during delivery. We use established providers under contract for exactly this reason.
We do not share your personal information with anyone else, except as required by law or to protect rights and safety.
Your choices & rights
- Crash reporting: turn it off in Settings → Diagnostics.
- Leaderboard: turn it off in Settings → Privacy.
- Notifications: control which notifications you receive in Settings and in your OS settings.
- Health permission: grant or revoke step access anytime in your device's Health settings. Revoking stops new step reads.
- Deletion: delete your account from Settings → Account → Delete account. See below for exactly what that does.
- Access or a copy of your data: email hq@goodweatherlabs.com and we will respond. There is no automated export in the app today; we handle these by hand.
If you are a California resident, you may ask us to disclose or delete the personal information we hold about you, and you may not be discriminated against for asking. We do not sell or share personal information as those terms are defined under California law, and we never have.
Deleting your account
You can delete your account from within the app, or, if you no longer have it installed, by following the steps at mozey.app/delete-account. It is one-way. When you do:
Deleted outright: your email address and sign-in record, your date of birth, your daily step history, your comments and reactions, your friends, crews, blocks and mutes, your invites, your push tokens, your notification and leaderboard settings, your Mozey Plus records, your Soles ledger, level, streak, inventory and equipped items, the record of when you last read each chat, the records of games your blocks ended, and the avatar images drawn for notifications. We also ask RevenueCat to delete its record of any purchase. A copy of a recent push token, kept with nothing else attached so we can check that notifications were delivered, is cleared as later notifications go out, usually within a day.
Kept, with your name removed: the games you played. Scores, deposits, final standings and celebrations stay on the board for the other players, attached to an account with no name, no handle and no picture. We keep them because deleting them would rewrite other people's record of a game they played.
Also kept: your seasonal standings, including a step total for each season you played, your trophies and awards, and your league placement, because other players were ranked against them. Also reports filed about you, and the record that you filed a report about someone else, in both cases so that deleting an account cannot clear a moderation queue: the text you wrote is removed, the record that it happened stays. And the fact that an invite connected you to another account. If our records held a RevenueCat identifier for you, we keep that random identifier on its own, with nothing else attached, so that a late billing message about it can be recognized and ignored.
Please read this part plainly: because your games stay on the board, the step counts recorded inside them stay too. Your account is stripped of everything that identifies you, but it is not erased from our database. The records that remain are de-identified, not anonymous, and could in principle be re-linked by someone with other information. If that matters to you, it should factor into your decision.
Deleting your account does not remove data from your own phone until the app removes it locally, and it does not affect emails already sitting in your inbox.
If any step of the deletion cannot complete, we finish it by hand. Contact hq@goodweatherlabs.com if you would like confirmation.
Retention: we keep account data while your account exists. After deletion, the categories above apply. We do not currently run automated expiry on game history or diagnostic data; Sentry retains crash reports according to its own retention settings.
Security
Data is encrypted in transit. Access is gated by database row-level security, so other players see only what they are permitted to see. Crash reports are stripped of identifying values before they leave your device. No method of transmission or storage is completely secure, but we work to protect your information and to limit how much of it exists in the first place.
Where your data is processed
Mozey is offered in the United States, and our providers process data in the United States.
Changes to this policy
If we make material changes we will update the "Last updated" date above and give you notice before they take effect. Continued use after an update means you accept the revised policy.
Contact
Questions or requests: hq@goodweatherlabs.com · Goodweather Labs LLC, 2108 N St, Ste N, Sacramento, CA 95816, United States.
Help with the app or Mozey Plus, from a person: support@mozey.app. Privacy and data requests go to hq@goodweatherlabs.com, as above.