Privacy Policy

Last updated: January 2026

Introduction

This Privacy Policy explains how Mooly ("we", "us", or "our") collects, uses, and protects your personal information when you use our reading habit tracking application.

Information We Collect

We collect minimal information necessary to provide our service:

Account Information

• Email address and display name (if you sign up)
• Authentication data from Apple, Google, or email sign-in

Reading Data

• Books you add to your library
• Reading sessions and daily goals
• Reading streaks and statistics
• Friends connections and shared activity

Device Information

• Device type and operating system version
• App version for troubleshooting
• Anonymous usage analytics

How We Use Your Information

• Provide and maintain the Service
• Sync your reading data across your devices
• Send reading reminders and notifications (if enabled)
• Process subscription payments through RevenueCat
• Improve the app experience and fix bugs
• Enable social features like friends and activity sharing

Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Contract performance: To provide the Service, manage your account, and sync your reading data
• Consent: For sending notifications and reading reminders (you can withdraw consent anytime)
• Legitimate interest: For improving our Service, ensuring security, and preventing fraud
• Consent: For processing scanned text to identify book metadata when using the book scanning feature

Book Scanning and Identification

When you scan book covers or pages, images are processed on your device to extract text (OCR). Photos are not uploaded to our servers. The extracted text may be transmitted securely to our servers and analyzed using automated tools (AI) solely to identify book metadata such as title and author. The scanned text is processed transiently and is not stored permanently, not shared with other users, and not used for AI model training or any other purpose beyond metadata extraction.

Automated Analysis

Mooly uses automated systems to analyze user-provided text in order to extract book-related metadata. This processing does not involve profiling and does not produce legal or similarly significant effects on users. Text is processed transiently and deleted immediately after metadata extraction.

Third-Party Services

We use trusted third-party services to operate Mooly:

Supabase

We use Supabase for authentication and secure data storage. Your account and reading data is stored on Supabase servers in the EU.

RevenueCat

We use RevenueCat to manage subscriptions. RevenueCat processes subscription data according to their privacy policy.

Apple App Store

Payments for Mooly Pro are processed by Apple. We do not have access to your payment details.

Google Gemini

We use Google's Gemini AI service to analyze extracted text for book identification. Only text (not images) is transmitted. Google processes this data in accordance with their privacy policy. We do not use this data for AI model training.

International Data Transfers

Some of our third-party service providers (RevenueCat, Apple, Google) may process data outside the European Economic Area (EEA), including in the United States. These transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring your data receives adequate protection.

Data Storage and Security

Your data is stored securely on Supabase servers located in the European Union. We use encryption for data transmission and storage.

Local data on your device is stored securely using iOS security features. Widget data is shared via App Groups.

Data Retention

We retain your data for as long as your account is active. If you delete your account, your data will be permanently deleted within 30 days.

Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Export your data in a machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to processing of your data

To exercise these rights, contact us at privacy@oddity.software

Children's Privacy

Mooly is not intended for children under 16 years of age in the European Union, or under 13 in other jurisdictions. We do not knowingly collect personal information from children below these age limits. If you believe we have collected such information, please contact us immediately at privacy@oddity.software.

Cookies and Tracking

The Mooly app does not use cookies. Our website (mooly.me) may use essential cookies for functionality. We do not use tracking cookies for advertising.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email. The "Last updated" date at the top indicates when changes were made.