🍑 Moonion

Privacy Policy

Effective 25 September 2026 · Applies to the Moonion mobile app and its companion backend.

1Who this policy is for

Moonion is designed to be used by children, but the account itself always belongs to a parent or guardian. Only the parent signs up, authenticates, and consents to this policy — children never create their own login credentials. Wherever this policy says "you," it means the parent account holder, unless a section is explicitly about the child profile.

2What we collect

From the parent	Purpose
Name, email address	Account creation, sign-in, communication
Password	Sign-in (stored as a salted hash by our authentication provider, never in plain text)
4-digit Parent Gate PIN	Gating the purchase/paywall screen so a child can't complete a transaction alone — stored as a bcrypt hash, never recoverable in plain text

From the child profile	Purpose
First name / nickname, birth date, school grade	Personalizing quiz difficulty and content to the child's age/grade
"Dream job" (free text or picklist), language preference	Theming the child's Moonion creature and quiz questions around what they're interested in
Answers to a short diagnostic quiz at signup	Setting an initial difficulty baseline
Daily quiz answers, XP, level, evolution progress, points	The core gameplay loop — tracking progress over time

We do not collect a child's full name, contact information, precise location, photos, or any government identifier. There is no in-app chat, comments, or any way for a child to share content with anyone outside their own account.

3Who we share data with

We use a small number of infrastructure providers to run the app. We do not sell data, and we do not use advertising or analytics SDKs of any kind — Moonion has no ad network, no tracking pixels, and no behavioral profiling.

Supabase (database, authentication, file storage, and server-side functions) — hosts all data listed above, in the Singapore region.
Google Gemini API — used server-side (never directly from the app) to generate each child's Moonion artwork and daily quiz questions. Gemini receives the child's school grade, dream job, language, and quiz topic to do this — it does not receive the child's name, birth date, or any other direct identifier.

Generated Moonion artwork is stored in a storage bucket that is technically world-readable by direct link (the links themselves are long, random, and never listed publicly). This is standard practice for illustration assets, but since the artwork is not a photo of the child — just a fantasy creature — we're calling it out here explicitly rather than leaving it implied.

4Payments

Subscription purchases are handled entirely by Google Play Billing (and, in future, Apple's In-App Purchase system on iOS) — we never see or store your card details. We only receive confirmation of an active subscription from the platform, which we use to unlock Pro features on your account.

5Children's privacy

We built Moonion with a "parent holds the account" model specifically so that:

A child never enters an email, password, or any credential of their own.
Nothing a child does in the app is shared publicly or with other users — there is no social feature.
Purchases require the parent's PIN, entered by the parent.
A parent can view, and request deletion of, everything tied to their child's profile at any time (see Section 7).

6Data retention

We keep your data for as long as your account is active. If you delete your parent account, every child profile under it — and all associated gameplay data, generated artwork, and quiz history — is permanently deleted along with it.

7Your rights & deleting your data

You can request access to, correction of, or deletion of your family's data at any time by contacting us at the email below. Account deletion is permanent and cannot be undone. See our Delete Account page for the exact steps and what gets removed.

8Changes to this policy

If this policy changes in a material way, we'll update the effective date at the top of this page and, where required, notify you directly.

9Contact us

Questions about this policy or your family's data: hi@paistudio.co