Privacy policy
This policy explains what personal data Moon Technologies collects through the Moon Trading app, why we collect it, and what you can do about it.
Last updated [DATE]. Effective [DATE].
Who we are
[LEGAL COMPANY NAME] (company number [COMPANY NUMBER]), registered at [REGISTERED ADDRESS], trading as Moon Technologies, is the data controller for the personal data described in this policy.
For any question about this policy or your data, contact privacy@[YOURDOMAIN].
What we collect
| Data | Why | Lawful basis |
|---|---|---|
| Email address | To create your account, sign you in and contact you about the service | Performance of a contract |
| Username | To identify you on the leaderboard. Visible to other users | Performance of a contract |
| Password | To secure your account. Stored only as a cryptographic hash, never in readable form | Performance of a contract |
| Simulated trades and scores | To run the simulation, show your history and rank the leaderboard | Performance of a contract |
| Basic technical logs | To keep the service running and investigate faults | Legitimate interests |
What we do not collect
- Payment details. The app involves no real money and no payment processing.
- Bank, brokerage or investment account information. There is no brokerage relationship.
- Identity documents, National Insurance numbers or financial history.
- Location data, contacts, photos, or your device's advertising identifier.
We do not use advertising trackers, we do not build advertising profiles, and we do not sell or share personal data with third parties for marketing.
Who processes your data
We use Supabase to host the database, authentication and server functions behind the app. Supabase acts as our processor under a data processing agreement, and data is stored in the [REGION] region.
We use Apple's App Store and TestFlight for distribution. Apple provides us with aggregate, anonymised statistics about downloads and crashes. Apple's own handling of your data is governed by Apple's privacy policy.
How long we keep it
We keep your account data for as long as your account exists. If you delete your account, we delete your email address, username, portfolio, trades and scores immediately. Technical logs are kept for up to [NUMBER] days and then deleted.
Deleting your account
You can delete your account and all associated data from inside the app: open the Account tab and select Delete account. Deletion is immediate and permanent, and you do not need to contact us to do it.
If you would rather we did it for you, email privacy@[YOURDOMAIN] from the address on the account.
Your rights
Under the UK GDPR you have the right to access a copy of your data, to have inaccurate data corrected, to have your data erased, to restrict or object to how we use it, and to receive it in a portable format. To exercise any of these, email privacy@[YOURDOMAIN]. We will respond within one month.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Children
Moon Trading is intended for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has created an account, email privacy@[YOURDOMAIN] and we will delete it.
Security
Passwords are hashed, never stored in readable form. Data is encrypted in transit. Database access is restricted per user by row-level security, so one account cannot read another account's portfolio or trade history.
Changes to this policy
If we change this policy we will update the date above, and for significant changes we will tell you in the app or by email before the change takes effect.