Privacy Policy

• Operator: Traversa Pte. Ltd. (Singapore)
• Privacy contact: mori-app-support@googlegroups.com
• Scope: Moree's iOS and Android apps and web version, only for users aged at least 18 who have reached the age of majority where they live.
• Effective date: 13 November 2026

Key points

Moree uses third-party AI to process photos, chats, speech and health information you enable. Content shared with friends may also be sent to AI when they use Moree and enter their memories. Health read access and cloud purposes are authorized separately. You can manage purposes, delete content or delete your account in Settings; details and exceptions follow. This policy does not replace in-app consent.

1. What we process

Account and content. Sign-in services process names, email addresses and credentials. Email sign-in uses a 6-digit one-time code sent to your email address, and some versions still accept a password: Firebase Authentication handles passwords and Moree does not store plaintext passwords; a code is valid for 10 minutes and can be used once, and the cloud stores only a keyed hash of it, not the code or the email address in plain form. We process account, installation and push identifiers, nicknames, avatars, friend codes, friendships and blocks, and the photos, captions, notes, sticky notes, chats and attached images, speech, mutters, comments, likes, reports and support emails you provide. Chats and images are stored in the cloud for cross-device sync; existing local conversations are also uploaded when you update. Adding friends does not read your contacts.

Health. With system permission, iPhone reads workouts, sleep, distance, active energy, heart rate, steps, resting heart rate and heart rate variability (HRV) from Apple Health, including workout duration, distance, energy and heart rate, and sleep times and stages, depending on permissions and available data; it does not write to Apple Health. Some older versions still send workout routes, which the server discards on receipt; routes in historical posts remain stored but are neither shown nor used for AI, are not cleared by deleting an individual post, and are deleted with the account. Android does not connect to Health Connect or read local health data, but can display health posts friends share.

Location. With permission, the device obtains your city through a geocoding service; with Precise Location permission, iPhone and Android may also obtain neighborhood and landmark text. Android omits neighborhood and landmark text when only approximate location is granted. This text may be sent to Moree's cloud and AI and appear in shared content. Weather requests send city-level coordinates (rounded to 0.1° on Android), time zone and date from the device to Open-Meteo without your account; Moree's cloud retains only the latest city and weather overview and does not receive the device's numerical location coordinates from these requests.

Usage, security and diagnostics. To measure usage, maintain security, verify the app, prevent abuse and diagnose faults, we process feature counts, message and attachment counts, recording duration, notification delivery and opens, request and content identifiers, operation steps and outcomes, timings, errors, network type, version, device and system information, IP addresses and ports, and pseudonymous installation, session and account identifiers. Diagnostics may include successful operations and can be linked to accounts or installations; they are not anonymous. They contain no photos, chat or note text, detailed health data or sign-in credentials. Abuse-prevention records for password recovery and email sign-in codes use keyed hashes of sources and email addresses. For proactive messages, we also store display duration, whether you opened them from a notification, and the text and timing of subsequent replies to inform later responses; these records are deleted with the message.

iOS and Android use Crashlytics and Grafana Cloud for diagnostics and monitoring, without Google Analytics; the web version uses Google Analytics to measure feature use, how it is opened, page type and response speed, without content or accounts, and does not count activity when the browser enables Do Not Track. iOS and Android collect product usage data (app opens, pages viewed, categories of key actions), device and app information (device model, OS and app version, device identifiers), and IP address and the approximate location derived from it through the PostHog SDK, linked to your account after sign-in, to measure feature use and improve the product. Android's local skin smoothing uses ML Kit face detection; its SDK sends Google device, app, installation identifier and performance diagnostic information.

2. How information is used and who receives it

AI and memory. Section 4 lists third-party recipients. Photo replies, analysis and bookshelf organization process photos, thumbnails and related text, including Only Me content; chats use messages and attached images, recent conversations and content, memories, profiles, cities and accessible friend interactions. Instant replies and their low-resolution photos or notes are stored in the cloud, and recent content still available may inform later responses. Until you select a reply language, your recent chat text also helps determine the language; choosing a default language stops this classification. Mutters and conversation recordings are transcribed; text may enter chats and memory. Evening recaps, morning messages and workout recaps refer to relevant recent messages and your reactions. Questions on the wall use recent text visible to all friends, public personas and circle information, without photos, private chats, private health data or memories. When online information is needed, search terms may contain conversation content, health-related text or cities.

Long-term memory stores and retrieves chats, photo descriptions and notes, sticky notes, mutters and social interactions, which may include health information and friends' writing; photos and mutters enter memory as text. Moree periodically generates profiles from memories, interactions and health trends you allow for chat, and creates friend notes and social-circle summaries from accessible friend content and interactions for your private chats. Public replies do not read private chats, private health data or private memories; they may only use interests and speaking style without health or private experiences, and public Moree exchanges whose audience permissions fit the current reply.

Friends and AI. Photos, text, health posts and interactions shared with friends may be sent to AI in their private chats or when they summon Moree in comments, and enter their memories or friend notes. When friends @Moree under a photo, its display image, related text, mutually visible comments and attached images are sent; there is no separate off control, but previously disabled settings remain disabled. Set a photo to Only Me if you do not want it sent this way. Ordinary comments do not independently trigger AI but may inform later replies. After unfriending alone, private chats may still read content published before the relationship ended and earlier interactions, but not new content afterward; while either party blocks the other, Moree does not read the other's content in real time or read or write friend notes about them. Deleting content, narrowing visibility or unfriending does not individually retract content already in others' memories or notes; deleting an account deletes both parties' friend notes.

Health purposes. Enabling the health experience also enables all currently available health cloud sync, private analysis, automatic health posting, and AI captions and replies; system read permission is granted separately. Daily summaries, health analysis and historical comparisons inform private replies and their timing; health queries require further in-app confirmation before use in chats, and health trends may inform profiles. Private analysis does not itself enter long-term memory when analysis is enabled, but health content discussed in chats and the replies may enter memory. Public captions and replies use only facts permitted for sharing, without directly using private analysis text. Health information is not used for advertising, marketing, data mining, sale, data brokerage or loan or insurance eligibility decisions; it is used only for features you enable, their processing providers and friends you choose to share with. Private analysis text is stored encrypted. Moree records communication and is not a medical diagnostic tool.

Social features, safety and notifications. The cloud provides content and interactions to friends according to access permissions; losing access to a post also removes access to its comments and attached images. Without signing in, invitation pages can show a nickname and its initial using a Moree ID or link, without an avatar or other content; deleted accounts cannot be looked up. Shared content, profiles and friend-visible Moree replies are sent to OpenAI for automated moderation, and suspected problematic text may be reviewed again; the team may examine reported content and necessary context when handling reports. Notifications use APNs or FCM and may display nicknames and message excerpts; private messages may involve health. Lock-screen previews can be disabled in system notification settings.

We do not display ads, sell personal information, track across apps or use your content to train our own models.

3. Your choices

Manage camera, photo, microphone, location, notification and health read permissions in system settings; denying a permission affects only features that need it. Health purposes start off; enabling the experience enables all currently available purposes, which can then be managed in Settings → Health. New health posts are automatically published to the current audience, friends by default; change the visibility of existing posts or delete them separately. Evening recaps start on and can be disabled in Moree settings.

Photo replies, chats, transcription, memory, bookshelf organization, wall questions and product usage statistics process information as you use them, without separate off controls; you can stop using the feature, delete content or delete your account, and request deletion of product usage statistics by email. Only Me limits friend access but does not prevent your own cloud storage and AI processing. Turning off a purpose stops new processing for that purpose without automatically deleting existing data or retracting requests already sent; re-enabling it does not process health events from the disabled period.

4. Third-party recipients

Information may be processed across borders. Model services receive inputs; encrypting private results does not mean AI cannot see inputs. We require service providers to protect your data to a standard no lower than this policy. Mem0's paid service terms state that submitted content is not used to train or improve models, but de-identified aggregate data may be generated for other purposes. A Moree deletion request does not mean third-party logs and backups are immediately cleared. DeepSeek's processing rules appear in its Open Platform Terms and Privacy Policy.

5. Retention and deletion

We limit access through account, friendship and block checks, transport protection and encryption of private health text. A small number of operations staff can technically access cloud content; routine troubleshooting uses content-free logs, and reading content requires you to provide it or explicitly authorize access, except for legal requirements, urgent danger to people, access already allowed by friend permissions, or handling reports and necessary context. Direct access is audited. Security measures cannot eliminate all risk.

Other content, daily health summaries, memories, profiles and account relationships remain while the account exists, without a fixed automatic expiry; summaries are no longer read or used after health cloud sync is disabled. Necessary consent and security records and markers preventing duplicate deletion may be kept separately. Expired data stops being normally available; physical background cleanup may finish later. Third-party retention is also subject to their terms.

Individual deletion. You can delete your wall content, mutters, manageable comments and private health messages; server acceptance revokes normal reads, with background cleanup afterward. Deleting from a local album does not delete wall content, provider records or memories; deleting wall photos or notes does not delete instant-reply records, which are deleted with the account. Editing or deleting mutters replaces or clears their original-text memories, but generated chats, recaps and independent memories remain; profiles may retain old conclusions until a later successful update. Pending edit notes may contain old and new text, cleared after successful processing. Deleting Moree data does not affect original Apple Health records or others' screenshots and copies.

Account deletion. Confirm in Settings → Delete Account and re-verify your sign-in identity: Apple or Google accounts sign in again, and email accounts enter a code sent to that address (a password in some versions); resetting a password does not delete the account. You can also request deletion by email following the account deletion page. Deletion removes credentials, photos and wall content, chats, memories, profiles, mutters and recordings, health data, relationships and both parties' friend notes, push and notifications, and corresponding local data; Apple sign-in authorization is revoked. Cloud cleanup runs automatically in the background and retries failures, and deletion is requested from the long-term memory provider.

Your account and content are deleted; memories a friend's Moree has already formed belong to that friend's data and are not deleted with your account.

Exceptions include copies saved separately by others; reports remain with identifiers pointing to you and copies of your content erased; necessary legal and security records, and logs and backups providers retain under legal obligations, may remain, with physical cleanup timing outside Moree's control; original Apple Health records are unaffected. Completed deletion records contain no personal content and remain for 30 days. Signing out does not delete your account or cloud content.

6. Your rights and contact

Use the privacy email above to request access, correction, deletion, restriction, a copy or withdrawal of consent, or complain to a competent authority as allowed by law. We verify your identity and handle requests under applicable law and necessary exceptions. Do not send passwords, verification codes or full identity documents; conversations attached to feedback may contain health information, so review and remove anything you do not want to provide before sending.

7. Minors, policy updates and this page

Moree is not for minors and does not ask for birth dates. Contact us if you discover a minor using it; after verification, we stop their use and handle data under the rules above. Policy changes update the effective date, and important changes are announced in the app. New AI purposes are explained first; new sensitive-information purposes require separate consent before processing, as do other changes requiring renewed authorization. Firebase Hosting hosts this policy page and processes access IP addresses and request logs.