Moka Privacy Policy

On your iPhone

Dog photos, vaccine card photos, behavior audio and video and the text you type are processed on the iPhone itself (Apple Vision, VisionKit, SoundAnalysis, Speech and Apple's on-device AI). Audio and video are deleted right after analysis. Photos are not sent to Moka servers.

In your iCloud (private database)

Your dog's profile, vaccines, weights, expenses, plans, training and analyses are stored in the private CloudKit database of your Apple account. Only you (and co-owners you invite) can access them. Without iCloud, data stays on the device.

In the CloudKit public database (only if you use it)

Community posts, “it worked” votes and lost-pet alerts go to the CloudKit public database and can be seen by other users. Posting requires Sign in with Apple; the display name is your choice.

Lost-pet alerts use a rounded location (about 1 km, never your address) and expire after 7 days. You can delete your posts and alerts in the app. Reports and blocks are recorded for moderation.

Approximate location

Used only while the app is open for: weather and UV before walks (Apple WeatherKit), nearby vet clinics (Apple MapKit) and nearby lost-pet alerts. The app asks for approximate location and keeps no history.

moka-api (Moka's server)

Only six things use our server:

• the backup AI for Moka Plus subscribers on iPhones without Apple's AI, which receives the subscription receipt issued by Apple (product, expiry and transaction number, no payment details) to confirm Plus, and only the question text, a short dog profile (breed or size, age) and labels, never photos, video or audio, and forwards it to the Claude API (Anthropic) under the same safety rules;
• generating the Apple Wallet pass with the fields you chose;
• support messages you send;
• the public list of approved partners, which the app downloads sending only the country (Brazil or Australia), with no data about you;
• partner campaigns and aggregated counts of impressions and taps: the app downloads active campaigns sending only the country, and sends back only the number of impressions and taps for each campaign, with no device, account or dog identifier (see Advertising, partner shops and affiliates);
• your Ask Moka questions, only if you turn on "Help Moka learn" (off by default): the question text without your name, your dog's name or any phone number, email, link, postcode or document number (the app removes them before sending and the server checks again), the topic Moka understood, the country and any 👍/👎 you give. No device or account identifier. Kept for up to 12 months to improve answers, teach the AI how owners talk and create new guides. Turn it off in Settings and anything not yet sent is deleted.

To limit abuse we use a hashed device identifier. Technical logs are kept for up to 30 days.

Partners (rescues, services, shops and dog-friendly places)

Anyone who signs up as a partner at moka.pet/parceiros sends us the business or rescue details (name, city, public contacts, description, photos, dogs for adoption and products) plus the name and email of a contact person. Business details and photos appear in the app after approval; the contact person's name and email never appear and are only used to reach the partner. Partners authorise this use when signing up, confirm they have permission for the photos (including any people shown) and can edit or ask for removal at any time through their private link or support.

The app only shows partners: it never sends partners any data about Moka users. When you tap WhatsApp, website or "where to buy", the conversation or purchase happens directly with the partner.

Partnership proposals (brands and services)

Anyone who sends a proposal at moka.pet/parceiros/proposta.html sends us company details (name, optional CNPJ, website, Instagram, city, category, regions, what they propose and their message) and a contact person's details (name, role, email and optional WhatsApp), plus how they heard about Moka (for example, the profile that shared the link). We use this only to assess the proposal and talk to the company, on the basis of pre-contractual steps and legitimate interest. It stays with the Moka team for the proposal's country, never appears in the app and is never sold. The IP address is only used, as a one-way code, to limit abusive submissions on the same day, and is not stored. Proposals that don't lead to an agreement are deleted within 24 months. To access, correct or delete this data, contact support or reply to the confirmation email.

Advertising, partner shops and affiliates

The app may show sponsored content and shop links, always with one of these labels: Sponsored (the brand paid to appear there), Partner shop (an affiliate link: Moka may receive a commission if you buy) or Community partner (rescues and adoption, unpaid). Every labelled item has "Why am I seeing this?", which says who the partner is, why it appeared (for example, "because you opened the air travel guide"), whether there is a commission and where to read the advertising and partner policy.

Without consent (the default): offers are chosen only from the screen context, such as the guide you opened or the season, never from your dog's profile. Personalised suggestions: only if you turn on a separate consent, which is off by default. When it is on, the app uses your dog's age, size and breed on your iPhone to choose among campaigns it has already downloaded; this data never leaves the device. You can turn it off at any time in Settings › Offers based on your dog's profile, and choices go back to using only the screen context.

What is counted: to report to partners, the server receives only the number of impressions and taps per campaign, added up by day and by country. There is no device, account, dog or advertising identifier (IDFA) and no location. Partners receive only these aggregated, anonymous totals. Daily counts are kept for the life of the campaign and up to 12 months afterwards, for reconciliation and billing.

What we don't share: Moka never sends personal data about you or your dog to partners. Affiliate links carry only Moka's code and a campaign number, never your data. We don't track you across apps and don't use App Tracking Transparency. Moka's AI doesn't know who the sponsors are and answers neutrally; products appear separately, below the answer.

Sign in with Apple and purchases

Sign in is optional; we only keep the anonymous identifier Apple provides. Subscriptions are processed by Apple (App Store); we never receive card details.

What we don't do

No selling of data, no cross-app tracking, no sharing of personal data with partners and no marketing profiles. Sponsored and partner content is always identified with a label and never appears on health screens, on the lost-pet poster or on the Apple Wallet pass.

Your rights

You can access, correct, export (vet PDF) and delete your data at any time in the app (Profile › Edit › Delete profile). For server or public-database data, contact support. We respond within LGPD and Privacy Act timeframes.

Health

Moka gives general guidance and does not replace a vet. Triage and food answers follow reviewed rules, never AI.

Contact

Get in touch through the support page.