Privacy guarantees

What Moyo stores, what it never stores, and what partners can see.

Never collected

Account IDs, emails, names, device identifiers, advertising IDs, IP addresses and precise location. The ingest endpoint drops the connecting IP before the answer is written.

Stored with an answer

That is the whole row, plus a random identifier that carries no information. There is deliberately no check-in id, so the three answers given in one sitting cannot be grouped back together, and the identifier is a random UUID rather than a sequence for the same reason — consecutive numbers would regroup them.

A check-in event is recorded separately, with a timestamp, because that is Moyo’s record of its own service and what your bill is counted from. It shares no key with any answer.

What partners see

Totals for groups of 50 or more. There is no endpoint that returns individual answers, for you or for us.