This page describes what is asked, who is asked, what is kept and how results are reported. It applies to every app that uses Moyo.
Up to three short questions about how the person feels after using the app: mood, whether time went as meant, whether they did what they came to do, whether they could stop, what they put off, and how they feel about what they spent. Wording is fixed and the same in every app.
A random sample of sessions, after a set number of minutes in the app. The sampling decision is made by Moyo, not by the app. Nobody is asked more than once every 7 days. Every question can be skipped, and dismissing is never penalised.
The answer, the question, the app, the platform and the week. No account, name, email, device identifier, IP address or location. There is no column in which any of those could be stored, and no timestamp finer than the week.
Results are shown as how answers split across the scale. A 0 to 100 index is a secondary summary. Nothing is shown for fewer than 50 responses, to the app or to anyone else.
For the four 1 to 5 scales the index is the mean answer rescaled to 0 to 100. The other two dimensions are not scales, so they are stated plainly instead: "Ability to stop" reports the share who answered Yes, and "Real-world connection" reports the share who put nothing off. An index whose derivation is private is not a transparency measure.
Because an answer records only the week it was given in, periods are counted in whole weeks: the week in progress plus the four complete weeks before it for a 30 day reading, one for 7 days and thirteen for 90. The exact weeks are published with every reading through the API, so the label can always be checked against the data.
A person is not asked again for 7 days. That is enforced on their device and, as a second check, against a salted hash of the network and browser the request came from, which is discarded after a week. It is deliberately not exact: an office behind one connection may be asked less often, and someone switching device or network may be asked sooner. Making it exact would mean identifying people, which is the thing Moyo refuses to do.
Apps cannot see individual answers, change the questions, or edit or delete answers. Moyo cannot either. Answers are appended to a log the application has no permission to modify.
An app can choose to publish a certificate. Once published it shows every reported dimension and updates daily, whatever the readings are, including the dimensions that are still below the 50 response minimum. Each day is recorded with a checksum over the exact figures published, and each checksum references the one before it, so anyone can confirm a certificate was not altered after the fact.