Mozey Privacy Policy
Effective date: 2026-08-06 · Last updated: 2026-08-06
Mozey is a social walking app: you take steps, and they power friendly games with friends. This policy explains what the Mozey mobile app collects, why, who processes it, and the choices you have. It is provided by Goodweather Labs LLC ("Mozey", "we", "us"), 2108 N St, Ste N, Sacramento, CA 95816, United States. Questions: hq@goodweatherlabs.com.
Our posture, in one line: we collect the minimum to run the games, we never sell your data, and we run no advertising or ad-tracking SDKs of any kind.
What we collect, and why
1. Account & profile
- Your email address. We use it to create your account and sign you in. Mozey has no passwords: you sign in with a link or a six-digit code sent to your email.
- A display name and handle. These are how friends find and recognize you.
- An avatar. A small set of style choices that render a cartoon character. It is not a photo and is never built from one.
- Your date of birth. We use it to enforce our minimum age and apply protections for minors.
- When you accepted these terms, and which version.
2. Step counts (with your permission)
- With your permission, Mozey reads your step count from Apple Health (iOS) or Health Connect (Android).
- Mozey can also use a second motion permission, "Motion & Fitness" on iOS and "Physical activity" on Android, to show your step count updating live while you walk. When that live figure is ahead of what Health has settled on, it can be saved as your daily total so that reaching a goal unlocks immediately rather than minutes later.
- What leaves your device is a daily total, not your detailed health record. Hourly detail, workouts, heart rate, and every other health metric stay on your device and are never uploaded. Mozey requests step data only.
- On Android, if you place the Mozey widget, we also ask Health Connect for permission to read steps in the background so the widget can update on its own. On iOS the same background read is part of the Apple Health permission. Declining it only means the widget updates when you open the app.
- Your daily total updates the games you're in, your streak, and, unless you turn it off, the seasonal boards.
3. Social & game activity
- The friends and crews you form, the games you join, and your activity in them: step deposits, comments, and reactions.
- Invites you send or receive, and any blocks or reports you make.
- Notification preferences and your device's push token.
- Your device's time zone, sent when your steps sync, so a day is counted against your local midnight rather than ours.
4. Gameplay & rewards
- In-game currency ("Soles"), your level, and trophies. Soles cannot be purchased. There are no in-app purchases in Mozey, and no payment information is ever collected.
- Leaderboard standing. Mozey has two public boards: a worldwide steps board, and a monthly league of about thirty players. Both are on by default, and on either one other Mozey players, including players you are not friends with, can see your display name, handle, avatar and step totals. One switch covers both: Settings → Privacy → "Seasons & leaderboard." Turning it off removes you from the worldwide board and from your monthly league, and hides the Season tab. Accounts under 18 are kept off both automatically and cannot opt in.
5. Crash and performance diagnostics (on by default; you can turn it off)
- To find and fix bugs, the app sends crash reports through Sentry.
- A report includes the technical crash details, your device model and settings (OS version, app version, available memory and storage, battery state, screen size, locale and time zone), and a breadcrumb trail of recent app activity.
- Sentry also sends a short session record when you open and close the app, and performance timings for a 10% sample of app interactions.
- Before a report leaves your device we redact known identifying fields, including email addresses, display names, step counts and sign-in tokens, from the report's structured data and its breadcrumbs, and we strip query strings from any URL. This is a best-effort filter, not a guarantee. A report can still contain diagnostic text we did not anticipate.
- We record a small number of product events (for example, that the Highlights list was opened) inside that same breadcrumb trail. They carry no identity and are used to understand whether a feature works, never to build a profile.
- Turn all of it off in Settings → Diagnostics → "Send anonymous crash reports."
6. Network and sign-in records
Our backend and hosting providers log the IP address your device connects from, as any server does, and our authentication provider records your sign-in events including that address, as a standard security measure against abuse. We do not use these logs for anything else.
What we do NOT collect
- No precise location or GPS. Mozey never requests location access.
- No contacts or address book. You add friends by handle search or a share link.
- No photos, camera, or microphone. Avatars are generated, never photographed. The app bundles no camera, photo-library, or contacts library at all.
- No advertising, attribution, behavioral tracking, or session replay. We ship no advertising or attribution SDK of any kind. The only third-party SDK that receives anything is Sentry, and only what the diagnostics section above describes.
- No purchases. No payment processor, no in-app purchase library, no card details.
- We do not sell your personal information and do not share it for advertising.
Children & minors
Mozey is not intended for children under 13, and you must be at least 13 to use it. We ask for your date of birth during setup and our servers reject a date under 13, so you cannot finish setting up an account. We do not otherwise verify age. The under-18 protections below are enforced by our database, not only by the app.
For accounts under 18 we apply additional protections automatically, and they cannot be switched off:
- The account is not discoverable by name.
- The account is kept off both public seasonal boards.
- Comments and reactions are limited to games where every other player is already a friend.
We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has given us information, contact hq@goodweatherlabs.com and we will delete it.
How we use your information
- Operate the product: run your games, sync your daily step total, show friends and crews, deliver the notifications you've enabled.
- Maintain safety and integrity: enforce blocks and reports, prevent abuse and cheating, enforce the age minimum.
- Fix and improve the app: diagnose crashes and understand whether features work.
We do not use your data to build advertising profiles or to train models.
Who processes your data
We use service providers who process data on our behalf, under contract:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Backend, database, authentication | Account, social and game data; sign-in records including IP address |
| Resend (our email relay, via Supabase, which delivers through Amazon SES) | Sending sign-in emails | Your email address, and the sign-in link or code itself |
| Cloudflare | Hosting mozey.app and routing sign-in links | IP address and the sign-in link, when a link opens in a browser |
| Sentry | Crash and performance diagnostics (on by default, can be turned off) | Crash reports, scrubbed of identifying values |
| Expo, Apple (APNs), Google (Firebase Cloud Messaging) | Push-notification delivery | Push token and notification content, which can include another player's display name |
| Apple / Google | App stores and health frameworks | Health permission is granted and revoked by the operating system |
| Migadu | Hosting our email inboxes | Anything you send us by email, and any sign-in email that bounces back |
Because Mozey signs you in with an emailed link, that email contains a working sign-in credential for one hour, and the providers that carry it can technically access it during delivery. We use established providers under contract for exactly this reason.
We do not share your personal information with anyone else, except as required by law or to protect rights and safety.
Your choices & rights
- Crash reporting: turn it off in Settings → Diagnostics.
- Leaderboard: turn it off in Settings → Privacy.
- Notifications: control which notifications you receive in Settings and in your OS settings.
- Health permission: grant or revoke step access anytime in your device's Health settings. Revoking stops new step reads.
- Deletion: delete your account from Settings → Account → Delete account. See below for exactly what that does.
- Access or a copy of your data: email hq@goodweatherlabs.com and we will respond. There is no automated export in the app today; we handle these by hand.
If you are a California resident, you may ask us to disclose or delete the personal information we hold about you, and you may not be discriminated against for asking. We do not sell or share personal information as those terms are defined under California law, and we never have.
Deleting your account
You can delete your account from within the app, or, if you no longer have it installed, by following the steps at mozey.app/delete-account. It is one-way. When you do:
Deleted outright: your email address and sign-in record, your date of birth, your daily step history, your comments and reactions, your friends, crews, blocks and mutes, your invites, your push tokens, your notification and leaderboard settings, your Soles ledger, level, streak, inventory and equipped items.
Kept, with your name removed: the games you played. Scores, deposits, final standings and celebrations stay on the board for the other players, attached to an account with no name, no handle and no picture. We keep them because deleting them would rewrite other people's record of a game they played.
Also kept: your seasonal standings, including a step total for each season you played, your trophies and awards, and your league placement, because other players were ranked against them. Also reports filed about you, and the record that you filed a report about someone else, in both cases so that deleting an account cannot clear a moderation queue: the text you wrote is removed, the record that it happened stays. And the fact that an invite connected you to another account.
Please read this part plainly: because your games stay on the board, the step counts recorded inside them stay too. Your account is stripped of everything that identifies you, but it is not erased from our database. The records that remain are de-identified, not anonymous, and could in principle be re-linked by someone with other information. If that matters to you, it should factor into your decision.
Deleting your account does not remove data from your own phone until the app removes it locally, and it does not affect emails already sitting in your inbox.
If any step of the deletion cannot complete, we finish it by hand. Contact hq@goodweatherlabs.com if you would like confirmation.
Retention: we keep account data while your account exists. After deletion, the categories above apply. We do not currently run automated expiry on game history or diagnostic data; Sentry retains crash reports according to its own retention settings.
Security
Data is encrypted in transit. Access is gated by database row-level security, so other players see only what they are permitted to see. Crash reports are stripped of identifying values before they leave your device. No method of transmission or storage is completely secure, but we work to protect your information and to limit how much of it exists in the first place.
Where your data is processed
Mozey is offered in the United States, and our providers process data in the United States.
Changes to this policy
If we make material changes we will update the "Last updated" date above and give you notice before they take effect. Continued use after an update means you accept the revised policy.
Contact
Questions or requests: hq@goodweatherlabs.com · Goodweather Labs LLC, 2108 N St, Ste N, Sacramento, CA 95816, United States.