Privacy Policy.

Who we are

SuperMoo is made by Reweave, Inc., a 501(c)(3) nonprofit building tools for movement and learning. Find out more at reweave.org.

What data SuperMoo collects

There is no account, no login, no name, and no email address. We never learn who you are. The one exception is buying premium in the Chrome extension: that checkout page, which RevenueCat runs, asks for your email address for the receipt. It is described under purchases and under the Chrome extension below.

As of version 6.0 there is no advertising SDK in SuperMoo on any platform. The Meta SDK is gone from both the iPhone and Android apps. So is the Apple tracking prompt, so is the advertising identifier, and so is the Google Play Install Referrer. Android now has no ad attribution at all.

One measurement tool remains, and only on iPhone and iPad: Apple's own attribution token, described in the advertising section below. There is nothing equivalent on Android, Mac or Chrome.

What leaves your device, complete list. There are six things and this is all of them. Each one names the company on the other end.

• A purchase receipt and a random identifier, to RevenueCat, so a purchase you already made survives a reinstall. RevenueCat is a payments provider, not an ad network and not a data broker.
• Apple’s attribution token, on iPhone and iPad only, to RevenueCat, which asks Apple whether an App Store ad led to the install. Described in the advertising section below.
• A weather lookup, for the UV index behind weather-aware nudges, and it depends on your device. On iPhone and iPad it goes to Apple Weather (WeatherKit), Apple’s own service, and nowhere else. On Android it goes to Open-Meteo, a non-commercial weather service. Either way the location comes from the city you typed, never from your device’s GPS.
• A city search, for the same feature, when you are choosing that city. A city name goes to Open-Meteo’s place lookup. A postcode goes to OpenStreetMap’s place lookup instead. Only the text you typed is sent.
• A version check, on iPhone and iPad only, against Apple’s own listing, to see whether a newer SuperMoo exists. It carries nothing about you.
• A typeface request. SuperMoo’s fonts ship inside the app. As a safety net the app also asks Google Fonts for its stylesheet on launch, and would ask jsDelivr for a font file only if a bundled one failed to load. Like any web request those carry your IP address and a description of your device, and nothing about you or your moves. We would rather remove this than keep describing it, and when it goes, this line goes with it.

The only companies that receive anything at all are the ones named above. There is no separate analytics product in SuperMoo, no advertising network, no crash reporter, no social login and no data broker.

Want any of it gone? How to delete your data.

Apple and Google each ask developers to declare this on the store listing. Those declarations are kept current, and this policy will never claim less than they do. We describe behaviour here rather than repeating a label, because a label can be edited in a console and a policy should not quietly fall out of step with it.

Health and Fitness is not collected at all: SuperMoo writes completed moves into your own Apple Health store and can never read anything back, and writing to your own device is not collection by us.

The following information is stored only on your device using local storage on your phone (and your Apple Watch, if paired). It is never sent to a Reweave server. The one exception is Apple devices you sign in to with the same Apple ID: your goal, pause, which-moo-are-you verdict and (with premium) your mooves sync between them through your own iCloud account:

• Your daily move counts and move history
• Your current streak and all-time totals
• Your reminder preferences (days, times, frequency)
• Your move goal
• Whether you've completed onboarding
• Sound and notification settings
• Watch app sound preference (on the watch only)
• A small record of whether each reminder was scheduled successfully, so support can tell a real fault from a battery setting if you ever ask for help (added in 6.1)

This data is deleted if you delete the app. We have no copy of it.

Purchases and payments

On iPhone and iPad, purchases are processed by Apple through the App Store. On Android, by Google through Google Play. On the Mac menu bar app, by Apple through the Mac App Store. The Chrome extension is different. Its one-time purchase runs through RevenueCat’s own hosted checkout page, with Stripe as the payment account behind it, so your card details go to Stripe and never to us. That checkout page also asks for your email address so it can send a receipt. RevenueCat keeps the email with your purchase record, where we can see it, and it is the only email address any part of SuperMoo collects. Nothing is sold through the Chrome Web Store, which stopped processing payments years ago.

RevenueCat verifies purchase status on iPhone, iPad, Android and Chrome. The Mac menu bar app does not use RevenueCat; it talks to Apple directly.

RevenueCat receives a randomly generated anonymous identifier to track your purchase status. No name, email, or personal information is shared. You can review RevenueCat's privacy policy at revenuecat.com/privacy.

We do not store or process your payment details. All payment handling is done by Apple, Google, or Stripe.

Notifications

If you grant permission, SuperMoo schedules local notifications on your device as movement reminders. These are generated and stored entirely on your device. No notification content is sent to or processed by any external server.

When you ask us for help

From version 6.1, Settings has a need a hoof? group with an email moo's team button. It opens your own mail app with a draft addressed to us. Nothing is transmitted by SuperMoo itself, and nothing goes anywhere until you press send.

The draft is prefilled with the things that let us actually help: your app version and build, platform and OS version, whether you have premium, whether reminders are allowed and how many are lined up, your timezone name, your support ID, and a one-line count of how many reminders scheduled successfully or failed. You can delete any line before sending. It deliberately contains nothing from Apple Health, nothing about your moves or streaks, and no location beyond the timezone name.

The support ID shown in the same group is the random RevenueCat identifier described under Purchases above. Sharing it lets us find a purchase without learning who you are.

Once you send an email we have your email address and whatever the message contains. We use it only to reply to you. It is not added to any list, not shared with anyone, and you can ask us to delete it at any time by replying to the same thread.

Audio assets

The app's songs ship inside the app, so playing one sends nothing anywhere.

Analytics

There is no general analytics service. Firebase Analytics was removed and nothing replaced it, so SuperMoo does not report how you use the app to anyone. No session replay, no heatmaps, no data brokers.

SuperMoo collects no product interaction data at all. Not anonymously, not in aggregate, not for our own curiosity. The logging function inside the app is an empty stub: more than 300 places in the code call it, and every one of them goes nowhere. That is why Product Interaction was removed from the App Store privacy label outright rather than declared and marked non-tracking. We do not know which buttons you press, which mooves you pick, or how often you open the app.

One advertising measurement tool remains, on iPhone and iPad only.

• Apple's attribution token. SuperMoo hands Apple's token to RevenueCat, which asks Apple whether an App Store search ad led to the install and keeps the answer beside the random purchase identifier. It needs no tracking prompt because it is Apple's own mechanism rather than a third party's, and it carries no name, email or contact details. It exists for one reason: a nonprofit running a small ad budget has to know which ads are worth paying for.

There is no equivalent on Android, Mac or Chrome. Those three have no ad measurement of any kind.

It does not receive your moves, streaks, goals, history or settings. We verified that by reading the source rather than trusting our memory of it.

The advertising SDK we removed

Until version 6.0, SuperMoo carried Meta's SDK on iPhone and Android so we could tell whether the ads we paid for actually worked. It is gone. Removed from both apps in the same release, in August 2026.

Gone with it, on iPhone: the Apple tracking prompt, the Facebook configuration keys, and both Meta SKAdNetwork entries. On Android: the Meta SDK, the Google Play Install Referrer, and the AD_ID permission that made the advertising identifier readable at all. Google Play now records that SuperMoo does not use an advertising ID.

What this means in practice. There is no tracking prompt on first launch any more, because there is nothing left to ask permission for. Nothing about your install or your usage reaches Meta or any other advertising company. On Android there is now no ad attribution whatsoever, which we accepted as the cost.

We are not going to dress this up as a moral awakening. The immediate trigger was a Google Play policy requirement for apps that reach children. But we had been uncomfortable with it for a while, the app is put in front of classrooms by teachers, and once we looked properly the SDK was doing far less for us than it was costing anyone who installed.

The only ad measurement left anywhere in SuperMoo is Apple's own attribution token on iPhone and iPad, described in the section above.

Apple Health

Apple Health is a premium feature on iPhone, and it stays off until you turn it on. Once you grant permission, each moove you finish is saved to Apple's Health app as a short workout that counts toward your exercise minutes. It cannot close your Move ring. SuperMoo only writes these completed moves to Health; it never reads your health data.

This data is written directly to Apple's Health database on your device. It does not leave your device. Reweave does not see it, store it, or have any access to it.

You can revoke this permission at any time in iOS Settings → Health → Data Access & Devices → SuperMoo. The app continues to work normally if you decline or revoke.

The Mac menu bar app

The Mac menu bar app is built differently from the phone apps. It has never contained an advertising SDK or a tracking prompt, and unlike the phone apps it does not use RevenueCat either; it handles purchases through Apple directly using StoreKit.

One thing worth being straight about: Apple sets the App Privacy label per app record rather than per platform, so the Mac product page displays whatever the iPhone record declares. The paragraph above describes what the Mac build itself contains.

The Chrome extension

The extension is the easiest one to verify for yourself, because a browser extension has to declare everything it can touch and anyone can read that declaration. Ours asks for three permissions: alarms to schedule your reminders, notifications to deliver them, and storage to keep your settings and move history on your own machine. It asks for one outside address, RevenueCat's API, purely to check whether premium has been purchased. Version 2.0 asks for exactly the same permissions as the versions before it.

One thing to be upfront about, because it is the only identifier the extension itself sends. The extension checks your premium status with a random identifier. In versions before 2.0 it makes that identifier the first time it checks, stores it on your machine, and sends it to RevenueCat each time it checks again. From version 2.0 it makes the identifier only when you open premium, so a new install sends RevenueCat nothing at all until then, and anyone updating from an earlier version keeps the identifier they already have. Version 2.0 keeps it in your browser's sync storage, so if you have your browser's sync turned on, that sync carries it to your other computers and a purchase follows you there. In every version it is a random string, it is tied to nothing else about you, and it exists so a purchase you already made keeps unlocking premium. It goes only to RevenueCat, it is not shared with anyone else, and it is not used for advertising.

And one more, if you buy premium. The upgrade button opens RevenueCat's hosted checkout page in a new tab. That page asks for your email address so it can send a receipt, and Stripe takes the card. RevenueCat keeps the email with your purchase record, where we can see it. The extension itself never reads or sends your email.

It has no permission to read any page you visit. There is no tabs permission, no activeTab, and no content scripts, so the extension cannot see the pages you have open, their addresses, or anything you type into them. That is not a promise, it is the manifest, and checking it takes about thirty seconds.

In versions before 2.0, one line in that manifest looks alarming and is not, so here it is before anyone screenshots it out of context. Those versions mark the extension's own five sound files as loadable by any page. That points the opposite way from a permission: it lets a page load our mp3 files, and gives the extension no access to anything at all. Version 2.0 removes that line.

You do not have to take our word for the storage part either. This is the justification filed with Google for versions before 2.0: "Used to save the user's reminder settings, move history, streak, and premium status locally on their device. No data is sent to external servers except RevenueCat for purchase verification." For version 2.0 it reads: "Keeps the member's settings (days, hours, goal, sounds, premium schedule), their daily moove counts, their week, their level and total, and the state of a moove in progress, all on their own device in chrome.storage.local. The one exception is the random purchase id, kept in chrome.storage.sync so a premium purchase follows the member's browser profile to a new computer. Nothing in storage is sent to Reweave." That is what we told Google, and it matches what this page tells you.

The extension has never contained an advertising SDK of any kind. As of version 1.2 the fonts are bundled with it rather than fetched from Google, so once installed it contacts nothing on the internet except RevenueCat, and from version 2.0 a new install does not contact even RevenueCat until you open premium. In every version, its Chrome Web Store listing declares zero data collected across all nine of Google’s categories. That is a different answer from the App Store label, and both are correct, because these are genuinely different builds with different code in them.

Apple Watch sync

If you have an Apple Watch paired with your iPhone, SuperMoo uses Apple's WatchConnectivity framework to sync your move count, daily goal, streak and (with premium) your nudge hours and days between the two devices. This sync happens locally over Bluetooth between your devices. The data does not pass through any Reweave server.

The watch app stores its own copy of move data on the watch using on-device storage. Same rule: never leaves the device.

Wear OS sync

If you use the free SuperMoo Wear OS app with your Android phone, the phone and the watch exchange your move count, daily goal, streak and Dracu-Moo's mood through the data connection Google provides between a Wear OS watch and its phone, and a moove you log on the watch goes back to the phone the same way. None of it passes through a Reweave server.

Third-party services

The third-party services SuperMoo uses are: RevenueCat (subscription management), Givebutter (only on the donate page of this website, to process donations), Apple Weather (the UV index on iPhone and iPad), Open-Meteo (the UV index on Android, and city search everywhere), OpenStreetMap (postcode search), Google Fonts and jsDelivr (the font safety net), and Apple Health (SuperMoo writes your completed moves to the Health app, on your device only, and never reads anything from it). No behavioural trackers or data brokers are used.

Children's privacy

SuperMoo is made for adults and is not directed at children. It has no account system, so the apps never ask anyone for a name, email address or contact detail. The one email SuperMoo collects is the receipt address a buyer types into the Chrome extension's checkout page. There is no advertising SDK in the app on any platform, no advertising identifier is read, and no profile of any user is built anywhere. The one remaining measurement tool, Apple's attribution token on iPhone and iPad, reports whether an App Store ad led to an install and nothing about the person who installed it.

Changes to this policy

When we update this policy, the new version goes live at this URL with a fresh date at the top. If we ever start collecting more data, we'll say what and why in plain English.