Privacy Policy — MoonQ

Version 2.1 / 2026

1. Controller

The controller of your personal data is Przyjemna spółka sp. z o.o., al. Armii Ludowej 7/68, 00-575 Warszawa (NIP: 7011302955). Contact: moonq@heartmade.pl or by post: Przyjemna spółka sp. z o.o., al. Armii Ludowej 7/68, 00-575 Warszawa (NIP: 7011302955).

2. Data we process

In connection with MoonQ we process in particular:

• Account and billing: email address, Stripe identifiers (e.g. customer / subscription IDs), payment status, language and time zone.
• Telegram: Telegram chat ID linked to your account.
• Cue configuration: partner name, cycle start date (e.g. first day of last period), average cycle length, preferred message delivery hour.
• Service content: history of sent cues (e.g. message text, phase, cycle day, timestamps).
• Technical and security: server logs, request identifiers, diagnostics.
• Analytics and errors (if enabled): product and technical events via tools such as PostHog and Sentry, according to their policies and your cookie choices on the website.

3. Purposes and legal bases (GDPR)

1. Providing MoonQ (configuration, sending cues, account handling) — Art. 6(1)(b) GDPR (contract / pre-contract steps).
2. Payments — Art. 6(1)(b) and, where required, (c) GDPR (legal obligations, e.g. accounting records).
3. Legitimate interests of the Provider — Art. 6(1)(f) GDPR: IT security, fraud prevention, defence against claims, basic product analytics (as permitted), correspondence archives.
4. Marketing / newsletter (if launched) — Art. 6(1)(a) GDPR (consent), until withdrawn.
5. Website cookies — as described in the Cookies section below and your choices in the preference banner, where applicable.

4. Recipients and processors

We use processors only as needed to run the service, including:

• Supabase (database and backend infrastructure),
• Stripe (payments),
• Telegram (message delivery),
• Google (Gemini) (cue text generation),
• PostHog (analytics, if enabled),
• Sentry (error monitoring, if enabled),
• Cloudflare or another website host.

The list may be updated; we will reflect material changes in this policy.

5. Transfers outside the EEA

If a provider processes data outside the European Economic Area, we use EU-approved mechanisms (e.g. Standard Contractual Clauses) or other GDPR grounds.

6. Cookies

On https://moonq.app we may use cookies:

• Strictly necessary — site operation and security.
• Analytics — usage statistics if you consent via the preference banner.

You can change preferences in the banner or in your browser. Help links: Chrome, Safari, Firefox, Edge.

7. Retention

We keep data for the duration of the contract (subscription) and afterwards as long as necessary to defend claims, meet legal duties (e.g. tax), or according to separate rules for logs and analytics.

8. Your rights

You have the right of access, rectification, erasure, restriction, objection to processing based on Art. 6(1)(f) GDPR, data portability (where applicable), withdrawal of consent at any time (if processing is consent-based) without affecting prior lawfulness, and the right to lodge a complaint with a supervisory authority (in Poland: the President of the Personal Data Protection Office).

9. Automation

Cue text may be produced using AI. We do not make solely automated decisions with legal or similarly significant effects on you within the meaning of Art. 22 GDPR based on that content alone.

10. Changes

The current version is always available at https://moonq.app/privacy-policy/. We will inform you reasonably of material updates.