Moro (“the App”) is a third-party client for Mastodon and the fediverse, developed by somincola llc (“we”, “us”, “our”). This policy explains what information the App handles and where it goes.
For a plain-language view of each service boundary, see the Moro transparency page.
The short version
- Your account, posts, messages, follows, and media are exchanged directly between the App and the Mastodon server you choose.
- Your access tokens are stored in the iOS Keychain and marked to remain on this device.
- Moro does not include advertising or cross-app tracking, and we do not sell your data.
- If you enable push notifications, our self-hosted relay forwards encrypted notification payloads to Apple Push Notification service (APNs). Decryption happens on your device.
- If you choose to share diagnostics with app developers in iOS, Apple may provide us with crash and performance reports.
Information the App handles
Stored on your device
- Access tokens and session credentials for the server accounts you add, stored in the iOS Keychain with a this-device-only accessibility setting.
- Local caches, preferences, and downloaded media used to operate the App.
- Web Push encryption keys used to decrypt notification content on your device.
Exchanged with your Mastodon server
Posts, replies, direct messages, follows, boosts, favourites, profile changes, searches, and related account activity are sent to and received from the independently operated Mastodon server you choose. That server’s privacy policy and terms apply to its processing of your data.
Push notifications
If you grant notification permission, Moro registers your device with APNs and creates a Web Push subscription with your Mastodon server. The subscription endpoint contains an APNs device token and an opaque local session identifier and points to our relay at push.somincola.org.
The relay receives the encrypted Web Push payload from your Mastodon server and forwards that ciphertext to APNs. Moro’s notification extension decrypts the content on your device. Apple processes device and delivery information under Apple’s own privacy terms. Disabling notifications stops new push delivery; removing an account removes its subscription from the App’s active configuration.
Data we do not collect for tracking
Moro does not use third-party advertising, behavioural analytics, or crash-reporting SDKs in the App. We do not track you across apps or websites and do not build advertising profiles. The current App Privacy manifest declares no tracked domains and no data types collected by the App developer.
Diagnostics provided by Apple
If you enable “Share With App Developers” in iOS analytics settings, Apple may provide us with crash logs, performance diagnostics, and related device or operating-system information. We use those reports only to investigate reliability problems. They are not connected to your Mastodon posts, messages, or access token by Moro.
Website analytics
This public marketing website uses Google Analytics only after you explicitly allow it. We measure page visits, views of the download section, App Store link clicks, and support contact clicks. Website analytics are not connected to your Mastodon account or activity in the Moro app.
When analytics is enabled, Google receives technical information such as the page URL and IP address. Advertising storage, advertising user data, and ad personalization remain disabled. You can change your choice through “Analytics preferences” in the footer.
In-app purchases
If Moro offers optional purchases or tips, Apple processes payment. We do not receive or store your full payment-card details.
Data retention and your choices
- Remove an account to delete its stored access token and session credentials from the App’s Keychain records.
- Clear cached content from the App where controls are available.
- Disable notifications in iOS Settings.
- Uninstall Moro to remove its local app data from your device.
Children
Moro is not directed to children. You must meet the minimum age required by your region and by the Mastodon server you use.
Changes to this policy
We may update this policy as Moro changes. Material changes will be published here with a revised date and reflected in the public website repository history.
Contact
somincola llc
[email protected]