Tokens stay in Keychain
Account credentials use a this-device-only iOS Keychain setting.
Trust center
Where your data goes
Moro is a client, not a social network. These are the paths your information can take when you use the App or this website.
No advertising profile
The App has no advertising SDK and does not perform cross-app tracking.
Your server holds the social data
Posts, follows, messages, and media are handled by the Mastodon server you choose.
Public policy history
These trust pages and their changes are visible in the public website repository.
Data paths
Three boundaries, plainly drawn.
Each path has a specific purpose. Website analytics never receives your Mastodon account activity.
Reading and posting
The App talks directly to your chosen server.
- Your iPhoneMoro and its local Keychain
- Your Mastodon serverAccount, posts, media, and social graph
Optional push notifications
Notification content remains encrypted until it reaches your device.
- Your serverCreates an encrypted Web Push payload
- CiphertextContent is encrypted for your device keys
- Moro relayForwards the encrypted payload
- Apple Push serviceDelivers the notification
- Your iPhoneDecrypts and displays the content
This website
Analytics stays off until you allow it.
- Moro websiteMarketing, support, and trust pages
- Your choiceAllow or decline optional analytics
- Google AnalyticsPage and link events only after consent
Source availability
Private product code, public trust record.
The Moro iOS application source is private and proprietary. The website repository, policy changes, and security contact are public so the commitments on these pages have a visible history.