MOEV

Privacy Policy

Effective October 23, 2026 · Last updated October 25, 2026

This Privacy Policy describes how Dominion Apex Labs LLC, a Tennessee limited liability company ("MOEV," "we," "us" or "our"), collects, uses, discloses and protects personal information in connection with the MOEV mobile application, the website at moev.app, the MOEV feed and related services (collectively, the "Service"). Capitalized terms not defined here have the meanings given in the Terms of Service.

1. Information we collect
2. How we use information
3. Automated processing and AI
4. Face detection and biometrics
5. Who can see your Content
6. Service providers and disclosures
7. No sale and no targeted advertising
8. Cookies, browser storage and GPC
9. Text messages
10. Data retention
11. Your rights and choices
12. State privacy disclosures
13. Teen accounts and parents
14. Children under 13
15. Ambassador Program
16. Security
17. Data location
18. Changes to this Policy
19. Contact

1. Information we collect

Information you provide

• Account information. Your email address, which we use to send sign-in codes, and the username and display name you choose. If you use Sign in with Apple or Google where available, we receive the name and email address that provider shares with us. If you use text message sign-in where available, we receive your mobile number.
• Date of birth. Collected once when you create an account in the app to apply age requirements. It is never displayed. If you are under 13, it is not stored (see Section 14).
• Profile information. An optional bio and profile photo. A profile photo is a single image you choose from your device; it is resized, which removes its location and other metadata, and reviewed before it is displayed.
• Content. Photos taken with the MOEV camera, roll names, the vibe you choose, any city and state you add, and comments and reactions.
• Settings and choices. Such as public or private rolls, profile visibility, "Let MOEV share," "Don't feature me" and notification preferences.
• Communications. Reports, removal requests, appeals, privacy requests, beta feedback (with any contact details you choose to add) and messages you send us.
• Error reports. If a page on the website runs into a technical error, it sends us the error message, the page address without its query string, and your browser type, so we can fix it. Error reports never include photos or anything you typed into a form.
• Parent contact information. When teen accounts are available, the email address or mobile number of the parent or guardian a teen provides, and the parent's decision.
• Mobile number for text alerts. Where text messaging is available and you opt in, your number and a record of your consent.

Information collected automatically

• Identifiers. A randomly generated account ID and, for website guests, a randomly generated guest ID associated with your browser.
• Time zone and device information. Your time zone and device platform (such as iPhone or Android), used to schedule reveals and operate the app.
• Usage information. How reveals and the feed are viewed, such as plays, seconds watched, replays, completions, saves, shares, reactions and quick skips, and daily counts of website visits by page and by the kind of site a visit came from (for example Facebook or Instagram), and of taps on Start a roll and Join. Visit counts are totals only and are not linked to you, your device or your account. This is first-party data stored in our own systems; no third-party analytics provider receives it.
• Feed preferences. Aggregate numbers derived from your own feed activity (for example, the kinds of reveals you finish or skip) that personalize your feed. See Section 3.
• Connections. A record of which accounts were in the same roll or connected in person by scanning a friend QR code, and short-lived counts of certain activity used to protect teens. No location is involved.
• Push token. If you allow notifications, a token that lets us deliver them to your device.
• Technical logs. Our hosting providers receive your IP address and basic request information when your device connects, and keep short-lived logs for security and troubleshooting.

Information from others

• Purchases. Apple or Google, through our subscription service RevenueCat, tell us your plan, trial status and renewal date. We do not receive your payment card number.
• Other users. Photos taken by others in a roll you are in may include you. Others may report Content or request removal.
• Parents and guardians, who approve teen accounts when that feature is available.

Information we do not collect

MOEV does not access your device's precise or approximate location, your contacts, your browsing history, advertising identifiers or health data, and does not collect biometric identifiers. MOEV does not access your photo library except to save reveals and photos when you ask, and to upload a single profile photo you choose. The app's camera does not record audio. Photos are captured without location metadata: the app disables photo metadata, and the website captures photos directly from the camera stream, which carries none. On the website, the optional "Record your reaction" feature uses your camera and microphone only while you record, creates the video on your device and does not upload it unless you choose to share it.

2. How we use information

• To provide the Service: authenticate you, store photos, keep them hidden until the roll develops, produce reveals, deliver them to the right people and operate public features.
• To communicate with you: sign-in codes, notices that a reveal is ready, roll reminders, receipts and important notices about your account or our policies. We do not send marketing text messages, and you can turn off non-essential emails.
• To keep the Service safe: review photos and comments, handle reports and removal requests, prevent spam, fraud and abuse, protect teens and comply with legal obligations, including reporting child sexual exploitation.
• To improve the Service: improve how reveals are edited and how the feed is ranked, including training MOEV's own models as described in Section 3.
• To operate paid plans and the Ambassador Program.
• To comply with law and protect the rights and safety of MOEV, our users and others.

We do not sell personal information, share it for advertising, build advertising profiles, or allow any third party to train artificial intelligence models on your photos, and we do not permit our service providers to do so with data we provide. We may use photos and related data to train and improve MOEV's own models as described in Section 3. We will ask for your consent before using personal information for a purpose materially different from those described in this Policy.

3. Automated processing and AI

Every photo is automatically checked for safety by an AI service before it can be shared publicly. Nothing is used to identify people.

MOEV's own models. We may use photos, reveals and related usage information (such as which shots were chosen, pacing, and how reveals are watched) to train, test and improve MOEV's own models that build and rank reveals. This processing is limited to operating and improving MOEV, does not involve facial recognition or identifying any person, and excludes Content from accounts of users under 18. You can ask us to exclude your Content from model training at any time by emailing hello@moev.app with the subject "Model training opt-out"; exclusion applies going forward.

• Safety review. When a roll develops, each photo that has not been reviewed is sent as a downsized copy, through a short-lived private link, to an automated safety service (currently Google Cloud Vision SafeSearch; Anthropic's Claude may be used instead). The review returns content labels only, such as sexual content, violence, hate symbols, weapons and drugs. When Claude is used, it also flags whether someone appears to be under 18 or a minor appears to be in an unsafe situation. We store the resulting decision and labels. MOEV personnel review flagged photos. Profile photos receive the same review.
• Editing. To produce a reveal, an AI model (Anthropic) reviews small copies of the photos and returns scores and editing suggestions, such as image quality, energy, the number of people in a photo, blur, suggested crops for screenshots and suggested opening and closing photos. We keep the scores and a summary of the edit, not the model's descriptions. If Google Cloud Vision is used as a backup, we request only general scene labels and SafeSearch results.
• Editing improvements. We record each reveal's edit settings and how viewers watch it, and use those statistics to adjust future edits automatically. This automatic adjustment uses numbers only, never photos, and is not applied to rolls that include a teen.
• Feed personalization. The default "For You" feed may adjust the order of public reveals based on aggregate preferences derived from your own viewing activity in the Service, within fixed limits. Where sorting options are offered, you can choose a non-personalized order, such as Newest, at any time.

We never ask an AI provider to identify anyone. Our providers process photos only to return these results, and we select providers whose business terms do not permit training on data we send. Comments are reviewed by our own filters.

Automated review is not perfect. A flagged photo is held off the public feed until a person reviews it, and you may ask for human review of any decision by emailing us.

4. Face detection and biometrics

When our render engine produces a reveal, it runs a face detection model on our own servers to locate faces in each frame as rectangles, so that crops, pans and split screens do not cut through a face. When a person asks to be blurred, MOEV personnel may use the same tool on that photo to place the blur. That is the only use.

• It does not recognize, identify, verify or match anyone, and it does not compare faces across photos, rolls or people.
• It does not create or store a face template, faceprint or any scan of face geometry.
• Face locations exist only in memory while a reveal is rendered or a blur is placed, and are then discarded. After a blur, we keep the blurred photo and the rectangle that was blurred, not any information about the face.
• The safety review returns content labels only and is not face recognition.

MOEV does not collect, capture, purchase, receive, obtain, store, use, sell, lease, trade, disclose or profit from biometric identifiers or biometric information as defined in the Illinois Biometric Information Privacy Act (740 ILCS 14), biometric identifiers as defined in the Texas Capture or Use of Biometric Identifier Act (Tex. Bus. & Com. Code § 503.001) or Washington law (RCW 19.375), biometric data under Washington's My Health My Data Act (RCW 19.373), or biometric data under any other state privacy law. Before any such collection, we would publish a written retention and destruction policy and obtain your written consent.

5. Who can see your Content

• Before a roll develops: no user, including you. MOEV personnel access photos only as needed to review flagged Content, reports or removal requests, to provide support you request, to maintain security, or to comply with law.
• Solo rolls: only you, unless the roll is public or you share the reveal.
• Private group rolls: everyone in the roll can see its photos and reveal, including photos in which you appear. Participants may save or share them.
• Public rolls: after the roll develops and passes the safety review, the reveal may appear on the MOEV feed, on the host's public profile and at a link anyone can open. Participants are told before their first photo, and the host may make the roll private at any time.
• Your profile: for adults, public by default, showing your display name, username, bio, profile photo, public reveals and summary counts. You may hide your profile, reveals or counts, and may choose to show the states where you have rolled and the people you roll with. Your date of birth, email address and phone number are never shown.
• Hosts: the host of a roll can see the display name, username and profile photo of participants with a MOEV profile, with these limits: if a participant has blocked the host, the host sees only their display name; for a teen participant, the host sees the teen's first name and username but not their profile photo, unless the host is also a teen.
• Comments and reactions on public reveals are public.
• Place: only the city and state the host enters, or the state only for reveals that include a teen.

6. Service providers and disclosures

We use the service providers listed below to operate the Service. They process personal information on our behalf under contracts that limit its use to providing services to us and prohibit its sale or use for their own advertising. Some are used only when the related feature is enabled.

We may also disclose information: as required by law or valid legal process (see our law enforcement policy); to report apparent child sexual exploitation to NCMEC; to prevent death, serious physical harm or fraud; to enforce our Terms; and to a successor in a merger, acquisition or sale of assets, which must honor this Policy for information collected under it. We will notify you before your information becomes subject to a different privacy policy.

7. No sale and no targeted advertising

We do not sell personal information, and we do not "share" personal information for cross-context behavioral advertising or process it for "targeted advertising," as those terms are defined in the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, "CCPA"), and in other U.S. state privacy laws. We have not done so in the preceding 12 months. We have no actual knowledge of selling or sharing the personal information of consumers under 16 and will not do so. We use and disclose sensitive personal information only as necessary to provide the Service, so a "Limit the Use of My Sensitive Personal Information" link is not required.

8. Cookies, browser storage and Global Privacy Control

• MOEV does not use advertising cookies, tracking pixels or third-party analytics.
• The website stores a small amount of information in your browser that it needs to function: your sign-in session and sign-in progress, the rolls you have joined, photos waiting to upload (kept on your device until they upload), display preferences such as your camera flash setting and feed filter, a random device identifier and, if you opened an ambassador link, that link's code for 30 days (also in a first-party cookie).
• Global Privacy Control. We treat a GPC signal as a valid request to opt out of sale and sharing for that browser and any account signed in on it. Because we do not sell or share personal information, no change in processing is required, but we will continue to honor the signal if our practices change. We respond to Do Not Track signals in the same manner.

9. Text messages

Where text messaging is available and you opt in, we send a text when your rolls develop (approximately one per roll) and any sign-in codes you request. We do not send marketing texts. Message and data rates may apply. Reply STOP to opt out or HELP for help. Text messages are never required to use the Service.

We keep your mobile number and a record of your consent, including the wording and time, so that we can demonstrate it. We will not share or sell your mobile number or text message opt-in data to third parties or affiliates for marketing or promotional purposes. Our text message provider, Twilio, processes your number only to deliver our messages. For text message sign-in, we keep one-way hashes of your mobile number and IP address for about 2 days to limit abuse, and our bot-protection provider receives your IP address to verify the check.

10. Data retention

We keep personal information only as long as necessary for the purposes described in this Policy, then delete or de-identify it.

Because a reveal belongs to everyone in the roll, once a reveal has been delivered, photos you took in it stay in it, detached from your account, even if you leave the roll or delete your account. Photos in a roll whose reveal has not been delivered are deleted when you delete your account, and if you leave such a roll you can choose to take them out. Anyone who appears in a reveal can still ask to be blurred. If you hosted a roll that others joined, it passes to another participant when you delete your account.

11. Your rights and choices

Wherever you live in the United States, you may request to:

• Access the personal information we hold about you and receive a copy in a portable format;
• Correct inaccurate personal information;
• Delete your personal information and your account;
• Opt out of sale, sharing, targeted advertising and profiling in furtherance of decisions that produce legal or similarly significant effects (we do not engage in these, but will record your request);
• Know the categories of third parties, or the specific providers, to which we disclose personal information (see Section 6); and
• Appeal our decision on your request.

How to make a request

• On the website or in the app: on the website, sign in with your email, open Me and select Delete account at the bottom (website guests who never added an email can email us); in the app, Me, then Settings, then Delete account. This deletes your account and files immediately, except as described in Section 10.
• By email: hello@moev.app with the subject "Privacy request," preferably from the email address on your account. Website guests may include the roll link.

We will verify your request, for example by confirming it with the email address on your account, and respond within 45 days. We may extend this period once by up to 45 days where reasonably necessary and will tell you why. You may use an authorized agent, in which case we will request your signed authorization and may verify your identity directly. Requests are free, and we will not discriminate against you for exercising your rights.

Appeals. If we decline your request, you may appeal by replying with the subject "Privacy appeal." A person not involved in the original decision will respond within 60 days (or 45 days where state law requires). If you remain dissatisfied, you may contact your state attorney general.

Other choices: make a roll private; remove a reveal from the feed; turn off "Let MOEV share" or turn on "Don't feature me"; choose a non-personalized feed order; adjust profile visibility; delete comments; block users; turn off notifications; or reply STOP to text messages.

12. State privacy disclosures

California

In the preceding 12 months we collected the following categories of personal information as defined by the CCPA: identifiers (email address, phone number, account and guest IDs, IP address); personal information described in Cal. Civ. Code § 1798.80 (name or display name, phone number); characteristics of protected classifications (age, derived from date of birth); commercial information (plan and purchase history); internet or other electronic network activity (viewing events, feed preferences, device and app information); audio and visual information (photos, profile photos and reveals; the MOEV camera records no audio, and reaction videos you record stay on your device unless you share them yourself); and inferences (photo safety labels and editing scores, which never concern who a person is). Sensitive personal information: account log-in credentials and, for teens, age. Sources, purposes and recipients are described in Sections 1, 2 and 6, and retention in Section 10. We disclose these categories only to the service providers in Section 6 for the business purposes described there. California residents may also request, once per year and free of charge, information about disclosures to third parties for their direct marketing purposes (Cal. Civ. Code § 1798.83); we make no such disclosures.

Tennessee

Tennessee residents have the rights described in Section 11 under the Tennessee Information Protection Act. MOEV does not sell personal information, process it for targeted advertising or engage in profiling in furtherance of decisions that produce legal or similarly significant effects.

Other states

Residents of states with comprehensive consumer privacy laws, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Nebraska, Minnesota, Maryland, Indiana, Kentucky and Rhode Island, have the rights described in Section 11. We extend these rights to all U.S. users, whether or not a particular state law applies to MOEV. Nevada residents may opt out of the sale of covered information; we do not sell it.

13. Teen accounts and parents

MOEV is for people 13 and older. We ask for a date of birth once when an account is created in the app. Anyone under 13 cannot continue: we do not store their date of birth, and we delete the account they started. Joining a roll on the website without an app account is limited to users 18 or older.

Teen accounts for users aged 13 to 17 are not yet available. Until they are, a user aged 13 to 17 may view public content but may not take photos or start or join rolls. When teen accounts become available, they will include the following protections:

• Parental approval. A teen provides a parent's or guardian's email address or mobile number, and we ask that parent to approve the account. Until the parent approves, the teen cannot take photos or join rolls. We keep the parent's contact information and decision only to administer and document the approval. The parent may withdraw approval at any time using the link we send or by emailing hello@moev.app.
• Private by default. A roll that includes a teen is private and cannot be made public by the host. Its reveal may appear on the feed only if the host and every teen in the roll choose to share it after it develops and all of its photos have passed the safety review.
• Limited comments. For teens 13 to 15, only people in the roll and approved followers may comment. For teens 16 and 17, the same applies by default, and the teen may choose to allow comments from everyone. Comments on teen reveals are filtered more strictly and flagged comments are held for review.
• No precise location. A teen's reveal on the feed shows the state only.
• In-person connections. Teens cannot be searched for or suggested to others. Two people are "connected" only if they were in the same roll or one scanned the other's friend QR code in person. A roll started by a teen can be joined only by scanning the teen's QR code in person or with the teen's approval. An adult connected to a teen may only request to follow the teen. Accounts that show patterns associated with seeking contact with teens are automatically paused with respect to teens until MOEV personnel review them. MOEV does not currently offer direct messaging.
• Parental visibility. The approving parent can see the names and usernames of the teen's connections (never photos or comments) and can ask us to remove a connection.
• No marketing, no ads. Rolls that include a teen are never used in MOEV marketing, and MOEV has no ads or ad trackers.

Parents and guardians may email hello@moev.app with their contact information and the teen's account email to review or delete the teen's information or withdraw approval. We will verify the request and act within 30 days.

14. Children under 13

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. Our age screen does not permit anyone who enters a date of birth under 13 to continue, and we do not store that date. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete it promptly. If you believe a child under 13 is using the Service, contact hello@moev.app.

15. Ambassador Program

Where the Ambassador Program is available and you open a participant's link, we store the link code in your browser for 30 days (in browser storage and a first-party cookie) and record which participant referred you if you create an account. To prevent participants from earning on their own purchases, for every signed-in user we store a one-way hashed device code derived from a random identifier and basic device or browser characteristics, used only for referral fraud prevention. Participants see only aggregate counts, never your identity or purchases. If cash payouts are enabled and you earn them, our payout provider collects your payout and tax information, and we keep payout records as tax law requires.

16. Security

We use encryption in transit, private storage with short-lived signed links, access controls on every database table and file, and restricted internal access. Only a limited number of authorized MOEV personnel can review flagged Content, and review decisions are logged. No system is completely secure. If a security incident affects your personal information, we will notify you and the appropriate authorities as required by law.

17. Data location

MOEV operates from the United States and stores data in the United States. Some service providers may process data in other countries subject to appropriate safeguards. If you use the Service from outside the United States, your information will be transferred to and processed in the United States.

18. Changes to this Policy

If we make material changes to this Policy, we will update the date above and notify you in the app or by email before the changes take effect. We will not apply a materially less protective change to information we already hold without your consent.

Changes in this version (October 25, 2026). Usage information now includes daily counts of website visits by page and source, and of taps on Start a roll and Join. These are totals only, kept in our own systems, and not linked to anyone.

Changes in the October 24, 2026 version. This Policy was reorganized for clarity. It now describes feed personalization and how to choose a non-personalized order, in-person connections, profile visibility settings, profile photos, sign-in with Apple, Google and text message where available, additional retention periods and our email and bot-protection providers. It also clarifies that teen accounts and text messages are not yet available.

19. Contact

Dominion Apex Labs LLC, Attn: Privacy
Tennessee, USA
hello@moev.app