Privacy Policy

Mooncake is a curated dating service operated by Mooncake LLC, a company registered in the United States. This Privacy Policy explains what information we collect, why we collect it, who we share it with, and the choices and rights you have. It covers both the Mooncake mobile app and this website.

Information We Collect: When you create an account we collect your name, email address and date of birth, and the details you choose to add to your profile: your photos, gender and pronouns, who you are interested in meeting, the city and country you select, and optionally your bio, occupation, education, height, the languages you speak and your answers to profile prompts. As you use Mooncake we also store the messages you send to your matches, which members you have blocked or reported, and which members from your weekly shortlist you marked as interested in. We use all of this to run the matching service and to keep the community safe.

Sensitive Information: Because Mooncake is a dating service, some of what you tell us is sensitive personal information - in particular who you are interested in meeting, which may reveal your sexual orientation, together with your gender and pronouns. We collect it for one purpose: to match you with people you might actually want to meet, and to show your profile to the members you have chosen to be visible to. We ask for your explicit consent to collect and use this information when you create your profile, and you can withdraw that consent at any time by deleting your account. We never use it for advertising, we never sell it, and we never share it with anyone other than the service providers listed below.

Our Legal Basis for Using Your Information: Where UK or EU data protection law applies, we must tell you the legal basis on which we process your information. We process most of it to perform our contract with you - creating your account, building your shortlist, and letting you message your matches. We rely on your explicit consent for the sensitive information described above. We rely on our legitimate interest in keeping members safe when we moderate content, review reports, and prevent fraud and abuse, and on our legal obligations where we are required to keep records. We do not make decisions about you by automated means: your shortlist is chosen by a person on our team, not by an algorithm, and no automated profiling decides who you see or who sees you.

What We Do Not Collect: Mooncake never asks for or accesses your device's location. The city shown on your profile is one you pick yourself from a search list; we store it and its approximate coordinates so we can support matching by region. We do not collect precise or background location, your contacts, your calendar, health or financial data, or advertising identifiers, and we do not track you across other companies' apps and websites.

How We Store Your Data: Your data is stored on servers in the United States operated by our hosting providers. We use industry-standard security measures and row-level access controls so that members can only read the information the service is meant to show them. If you use Mooncake from outside the United States - including from the United Kingdom or the European Economic Area - your information is transferred to and processed in the United States. For those transfers we rely on the safeguards in our providers' data processing terms, such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.

Sharing Your Information: We do not sell your personal information, and we do not share it with advertisers. Your profile is shown to other Mooncake members as part of the service, and to our curation team, who read profiles by hand to build each week's shortlists. We share information with the service providers listed below, who process it only on our instructions. We may also disclose information where the law requires it, or where it is necessary to investigate a safety report, prevent fraud, or protect someone from harm.

Service Providers: We use a small number of providers to run Mooncake and share only what each one needs: account sign-in and our database, chat messaging between matches, backend and website hosting and content delivery, city lookup during onboarding, and aggregate website analytics. Our providers today are Supabase, Stream, Railway, Vercel, Cloudflare, Google and Apple. Each acts as our processor under contract, may only act on our instructions, and may not use your information for its own purposes. We do not use any advertising, attribution or cross-app tracking networks, and we update this section when our providers change.

Cookies and Tracking: The Mooncake app does not use cookies, advertising identifiers or third-party analytics, and does not track you across other apps or websites. On this website we use a small number of essential cookies to remember your language and country so we can show you the right content, together with privacy-friendly aggregate analytics that count page views without cookies and without building a profile of you.

Data Security: We protect your information with encrypted connections (HTTPS/TLS), encryption at rest by our hosting providers, database access rules that restrict every read and write to the account that owns the data, and least-privilege access for our own team. Mooncake is passwordless — we never create or store a password for your account, so there is no password for anyone to steal from us. No system is completely secure and we cannot guarantee absolute security, so please keep access to your email and Apple Account safe, and tell us at hello@mooncake.love if you think your account has been compromised.

Data Retention and Deletion: We keep your information for as long as your account is active. When you delete your account it is deleted immediately and permanently - there is no grace period and deletion cannot be undone, so please be certain before you confirm. Your profile, photos, matches, preferences and shortlist history are erased from our database straight away, and your chat messages are deleted with our messaging provider so that they are no longer visible to anyone. A limited amount of information is kept afterwards, either because the law requires it or because erasing it would undermine member safety: reports that other members made about you, records of moderation decisions, and any feedback you sent us, which is separated from your identity. We keep safety records so that an account removed for serious violations cannot simply sign up again.

Your Rights and Deleting Your Account: You can view and change everything on your profile in the app at any time. To delete your account, open the Profile tab and choose Delete account - this removes your profile, photos, messages and matches immediately and permanently, as described above, and it cannot be undone. You do not need to ask our permission or email us first. You also have the right to request a copy of your data in a portable, machine-readable format, ask us to correct it, withdraw any consent you have given us, and object to or restrict certain processing. If you are in the UK, EU or California you have the additional rights those laws give you, including the right to complain to your local data protection authority. To make any of these requests, email hello@mooncake.love and we will respond within 30 days.

Children's Privacy: Mooncake is strictly for adults. You must be 18 or over to create an account; we ask for your date of birth during onboarding and block anyone under 18. We do not knowingly collect information from anyone under 18. If you believe someone under 18 is using Mooncake, report the profile in the app or email hello@mooncake.love and we will remove the account.

Contact Us: Mooncake is operated by Mooncake LLC, United States. For any privacy question or request, or to reach a person about your account, email us at hello@mooncake.love. We answer privacy requests within 30 days, and reports of abuse or objectionable content within 24 hours.

Last updated: 4th August 2026