Moray Privacy Policy

Last updated: October 23, 2026

Who we are

Moray is an aquarium planning app operated by Ofek Moalem, Israel ("we"). For any privacy question, write to supportmoray@gmail.com.

In short

• Your plans stay on your device.
• Only the community talks to our server. Anonymous usage data is sent too, and only if you agreed.
• There are no ads, no tracking across apps, and we never sell data.
• You can delete everything you have published from inside the app, at any time.

What stays on your device only

The tanks you planned, the fish, plants and corals you chose, the maintenance routine, the water test log, your settings, community posts you saved, the posts you hid or reported, and the users you blocked. All of these are kept on your device and are not sent to us, except the blocked list when community notifications are on, as described below. Maintenance reminders are scheduled on the device itself.

The app reads the region from your device settings to pick units (litres or gallons, Celsius or Fahrenheit). That stays on the device. We do not use your location.

What is sent to the server, and why

A random device identifier

When you use the community, the app sends a random identifier created on your device. It is not linked to your name, phone number or Apple ID. It is used to remember likes and reports, and to limit abuse.

The server records on which days this identifier used the community, with no time of day and no content, to count how many people are active there. Each such day is deleted after 90 days. At the end of each month only a summary of that month is kept, without the identifier.

Sign in with Apple

To publish in the community you sign in with Apple. The server receives a sign-in confirmation from Apple and keeps a stable identifier that Apple issues to you for Moray only. We do not ask for your email address. On the first sign-in Apple may share your name, and it is used as your community name only if you have not chosen one.

What you publish in the community

When you publish, the server keeps what you chose to publish, and it is visible to everyone in the community:

• Your community name, and if you added one, your picture. The picture is cropped to a square on the device before it is sent, so only what is shown leaves your phone.
• A shared tank: photos, the tank's name, its description, the volume, and the list of fish, plants and corals in it.
• A forum question: the title, the details, photos, the species you tagged, and tank details if you added them.
• Replies, likes, copies of a tank into your own plan, and reports.

Every photo you upload has the extra information your phone stores in it removed before it is sent, including the location where it was taken.

Community notifications

If you have published something and community notifications are on, your phone's notification address, the app's language and the list of users you blocked are sent to the server. That is how the server knows where to send a notice about a reply, in which language, and not to notify you about someone you blocked. The notice itself goes through Apple's notification service. Turning the switch off in Settings deletes the address from the server.

Reads that do not send your plan

A species card in the catalogue asks the server which questions were asked about it, and sends only the species name. The aquarium page reads published tanks to show similar ones. The comparison happens on your phone, and your plan is not sent. While you type a forum question, its title is sent to the server to show similar questions already asked. It is not stored and nobody sees it until you publish.

Anonymous usage data, only with consent

If you agreed when you first opened the app, or turned on the "Share usage data" switch in Settings, the app sends: a word you searched for in the catalogue that was not found, and which steps you took in the app (setting a volume, adding a fish, opening the shopping list, visiting maintenance, visiting the community), each step once. When you open the shopping list, the tank's composition is sent too: the species and counts, plants and corals, the volume and the kinds of findings, without the tank's name. All of this is sent without the device identifier and without your name, and the server keeps only a monthly count. You can turn the switch off at any time.

Abuse limits

To prevent flooding, the server counts how many actions each identifier took in a day. These counters are deleted after two days.

Who processes data for us

• Cloudflare hosts the server, the database and the photos, and runs an automatic photo check to filter offensive content. Its servers are spread around the world, so data may be processed outside Israel and Europe.
• Apple provides sign-in and the notification service.

We do not pass data to anyone else, unless the law requires it.

How long data is kept

• Content you published: until you delete it, or until we remove it for breaking the community terms.
• Likes and reports: until the post is deleted, or until you delete everything.
• Active days: 90 days. A monthly summary without an identifier is kept long term.
• Abuse-limit counters: two days.
• Anonymous usage data: only as a monthly count.
• Database backups: up to 30 days, then deleted.

Your rights

• Delete everything: in Settings, the button to delete your account and everything you published removes your posts, replies, likes, reports, name, picture, account and notification address, and asks Apple to disconnect the sign-in.
• Delete one post: from the post itself, with a long press on it in the feed, or from your community profile.
• Change your name and picture in Settings.
• See, correct or ask what is kept about you: write to supportmoray@gmail.com.
• Stop usage data: turn the switch off in Settings.

If you are in Israel, you may also contact the Privacy Protection Authority. If you are in the European Union, you may contact the data protection authority in your country.

Legal basis (for users in the European Union)

• The community: performing the service you asked for.
• Anonymous usage data: your consent.
• Counting active users, abuse limits and content moderation: our legitimate interest in running the service safely.

Age

The community is meant for people aged 16 and over. If we learn that someone younger has published in it, we will delete their data.

Changes to this policy

If we change this policy in a material way, we will say so in the app. The date of the last update is at the top of this page.

Contact

supportmoray@gmail.com