Mosey Privacy Policy

Mosey World, Inc., a Delaware corporation with its address at 2810 North Church Street STE 90182, Wilmington, DE 19802 (“Mosey,” “we,” “us” or “our”) operates the Mosey Maps app for iOS (the “App”), the websites at mosey.world, places.mosey.world and chat.mosey.world (the “Websites”) and the Mosey connector that lets you use Mosey through an AI assistant of your choice (together, the “Services”). This Privacy Policy applies to all of the Services, including the App as distributed through the Apple App Store and the Websites. It explains what personal information we collect, how we use and share it, how long we keep it, and the choices and rights you have.

The Services are intended for adults located in the United States, and our content covers New York City. Our own servers, databases and file storage are located in the United States. Our AI assistant provider processes information outside the United States (Section 5), and our other service providers may process information where they operate. If you do not agree with this Privacy Policy, please do not use the Services.

1. Key Points

2. Information We Collect

2.1 Account and sign-in information

You sign in with Sign in with Apple or with Google. There is no other way to create an account. When you sign in, we receive and store the account identifier your sign-in provider gives us and the email address in the provider’s signed token (if you use Apple’s “Hide My Email,” this is a private relay address). We also store your display name, the public handle you choose, a referral code derived from your first name (so an invite link you share shows your first name), a session token (stored only in hashed form), a push notification token, and records of when your account was created and used. If you sign in with Apple, we keep an Apple refresh token for one purpose only: to revoke your Sign in with Apple authorization when you delete your account. If Apple tells us a device can no longer receive notifications, we stop storing its notification address. We also record when you accept our Terms of Use and which version you accepted.

Linked sign-in methods. Sign-in methods are linked only with your knowledge. If you sign in with one method and your email already belongs to an account created with the other, we will not open that account; we tell you which method it uses. You can add a second sign-in method from your Profile while signed in, and remove one, but you cannot remove your only one. Apple private relay addresses and unverified email addresses are never matched to an account. If accounts were linked in a way you did not expect, please contact us at [email protected].

2.2 Profile information

2.3 Precise location

Precise location is sensitive information. We collect it only after you allow location access in iOS, and only while you are using the App (“While Using” access), except as described below. While a walk you started is being navigated, the App continues to receive location updates with the screen locked or while you switch apps, so that turn-by-turn directions keep working; iOS shows its location indicator throughout. Background updates stop when navigation ends. We never request “Always” location access and never use your location in the background outside a walk you started. If you rate your surroundings from your lock screen, the App uses your phone’s last known location. The table below lists every way the Services use your location.

Walk reviews (the rating of how a walk felt) do not store any location. You can turn off location access at any time in iOS Settings > Privacy & Security > Location Services > Mosey Maps. Directions and nearby features will not work without it.

2.4 Content you create

We store the content you create in the Services, which may include: your conversations with the assistant; public comments on places and the photographs you attach; private notes and notes shared with friends; lists and your “Soon” and “Been” boards; ratings and head-to-head comparisons of places; places you share with other users and the notes you add; walk reviews and street ratings; lists you share with friends or by link; walks you share and the note you add to them; and reports and blocks you make. We remove location and camera details from photos you post.

2.5 Contacts

If you allow contacts access, the App helps you find people you know on Mosey. The App converts the phone numbers in your address book into coded values (hashes) on your device and sends us only those hashes (up to 5,000 at a time). We do not receive names from your address book. Hashes can be matched back to phone numbers, so we treat them as personal information. Where a hash does not match a member, we keep it, linked to your account, so we can let you know if that person joins Mosey later. These hashes are deleted when you delete your account. Please upload contacts only where you are comfortable doing so on behalf of the people in your address book.

2.6 Posts and lists you import

You can share a Google Maps list, an Instagram post or reel, or a TikTok video into Mosey to find the places it mentions. Nothing is added to your lists until you accept them.

From an imported post we keep only the caption or description, the creator’s public handle, the post’s details (any location or venue tag, tagged accounts and mentions, the post date, like, comment and play counts, and whether the post is marked as a paid partnership), the text we read from it and the places it mentions. We delete the post’s video, images and audio 30 days after we read it. A Google AI model reads the caption, the video and images, any on-screen text and a transcript of the audio to identify candidate places. We keep a record of the posts you shared and your review decisions as part of your account. We also keep the information about the post itself, including the fact that it mentioned a venue, as information about that public post rather than about you; it is not linked to your account and is not deleted when you delete your account.

2.7 Mosey AI

“Mosey AI” covers the in-app assistant, the reading of posts you import and requests made by AI assistants you connect (Section 2.8). All of them draw on one daily allowance, shown to you as a percentage. We record how much of the allowance you use. Imports also have a separate daily limit on how many places they may add. Section 5 describes the AI providers that process this information.

2.8 AI assistants you connect

You can connect Mosey to an outside AI assistant, such as Claude or ChatGPT, by authorizing the connection yourself on chat.mosey.world. Once connected, that assistant can ask Mosey to search places, read your saved places and lists, save and remove saved places, create lists, add places to lists, send a place with a note to another Mosey user and get directions. When the assistant asks for directions, Mosey returns a link to a map image of the route. The link cannot be guessed, and it stops working after seven days. To draw the image, we send the route to Mapbox. Whatever Mosey returns, including free-text questions you ask, locations, the handle of a user you share a place with and your remaining Mosey AI allowance, is then processed by that assistant’s provider under its own terms and privacy policy, which we do not control. Requests made by a connected assistant use your Mosey AI allowance. You can revoke a connection at any time on chat.mosey.world, and deleting your Mosey account revokes every connection.

2.9 Business accounts

If you claim a venue on places.mosey.world, we collect your name, your role (owner, manager or marketing), a contact email address, the status and method of verification, the outcome of our review and any reviewer notes, and the last two digits of the phone number used for verification. We verify most claims by an automated voice call, placed through Twilio, to the venue’s publicly listed telephone number (never a number you supply), which reads out a six-digit code. Before we call, you confirm that you are authorized to receive calls at that number. We first check the type of phone line and call only landlines and business lines; if the listed number is a mobile number, we review the claim manually instead. We make no more than two calls per claim, between 9am and 8pm Eastern time, and each call opens by identifying itself as an automated verification call from Mosey. If a venue has no listed number, you may upload up to five supporting documents for manual review.

If you buy ad credit, payment is handled by Stripe on Stripe’s own checkout page. Your card details go directly to Stripe and never reach us. We store your Stripe customer identifier, your credit balance and transaction history, your promotions and records of promotion activity. For a redemption we record the user, the promotion, the venue, the amount charged, its status, its time and the customer’s distance from the venue.

When you claim a venue or buy ad credit, you must agree to the Business Terms in Section 13 of our Terms of Use on behalf of yourself and the business. We record when you agreed and which version of the Terms of Use you agreed to.

2.10 Usage information

2.11 Cookies on the Websites

The Websites use Google Analytics to understand how pages are used. Analytics cookies are off unless you accept them, Google Signals is disabled, and the events we send contain no user identifiers. We set a cookie that remembers your choice for 180 days. The portals also use cookies that are strictly necessary to keep you signed in. The Websites, including the pages opened from shared links, are delivered through Cloudflare, which processes traffic to provide hosting, security and content delivery. Pages opened from a list, place or walk link carry no analytics, cookies or third-party requests. Embedded Instagram and TikTok posts on places.mosey.world are served by Instagram or TikTok, which may set their own cookies under their own policies. The Websites do not use Google Fonts or other third-party font services.

Do Not Track and Global Privacy Control. The Websites do not change their behavior in response to browser Do Not Track signals. Because we do not sell personal information or use it for targeted advertising, there is no sale or targeted advertising for a Global Privacy Control signal to opt you out of. Analytics cookies remain off unless you accept them.

2.12 Server logs

Like most online services, our servers log requests they receive, including your IP address, browser or app user agent, the address requested and its parameters. Requests for directions may include the start and end points of the route and place names. These records can be linked to your account. These logs, kept by our hosting provider, record the full address of any shared link that is opened, so they contain working links. Cloudflare also sees the link and the visitor’s IP address, under its own retention practices. Mosey’s own systems do not record who opened a shared link.

2.13 Communications

If you contact us, we keep your message and our reply. Our support inbox is held by Google Workspace. Our support line, +1 (646) 392-7206, is voicemail only. Callers hear a greeting telling them that messages are recorded and transcribed by our service provider, and can leave a voicemail, which we answer by email. Voicemails are recorded and transcribed by Twilio, and the transcript, the caller’s number and a link to the recording are emailed to our support inbox. We delete recordings and transcripts after 90 days. We send transactional emails, such as the outcome of a report you made or a venue claim, credit receipts, notices about your venue’s photographs and notices of staff access to your account (Section 7). We do not currently send marketing emails. We send push notifications when an import you shared is ready, when someone you know joins Mosey, sends you a friend request or shares a place, a list or a walk with you and, at a random time of day, to ask you to rate your surroundings.

Notifications about places, lists and walks shared with you show the sender’s handle and any note they wrote, and may appear on your lock screen. Turning off friend notifications stops these notifications but not the shares themselves.

Our email provider, Twilio, adds a small tracking image to emails, which tells it whether an email was opened. Twilio does not allow this to be turned off. We turn off link tracking and do not use the information about whether an email was opened.

2.14 Information we derive

We create some information from what we collect: a “taste profile” produced by our AI assistant provider from your saved places, only if you have given the assistant permission (Section 5), weekly and daily when your saved places change; rankings that feed each place’s public score; averages of ratings among your friends; and daily counts of how often each place has been saved, which carry no user identifier and drive the “What’s trending” and “What’s popular” sections of the feed. Those sections are the same for every user and are not personalized. Using dates of birth, we may also show aggregated age ranges for places (for example, “mostly 25-34”) to venue owners, to other users, or both. No individual’s age or birthday is shown, and a range appears only when enough people are counted that no one can be singled out. When you search for a place outside our coverage area, we record the request as an anonymous signal of demand, with no identifier attached.

Street activity. To rate how busy streets are, the App counts which street segments are walked with Mosey, and at what hour. After a walk, the App sends only a description of each street segment reached and the hour of day. It sends no position, and we attach no identifier of any kind: no user, device, walk or session identifier. We publish these counts only as totals of at least five walks on at least three different days. You can turn this off with the “Help rate streets” setting in your Profile, which stops future counts and deletes any counts waiting to be sent. Counts already sent cannot be withdrawn, because nothing links them to you. This setting is on by default.

2.15 Sharing lists and walks

Sharing with a friend. You can share a list or a walk with a Mosey friend. They do not have to accept it: it appears in their account, and we notify them unless they have turned friend notifications off. You can share directly only with friends; anyone else gets a link.

List links. Anyone who has a list link can see that list (its name, description, your Mosey handle and the places on it) without a Mosey account, even if the list is private. The link does not make your list searchable and does not expire. You can turn it off at any time, which stops it working and removes anyone following the list through it. We cannot take back a copy someone has already made.

Sharing a walk. When you share a walk, you send the route as it appears on the map, together with its walking style, time, distance and any note you add. Where your walk starts or ends somewhere other than a listed venue, including your current location, a saved address such as Home or Work, a typed address or a dropped pin, we leave about 200 meters (650 feet) off that end of the shared route and label that end only by its neighborhood. You can choose to show the exact start or end for a particular share. We never include the names you gave your saved places. A shared walk shows the route as it was when you shared it, not where you are now. Anyone you sent it to, or anyone with the link, can open it until it stops working after seven days. A friend cannot remove a walk shared with them; it expires. We cannot take back a copy or screenshot.

Link views. We count how many times a link has been opened and when. We do not record who opened it: no account, IP address or device is stored against a view. The count includes automatic previews, such as those messaging apps create when a link is pasted.

3. How We Use Your Information

Before anything you write is posted, including comments, notes shared with friends, list names (including those created by an import) and descriptions, share notes, display names, handles and promotion offer text, an automated filter blocks slurs, threats and strong profanity. Reports are reviewed by people, not by automated tools. A comment or photograph reported by three or more different users is hidden while it is reviewed, and we email you the outcome of a report you made.

We use personal information to:

We use precise location only for the purposes listed in Section 2.3, and we do not use sensitive information to infer characteristics about you. We do not use your personal information to train large language models, and we do not sell it for that purpose. For how our AI assistant provider may use information it receives, see Section 5.

4. How We Share Your Information

We do not sell personal information, share it for cross-context behavioral advertising, or disclose it to third parties for their own direct marketing. We share personal information only as described below.

4.1 Service providers and other recipients

Service providers that process personal information on our behalf, such as our hosting, email, voicemail, support inbox and content-delivery providers, may use it only to provide their services to us and are required to protect it in a way consistent with this Privacy Policy. Other recipients in the table below, including our AI assistant provider (Section 5), the post-reading services, sign-in and payment providers, Instagram, TikTok, Mapbox and any AI assistant you connect, handle information under their own terms and privacy policies (Section 14).

4.2 Other users and the public

Your public handle, public comments and their photographs, and public lists are visible to other users and may appear on public invitation and profile pages that do not require sign-in. Notes and boards you mark for friends are visible to your friends. Lists and walks you share are visible to the friend you choose, or to anyone who has the link, as described in Section 2.15; a list link shows your handle. When you share a place, list or walk, the recipient sees your handle and note, and a notification may show them on their lock screen. Your ratings contribute to public place scores. Your referral link shows your first name. Places may show aggregated age ranges, as described in Section 2.14; no individual’s age or birthday is shown.

4.3 Businesses

A venue’s verified owner sees aggregate information about the venue, such as the number of views, route requests, shares and saves and how saves arrived. Venue owners may also see aggregated age ranges, as described in Section 2.14. Businesses never see which Mosey users saved, redeemed, reported or imported anything. Public Instagram and TikTok posts that mention a venue, including the creator’s public handle, engagement counts and paid-partnership label, are shown to the venue’s verified owner through Instagram’s or TikTok’s own embedded post, together with the number of Mosey saves the post produced. Some venues pay Mosey to run promotions. Promoted places are marked “Promo”. A promotion can place a venue above one rated slightly higher within the same tenth of a point, but never above one rated in a higher tenth.

4.4 Legal reasons and business transfers

We may disclose information where we believe in good faith that it is required by law or legal process, or necessary to protect the rights, property or safety of Mosey, our users or others, to investigate fraud or to enforce our Terms of Use. If Mosey is involved in a merger, acquisition, financing, reorganization, sale of assets or bankruptcy, information may be transferred as part of that transaction, subject to this Privacy Policy.

5. Our AI Assistant Provider

Mosey’s in-app assistant is provided by DeepSeek, an AI model provider based in the People’s Republic of China.

Before the assistant sends anything to DeepSeek for the first time, the App asks your permission. The assistant cannot be used until you allow it. You can withdraw your permission at any time in your Profile.

Each time you send a message to the assistant, we send DeepSeek the conversation, including your messages, our instructions to the model, the results of any look-ups the assistant makes (such as your saved places, lists, place details and the names of nearby places, without their coordinates) and a coded identifier that only Mosey can link to your account. Anything you type, including an address, is sent as written. When you share your location, DeepSeek receives only your approximate area: your neighborhood, borough and city. Mosey’s servers use your exact location to answer; it is not sent to DeepSeek, is kept for 15 minutes and is not stored in your chat history. If you have given your permission, we also send DeepSeek your saved places, weekly, and daily when they change, to produce your taste profile. Withdrawing your permission stops this and deletes your stored taste profile. We also send your conversations to generate conversation titles.

DeepSeek processes this information on its own systems outside the United States, under its own terms and practices. We do not control how long DeepSeek keeps this information or how it uses it, including whether it uses it to improve its models, and information held in the People’s Republic of China may be subject to access by authorities there under local law. Deleting your Mosey account, or withdrawing your permission, does not delete information already sent to DeepSeek. If you do not want your information sent to DeepSeek, do not allow the permission or withdraw it. The rest of the Services work without the assistant.

Google AI models are used to read imported posts, to power search and to operate the connector for outside AI assistants. The assistant’s answers, and the place descriptions and summaries in the Services, are generated by AI and may be inaccurate.

6. Information About People Who Do Not Use Mosey

Some information in the Services concerns people who do not use Mosey. This includes coded (hashed) phone numbers uploaded by users who allow contacts access, which can be matched back to phone numbers (Section 2.5), and information from public Instagram and TikTok posts that users import, including creators’ public handles, captions, media and engagement counts (Section 2.6). A walk someone shares may begin or end at another person’s address. People who open a shared link without an account are not identified by Mosey; Cloudflare sees their IP address (Section 4.1). If you believe we hold information about you in this way and would like it removed, please contact us at [email protected].

7. Staff Access to Your Account

Authorized Mosey staff may access your account to investigate a problem, respond to a request or review a report or venue claim. Access through our account-viewing tool is read-only, requires a stated reason, is limited in time and is logged. You are emailed each time this happens, with the reason given, and you can see every such session on your account page on places.mosey.world and chat.mosey.world. Staff reviewing a venue claim see the details submitted with the claim; review screens do not show full email addresses, but a staff member viewing an account sees its email address. Records of staff access are kept after your account is deleted, with references to you removed.

8. How Long We Keep Information

We keep personal information for as long as your account is active and as needed for the purposes in this Privacy Policy, for the periods set out below.

9. Deleting Your Account

You can delete your account at any time from Profile > Delete account in the App, or from the account page on places.mosey.world or chat.mosey.world. Deletion is immediate and permanent. We delete your profile, sign-in identifiers, phone number, the phone-verification record held by Google, chat history, saved and visited places, lists and any share links you created (every link you sent stops working), notes, comments, photographs, ratings, friendships, shares, any walks you shared (the links to them stop working), lists you followed through other people’s links, imported content linked to you, any pending date of birth correction request, and any venue claims and promotions you created, and your credit and promotion records, and we revoke your Sign in with Apple authorization and any connected AI assistant’s access. If you hold unspent ad credit, we refund it to your original payment method, delete your name and email from Stripe (Stripe keeps the payment records), and then delete your account. If a promotion is running, you must end it first. Place scores that included your ratings are recalculated within about one week.

Some information is kept after deletion, as described in Section 8: de-identified usage and billing analytics; records of staff access to your account; information about public posts that is not linked to you; and street activity counts, which contain no identifier. Your information may remain in backups for up to 7 days and in server logs for up to 30 days. Information already sent to our AI assistant provider or to an AI assistant you connected is subject to that provider’s terms, and emails we have sent you are kept by our email provider for up to 7 days.

10. Your Choices

11. Your Privacy Rights

Depending on where you live, you may have rights under state privacy laws. We extend the following rights to all users in the United States:

How to make a request. Email [email protected] from the email address associated with your account, with the subject line “Privacy Request.” We verify requests by matching them to your account records and may ask for more information to do so. You may use an authorized agent, who must provide your signed written permission or a valid power of attorney; we may ask you to confirm your identity with us directly. We will respond within 45 days and may extend this by a further 45 days where reasonably necessary, in which case we will tell you why within the first 45 days. We will not discriminate against you for exercising your rights.

Appeals. If we decline your request, you may appeal by replying to our decision with the subject line “Appeal.” We will respond to your appeal within 45 days and explain our decision. If you are not satisfied with the outcome, you may contact the Attorney General of your state.

12. Children

The Services are for people aged 18 and over. We ask every user for their date of birth at sign-up, in the App and on the Websites, and on supported devices we also check your Apple account’s age range. We do not permit anyone under 18 to register. If we learn that an account belongs to someone under 18, we will delete the account and its information. If you believe someone under 18 is using Mosey, please contact us at [email protected].

13. Security

We take steps designed to protect personal information. Connections to our database are encrypted in transit, and the database accepts connections only through Google’s authenticated connector, over encrypted connections, and allows no direct connections from the internet; access to your data is restricted, and server credentials are held in a secrets manager; sign-in tokens are verified with the sign-in provider’s own keys; session tokens are stored only in hashed form, and signing out ends your session on our servers; connections of outside AI assistants use a secure authorization flow that you approve; and staff access to accounts is restricted, logged and disclosed to you as described in Section 7. No method of transmission or storage is completely secure, and we cannot guarantee the security of your information. If a security incident affects your personal information, we will notify you and the relevant authorities as required by law.

14. Third-Party Services

The Services interact with services operated by others, including Apple, Google, Stripe, Instagram, TikTok, Mapbox, Twilio, Cloudflare, DeepSeek and any AI assistant you connect. Their handling of your information is governed by their own terms and privacy policies, not this Privacy Policy.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you before they take effect by email, by push notification, or by a prominent notice on the Websites. The “Last updated” date at the top shows when this Privacy Policy was last revised.

16. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Mosey World, Inc.
2810 North Church Street,
STE 90182,
Wilmington, DE 19802
[email protected]

← Back to Mosey Maps