Mosey Privacy Policy
Effective date: October 19, 2026
Last updated: October 28, 2026
Mosey World, Inc., a Delaware corporation with its address at 2810 North Church Street STE 90182, Wilmington, DE 19802 (“Mosey,” “we,” “us” or “our”) operates the Mosey Maps app for iOS (the “App”), the websites at mosey.world, places.mosey.world and chat.mosey.world (the “Websites”) and the Mosey connector that lets you use Mosey through an AI assistant of your choice (together, the “Services”). This Privacy Policy applies to all of the Services, including the App as distributed through the Apple App Store and the Websites. It explains what personal information we collect, how we use and share it, how long we keep it, and the choices and rights you have.
The Services are intended for adults located in the United States, and our content covers New York City. Our own servers, databases and file storage are located in the United States. Our AI assistant provider processes information outside the United States (Section 5), and our other service providers may process information where they operate. If you do not agree with this Privacy Policy, please do not use the Services.
1. Key Points
- You must be 18 or older to use Mosey.
- We do not sell your personal information, we do not use it for targeted advertising, and we do not track you across other companies’ apps or websites. There is no advertising network, data broker, attribution tool, session-replay tool or crash-reporting service in the Services.
- We use your precise location only while you use the App, including while a walk you started is in progress with the screen locked, and, if you rate your surroundings from your lock screen, your phone’s last known location. We never ask for “Always” location access. If you share a walk, the person you share it with, or anyone who has the link, can see the route. Where a shared walk starts or ends somewhere other than a listed venue, we leave about 200 meters (650 feet) off that end of the route, unless you choose to show the exact start or end for that share.
- Our in-app assistant is provided by DeepSeek, an AI model provider based in the People’s Republic of China. Before you first use the assistant, we ask your permission to send your messages, your approximate area and, for your taste profile, your saved places to DeepSeek. Please read Section 5 before you use the assistant.
- You can delete your account at any time, and you can ask us for a copy of your information. Section 9 explains what deletion removes and what it does not.
2. Information We Collect
2.1 Account and sign-in information
You sign in with Sign in with Apple or with Google. There is no other way to create an account. When you sign in, we receive and store the account identifier your sign-in provider gives us and the email address in the provider’s signed token (if you use Apple’s “Hide My Email,” this is a private relay address). We also store your display name, the public handle you choose, a referral code derived from your first name (so an invite link you share shows your first name), a session token (stored only in hashed form), a push notification token, and records of when your account was created and used. If you sign in with Apple, we keep an Apple refresh token for one purpose only: to revoke your Sign in with Apple authorization when you delete your account. If Apple tells us a device can no longer receive notifications, we stop storing its notification address. We also record when you accept our Terms of Use and which version you accepted.
Linked sign-in methods. Sign-in methods are linked only with your knowledge. If you sign in with one method and your email already belongs to an account created with the other, we will not open that account; we tell you which method it uses. You can add a second sign-in method from your Profile while signed in, and remove one, but you cannot remove your only one. Apple private relay addresses and unverified email addresses are never matched to an account. If accounts were linked in a way you did not expect, please contact us at [email protected].
2.2 Profile information
- Date of birth. We ask every user for their date of birth at sign-up, in the App and on the Websites, and use it to confirm that you are 18 or older. On supported devices, we also check your Apple account’s age range, and anyone under 18 is blocked. We may also use your date of birth to offer you birthday rewards and to show aggregated age ranges for places (Section 2.14). We never show any individual’s age or birthday.
- Date of birth corrections. If you ask us to correct your date of birth, we keep the request, including the current and requested dates, any note you add and our reviewer’s note. Corrections are reviewed by our staff and cannot result in an age under 18. We delete the request 90 days after it is decided, and remove the dates from our internal record of the staff decision at the same time.
- Gender. Optional. You may choose “prefer not to say.”
- Phone number. If you verify a phone number (required for some social features), we send the verification code by SMS through Google’s Firebase Authentication service. The verification screen tells you that a text will be sent and that rates may apply. We store your number and a hashed version of it.
2.3 Precise location
Precise location is sensitive information. We collect it only after you allow location access in iOS, and only while you are using the App (“While Using” access), except as described below. While a walk you started is being navigated, the App continues to receive location updates with the screen locked or while you switch apps, so that turn-by-turn directions keep working; iOS shows its location indicator throughout. Background updates stop when navigation ends. We never request “Always” location access and never use your location in the background outside a walk you started. If you rate your surroundings from your lock screen, the App uses your phone’s last known location. The table below lists every way the Services use your location.
| Use | What is used | Is it kept? |
|---|---|---|
| Showing the map | The area of the map on your screen, not your position | No |
| Planning a route | The exact start and end points | No |
| Routes starting or ending outside New York City | The start or end point outside New York City | Sent to Google to identify the city, and kept with no user attached |
| Rating a street while walking | The exact point and time of your rating | Yes (see Section 8) |
| Saved home and work addresses | The exact addresses you save | Yes, until you delete them or your account |
| Rating your surroundings from a notification | Your exact location when you leave the rating or, for a rating left from your lock screen, your phone’s last known location | Yes |
| Confirming a promotion redemption | Your distance from the venue | Only the distance is kept, never your coordinates |
| The AI assistant | Your approximate area (neighborhood, borough and city) when you share your location. Mosey’s servers use your exact location to answer, and it is not sent to our AI assistant provider. | Your exact location is kept for 15 minutes and is not stored in your chat history. Your approximate area is part of your chat history and is sent to our AI assistant provider (Section 5). |
| Place search suggestions | Your location as the starting point of the search | Sent to Google as part of its search service |
| Noticing that you are at a venue | Whether you are within about 30 meters of a venue while the App is open | No |
| Sharing a walk | The line of the route as it appears on the map. Where the walk starts or ends somewhere other than a listed venue, about 200 meters (650 feet) is left off that end, unless you choose to show the exact start or end for that share | Visible to the friend you choose, or anyone with the link, until the link stops working after seven days |
| Directions for a connected AI assistant | A simplified line of the route and the names of its two ends | Yes, for seven days, so a map image of the route can be shown, then the link stops working |
Walk reviews (the rating of how a walk felt) do not store any location. You can turn off location access at any time in iOS Settings > Privacy & Security > Location Services > Mosey Maps. Directions and nearby features will not work without it.
2.4 Content you create
We store the content you create in the Services, which may include: your conversations with the assistant; public comments on places and the photographs you attach; private notes and notes shared with friends; lists and your “Soon” and “Been” boards; ratings and head-to-head comparisons of places; places you share with other users and the notes you add; walk reviews and street ratings; lists you share with friends or by link; walks you share and the note you add to them; and reports and blocks you make. We remove location and camera details from photos you post.
2.5 Contacts
If you allow contacts access, the App helps you find people you know on Mosey. The App converts the phone numbers in your address book into coded values (hashes) on your device and sends us only those hashes (up to 5,000 at a time). We do not receive names from your address book. Hashes can be matched back to phone numbers, so we treat them as personal information. Where a hash does not match a member, we keep it, linked to your account, so we can let you know if that person joins Mosey later. These hashes are deleted when you delete your account. Please upload contacts only where you are comfortable doing so on behalf of the people in your address book.
2.6 Posts and lists you import
You can share a Google Maps list, an Instagram post or reel, or a TikTok video into Mosey to find the places it mentions. Nothing is added to your lists until you accept them.
- Google Maps lists are read by the App on your device. The places, addresses, locations and list notes, and the name of the list’s author, become part of your account. Google will see your IP address when the App reads the list.
- Instagram and TikTok posts are retrieved on our servers through two third-party services, one of which reads posts through logged-in sessions. We send those services only the post’s identifier or address. We never send them your name, account details, device identifier or location, and we remove the tracking parameters that Instagram adds to shared links. If you share a short link, your phone opens it once to find the full address, so Instagram or TikTok will see your IP address for that one request.
From an imported post we keep only the caption or description, the creator’s public handle, the post’s details (any location or venue tag, tagged accounts and mentions, the post date, like, comment and play counts, and whether the post is marked as a paid partnership), the text we read from it and the places it mentions. We delete the post’s video, images and audio 30 days after we read it. A Google AI model reads the caption, the video and images, any on-screen text and a transcript of the audio to identify candidate places. We keep a record of the posts you shared and your review decisions as part of your account. We also keep the information about the post itself, including the fact that it mentioned a venue, as information about that public post rather than about you; it is not linked to your account and is not deleted when you delete your account.
2.7 Mosey AI
“Mosey AI” covers the in-app assistant, the reading of posts you import and requests made by AI assistants you connect (Section 2.8). All of them draw on one daily allowance, shown to you as a percentage. We record how much of the allowance you use. Imports also have a separate daily limit on how many places they may add. Section 5 describes the AI providers that process this information.
2.8 AI assistants you connect
You can connect Mosey to an outside AI assistant, such as Claude or ChatGPT, by authorizing the connection yourself on chat.mosey.world. Once connected, that assistant can ask Mosey to search places, read your saved places and lists, save and remove saved places, create lists, add places to lists, send a place with a note to another Mosey user and get directions. When the assistant asks for directions, Mosey returns a link to a map image of the route. The link cannot be guessed, and it stops working after seven days. To draw the image, we send the route to Mapbox. Whatever Mosey returns, including free-text questions you ask, locations, the handle of a user you share a place with and your remaining Mosey AI allowance, is then processed by that assistant’s provider under its own terms and privacy policy, which we do not control. Requests made by a connected assistant use your Mosey AI allowance. You can revoke a connection at any time on chat.mosey.world, and deleting your Mosey account revokes every connection.
2.9 Business accounts
If you claim a venue on places.mosey.world, we collect your name, your role (owner, manager or marketing), a contact email address, the status and method of verification, the outcome of our review and any reviewer notes, and the last two digits of the phone number used for verification. We verify most claims by an automated voice call, placed through Twilio, to the venue’s publicly listed telephone number (never a number you supply), which reads out a six-digit code. Before we call, you confirm that you are authorized to receive calls at that number. We first check the type of phone line and call only landlines and business lines; if the listed number is a mobile number, we review the claim manually instead. We make no more than two calls per claim, between 9am and 8pm Eastern time, and each call opens by identifying itself as an automated verification call from Mosey. If a venue has no listed number, you may upload up to five supporting documents for manual review.
If you buy ad credit, payment is handled by Stripe on Stripe’s own checkout page. Your card details go directly to Stripe and never reach us. We store your Stripe customer identifier, your credit balance and transaction history, your promotions and records of promotion activity. For a redemption we record the user, the promotion, the venue, the amount charged, its status, its time and the customer’s distance from the venue.
When you claim a venue or buy ad credit, you must agree to the Business Terms in Section 13 of our Terms of Use on behalf of yourself and the business. We record when you agreed and which version of the Terms of Use you agreed to.
2.10 Usage information
- App analytics. The App sends usage events to our own analytics system using a random identifier that changes each time the App is launched. These events do not include your user identifier. The App keeps a copy of the last item you shared into Mosey on your device.
- Service records. Our servers record how the Services are used, including records of your use of Mosey AI and connected assistants (your user identifier, the connected client, the conversation and the feature used), some of which are stored under a pseudonymous identifier derived from your account.
- Device information. We do not collect your device’s advertising identifier, device model, operating system version or language setting, other than the standard technical details your device sends with each request, described in Section 2.12, and the App does not use a crash-reporting service.
- Map software. The map software in the App, provided by Mapbox, sends its own technical information from your device to Mapbox only if you turn this on in the App (Section 10).
2.11 Cookies on the Websites
The Websites use Google Analytics to understand how pages are used. Analytics cookies are off unless you accept them, Google Signals is disabled, and the events we send contain no user identifiers. We set a cookie that remembers your choice for 180 days. The portals also use cookies that are strictly necessary to keep you signed in. The Websites, including the pages opened from shared links, are delivered through Cloudflare, which processes traffic to provide hosting, security and content delivery. Pages opened from a list, place or walk link carry no analytics, cookies or third-party requests. Embedded Instagram and TikTok posts on places.mosey.world are served by Instagram or TikTok, which may set their own cookies under their own policies. The Websites do not use Google Fonts or other third-party font services.
Do Not Track and Global Privacy Control. The Websites do not change their behavior in response to browser Do Not Track signals. Because we do not sell personal information or use it for targeted advertising, there is no sale or targeted advertising for a Global Privacy Control signal to opt you out of. Analytics cookies remain off unless you accept them.
2.12 Server logs
Like most online services, our servers log requests they receive, including your IP address, browser or app user agent, the address requested and its parameters. Requests for directions may include the start and end points of the route and place names. These records can be linked to your account. These logs, kept by our hosting provider, record the full address of any shared link that is opened, so they contain working links. Cloudflare also sees the link and the visitor’s IP address, under its own retention practices. Mosey’s own systems do not record who opened a shared link.
2.13 Communications
If you contact us, we keep your message and our reply. Our support inbox is held by Google Workspace. Our support line, +1 (646) 392-7206, is voicemail only. Callers hear a greeting telling them that messages are recorded and transcribed by our service provider, and can leave a voicemail, which we answer by email. Voicemails are recorded and transcribed by Twilio, and the transcript, the caller’s number and a link to the recording are emailed to our support inbox. We delete recordings and transcripts after 90 days. We send transactional emails, such as the outcome of a report you made or a venue claim, credit receipts, notices about your venue’s photographs and notices of staff access to your account (Section 7). We do not currently send marketing emails. We send push notifications when an import you shared is ready, when someone you know joins Mosey, sends you a friend request or shares a place, a list or a walk with you and, at a random time of day, to ask you to rate your surroundings.
Notifications about places, lists and walks shared with you show the sender’s handle and any note they wrote, and may appear on your lock screen. Turning off friend notifications stops these notifications but not the shares themselves.
Our email provider, Twilio, adds a small tracking image to emails, which tells it whether an email was opened. Twilio does not allow this to be turned off. We turn off link tracking and do not use the information about whether an email was opened.
2.14 Information we derive
We create some information from what we collect: a “taste profile” produced by our AI assistant provider from your saved places, only if you have given the assistant permission (Section 5), weekly and daily when your saved places change; rankings that feed each place’s public score; averages of ratings among your friends; and daily counts of how often each place has been saved, which carry no user identifier and drive the “What’s trending” and “What’s popular” sections of the feed. Those sections are the same for every user and are not personalized. Using dates of birth, we may also show aggregated age ranges for places (for example, “mostly 25-34”) to venue owners, to other users, or both. No individual’s age or birthday is shown, and a range appears only when enough people are counted that no one can be singled out. When you search for a place outside our coverage area, we record the request as an anonymous signal of demand, with no identifier attached.
Street activity. To rate how busy streets are, the App counts which street segments are walked with Mosey, and at what hour. After a walk, the App sends only a description of each street segment reached and the hour of day. It sends no position, and we attach no identifier of any kind: no user, device, walk or session identifier. We publish these counts only as totals of at least five walks on at least three different days. You can turn this off with the “Help rate streets” setting in your Profile, which stops future counts and deletes any counts waiting to be sent. Counts already sent cannot be withdrawn, because nothing links them to you. This setting is on by default.
2.15 Sharing lists and walks
Sharing with a friend. You can share a list or a walk with a Mosey friend. They do not have to accept it: it appears in their account, and we notify them unless they have turned friend notifications off. You can share directly only with friends; anyone else gets a link.
List links. Anyone who has a list link can see that list (its name, description, your Mosey handle and the places on it) without a Mosey account, even if the list is private. The link does not make your list searchable and does not expire. You can turn it off at any time, which stops it working and removes anyone following the list through it. We cannot take back a copy someone has already made.
Sharing a walk. When you share a walk, you send the route as it appears on the map, together with its walking style, time, distance and any note you add. Where your walk starts or ends somewhere other than a listed venue, including your current location, a saved address such as Home or Work, a typed address or a dropped pin, we leave about 200 meters (650 feet) off that end of the shared route and label that end only by its neighborhood. You can choose to show the exact start or end for a particular share. We never include the names you gave your saved places. A shared walk shows the route as it was when you shared it, not where you are now. Anyone you sent it to, or anyone with the link, can open it until it stops working after seven days. A friend cannot remove a walk shared with them; it expires. We cannot take back a copy or screenshot.
Link views. We count how many times a link has been opened and when. We do not record who opened it: no account, IP address or device is stored against a view. The count includes automatic previews, such as those messaging apps create when a link is pasted.
3. How We Use Your Information
Before anything you write is posted, including comments, notes shared with friends, list names (including those created by an import) and descriptions, share notes, display names, handles and promotion offer text, an automated filter blocks slurs, threats and strong profanity. Reports are reviewed by people, not by automated tools. A comment or photograph reported by three or more different users is hidden while it is reviewed, and we email you the outcome of a report you made.
We use personal information to:
- provide the Services, including maps, walking directions, turn-by-turn navigation, search, saved places, lists, sharing lists and walks, imports, the assistant and connected assistants;
- operate the social features, including finding friends, sharing places and notes, and showing public comments and profiles;
- calculate place scores, rankings and street ratings;
- verify venue claims, run promotions, process payments and confirm redemptions;
- confirm that users are 18 or older and, using dates of birth, offer birthday rewards and show aggregated age ranges for places;
- send notifications and transactional emails and respond to support requests;
- keep the Services secure, apply the Mosey AI allowance and other usage limits, prevent fraud and abuse, review reports and enforce our Terms of Use;
- understand how the Services are used and improve them; and
- comply with law, respond to lawful requests and protect the rights and safety of our users and others.
We use precise location only for the purposes listed in Section 2.3, and we do not use sensitive information to infer characteristics about you. We do not use your personal information to train large language models, and we do not sell it for that purpose. For how our AI assistant provider may use information it receives, see Section 5.
4. How We Share Your Information
We do not sell personal information, share it for cross-context behavioral advertising, or disclose it to third parties for their own direct marketing. We share personal information only as described below.
4.1 Service providers and other recipients
Service providers that process personal information on our behalf, such as our hosting, email, voicemail, support inbox and content-delivery providers, may use it only to provide their services to us and are required to protect it in a way consistent with this Privacy Policy. Other recipients in the table below, including our AI assistant provider (Section 5), the post-reading services, sign-in and payment providers, Instagram, TikTok, Mapbox and any AI assistant you connect, handle information under their own terms and privacy policies (Section 14).
| Recipient | What they receive | Why |
|---|---|---|
| Google Cloud | All information held by the Services, including request logs that record shared links | Hosting, databases, file storage and logging in the United States |
| DeepSeek | Your assistant conversations, including anything you type as written and your approximate area when you share your location (never your exact location); the results of the assistant’s look-ups (such as your saved places, lists, place details and the names of nearby places, without their coordinates); a coded identifier that only Mosey can link to your account; your saved places, weekly and daily when they change, only if you have given the assistant permission; and conversations, to generate titles. | Operating the assistant and your taste profile (see Section 5) |
| Google AI models (Gemini and Vertex AI) | Captions, video, images, on-screen text and audio transcripts of imported posts; search text | Finding places in imports; search; operating the connector |
| Google Maps Platform | Search text with your location as its starting point; place and venue telephone look-ups; the start or end point of a route outside New York City | Search suggestions and place details; identifying the city of a route outside New York City |
| Apple and Google sign-in | Sign-in events, including IP address and user agent; for Apple, tokens used to revoke sign-in on deletion. Google’s sign-in software also collects a device identifier and information about how you use sign-in, which Google uses for analytics under its own terms. | Signing you in |
| Apple Push Notification service | Notification content, which may include another user’s handle and a note they wrote | Push notifications |
| Firebase Authentication (Google) | Your phone number and push token | Phone verification by SMS |
| Google Analytics | Page views and events on the Websites, only if you accept analytics cookies | Analytics for Websites |
| Two post-reading services | The identifier or address of a post you import, and never your personal information. One of them reads posts through logged-in sessions | Retrieving public Instagram and TikTok posts |
| Instagram and TikTok | Your IP address when your phone expands a short link; requests from our servers for post media; your browser’s requests when you view an embedded post on places.mosey.world. | Imports and embedded posts |
| Stripe | Business users’ email, display name, Mosey user identifier and payment records | Payments for ad credit |
| Twilio | The venue’s listed telephone number and verification code; the email address and content of transactional emails; a copy of each email, kept for 7 days; whether an email was opened; voicemails left on our support line, including the caller’s number, the recording and its transcript | Venue verification calls; sending email; recording and transcribing voicemails |
| Mapbox | Map requests from your device, including your IP address, and technical information collected by its mapping software if you turn this on; and, when a connected AI assistant asks for directions, the route line, to draw a map image | Displaying maps and drawing route map images |
| Cloudflare | All traffic between the App and our servers, all traffic from connected AI assistants, and traffic to the Websites, images and shared-link pages, including the link, the visitor’s IP address and browser type (it keeps a copy of a page for up to 60 seconds) | Hosting, security and content delivery |
| Google Workspace | Emails to our support inbox and our replies; voicemail transcripts, callers’ numbers and links to recordings | Our support inbox |
| AI assistants you connect (such as Anthropic or OpenAI) | Whatever Mosey returns to them, as described in Section 2.8, including links to route map images | Operating a connection you authorized |
4.2 Other users and the public
Your public handle, public comments and their photographs, and public lists are visible to other users and may appear on public invitation and profile pages that do not require sign-in. Notes and boards you mark for friends are visible to your friends. Lists and walks you share are visible to the friend you choose, or to anyone who has the link, as described in Section 2.15; a list link shows your handle. When you share a place, list or walk, the recipient sees your handle and note, and a notification may show them on their lock screen. Your ratings contribute to public place scores. Your referral link shows your first name. Places may show aggregated age ranges, as described in Section 2.14; no individual’s age or birthday is shown.
4.3 Businesses
A venue’s verified owner sees aggregate information about the venue, such as the number of views, route requests, shares and saves and how saves arrived. Venue owners may also see aggregated age ranges, as described in Section 2.14. Businesses never see which Mosey users saved, redeemed, reported or imported anything. Public Instagram and TikTok posts that mention a venue, including the creator’s public handle, engagement counts and paid-partnership label, are shown to the venue’s verified owner through Instagram’s or TikTok’s own embedded post, together with the number of Mosey saves the post produced. Some venues pay Mosey to run promotions. Promoted places are marked “Promo”. A promotion can place a venue above one rated slightly higher within the same tenth of a point, but never above one rated in a higher tenth.
4.4 Legal reasons and business transfers
We may disclose information where we believe in good faith that it is required by law or legal process, or necessary to protect the rights, property or safety of Mosey, our users or others, to investigate fraud or to enforce our Terms of Use. If Mosey is involved in a merger, acquisition, financing, reorganization, sale of assets or bankruptcy, information may be transferred as part of that transaction, subject to this Privacy Policy.
5. Our AI Assistant Provider
Mosey’s in-app assistant is provided by DeepSeek, an AI model provider based in the People’s Republic of China.
Before the assistant sends anything to DeepSeek for the first time, the App asks your permission. The assistant cannot be used until you allow it. You can withdraw your permission at any time in your Profile.
Each time you send a message to the assistant, we send DeepSeek the conversation, including your messages, our instructions to the model, the results of any look-ups the assistant makes (such as your saved places, lists, place details and the names of nearby places, without their coordinates) and a coded identifier that only Mosey can link to your account. Anything you type, including an address, is sent as written. When you share your location, DeepSeek receives only your approximate area: your neighborhood, borough and city. Mosey’s servers use your exact location to answer; it is not sent to DeepSeek, is kept for 15 minutes and is not stored in your chat history. If you have given your permission, we also send DeepSeek your saved places, weekly, and daily when they change, to produce your taste profile. Withdrawing your permission stops this and deletes your stored taste profile. We also send your conversations to generate conversation titles.
DeepSeek processes this information on its own systems outside the United States, under its own terms and practices. We do not control how long DeepSeek keeps this information or how it uses it, including whether it uses it to improve its models, and information held in the People’s Republic of China may be subject to access by authorities there under local law. Deleting your Mosey account, or withdrawing your permission, does not delete information already sent to DeepSeek. If you do not want your information sent to DeepSeek, do not allow the permission or withdraw it. The rest of the Services work without the assistant.
Google AI models are used to read imported posts, to power search and to operate the connector for outside AI assistants. The assistant’s answers, and the place descriptions and summaries in the Services, are generated by AI and may be inaccurate.
6. Information About People Who Do Not Use Mosey
Some information in the Services concerns people who do not use Mosey. This includes coded (hashed) phone numbers uploaded by users who allow contacts access, which can be matched back to phone numbers (Section 2.5), and information from public Instagram and TikTok posts that users import, including creators’ public handles, captions, media and engagement counts (Section 2.6). A walk someone shares may begin or end at another person’s address. People who open a shared link without an account are not identified by Mosey; Cloudflare sees their IP address (Section 4.1). If you believe we hold information about you in this way and would like it removed, please contact us at [email protected].
7. Staff Access to Your Account
Authorized Mosey staff may access your account to investigate a problem, respond to a request or review a report or venue claim. Access through our account-viewing tool is read-only, requires a stated reason, is limited in time and is logged. You are emailed each time this happens, with the reason given, and you can see every such session on your account page on places.mosey.world and chat.mosey.world. Staff reviewing a venue claim see the details submitted with the claim; review screens do not show full email addresses, but a staff member viewing an account sees its email address. Records of staff access are kept after your account is deleted, with references to you removed.
8. How Long We Keep Information
We keep personal information for as long as your account is active and as needed for the purposes in this Privacy Policy, for the periods set out below.
| Information | Retention |
|---|---|
| Account, profile, saved places, lists, notes, comments, photographs, ratings, friendships and shares | Until you delete them or delete your account |
| Assistant conversations | Until you delete the conversation or your account. Deleting a conversation deletes all copies of it. |
| Import records linked to you, and your review decisions | Until you delete your account |
| Information about imported public posts (not linked to you) | The post’s video, images and audio are deleted 30 days after we read the post. The caption, the creator’s public handle, the post’s details, the text we read from it and the places it mentions are kept as a record of the public post and are not deleted when you delete your account |
| Hashed contacts that did not match a member | Until you delete your account |
| Street ratings | Kept in our database for about 30 days after they are archived; the archive is kept indefinitely, and your identifier is removed from it within about a month after you delete your account |
| Street activity counts (no identifier) | Underlying counts up to about twelve months; published totals indefinitely |
| Usage and billing analytics | Kept in our records; identifiers are removed within about 30 days after you delete your account |
| Venue claim evidence | 30 days after the claim is decided; claims not decided expire after 180 days |
| Verification call records | 30 days after the code expires |
| Payment, credit and promotion records | Deleted when you delete your account. Stripe keeps its own payment records |
| Staff access records | Kept after account deletion, with references to you removed |
| Server logs | 30 days, including shared links that were opened; certain logs required by our hosting provider up to 400 days |
| Database backups | 7 days |
| Copies of emails held by our email provider | 7 days |
| Voicemail recordings and transcripts | 90 days |
| Analytics consent cookie | 180 days |
| User reports | Until the reporting or reported account is deleted |
| Photographs removed after review | The file is deleted, and the photograph cannot be re-added |
| List links | Until you delete the list or your account. A link does not expire; turned-off links are kept with the list |
| Shared walks | The link stops working seven days after you share it, and the walk is later removed. Copies may remain in database backups for up to 7 days, and links may appear in our hosting provider’s logs for up to 30 days |
| Link view counts | Until the list or walk is deleted |
| Route map links for connected AI assistants | 7 days |
| Exact location used by the assistant | 15 minutes in a temporary store; never written to our database or chat history |
| Date of birth correction requests | 90 days after the request is decided; the dates are removed from our internal record of the staff decision at the same time |
| Sign-in sessions and AI connection access | App sessions last 30 days and renew with use; access for connected AI assistants lasts one hour at a time, renews while the assistant is in use, and ends after 30 days without use or when you revoke it |
9. Deleting Your Account
You can delete your account at any time from Profile > Delete account in the App, or from the account page on places.mosey.world or chat.mosey.world. Deletion is immediate and permanent. We delete your profile, sign-in identifiers, phone number, the phone-verification record held by Google, chat history, saved and visited places, lists and any share links you created (every link you sent stops working), notes, comments, photographs, ratings, friendships, shares, any walks you shared (the links to them stop working), lists you followed through other people’s links, imported content linked to you, any pending date of birth correction request, and any venue claims and promotions you created, and your credit and promotion records, and we revoke your Sign in with Apple authorization and any connected AI assistant’s access. If you hold unspent ad credit, we refund it to your original payment method, delete your name and email from Stripe (Stripe keeps the payment records), and then delete your account. If a promotion is running, you must end it first. Place scores that included your ratings are recalculated within about one week.
Some information is kept after deletion, as described in Section 8: de-identified usage and billing analytics; records of staff access to your account; information about public posts that is not linked to you; and street activity counts, which contain no identifier. Your information may remain in backups for up to 7 days and in server logs for up to 30 days. Information already sent to our AI assistant provider or to an AI assistant you connected is subject to that provider’s terms, and emails we have sent you are kept by our email provider for up to 7 days.
10. Your Choices
- Location and contacts. You can allow or withdraw location and contacts access at any time in iOS Settings.
- Notifications. You can turn off notifications about imports, friends and walk reviews separately in Profile > Notifications, or turn off all notifications in iOS Settings. Turn-by-turn cues during a walk you started are part of navigation. Friend notifications include places, lists and walks shared with you; turning them off stops the notification, not the share.
- Street activity. This setting is on by default. You can turn off “Help rate streets” in your Profile.
- Assistant. You choose whether to allow the assistant to send your messages and approximate area to DeepSeek, and you can withdraw that permission in your Profile. You can also delete individual conversations, which deletes all copies of them. Withdrawing the permission also stops your taste profile and deletes the stored profile.
- Share links. You can turn off a list link at any time.
- Connected assistants. You can revoke a connection at any time on chat.mosey.world.
- Map software. The App’s map software does not send anonymous usage information to Mapbox unless you turn this on in the App’s settings.
- Analytics cookies. You can accept or decline analytics cookies on our Websites.
11. Your Privacy Rights
Depending on where you live, you may have rights under state privacy laws. We extend the following rights to all users in the United States:
- Access. To confirm whether we process your personal information and to obtain a copy of it, including information we have derived about you such as your taste profile, and a list of the third parties to which we have disclosed personal information. The list of third parties is set out in Section 4.1.
- Correction. To correct inaccurate personal information. A request to change your date of birth is reviewed by our staff, and we keep the request as described in Section 8. It cannot result in an age under 18.
- Deletion. To delete your personal information, which you can also do yourself by deleting your account (Section 9).
- Portability. To receive your personal information in a portable, commonly used electronic format.
- Opt out. To opt out of the sale of personal information, targeted advertising and profiling that produces legal or similarly significant effects. We do not engage in any of these.
- Withdraw consent. To withdraw consent to the processing of sensitive information, such as precise location, by turning off the relevant permission or feature, or to the sending of your messages to our AI assistant provider, by withdrawing that permission in your Profile.
How to make a request. Email [email protected] from the email address associated with your account, with the subject line “Privacy Request.” We verify requests by matching them to your account records and may ask for more information to do so. You may use an authorized agent, who must provide your signed written permission or a valid power of attorney; we may ask you to confirm your identity with us directly. We will respond within 45 days and may extend this by a further 45 days where reasonably necessary, in which case we will tell you why within the first 45 days. We will not discriminate against you for exercising your rights.
Appeals. If we decline your request, you may appeal by replying to our decision with the subject line “Appeal.” We will respond to your appeal within 45 days and explain our decision. If you are not satisfied with the outcome, you may contact the Attorney General of your state.
12. Children
The Services are for people aged 18 and over. We ask every user for their date of birth at sign-up, in the App and on the Websites, and on supported devices we also check your Apple account’s age range. We do not permit anyone under 18 to register. If we learn that an account belongs to someone under 18, we will delete the account and its information. If you believe someone under 18 is using Mosey, please contact us at [email protected].
13. Security
We take steps designed to protect personal information. Connections to our database are encrypted in transit, and the database accepts connections only through Google’s authenticated connector, over encrypted connections, and allows no direct connections from the internet; access to your data is restricted, and server credentials are held in a secrets manager; sign-in tokens are verified with the sign-in provider’s own keys; session tokens are stored only in hashed form, and signing out ends your session on our servers; connections of outside AI assistants use a secure authorization flow that you approve; and staff access to accounts is restricted, logged and disclosed to you as described in Section 7. No method of transmission or storage is completely secure, and we cannot guarantee the security of your information. If a security incident affects your personal information, we will notify you and the relevant authorities as required by law.
14. Third-Party Services
The Services interact with services operated by others, including Apple, Google, Stripe, Instagram, TikTok, Mapbox, Twilio, Cloudflare, DeepSeek and any AI assistant you connect. Their handling of your information is governed by their own terms and privacy policies, not this Privacy Policy.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you before they take effect by email, by push notification, or by a prominent notice on the Websites. The “Last updated” date at the top shows when this Privacy Policy was last revised.
16. Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us:
Mosey World, Inc.
2810 North Church Street,
STE 90182,
Wilmington, DE 19802
[email protected]
Mosey World, Inc. · 2810 North Church Street STE 90182, Wilmington, DE 19802