Moo Dreams Privacy

What we collect

Nothing. Moo Dreams does not collect, transmit or sell personal information. There is no sign-up, no email address, no tracking identifier, no analytics event and no crash report leaving the device. The App Store privacy label for Moo Dreams is "Data Not Collected".

The developer, Brian Moore, learns nothing about you from using the app. The only way we hear from you is when you write to us.

What stays on the device

To do its job the app keeps the following in its own storage on the device. It is yours; deleting the app deletes it.

Profiles: A name, an optional birthday (for age-fitting defaults), an optional portrait and an optional Night Stand photo, the clock's colours and look, and the mood words a parent adds.
Alarms: Times, days, sounds, the challenge, snooze settings, the up-by and check-back minutes and, when a parent picks one, the title of an Apple Music song.
Messages: Text a parent writes, recordings family members make in the app, and which pack lines are on.
History: Each morning (ring time, snoozes, how the challenge went, whether a check back was answered) and each bedtime (the mood face, the "on your mind" picks, the sound mix and timer, the pre-flight warnings). A teen's or grown-up's bedtime note is stored, shown only to the person who wrote it, and never leaves the device unless family sync is on, where it travels inside the same iCloud record.
Settings: What this device is (shared, a kid's bedside device, a parent's phone), the clock format, farm words on or off, the not-up-yet minutes, whether the sky uses an exact sunrise, and similar preferences.
An approximate place: Only when a parent turns on Exact sunrise and sunset: the device's approximate location, rounded to a tenth of a degree (about 10 kilometres), kept on this device to compute the day's sunrise and sunset. It is never synced and never sent anywhere; turning the switch off deletes it. Without it, the sky uses the device's time zone.
The parent PIN: Stored only as a salted hash in the device's Keychain. It is marked to synchronize with iCloud Keychain, so the same PIN opens the Barn on your other devices when iCloud Keychain is on. The PIN itself is never stored or sent anywhere.

Family sync and iCloud

Family sync is off until a parent turns it on, and needs The Whole Herd. When it is on, the records above (profiles, alarms, messages, recordings, the Night Stand photo, mornings and bedtimes, and when each device last checked in) are stored in your own iCloud, in the private database Apple provides to your Apple Account for this app. Apple's own protections apply to it; the developer has no access to it and cannot read, copy or recover it.

Devices on the same Apple Account sync through that account. A device on another Apple Account (a kid's own, the other parent's) joins by invitation, through Apple's sharing, and then reads and writes the same records. Anyone you invite can see the whole herd; a parent can end the share at any time.
Silent push notifications from iCloud wake the app to fetch changes. They carry no personal content.
"Erase the herd from iCloud" in Settings deletes everything this Apple Account keeps there. A member of a shared herd can empty it; only the owning account can remove it entirely.

Apple features the app asks to use

Each of these is requested only when the feature is first used, and each can be changed any time under iOS Settings › Apps › Moo Dreams.

Alarms: Every alarm is handed to iOS so it rings through Silent mode, Focus and a closed app. Without this permission nothing can ring, and the app says so.
Notifications: Local only: the bedtime reminder, "a message is waiting", the check back's "Still up?", and the alerts for parents ("Ava is up", "No word that Ava is up"). Nothing is sent through any service of ours.
Location (approximate): Only for Exact sunrise and sunset, and only at reduced accuracy. The place is used on the device to compute sunrise and sunset and for nothing else; see "An approximate place" above.
Microphone: Recording a message in the app (up to ten minutes), and the "say it out loud" challenge. Recordings are files in the app's storage (and in your iCloud with family sync).
Files: Importing a recording (shared from Voice Memos, or picked in Messages): the file is copied into the app's storage as a recording of up to ten minutes; the original stays where it was.
Speech recognition: The "say it out loud" challenge only. iOS does the recognition, on the device wherever the device supports it, which current iPhones and iPads do for the usual languages; on a device that cannot, iOS handles the audio under Apple's own privacy policy. The app keeps no audio and sends none anywhere itself.
Personal Voice: Reading a parent's written messages in their own voice, with iOS's permission prompt. The voice stays with iOS on the device that made it; the app never receives or stores the voice itself.
Apple Music: Choosing a song from your library for an alarm or bedtime. The app keeps the song's title and identifier; playback is Apple Music's and subject to its terms and your subscription.
HomeKit: Lights with the alarm: the lights you pick in an alarm's editor are brought up with the sunrise and on at the ring. Only the lights chosen for an alarm are ever touched, nothing else is read from your home, and the chosen lights' identifiers stay in the alarm on the device (and in your iCloud with family sync).
Camera: Two challenges: scanning the printed morning code, where no image is stored, and the photo mission, where a parent photographs a spot in the app and the kid photographs it again in the morning. The parent's photo is downscaled and kept in the app's storage (and in your iCloud with family sync) as part of that alarm; the morning's photo is compared with it on the device and never stored.
NFC: The sticker challenge, on iPhone: the app writes the alarm's own code onto a blank sticker from the parent area and reads it back in the morning. Nothing else is read from a tag.
Motion and steps: The shake and walk challenges. Only whether the challenge was finished is kept.
Photos: Choosing a portrait or a Night Stand photo. The picked image is downscaled and stored in the app; the library itself is not read.
Face ID / Touch ID: Opening the Barn on a parent's own device, through iOS's own prompt. The app never sees biometric data.

Purchases

The Whole Herd is a one-time in-app purchase handled by the App Store. Apple processes the payment; the app receives only whether the purchase is active, including through Family Sharing. We never see payment details.

Diagnostics you choose to send

There is no automatic crash or usage reporting. If you ask for help, Settings › Diagnostics › Export the log produces a text file of what the alarm engine saw that day, with names left out. It leaves the device only when you share it yourself, and we use it only to answer your question.

Children

Moo Dreams is a Lifestyle app rated 4+ that a parent sets up for a household. It is not directed at children and offers them no account, no messaging with strangers, no advertising and no purchases outside the App Store's own controls. Because the app collects no personal information from anyone, it collects none from children. A parent who wants a kid's data gone deletes the profile in the Barn (which removes it from every synced device) or deletes the app.

This website

moodreams.app is static pages with no analytics, no cookies and no forms. It loads two typefaces from Google Fonts, which sees the request like any web font host; nothing else is loaded from anywhere. The page remembers which sky you picked in the corner, in your own browser only.

Changes and contact

If this policy changes, the new version appears here with a new effective date, and the app's What's new says so. Questions go to [email protected].

Nothing about your family leaves your devices, except through your own iCloud.