Privacy Policy
Mortar & Moon ("the app", "we") is run by Tuell Realty LLC, based in Indiana, USA. This policy explains what the app and this website's beta sign-up collect, why, and the choices you have. The app is offered in the United States only.
The short version
- Your grimoire is private. No other user can see your spells, photos, pantry or calendar.
- We don't sell your information, show ads, or track you across other apps or websites.
- You can download everything or delete your account at any time, from inside the app.
What we collect
| What | Examples | Why |
|---|---|---|
| Account info | Email address; your name if you sign in with Apple or Google (Apple lets you hide your email) | To sign you in and keep your grimoire on your account |
| What you save | Spells, notes, folders, pantry items, calendar picks, "how it went" logs, links and creator names you save | To run the app and back it up |
| Photos and screenshots you add | Book pages, handwritten notes, TikTok screenshots | Screenshots are read on your phone and deleted from it after you save. We keep only the text, and the image too only if you choose to attach it. Photos you attach stay on the spell until you remove them |
| Text you paste | Captions you paste | To fill in a spell draft |
| TikTok links you share | The link, sent through our server to TikTok to look up the video's public caption and creator name | To fill in the caption and creator credit for you. We keep only the caption, creator name and link, and only if you save the spell. We don't keep the video's thumbnail. If the lookup fails, you can paste the caption instead |
| Settings | Time zone, hemisphere, notification day and time, theme | To build your calendar and send your weekly note at the right time |
| Device info for notifications | A push notification token | To send the weekly note, only if you turn notifications on |
| Video links you share (TikTok, Instagram, YouTube) | The link, the video's caption (its description), and the speech and on-screen text we read from it | To draft a spell from the video. Our server downloads the video, reads its speech and on-screen text, and deletes the video and audio before replying. The caption and text are sent to an AI model (Anthropic) to draft the spell. We keep only the spell draft you choose to save, not the video |
| Video reading log | Your account ID, the time of each video read, and its cost | To limit how many video reads you can use each week and to keep the service within its spending cap. No video or text is in this log |
| Purchases | Whether you have Plus, which plan, trial and renewal dates, and the App Store purchase records for it, linked to your account ID | To unlock Plus, restore it on a new phone, and remind you before a free trial ends. Apple handles the payment; we never see your card details |
| Crash reports | What the app was doing when it crashed, phone model, app version | To fix bugs. These come to us through Apple, only if you share crash data with developers in your phone settings |
| Beta waitlist | Email address; first name (optional); iPhone or Android; whether you are in the US; how you keep your spells now; your path or practice (optional); who sent you (optional); whether you will send feedback; your yes to get beta emails | To pick who gets a TestFlight invite, send that invite, and ask for feedback. Only if you fill in the sign-up form on our website or from a link we share |
We don't collect your location or contacts. When you share a TikTok link, our server asks TikTok for that video's public caption and creator name; TikTok sees the link but not who you are. When you share a video link for reading, our server downloads that video from the platform it came from; the platform sees the request, not who you are. The app only uses the link, screenshots or text you choose to give it.
How your information is used
- To run the app: save, sync, search and show your grimoire, pantry and calendar.
- To read the text in your screenshots into a draft spell. This happens on your phone, with no upload. You review every draft before it's saved.
- To read a shared video into a draft spell. Our server downloads the video, reads its speech and on-screen text, and deletes the files before replying. The caption and text go to an AI model to draft the spell. You review every draft before it's saved.
- To keep video reading within its weekly limit and spending cap (the video reading log).
- To send the weekly note if you turn it on.
- To answer you when you contact support.
We don't use your spells, photos or notes to train AI models, and we don't sell or rent your information. We only use beta waitlist information to run the beta.
Who helps us run the app
These companies process data for us only to provide their service:
- Supabase: stores your account and grimoire (database and photo storage), and the video reading log.
- Google (ML Kit text recognition): reads the text in your screenshots on your phone. Your images aren't sent to Google; the library may send Google basic diagnostics (phone model, OS and app version, an install ID, and performance and error counts).
- Anthropic: drafts spells from the caption and text of shared videos, and from pasted text. The video itself is not sent.
- Fly.io: hosts our video reader. The reader is on all the time, and downloads a video only when you ask it to read one; it deletes the video and audio after each read.
- Apple and Google: sign-in and app delivery.
- Expo: delivers notifications.
- RevenueCat: checks and records Plus purchases made through the App Store, using your account ID (not your email).
- Tally: hosts the beta sign-up form and holds your answers (servers in the EU).
- Brevo: sends our emails, including sign-in codes and beta invites. If you join the waitlist we may add your email and first name to Brevo to send the invite.
We may share information if the law requires it, or to protect the app and its users from fraud or abuse.
How long we keep it
- Your grimoire stays until you delete it or your account.
- Deleted spells sit in Recently deleted for 30 days, then they're removed.
- Videos and their audio are deleted by our video reader right after each read. We don't keep them.
- The video reading log is deleted with your account.
- When you delete your account in the app, your account and everything in it are deleted right away. If you ask by email, we do it within 7 days. Backup copies are cleared within 30 days.
- Beta waitlist answers are kept until the beta ends, then deleted within 30 days. You can ask us to delete yours any time at [email protected]; we do it within 7 days.
Your choices
- Download your data: Settings > Export everything (PDF or JSON).
- Delete your account: Settings > Delete account, or see how to delete your account.
- Notifications: turn them on or off any time in the app or your phone settings.
- Photos and camera: the app only asks when you use them; you can change this in your phone settings.
- Beta emails: every email has an Unsubscribe link. Or write to [email protected] and we will remove you from the waitlist.
Children
The app isn't meant for children under 13, and we don't knowingly collect information from them. If you think a child has given us information, contact us and we'll delete it.
Security
Your data is sent over encrypted connections and is locked to your account. No system is perfectly secure, but we work to protect your information.
Changes
If we change this policy, we'll update the date above and tell you in the app if the change is important.
Contact
[email protected]
Tuell Realty LLC, Indiana, USA