Moon Monitor Privacy Policy

Effective Date: 1 June 2026 | Last Updated: 10 June 2026

Privacy contact: dm@themoonbrand.com | +971 56 992 1030 | The Moon Brand, Hamriyah Free Zone, Sharjah, United Arab Emirates

1. Introduction

The Moon Brand (“The Moon Brand”, “we”, “us” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, store and protect Personal Data when you use the Moon Monitor mobile application, associated camera or monitoring devices, cloud features, customer-support services and related functionality (collectively, the “Services”).

Please read this Policy before using the Services. By creating an account, connecting a monitoring device or otherwise using the Services, you acknowledge that you have read this Policy. Where applicable law requires consent, we will request it before processing the relevant Personal Data. You may withdraw consent at any time, subject to the limitations described below.

This Policy applies to the Moon Monitor application. It does not apply to third-party websites, applications or services that have their own privacy policies.

2. Key Definitions

· “Personal Data” means information relating to an identified or identifiable natural person, whether directly or indirectly.

· “Sensitive Personal Data” may include biometric data, precise location data, communications content, health data, financial data, and images or audio that reveal sensitive information, as defined by applicable law.

· “Monitoring Device” means a compatible baby monitor, camera, sensor, hub or other connected device used with Moon Monitor.

· “User Content” means video, audio, snapshots, recordings, messages, device names and other content generated, uploaded, stored or transmitted through the Services.

3. Personal Data We Collect

3.1 Information You Provide

· Account information, such as your name, username, email address, phone number, password or other authentication information.

· Profile and preference information, such as profile image, language, country or region, time zone, notification preferences and device names.

· Support information, including messages, screenshots, recordings, photographs, order or warranty details, and any other information you provide when contacting customer support.

· Third-party sign-in information, if you choose to sign in through an external account provider. The information received depends on that provider and your settings with it.

3.2 Monitoring Device and Network Information

· Device identifiers and status, such as device name, device ID, serial number, MAC address, model, activation time, online status, firmware version, configuration and upgrade information.

· Connection information used to pair and operate the Monitoring Device, such as Wi-Fi network name, network status, IP address and connection diagnostics. We do not ask you to disclose your Wi-Fi password to customer support.

· Event and sensor information generated by enabled features, such as motion, sound, crying, temperature, humidity, sleep or other device alerts, depending on the Monitoring Device and features you use.

3.3 Video, Audio and Recordings

Moon Monitor is designed to provide live monitoring and related camera functionality. Depending on the Monitoring Device, your settings and the features you enable, the Services may process:

· live video and audio streams;

· two-way voice communications;

· snapshots, video clips and audio recordings;

· motion, sound, crying or other event alerts and associated thumbnails or clips; and

· recording metadata, such as date, time, device and event type.

User Content may be stored on your phone, a memory card, the Monitoring Device, or a cloud service, depending on the product and settings selected by you. Where cloud transmission or storage is used, the content may be processed by our infrastructure providers or the Monitoring Device technology provider solely to operate the requested feature, provide support, secure the Services or comply with law.

You are responsible for placing and using the Monitoring Device lawfully, informing other individuals where required, and obtaining any necessary consent before recording or monitoring them. Do not position a camera in a place where an individual reasonably expects complete privacy.

3.4 Information Collected Automatically

· Mobile-device and application information, including device model, operating-system type and version, app version, language, time zone, IP address, network type, push-notification token and device identifiers permitted by the operating system.

· Usage information, such as app sessions, feature interactions, device-pairing activity, settings, clicks and diagnostic events.

· Log and diagnostic information, including crash logs, error reports, timestamps, performance information and security events.

We may aggregate or de-identify information so that it no longer identifies you. We may use such information for analytics, service improvement and security where permitted by law.

4. App Permissions

Moon Monitor requests permissions only when needed for a feature. The exact permission names and availability may vary by device, operating system and app version.

· Camera: to scan a QR code, pair a Monitoring Device, capture a profile or support image, or use another camera-enabled feature you activate.

· Microphone: to use two-way talk, record audio with video, speak through the Monitoring Device, or provide voice-enabled functionality.

· Photos, media or storage: to save, upload, download, export or share snapshots and recordings, and to attach files to a support request.

· Bluetooth, nearby devices, local network and location: to discover, pair, configure or communicate with a Monitoring Device. Some Android versions require location permission for Bluetooth or Wi-Fi device discovery even when the App does not need to continuously track your precise location.

· Notifications: to deliver motion, sound, crying, connection, safety, firmware, account and service alerts.

· Background activity, picture-in-picture or display-over-other-apps: to maintain supported monitoring functions or display a live camera window when you choose to enable such functionality.

You may change permissions through your phone settings. Disabling a permission may prevent the related feature from working, but it will not affect processing that occurred before the permission was disabled.

5. How We Use Personal Data

We use Personal Data only for legitimate and disclosed purposes, including to:

· create, authenticate, secure and administer your account;

· pair, configure, operate and troubleshoot Monitoring Devices;

· provide live video, audio, alerts, recordings, remote access, sharing and other requested features;

· deliver service, security, account and firmware notifications;

· respond to support requests, warranty matters and complaints;

· monitor performance, diagnose faults, improve reliability and develop new features;

· detect, prevent and investigate fraud, misuse, unauthorized access, technical failures and security incidents;

· comply with legal obligations, lawful requests, court orders and regulatory requirements; and

· send marketing communications only where permitted and, where required, with your consent. You may opt out of marketing at any time.

6. Legal Bases for Processing

Where applicable law requires us to identify a legal basis, we rely on one or more of the following:

· performance of a contract, when processing is necessary to provide the Services you request;

· your consent, for optional permissions, marketing, certain analytics or other processing that requires consent;

· our legitimate interests, such as securing, maintaining, improving and supporting the Services, provided those interests are not overridden by your rights; and

· compliance with legal obligations and protection of legal rights, safety and security.

7. How We Share Personal Data

We do not sell your Personal Data. We may disclose Personal Data only as described in this Policy, including to:

· cloud hosting, data storage, content-delivery, notification, analytics, crash-reporting, cybersecurity, email and customer-support providers that process data on our behalf;

· the manufacturer, technology platform provider or authorised service provider supporting the Monitoring Device and its connectivity, where necessary to provide the Services;

· our affiliates and authorised personnel who need access for service operation, support, security, compliance or administration;

· professional advisers, auditors, insurers and regulators where reasonably necessary;

· law-enforcement agencies, courts, regulators or other parties when required by law or reasonably necessary to protect rights, safety, security or prevent fraud; and

· a buyer, successor or relevant adviser in connection with a merger, acquisition, restructuring, financing or sale of all or part of our business, subject to appropriate confidentiality and legal safeguards.

We may share Personal Data with another party when you direct us to do so, such as when you invite a family member or another authorised user to access a Monitoring Device. You are responsible for reviewing and managing shared access.

8. Third-Party Services and SDKs

The App may include third-party software development kits (“SDKs”) or services for functions such as cloud connectivity, push notifications, crash reporting, analytics, authentication or customer support. These providers may process limited device, account, usage or diagnostic data to perform their services. Their processing is also governed by their own privacy terms where they act independently.

The data disclosures submitted in Google Play Console and App Store Connect should accurately reflect the actual behaviour of the current App version, including all third-party SDKs integrated into it.

9. International Data Transfers

The Services may use infrastructure or service providers located outside the country where you live. As a result, Personal Data may be transferred to or processed in other jurisdictions whose data-protection laws may differ from those in your country.

Where required, we use lawful transfer mechanisms and appropriate safeguards, such as contractual protections, access controls, encryption and assessments of the recipient and destination. You may contact us for further information about applicable safeguards.

10. Data Retention

We retain Personal Data only for as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, maintain security, resolve disputes and comply with legal obligations. Retention periods vary depending on the type of information, your settings, whether the data is stored locally or in the cloud, and applicable legal requirements.

· Account and device data is generally retained while your account or connected device remains active and for a limited period afterward for security, support, backup and legal purposes.

· Recordings and snapshots are retained according to the storage method, subscription, device capacity and deletion settings selected by you. Locally stored content remains under your control unless uploaded or shared.

· Support, security and diagnostic records may be retained for a reasonable period after the relevant issue is closed.

When Personal Data is no longer required, we delete, anonymise or securely isolate it. Residual copies may remain temporarily in backups until they are overwritten in the ordinary backup cycle.

11. Security

We use reasonable administrative, technical and physical safeguards designed to protect Personal Data, including access controls, authentication, network and application security measures, encryption in transit where supported, logging, monitoring and personnel confidentiality obligations. No system can guarantee absolute security.

You also play an important role in security. Use a strong and unique password, protect your phone and Wi-Fi network, keep the App and Monitoring Device firmware updated, review shared users regularly, and contact us immediately if you suspect unauthorised access.

12. Your Privacy Rights and Choices

Subject to applicable law, you may have the right to:

· request access to or a copy of your Personal Data;

· correct inaccurate or incomplete Personal Data;

· request deletion of Personal Data;

· restrict or object to certain processing;

· receive certain Personal Data in a portable format;

· withdraw consent, without affecting processing carried out before withdrawal; and

· lodge a complaint with the competent data-protection authority.

You may manage certain information and permissions in the App or through your mobile-device settings. You may also submit a request through the in-app Help/Feedback function or by emailing dm@themoonbrand.com. Please describe the request and the account information needed to identify you. We may verify your identity before completing the request and may retain information where required or permitted by law.

13. Account and Data Deletion

You may request deletion of your Moon Monitor account and associated Personal Data through the account or privacy settings in the App, where available, or by emailing dm@themoonbrand.com with the subject line “Moon Monitor Account Deletion Request”.

Deleting the App from your phone does not automatically delete your account or cloud-stored data. Before deleting your account, save any recordings or information you wish to keep. Account deletion may disconnect Monitoring Devices, remove shared access and permanently delete cloud content, subject to legal, security, fraud-prevention and backup-retention requirements.

14. Children’s Privacy and Monitoring of Children

Moon Monitor is intended to be set up and operated by adults, parents or legal guardians. It is not directed to children and children should not create accounts or submit Personal Data directly to us.

Because the Services are designed for baby and child monitoring, video, audio and event information may include a child. Such information is processed under the direction and control of the adult account holder. The account holder is responsible for having appropriate authority to monitor the child and for using the Monitoring Device in accordance with applicable law.

If you believe a child has created an account or directly provided Personal Data without appropriate authorisation, contact us at dm@themoonbrand.com so that we can investigate and take appropriate action.

15. Marketing and Notifications

Operational notifications—such as motion, sound, crying, device status, security, firmware and account alerts—are part of the Services and may be managed in the App or your device settings. Disabling them may reduce the functionality or usefulness of the Services.

You may opt out of promotional emails or messages using the unsubscribe method provided in the communication or by contacting us. Service-related communications may still be sent when necessary to administer your account or provide important safety, security or legal information.

16. Changes to This Policy

We may update this Policy to reflect changes in the Services, our data practices, legal requirements or security measures. We will update the “Last Updated” date and, where required, provide notice through the App, by email or by another appropriate method. Material changes will take effect as stated in the notice.

17. Contact Us

For questions, complaints or requests relating to this Policy or your Personal Data, contact:

Organisation	The Moon Brand
Address	Hamriyah Free Zone, Sharjah, United Arab Emirates
Email	dm@themoonbrand.com
Telephone	+971 56 992 1030