Moonmic Privacy Policy

First Published: October 22, 2026 · This Revision Published: October 22, 2026

CodeSand Co., Ltd. (the "Company") handles the personal information of Moonmic (the "Service") users with care and complies with the Personal Information Protection Act of Korea and other applicable laws. This policy is written so that users can see what information the Company collects, when, where it is sent, what it is used for, and when it is deleted.

1. Personal Information Collected

General: the Company does not collect your name, email address (except when you send an inquiry email yourself), phone number, precise location (GPS), contacts, photos, call or message logs, health information, payment-instrument information such as credit card numbers, or unique government identifiers such as resident registration numbers. The permissions the app requests are Microphone (for night recording — you can still use bedtime sounds without it) and Notifications (Android — for the persistent notification shown while recording; recording works even if you decline). On iOS a separate prompt asks whether to allow tracking for ad personalization (Section 7). The app does not request location, contacts, photo, storage, or camera permissions. Because the Service has no accounts, it does not collect names, passwords, or social-account information.

(a) Microphone input — only the moments with sound are saved on your phone, as clips

While a night started with "Start recording" is in progress, the Service keeps the microphone open. For about 30 seconds after the start it measures the room's background noise (the baseline), and then saves only a few seconds before and after each moment that is louder than the baseline by a set margin, as a short clip (up to 3 minutes per clip). The full night's audio is never stored; the audio used for the baseline and the audio between events is discarded without being saved.

• Where it is stored — the app's private storage area on your device. Other apps cannot read it, and it does not appear in the iOS Files app. This area is excluded from iCloud and computer backups and from Android auto-backup and device-to-device transfer, so clips are not copied into operating-system backups. There is no path by which they are sent to a Company server.
• Sound classification — labeling each clip as snoring, speech, or other is done only on your phone, using the operating system's on-device sound analysis (iOS) or a public classification model bundled with the app (Android). Audio is never sent out for analysis.
• Retention — in free use, clip files are deleted automatically 30 days after the night they were recorded (favorited clips are kept). Once you purchase Unlock all features, the default retention becomes unlimited, and you can switch it back to 30 days under Settings → Clip storage → Keep clips for. The night's summary numbers and labels remain after the file is deleted. There are limits on the number and size of clips per night, and new clips are not saved when storage space is low.
• Deletion — you can delete clips one at a time in the clip list (swipe left). Deleting the app deletes all clips, night records, and tags. There is currently no function in the app to delete a night record on its own.
• Leaving the device — only when you yourself run "Export clip" on the Clips screen (see (b) below).

Sounds of people sleeping next to you. Any sound near the phone may be recorded even if it is not yours (a partner's snoring or talking, pets, and so on). The Company does not receive those sounds, but it is your responsibility to inform anyone else present in the space where you record and to comply with applicable law (Terms of Service, Section 4(e)). The app reminds you of this during first-run onboarding.

(b) Information that stays on the device and is not collected by the Company

• Night records — recording start and end times, planned wake time, recording duration, the measured baseline level (dB), sensitivity setting, number of detections, total time per label (snoring/speech/other), the loudest clip, end reason, number of interruptions, and the bedtime sound number, timer, and play mode used that night
• Clip information — each clip's start time, duration, peak and average level (dB), automatic label and the classifier's raw label and confidence, the label you corrected, favorite status, file format and size
• Night tags — tags you attach to a night (built-in tags such as alcohol, late meal, tired, new pillow, exercise, caffeine, stuffy nose, side sleep, and the names of tags you create). They may concern your health, but they never leave the device.
• App settings — sensitivity, whether to measure the baseline, wake time, start delay, bedtime sound selection/timer/volume/play mode, retention period, theme, app language, whether usage statistics and error reports are sent, onboarding completion
• Purchase status — whether Unlock all features is owned (only the fact of purchase is recorded; no payment-instrument information)

This information is recorded only in the device's internal storage and there is no path by which it is sent to a Company server. However, bucketed or categorical values of some of it (the duration and detection-count buckets, end reason, bedtime sound number, the kind of label correction, and so on) are sent as the "App interactions" item in (c) below while usage statistics are on — the times at which sounds occurred, dB values, tags, and the clips themselves are never sent. Deleting the app deletes the information on the device.

Exporting clips. On the Clips screen you can export a clip you recorded as a file. The file is copied on the device and handed to the app you choose in the operating system's share sheet (mail, messenger, cloud storage, and so on); it does not pass through a Company server. The exported file's name contains the date and time the clip started (for example Moonmic_20261019_031805.m4a), so the recipient can see that time. What happens after the hand-off is the responsibility of the app you chose and the recipient. The bedtime sounds bundled with the app (noise, nature sounds, music) cannot be exported.

(c) Information the Company collects — by store-declared type

The information below is sent over the network (HTTPS) directly to the systems of the external providers named, not to the Company, at the moment the relevant function runs; the Company views aggregated results and individual error records through those providers' consoles. The Company does not separately gather this information on its own servers. The outsourcees and their work are set out in Section 5 and the details of overseas transfer in Section 6.

2. Purpose of Use of Personal Information

The Company uses collected personal information only for the following purposes, and if a purpose changes it gives advance notice and obtains any required consent.

• Providing the Service — night recording, detecting sound events and saving clips, on-device sound classification, displaying the morning summary, night history, and tag comparisons, and playing bedtime sounds *(processed only on the device)*
• Clip export you run yourself *(handed directly from the device to the app you choose)*
• Checking whether Unlock all features has been purchased and applying its benefits *(processed on the device; purchase status is queried from the app store at launch and on return to the foreground)*
• Improving the Service and analyzing usage statistics — where overnight recording breaks off, which features are used, where paid conversion happens; displaying the price notice on the purchase screen
• Serving and measuring ads and preventing invalid traffic — funding the free tier
• Securing the stability of the Service and analyzing the cause of errors — including per-version stability metrics
• Responding to customer inquiries and handling consumer complaints and disputes

The Company does not use your recordings, clips, night records, or tags for advertising or marketing. That information is never delivered to the Company in the first place. The Service only records and logs sound; it does not provide any medical judgment about your sleep or health (Terms of Service, Section 4(a)).

3. Retention and Use Period, and Destruction

(a) Information stored on the device

Night records, clips, tags, and app settings exist only on your device; because the Company does not hold them, there is nothing for the Company to destroy and no destruction procedure on its side.

• Clip files — in free use, deleted automatically 30 days after the night they were recorded (favorites excluded). For owners of Unlock all features the default is unlimited; they can choose 30 days under Settings → Clip storage → Keep clips for, and when the period is shortened the app first shows how many clips will be deleted. Clips can also be deleted one at a time in the clip list. Summary numbers, labels, and durations remain after the file is deleted.
• Night records and tags — kept on the device until you delete the app. There is currently no function in the app to delete a night record on its own.
• Everything — deleting the app removes all information stored on the device. This app's data is excluded from OS backups, so it is not revived from a backup.

Because the Service has no accounts, there is no membership-withdrawal procedure.

(b) Items with a defined period

• Usage statistics (app interactions, purchase history) — event- and user-level data in Google Analytics for Firebase is deleted automatically after the retention period the Company sets in the console, 2 months (2 months for both event data and user data, configured so that new activity does not extend the period); after that only aggregated reports that cannot distinguish individual devices remain.
• Error reports — destroyed 30 days after collection. This period follows the error-collection provider's retention policy.
• App session information — kept by the same provider under its own retention policy. The Company does not keep it itself and views only per-version aggregates.
• Information from ad processing — held by Google under its own policies and applicable law. The Company does not hold it and views only aggregated ad performance such as impressions and revenue.
• Processing records of inquiry emails (Mailgun) — The message body is not stored with Mailgun but only in the Company's mailbox (server in Seoul, Republic of Korea), for the period set out in (c). Processing records (sender and recipient addresses, subject, time, and processing result) may remain with Mailgun for up to 30 days under Mailgun's retention policy.

(c) Items kept as required by law

• Records of consumer complaints or dispute handling (including inquiries received by email) — 3 years (the Act on the Consumer Protection in Electronic Commerce, etc. of Korea)
• Records of payment and supply of goods (such as receipt information you send during a refund inquiry) — 5 years (the same Act)
• Other general inquiry emails — 1 year after the reply is complete
• Other information whose retention is required by law — the period that law prescribes

Payment and refund records for paid products are kept by the sellers, the Apple App Store and Google Play, under their own policies and applicable law; the Company does not hold them.

(d) Method of destruction

Information whose retention period has expired or whose purpose has been achieved is permanently deleted from electronic files by a method that prevents recovery or reproduction.

4. Provision of Personal Information to Third Parties

The Company does not provide users' personal information to third parties, except in the following cases.

• When the user has given prior consent
• When required by law, or when an investigative agency requests it for investigative purposes following the procedures and methods prescribed by law

Where the recipient of a clip you exported and sent yourself can see its contents, that is disclosure by your own choice, not provision to a third party by the Company. The transmission of information to external providers for usage statistics, ad serving, error diagnostics, and receiving inquiry emails and sending replies is outsourcing of processing under Section 5, and its details are set out in Sections 5 and 6.

5. Outsourcing of Personal Information Processing

The Company outsources the processing of personal information to the following providers to provide the Service. If an outsourcee or the outsourced work changes, the Company discloses it through this policy.

6. Overseas Transfer of Personal Information

In providing the Service, the Company transfers personal information overseas as follows. These transfers constitute outsourcing and storage for the conclusion and performance of a contract with the data subject under Article 28-8(1)(3) of the Personal Information Protection Act of Korea, and disclosure of the matters below through this policy serves as the required notice.

Time and method of transfer (common to all providers below): sent over the network (HTTPS) as needed at the moment you use the relevant function. Usage statistics are sent when the app is launched or the action occurs, error reports when an error occurs, app session information when the app is launched or returns from the background, ad information when an ad is requested or shown, and inquiry emails when you send an inquiry or the Company replies. Each provider's contact details are available through its privacy policy link.

7. Advertising Identifiers, Personalized Advertising, and Ad Consent

The Service is provided free of charge and funded by advertising. Users who have not purchased Unlock all features see Google AdMob banner ads at the bottom of the Morning summary screen and the History screen. There are no ads while recording, while bedtime sounds play, or during onboarding, and no interstitial, rewarded, or app-open ads are used.

• When the ad SDK starts — the ad SDK starts after the History screen's banner placement has been visible for a few seconds, not at app launch. The consent and tracking prompts below then run in order; they are never shown on the Morning summary screen right after a night or while recording.
• European Economic Area, United Kingdom, Switzerland — you can choose whether to consent to personalized ads through Google's certified consent management platform (User Messaging Platform). In regions where the consent dialog is shown, you can change your choice at any time under Settings → Privacy → Ad privacy options in the app. In certain U.S. states (such as California), no consent dialog is shown, but you can opt out of the sale or sharing of personal information for personalized ads from the same menu (Settings → Privacy → Ad privacy options). In all other regions, no separate consent dialog is shown and this menu does not appear.
• iOS — the app asks whether to allow tracking through the App Tracking Transparency (ATT) prompt. If you do not allow it, the advertising identifier (IDFA) is not used and non-personalized ads are shown, and every feature of the app remains available if you decline. You can change your choice at any time under device Settings → Privacy & Security → Tracking.
• Android — AdMob may use the advertising ID to personalize ads. You can reset or delete the advertising ID and turn off ad personalization under device Settings → Google → Ads.
• Purchasing Unlock all features — all ad placements in the app disappear and, after the app is relaunched, the ad SDK is not started, so consent and tracking prompts are not shown and no information is collected or sent for advertising purposes.
• Separation from usage statistics — the analytics tool's advertising-ID collection is off, and the analytics tool is not linked to the ad SDK. Usage statistics are not used to personalize ads.

For details, see the Google Privacy Policy and the Google Ads Controller Terms.

8. User Rights and How to Exercise Them

You may at any time request access to, correction of, deletion of, or suspension of processing of your personal information, and withdraw consent, by the following means.

• Directly in the app — delete clips in the clip list; deleting the app removes all information stored on the device. Turn off Settings → Privacy → "Send usage statistics and error reports" to stop further usage statistics and error reports.
• In device settings — reset or delete the advertising identifier, turn off ad personalization, change the iOS tracking permission (Section 7)
• By email — contact the data protection officer in Section 11 and the Company will handle your request without delay and reply with the result. If you want usage statistics or error records already sent to an external provider deleted, include information that can identify the record, such as the time of the error, device model, and app version. After reasonably confirming that the requester is the user of that device, the Company deletes the record in the outsourcee's console or, where it cannot be identified, explains why and when it will be destroyed automatically, and replies within 10 days of receipt. If you ask us to delete an inquiry you sent by email and our reply, we delete them from the Company's mailbox. Mailgun does not store the message body, and its processing records are deleted within 30 days under Mailgun's retention policy.

Because the Service has no accounts and does not send recordings or records to a server, the Company holds no per-user information. Usage statistics and error records carry no user identifier set by the Company, so it may be difficult to single out a particular user's records; they are destroyed automatically after the periods in Section 3(b). Where there are legitimate grounds to limit a request, the Company explains them.

The legal guardian of a child under 14 may exercise the above rights on the child's behalf.

9. Measures to Secure Personal Information

The Company implements the following measures.

• A structure that does not collect — recordings, clips, night records, and tags are never sent to a Company server. The app contains no communication path for sending the originals of this information outside.
• Isolation on the device and backup exclusion — clips and records are kept in the app's private storage, inaccessible to other apps; iOS file sharing and Android shared storage are not used; and the data is excluded from OS cloud backup and device transfer.
• Minimized usage statistics — the events and values that can be sent are restricted to a fixed list and enforced in code so that free-form values cannot be sent; recording duration and detection counts are sent only as buckets; automatic screen reporting and advertising-ID collection are off.
• Minimized error diagnostics — automatic attachment of basic personal data such as user identifiers, email, and IP is off; screenshots, session replay, and performance tracing are not used; file paths and clip file names are removed from error messages and action logs; navigation history and development logs are not sent. The point of failure is marked only with predefined fixed strings.
• Encryption in transit — all communication between the app and external services (statistics, ads, payments, error collection) is encrypted with HTTPS.
• No accounts or passwords — the Service creates no accounts, so the Company collects or stores no login information or passwords.
• No handling of payment instruments — payments are processed by the app stores, and the Company's systems never handle payment-instrument information.
• Restricted access — aggregates and error records in external-provider consoles and inquiry emails in the Company's mailbox are viewed only by the minimum staff needed to operate the Service.

10. Personal Information of Children under 14

The Service is not directed at children under 14 and does not knowingly collect their personal information. If the Company learns that personal information of a child under 14 has been collected, it destroys that information without delay.

11. Data Protection Officer and Remedies for Infringement of Rights

The Company has designated a data protection officer, and users' inquiries, complaints, requests for remedy, and access requests regarding the handling of personal information are processed by the department below.

• Company: CodeSand Co., Ltd.
• Department: CodeSand Co., Ltd. Privacy Team
• Business registration number: 368-87-03020
• Email: moonmic@reply.codesand.co.kr
• In the app: Settings → Privacy → Contact us
• Hours: Weekdays 10:00–18:00 (KST, excluding Korean public holidays)

To obtain remedy for infringement of personal information, you may apply for dispute resolution or consultation with the following bodies in Korea.

• Personal Information Dispute Mediation Committee — 1833-6972 (kopico.go.kr)
• Personal Information Infringement Report Center — 118 (privacy.kisa.or.kr)
• Supreme Prosecutors' Office — 1301 (spo.go.kr)
• National Police Agency Cyber Bureau — 182 (ecrm.police.go.kr)

12. Changes to This Policy

Effective Date: October 22, 2026 (first effective October 22, 2026)
The contents of this policy may be added to, deleted, or amended in response to changes in laws, policies, or the Service, and when it changes, the reason and the effective date are stated and the change is posted on the Service website.

© 2026 CodeSand Co., Ltd. Business Registration No. 368-87-03020.