Privacy Policy

Last updated: February 25, 2026

This Privacy Policy describes how MOAI ("we", "us", or "our") collects, uses, and shares information when you use the CrowdAvoid mobile application (the "App"). By using CrowdAvoid, you agree to the practices described in this policy.


1. Information We Collect

Location Data
CrowdAvoid requests access to your device's location in order to show you nearby attractions and relevant crowd information. Location data is used only within the app to enhance your experience and is not stored on our servers or shared with third parties.

Usage Data
We may collect anonymous usage data such as which cities and attractions you view, app performance data, and crash reports. This data is used solely to improve the app and is never linked to your personal identity.

Push Notification Tokens
If you enable Crowd Alerts, we collect a device push notification token (via Firebase Cloud Messaging) in order to send you crowd level notifications. This token is stored securely and is used only to deliver alerts you have explicitly requested. You can disable notifications at any time through your device settings.

Itinerary and Travel Data
Any itineraries, saved attractions, or passport stamps you create are stored locally on your device. We do not collect or store your personal travel plans on our servers.


2. How We Use Your Information

We use the information we collect to:

- Provide real-time and predicted crowd level information
- Send crowd alert push notifications you have requested
- Improve app performance and fix bugs
- Understand how users interact with the app to improve features


3. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share anonymous, aggregated data that cannot identify you personally for the purpose of improving our services.

Third-Party Services
CrowdAvoid uses the following third-party services which have their own privacy policies:

- Firebase Cloud Messaging (Google) — used for push notifications. See Google's Privacy Policy at https://policies.google.com/privacy
- Google Maps — used for location and mapping features. See Google's Privacy Policy at https://policies.google.com/privacy


4. Data Retention

Push notification tokens are retained only as long as you have crowd alerts enabled. Anonymous usage data may be retained for up to 12 months for analytical purposes. You may request deletion of any data associated with your device at any time by contacting us.


5. Children's Privacy

CrowdAvoid is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete it.


6. Security

We take reasonable measures to protect the information we collect from loss, theft, misuse, and unauthorized access. Push notification tokens are stored securely using industry-standard practices.


7. Your Rights

Depending on your location, you may have the right to:

- Access the personal data we hold about you
- Request deletion of your data
- Opt out of push notifications at any time via device settings
- Revoke location permissions at any time via device settings


8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by updating the date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.


9. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

MOAI
New York City, NY, USA
Email: [email protected]