Privacy Policy

Last updated: June 14, 2026

No personal data — only anonymous, opt-out usage analytics. We still cannot read your secrets or passwords.

Moat ("the App") is a two-factor authenticator built so your data stays on your device and remains unreadable to anyone else — including us. This policy explains, plainly, what happens to your data. Moat is operated by AI Plus.

Anonymous usage analytics

To learn which features people use and improve Moat, we record a small, fixed set of anonymous events using PostHog — in the app, product events such as "a code was added" or "the paywall was shown"; on this website, anonymous page views and a couple of clicks (e.g. "download" or "get Pro"). This analytics data:

• is anonymous — tied to a random, resettable per-install/visitor identifier, never to your name, email, or account, and we never build a profile of you;
• covers only event names, page paths, counts, and coarse context (referrer and broad browser/device type for web). It never includes your 2FA codes, secrets, passwords, account names, the services you use, or any form or payment details — the website disables click/form autocapture and never records your session, and the checkout runs in the payment provider's own frame we can't see into;
• involves no advertising identifiers, no cross-app tracking, and no ads, and is never sold or shared for advertising;
• can be turned off anytime in the app (Settings → Privacy → "Anonymous usage analytics"); the website also honors your browser's Do-Not-Track setting and never records your session.

What we don't collect

• We cannot read your 2FA secrets or passwords — they're encrypted and unreadable to us (see below).
• No third-party logo fetches — service icons are rendered on your device, so we never learn which accounts you hold.
• No advertising and no data sales — no ad identifiers, no cross-app or ad tracking, and we never sell or share your data.
• No access to your name, contacts, photos, or location.

What stays on your device

Your 2FA secrets and any saved passwords are stored in the iOS Keychain, protected by device encryption and excluded from unencrypted backups. They never leave your device in readable form.

Optional account sync & backup

Sync is off by default. If you turn it on, your data is end-to-end encrypted on your device before it is uploaded — our servers only ever store ciphertext they cannot read.

• Encryption uses AES-256-GCM; the key is derived from your recovery key with PBKDF2-SHA256 at 210,000 iterations and random salts.
• Your encryption keys and recovery key remain on your device and are never sent to us.
• Sync uses Firebase Authentication only for an identifier — anonymous by default, which you may optionally upgrade to an email login. If you choose to add an email, it is used solely to identify your encrypted backup. The same Firebase Authentication links any subscription you buy on our website to your account — it carries no analytics or advertising tracking.

Subscriptions

Moat offers an optional premium subscription with a 7-day free trial. We never see or store your name, card, or payment details. On iPhone, payment is handled entirely by Apple through your App Store account. On the web, payment is handled by Paddle (Paddle.com Market Ltd), our merchant of record, who processes the transaction; Moat receives only confirmation that a subscription is active. To unlock premium features we verify subscription status using a random app identifier and the purchase event — no personal information is attached. See our Refund & Cancellation Policy for billing details.

Your control

• Export an encrypted backup at any time.
• Delete items — they're held briefly in Recently Deleted, then permanently erased (including the secret key in the Keychain).
• Delete the App to remove all local data from your device.

Children

Moat is not directed at children under 13 and does not knowingly collect any information from them.

Changes

We may update this policy from time to time. Material changes will be reflected here with a new "last updated" date.

Contact

Questions about this policy? Reach us through our support page or the App's App Store listing.