Privacy Policy

Study data and Apple services

Moku stores your decks, questions, answers, review history, schedules, statistics, preferences, and reminder settings on your device. Moku does not transmit this study data to me or use it for analytics, advertising, profiling, or tracking.

Files you select are imported on your device. An exported backup contains your study content and history and is saved wherever you choose. Apple may include Moku’s local data in a device backup under your Apple Account and Apple’s Privacy Policy. I cannot access your Apple Account or those backups.

If you use the Apple Watch app, a limited study queue and its review results move between your paired devices through Apple’s Watch Connectivity service. The Watch contains no analytics SDK; the iPhone includes Watch reviews only in the study-session totals described below. Study reminders are scheduled locally.

Discover and web services

Discover downloads its catalog and any Moku-published deck you choose from s.moku.tadas.me, hosted on Amazon CloudFront. A request gives Amazon ordinary connection information such as its network address, but carries no Moku account, analytics identifier, or information about your library. I do not retain access logs for these downloads.

Community deck links open AnkiWeb in Apple’s in-app browser, and searches are sent to DuckDuckGo. Those services receive what your browser normally sends and apply their own privacy policies; Moku cannot see what you do on their pages. This website is hosted by GitHub Pages, which receives ordinary connection information when serving it. The site measures its own traffic without cookies, as described below.

Usage and crash analytics

Moku sends limited product events and automatic crash reports to PostHog, acting as my data processor. Requests travel through the PostHog-managed proxy at t.moku.tadas.me, delivered through Cloudflare, to Moku’s PostHog project hosted in the European Union. These providers may process connection and operational data in other locations under the safeguards described in their privacy terms.

Analytics is enabled by default. To stop new usage events and crash reports, open Settings → Privacy in Moku and switch off Share usage analytics. The choice is remembered on your device.

The events record actions such as creating, editing, or deleting a deck or card; whether an import succeeded or failed and a broad failure category; adding a sample or Discover deck; completing onboarding; one summary per study sitting containing its duration and review counts by rating; and, once a day, how many days your current and longest study streaks run to. The PostHog SDK also records when the app is installed, updated, opened, or sent to the background, carrying the app version and build and, for an update, the version it replaced. Moku does not capture screens, taps, session replays, surveys, feature-flag events, push tokens or opens, or person profiles.

The SDK assigns a random identifier to this installation and temporary session identifiers so events from the same installation or sitting can be grouped. Apple classifies data attached to a persistent device identifier as “linked to you”; for Moku, that means linked to an installation, not a known identity. These identifiers are not used for advertising and are not shared with other apps. Events also carry technical context such as their time, app and SDK versions, device model and type, operating system, locale, time zone, screen dimensions, and network connection type. The proxy and PostHog necessarily process the network address delivering a request, and PostHog may use it to derive an approximate region. Crash reports include a stack trace and similar technical context.

Analytics never includes deck names, questions, answers, notes, imported file names, card-by-card review history, backups, or anything you type. Moku never calls PostHog’s identification API and never links the random installation identifier to an account, email address, advertising identifier, or person profile.

This website reports to the same PostHog project, again through t.moku.tadas.me. It stores nothing in your browser — no cookie, no local or session storage — which is why it asks you to accept nothing. PostHog instead derives an identifier for each visit on its servers, from the request and a salt that changes daily, so a visit tomorrow counts as a new one and cannot be tied to today’s. No person profile is created.

Those events are page views, page exits, and clicks on the page’s links and buttons. Each carries the page and referring addresses, the link or button’s own text, and technical context such as browser, operating system, device type, locale, screen size, and time. The site has no forms and nothing to type into. The network address delivering a request is dropped before anything is stored, so unlike the app’s events these carry no approximate location. To stop them, block t.moku.tadas.me in your browser or in a content blocker; the site works the same either way.

I do not sell this data, use it for advertising, or share it for tracking across other companies’ apps or websites. For people in the EEA or UK, I rely on my legitimate interests in understanding which Moku features are useful, which pages people read, and diagnosing failures, balanced against the limited and pseudonymous nature of the data. You can object at any time by switching analytics off in the app, blocking the requests described above, or contacting me.

Support, retention, and your rights

If you email me, I receive your address and anything you include. I use it only to respond and investigate the issue, and retain it only as long as reasonably needed to answer you and keep a record of the issue. Please do not include sensitive study content unless it is needed for your request.

Your study data remains on your devices until you remove it. Deleting Moku removes its local data from that device. Exported files and copies held by Apple or another storage provider must be deleted separately. Analytics events are retained for up to 12 months. The random installation identifier is not linked to your contact details, so I may be unable to locate one installation’s events from an email address alone.

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to my processing of your personal data, and to receive a portable copy where applicable. You may also complain to your local data-protection authority. To exercise a right or ask a privacy question, email [email protected].

Changes and contact

I will post policy changes here and update the date above. I operate Moku; contact [email protected].