Effective October 10, 2026
Who is this policy from?
Moonroof is made by David Grinberg, an individual developer in Massachusetts, USA. In this policy, “we,” “us,” and “our” mean David Grinberg. “You” means anyone who uses the Moonroof app or visits moonroofapp.com.
This policy covers the Moonroof iPhone app, including any earlier version released under another name, and the website at moonroofapp.com. It describes how Moonroof handles information. It is not a contract and doesn’t create contractual rights. The Terms of Use are the agreement for using Moonroof.
What does Moonroof keep on my iPhone?
Moonroof stores what you put into it on your iPhone. It stays there until you change or delete it. Depending on how you use the app, that can include:
About the learner driver
- First name (optional) and a picture you pick from Moonroof’s built-in set.
- Date of birth. Some permit rules depend on age, so setup asks for it.
- The state that issued the permit and the date the first permit began.
- Answers to your state’s setup questions, like whether a driver education course is done.
- Tickets or license suspensions you choose to record, with their dates, if your state’s rules count them.
About the adults who ride along
- Full name, initials, and how they know the driver (for example, parent or driving instructor).
- Answers about their license, such as whether it is valid, which state issued it, and roughly how long they have been licensed. Some states also need the adult’s age or birth date.
- Moonroof does not ask for anyone’s license number, Social Security number, or address.
About each drive
- When the drive started and ended, its time zone, and how much time counted toward day and night.
- Which adult supervised, and the adult’s initials when they confirm the drive.
- Details you add, like weather, road types, skills practiced, and notes.
- Whether the drive was timed in the app (“Timer recorded”) or typed in later (“Manual entry”).
- A history of edits and deletions, so the log shows what changed and when.
- If you use the day-and-night feature: your rounded drive area and the sunset times used for that drive (see How does Moonroof use location?).
Settings
Your reminders, display choices, and practice plans are also stored on your iPhone.
Where it lives
All of this is stored on your iPhone and protected by your iPhone’s own security, like your passcode. Moonroof also keeps a few recent safety copies of the log on your iPhone so it can recover if something goes wrong. Your iPhone’s own backups (iCloud Backup or a backup to your computer) may include Moonroof’s data too, as they do for other apps.
Moonroof also keeps a record on your iPhone of when you agreed to the Terms of Use and which versions of the Terms and this policy you were shown. That record is left out of your iPhone’s backups and your iCloud copy, so Moonroof asks you to agree again after the app is reinstalled or your iPhone is restored.
We do not run a server that stores your log, and the app does not send your log to us.
What do we receive?
From the app itself: nothing from your log. Moonroof has no account or sign-in. It contains no advertising, analytics, or tracking tools, and no code from other companies that collects data. The only request the app makes to our website is the check for new terms described in When does information leave my iPhone?
We do receive a few things from Apple, from Cloudflare, and from you:
- Sales and download reports. Apple gives us totals about downloads and purchases, such as how many people bought the full app and in which countries. We never receive your card number, your name, or your Apple Account email from a purchase.
- Crash reports and app statistics, only if you agreed to share them. If you turned on “Share with App Developers” in your iPhone’s Settings (Privacy & Security, then Analytics & Improvements), Apple may send us crash reports and basic usage numbers, like how many devices use Moonroof. Apple doesn’t tell us who you are. You can turn this off in the same place.
- Website traffic totals and security reports. Cloudflare, which hosts our website, shows us totals, such as how many visits the site had and from which countries, and details of requests its security tools flag or block. See What does the website collect?
- Emails you send us. If you email us, we receive your email address and anything you write or attach, such as an Apple order ID. Please don’t send your log or a child’s details.
If saving a drive fails, the app writes a short error note to your iPhone’s own system log. The details are hidden, and the note stays on your iPhone.
When does information leave my iPhone?
Information from Moonroof leaves your iPhone only in these cases:
- Your copy in iCloud, if your iPhone is signed in to iCloud and you haven’t turned it off. See How does the iCloud copy work?
- Apple Weather, only if you have the full app and turn on automatic weather. See What goes to Apple Weather?
- Apple’s App Store, when you buy or restore the full app. See What happens when I buy the full app?
- Files you share. When you export a PDF, a spreadsheet (CSV) file, or a full copy of the log, the file goes wherever you send it, like Mail, Messages, or Files. We can’t reach it or take it back. A full copy includes everything in the log, including the rounded drive area.
- Checking for new terms. When you open Moonroof, at most about once a day, and whenever it asks you to agree, Moonroof asks moonroofapp.com whether the Terms of Use or this policy changed and downloads the new version if there is one. The request contains nothing from your log and no identifier, and it is skipped in Low Data Mode. Like any internet request, it shows our web host, Cloudflare, your iPhone’s network address (IP address) and the time (see What does the website collect?).
- Links you open. Moonroof links to official state web pages, to Apple Weather’s legal page, and from these documents to other websites. Those open in your web browser, and those websites’ own privacy policies apply.
Apart from the cases above, Moonroof never sends anything to a state agency, a school, an insurance company, or any other organization. Giving the log to anyone is always your choice.
How does the iCloud copy work?
- If your iPhone is signed in to iCloud, Moonroof saves a copy of the whole log in your own private iCloud storage. It does this automatically after each drive is saved, unless you turn it off.
- Apple stores the copy in the private iCloud space that belongs to your Apple Account. Only someone signed in to your Apple Account can get to it. We cannot see it, open it, or restore it for you.
- If you set up a new iPhone with the same Apple Account, Moonroof can bring the log back from this copy.
- The copy uses your iCloud storage. Apple’s terms and Apple’s Privacy Policy apply to iCloud.
To turn it off, open Moonroof’s Settings, choose Copy in iCloud, and turn off Keep a copy in iCloud. This stops new copies. The copy already in iCloud stays until you delete it.
To delete it, choose Delete the copy on the same screen. You can also turn off iCloud for Moonroof in your iPhone’s Settings, under your name and then iCloud.
How does Moonroof use location?
Moonroof can work out how much of each drive happened after dark. To do that, it needs to know roughly where you practice, so it can work out sunset and sunrise times. Here is how it handles location:
- Off unless you say yes. Moonroof asks first in its own words. Only if you agree does iOS ask for permission. You can say no and set day and night yourself.
- Only while you use the app. Moonroof asks for “While Using the App” permission. It never reads your location in the background.
- Approximate. Moonroof asks iOS for an approximate location. You can leave Precise Location off.
- A single reading, rounded off. Moonroof reads your location only right after you say yes to its own prompt, and it doesn’t keep checking. It immediately rounds the reading to the center of a grid square about two-thirds of a mile (about 1 kilometer) across. The exact reading is thrown away. Only the rounded point is kept.
- What’s kept. The rounded point is saved on your iPhone as your “drive area” and is recorded with each drive’s day-and-night split. It is also part of your iCloud copy and of any full copy you export.
- No routes. Moonroof never records where you drive, your route, your speed, or any address.
- Worked out on your iPhone. Sunrise and sunset times are calculated on your iPhone. Your area is not sent anywhere for this.
To stop new readings, change Moonroof’s location permission in your iPhone’s Settings (Privacy & Security, then Location Services). This doesn’t erase the drive area already saved.
To erase the saved drive area, choose Delete all data in Moonroof’s Settings. If you have the full app, turning off automatic weather in Moonroof’s Settings also forgets the saved drive area. Drives already saved keep the area recorded with them until you delete all data.
What goes to Apple Weather?
Weather suggestions are part of the paid full app, and they are off until you turn them on. When they are on, Moonroof asks Apple’s weather service (Apple Weather) for the weather near your rounded drive area around the time of a drive. It then suggests that weather for the drive. You can change it.
- Moonroof sends Apple Weather only the rounded drive area and the time it needs. It sends no names, birth dates, or other details from your log.
- Like any internet request, your iPhone’s network address (IP address) reaches Apple when it contacts Apple Weather. Moonroof also loads the Apple Weather logo from Apple to show where the weather came from.
- Moonroof keeps the weather it filled in as part of that drive’s record.
- Apple’s Privacy Policy applies to Apple Weather.
What other iPhone features does Moonroof use?
- Notifications. If you turn them on, Moonroof shows reminders, like a weekly practice reminder or a reminder to finish reviewing a drive. Your iPhone creates these itself. Nothing is sent to us. Notifications can appear on your Lock Screen. You choose how they show in your iPhone’s Settings.
- Lock Screen timer (Live Activity). During a timed drive, Moonroof can show a timer on your Lock Screen with the elapsed time, sunset time, and the supervising adult’s initials. Anyone who can see your screen can see it. You can turn Live Activities off in your iPhone’s Settings.
- Motion. When you look at a badge, it can tilt as you move your iPhone. Moonroof reads the iPhone’s angle only while the badge is open and never saves it.
- Vibration. Moonroof uses small taps (haptics) as feedback. This uses no personal information.
- Files you open. If you open a Moonroof log file, for example one a family member sent you, Moonroof reads it on your iPhone to add it to the app.
What happens when I buy the full app?
Moonroof is free to download. You can buy the full app with a one-time in-app purchase. Apple handles the whole payment under its own terms. We never see your payment details.
To know whether you own the full app, Moonroof asks Apple whether your Apple Account has bought it. This check happens between your iPhone and Apple. If a family uses Ask to Buy, Apple handles the approval.
How do we use what we receive?
We use the information we receive to answer you, to find and fix problems with the app and website, to understand in total how many people download and buy Moonroof and visit the website, to keep the website and the app’s check for new terms working and safe from attacks, to meet legal duties, and to enforce our Terms of Use and protect our rights and people’s safety.
We don’t use personal information for advertising, and we don’t build profiles about people.
What about children and teens?
Moonroof is for families with a learner driver. It is meant to be set up and managed by a parent or legal guardian, or by an adult using it for their own practice.
Moonroof is not directed to children under 13, and we don’t knowingly collect personal information from them through the app or the website. Because the app keeps what you enter on your iPhone and in your own iCloud, we don’t receive information about the learner, whatever their age.
A parent or guardian can see, change, export, or delete everything in the app at any time. If we learn that a child under 13 has sent us personal information, we will delete it.
What does the website collect?
moonroofapp.com is a simple website about Moonroof. It has no forms and no sign-in, and it uses no analytics or advertising tools. Cloudflare hosts it for us and protects it from bots and attacks, as this section describes. The only script from another company on the website is Cloudflare’s bot check, and it runs only in web browsers on the website, never inside the app. The app’s one request to the website, its check for new terms (see When does information leave my iPhone?), goes through Cloudflare like any other request.
Every request
To deliver the website and keep it secure, Cloudflare handles basic information about every request to it, whether from a web browser or from the app’s check for new terms. That includes your IP address, the page or file asked for, the time, your browser or app (its “user agent”), the page you came from, and the country Cloudflare works out from your IP address. From serving these requests, Cloudflare shows us totals, such as how many visits the site had and from which countries.
Bot and attack protection
Cloudflare checks every request to tell people from automated traffic, like bots and attacks. To do this, it uses your IP address, the request’s headers (including the user agent), details of your network and connection, and patterns in requests. On the website’s pages, it also runs a small script in your web browser that checks signals about your browser and device, and saves the result in a cookie. Cloudflare may ask your browser to pass a check (a “challenge”), and it may slow down or block requests.
Our Cloudflare dashboard can show us details of individual requests that these security tools flagged or blocked, such as the IP address, the page asked for, the country, and the user agent.
Cloudflare doesn’t add this script to the documents the app downloads, and the app doesn’t run scripts from our website or keep its cookies.
Cookies
Our website sets no cookies of its own. Cloudflare’s bot protection may set these cookies in your browser, which Cloudflare describes as strictly necessary:
- __cf_bm, for its bot check. Cloudflare says it expires after 30 minutes of inactivity, is encrypted, and isn’t tied to any user ID on our website.
- cf_clearance, which records that your browser passed a check.
- Cookies whose names start with cf_chl, when Cloudflare shows a challenge.
You can block or delete cookies in your browser’s settings. If you do, Cloudflare may challenge or block your visits.
What we do with it
Apart from the law and safety reasons in Who do we share information with?:
- we use this information only to see, in total, how much the website is used, and to keep the website and the app’s check for new terms working and secure; and
- we don’t use it to work out who you are, and we don’t combine it with support emails or anything else we hold.
We don’t use it for advertising. We don’t sell it, and we don’t share it for advertising based on your activity on other websites or apps. No analytics or advertising company is on our website.
Cloudflare’s role
Cloudflare acts as our service provider. It handles this information on our behalf, to host and protect our website. Cloudflare also uses information about traffic on its network to run, secure, and improve its own services, such as spotting bots and attacks across the many websites it serves. Cloudflare keeps this information under its own rules. Cloudflare’s Privacy Policy explains how Cloudflare handles it.
Your agreement
By using our website, you agree to Cloudflare handling information about your visits and requests on our behalf as this section describes, including its security checks and security cookies. The Terms of Use include the same agreement. If you don’t agree, please don’t use the website.
Other websites, “Do Not Track,” and Global Privacy Control
Links to the App Store take you to Apple’s website, where Apple’s privacy policy applies.
Apart from Cloudflare’s security work across the websites it serves, described above, no company collects information through our website about your activity over time and across other websites.
Global Privacy Control asks a website not to sell your personal information or share it for targeted advertising. We don’t do either, so the signal changes nothing here. Our website also works the same way whether or not your browser sends a “Do Not Track” signal. Cloudflare’s security checks run either way.
How long is information kept, and how do I delete it?
In the app
- Your log stays on your iPhone until you delete it.
- Delete one drive: open the drive in the log and choose Delete drive. It comes off the log and out of every total. So that the log’s history stays complete, Moonroof keeps the deleted drive’s record, marked as deleted, on your iPhone and in your iCloud copy. To erase it completely, delete all data.
- Delete everything in the log: in Moonroof’s Settings, choose Delete all data. This removes the drivers, the adults, every drive and edit, the drive area, your settings, practice plans and reminders, and the safety copies from your iPhone. It also stops the Lock Screen timer. If a copy exists in iCloud, Moonroof asks whether to delete that too. The record of when you agreed to the Terms of Use stays until you delete the app.
- Deleting the app removes the data stored on your iPhone. It does not delete your copy in iCloud. Delete that first in Moonroof’s Settings, or turn off iCloud for Moonroof in your iPhone’s Settings.
- Files you exported or shared stay wherever you put them. Older backups of your iPhone may also contain Moonroof’s data until those backups are replaced or deleted.
Information we hold
- Support emails stay in our email account until we delete them.
- Reports from Apple are kept by Apple under its own rules. They don’t identify you to us.
- Website traffic and security records, including those about the app’s check for new terms, are kept by Cloudflare under its own rules.
How is information protected?
Your log is protected by your iPhone’s own security, and your iCloud copy by your Apple Account. To keep them safe, use a passcode on your iPhone and turn on two-factor authentication for your Apple Account.
No phone, app, website, or email service is perfectly secure, so we can’t promise that information will never be accessed without permission. If a law requires us to tell you about a security breach, we will tell you as that law requires.
What choices and rights do I have?
- Your log. You control it. You can see, change, export, and delete everything in the app. We don’t have a copy, so we can’t look it up, change it, or delete it for you.
- Location, weather, the iCloud copy, and notifications. You can turn each of these off, as this policy describes.
- Cookies on our website. You can block or delete them in your browser’s settings, as What does the website collect? describes.
- Information we hold, like emails you sent us. Some laws give people rights over their personal information, such as to see or delete it. If a law gives you such a right over information we hold, email support@moonroofapp.com to use it.
- Sales and targeted advertising. We don’t sell personal information or use it for targeted advertising, so there is nothing to opt out of.
What if I live outside the United States?
Moonroof is made for families in the United States. If you use it elsewhere, your log still stays on your device and in your own iCloud, and we don’t receive it. If you email us, visit our website, or the app checks for new terms, your information is handled in the United States and wherever our service providers work, including Cloudflare’s data centers around the world. Privacy laws there may differ from yours.
Can this policy change?
We may change this policy by posting the new version here with a new effective date at the top. A change takes effect when it is posted. Where the law requires your consent to a change, the change applies to you once you give it.
How do I contact you?
Moonroof is made by David Grinberg in Massachusetts, USA. For any question about this policy or your information, email support@moonroofapp.com.