Moonjai Education Privacy Policy
Last Updated: 29 October 2026
Moonjai helps Tanzanian secondary students and teachers study in English and Kiswahili. This page explains what information we use, why we need it, and the choices you have.
Moonjai is run by Moonjai LLC, a Washington company based in Seattle, United States. We are responsible for the information described here. You can reach us at info@moonjai.com.
At a glance
- You can browse study materials as a guest without giving us a name or email.
- An account lets you use more features. We keep your sign-in details, preferences, saved work and the records needed to run the service.
- Students aged 13–17 need a parent or guardian’s approval to create an account.
- AI features send relevant questions, conversation text and uploads to the providers named below, with your permission.
- We do not sell personal information, and we do not use it to aim adverts at you.
- We measure app use to check whether our advertising brings people who really use Moonjai. This is never used to aim adverts at you, and you can turn it off in Profile.
- You can delete your account in the app or by email. A few limited records remain for a while; section 7 explains which ones and for how long.
1. What we collect and why
Guests and accounts. Guests get a random user ID so the app can remember quiz progress and manage usage limits. For an account, we also use your email address and sign-in details. If you sign in with Google, Google gives us an account identifier, and Google’s sign-in service may hold your Google name and photo. Your public Moonjai profile shows only the nickname you choose and an avatar from our collection. We do not ask for a phone number.
Your preferences. We use choices such as your form, subjects, region, language and theme to make the app useful to you. Your region helps us show relevant study material. We do not ask for your precise location or your contacts.
Study progress and saved work. We keep your quiz tally and the quiz questions you have completed, so you can track progress and avoid repeats. You can clear that quiz history in the app. If you use Tutoring, we also keep a record of how you did on each topic you practised and the grade estimate the app builds from it, so it can show your progress and suggest what to try next. We also store the exams, answers, diagrams and lesson plans you save to your account.
AI questions and uploads. When you use an AI feature, we use your question, photo or exam pages so the AI can read the problem you want help with. Your recent conversation and what you are studying help it follow the discussion and give better explanations. The Tutor also keeps a short note about what you seem to find easy or hard, to make later explanations more helpful. This note goes to the AI provider with relevant Tutor requests. It is not shown in the app yet, but you can ask us for a copy.
Community activity and support. We keep the answers you post, your votes, your reports and your list of blocked contributors. A guest’s block list records only who was blocked and when, and it moves to the account if the guest later creates one. When you contact us, we receive your message and the details needed to reply, such as your account, app version and the screen involved. If you report an AI answer, the question and answer are included only if you choose to include them.
Usage and security. We keep records of feature use, credit balances, request times and errors so we can run the daily allowance, avoid charging twice, fix problems and reduce abuse. Our hosting and security providers also receive technical information such as IP addresses, app or browser details and device-security signals. Optional crash reports are explained in section 5.
Usage measurement. Moonjai advertises on Google and YouTube. To learn whether those adverts bring people who really use the app, rather than installs nobody opens, the app sends Google Analytics for Firebase:
- a random install code (not your account),
- your phone’s advertising ID, a resettable code you can delete in your phone’s settings,
- which advert, if any, led to the install,
- which feature buttons were opened,
- whether the app was used again in the following days,
- whether a verified account was created, and
- whether you use Moonjai as a student or a teacher.
It never sends your name, email, notes, questions, photos, answers or location. The advertising ID lets Google credit the advert that led to the install, including a YouTube advert you watched without tapping it; it is a resettable code, and if you delete it in your phone’s Google settings the app receives only zeros. We use this only to judge and plan our advertising. It is never used to aim adverts at you. Measurement is on unless you turn it off in Profile, and it stops at once if the app is told the user is under 13. Section 5 explains the switch.
Published exam results. Exam Analytics shows results published by NECTA, including examination numbers, sex, divisions and subject grades, so users can compare results by school, region and country. This feature does not use AI.
We use this information to provide and improve Moonjai, support users, protect the community and meet legal obligations. Depending on the activity, we rely on your permission, the need to provide the service you asked for, or a legitimate need to run it safely.
2. Students and parent approval
Moonjai is for people aged 13 and over. We ask students for an age group and teachers to confirm they are adults. If a student selects under 13, the app stops and deletes their guest record. We rely on the answers people give; we do not verify ages ourselves.
Students aged 13–17 can browse as guests. To create an account, they must ask a parent or guardian to read the notice in the app and approve on the same phone. The parent confirms an email address through Google sign-in or email verification. This approval covers the account, AI features and public posting. AI use also has its own permission setting.
We keep the parent’s email, how and when it was confirmed, and a copy of the notice they agreed to. This record is linked to the student’s account. Approval through Google also includes a Google account identifier. The student can see the approval status, and a copy of the parent’s email and approval status stays on the student’s phone. We keep earlier approvals until the account is deleted.
Confirming an email address does not prove someone’s relationship to the student. We rely on the adult’s statement that they are the parent or guardian.
Approval by email may leave a temporary verification record. It is removed when verification finishes. If verification is never finished, the record can stay until the student’s account is deleted or the parent asks us to remove it.
A parent can ask for a copy of the approval record, or withdraw approval, by emailing info@moonjai.com. Withdrawing approval means deleting the student’s account and its approval records. We first check that the request comes from the parent on record. The same address is there for any concern about a child’s information.
3. AI features and the companies involved
You choose whether to use AI. Before first use, the app asks for your agreement to send relevant content to outside providers. You can withdraw it in Profile → Privacy & safety → AI & data. This stops future AI requests; everything that does not use AI keeps working.
- OpenAI helps answer questions, tutor students, draw diagrams, prepare exam answers, customise lesson plans and screen community answers.
- Mistral AI reads uploaded exam documents so their questions can be extracted.
- Google Cloud runs the search that finds relevant passages in Moonjai’s own study notes, using search text taken from your question, so explanations can draw on the material you are studying.
These providers receive the content needed for the task. We do not add your name or email to AI requests, but anything you type or include in a file is part of what is sent. For Question Solver and Tutor photos, we remove hidden camera details such as location and device information before sending.
OpenAI does not use API content to train its models by default. We have turned off Mistral’s data sharing for model improvement. Google Cloud does not use this content to train its models without our instruction.
No training does not mean no storage. Providers may keep temporary processing and safety records, generally for up to 30 days under their standard terms, or longer for legal or safety reasons. We limit storage where the services allow it, but we cannot promise immediate deletion from every provider system. The OpenAI data controls and Mistral privacy policy explain their practices.
4. What other users can see
Community answers and attached images are visible to other users under your Moonjai nickname and avatar. We use automated screening to help keep answers on-topic and safe. Screening can make mistakes. Guests and account holders can report an answer or block a contributor; account holders can also delete their own answers.
Your email and Google profile are not shown with your answer. Moonjai can still connect a post to its account when needed for moderation or deletion.
Images, including images from uploaded exams, can be viewed by anyone who has their direct link. Other users can also copy or take screenshots of public answers. Your votes, reports and block list are not public.
5. Your phone and the website
Photos, files and microphone. These permissions are optional and used only when you choose a feature that needs them. Tutor voice input is turned into text on your phone, and the recording is deleted straight away. Only the text is sent as your Tutor message.
Copies on your phone. Your phone keeps your settings, which notes you have read, recent lesson plans, saved tests and scheme drafts, and a school name if you enter one. It also keeps recent Tutor conversations and your latest Question Solver question, answer and photo. If your phone’s Google backup is on, it can include saved tests and scheme drafts.
Optional crash reports. Crash reports are off until you turn them on in Profile. If you turn them on, Firebase Crashlytics receives details of your phone, the app version and what went wrong. We do not attach your account ID or email. Reports are designed to leave out your content, although an error message can occasionally include part of what the app was processing.
Usage measurement. The measurement described in section 1 uses Google Analytics for Firebase. You can turn it off in Profile → Privacy & safety → Usage measurement. Turning it off also makes the app forget its install code, and so does deleting your account. Nothing else in the app changes. We have switched off ad personalisation in the app, so Google does not use this information to build an advertising profile of you or to aim adverts at you; the advertising ID is used only to credit adverts. You can reset or delete it in your phone’s Google settings.
Website visits. Cloudflare hosts our website and processes connection information to deliver and protect it. The site remembers your language choice with a cookie and browser storage, which you can clear in your browser settings. Pages with YouTube videos or preview images connect to Google to load them, which shares connection details such as your IP address. If you use the contact form, your message and any email address you give are delivered to us by Resend, our email service, and we keep them while we deal with your message.
6. Who receives information and where
Google Firebase and Google Cloud provide app sign-in, storage, hosting and security. Google Analytics for Firebase receives the usage-measurement events described in section 1, and Google Ads receives counts of those events matched to its adverts so we can see which adverts worked; neither receives your name, email or study content from us. OpenAI and Mistral receive content for the AI features above. Cloudflare, YouTube and Resend support the website. App stores also handle the information needed to distribute the app and run their own services.
People helping us provide support, maintain the service or review reports may access information needed for that work, under confidentiality obligations. We may also share information when required by law or when necessary to address fraud, a security incident or a serious safety concern.
We require providers handling information for us to protect it and use it only for the purposes we authorise.
Our main app storage and servers are in India. Sign-in information is processed in the United States, and other providers may process information in additional countries. We use contractual and technical safeguards to protect information when it crosses borders.
7. How long information stays
| Information | Usual retention |
|---|---|
| Account, preferences, saved work, study progress, community content and approval records | Until you delete the item or the account, unless a specific safety or legal reason requires us to keep it. |
| Quiz history | Until you clear it or delete the account. |
| The Tutor’s learning note | 30 days after its last update, or sooner if you delete your account. |
| Short-lived working copies used by AI features (recent answers kept for retries, conversation context used to find notes, photos sent to OpenAI) | Between about one hour and 48 hours. Photos sent to OpenAI are set to expire after about two hours. |
| Tutor conversations stored on your phone | Up to 48 hours. Other copies on your phone stay until cleared or replaced. |
| Feedback and support | While needed to reply, follow up or meet a legal obligation. In-app feedback linked to an account is deleted with the account. |
| Application logs | Normally about 30 days. Some security, audit and crash records follow longer provider schedules. |
| Usage-measurement events (Google Analytics for Firebase) | Up to 2 months. They carry a random install code, never your account. Turning measurement off, or deleting your account, makes the app forget that code, so nothing you do afterwards can be joined to earlier events. |
| Moonjai backups | No more than 30 days. |
| Limited records that prevent repeated abuse after account deletion | Up to 365 days. |
| Sign-in provider backups | Google may keep identity records for up to 180 days after deletion. |
| AI provider records | Generally up to 30 days, with the legal or safety exceptions described above. |
Automatic cleanup can take extra time after a record expires.
We normally remove an uploaded exam’s original file once its questions are extracted. If processing fails, it may remain until you delete the exam or your account. Saved exam results and generated images stay available until you delete them.
Guest records need a separate explanation: uninstalling the app does not delete its guest record from our servers, and we do not automatically clear abandoned guest records. If you create an account, that record becomes part of it and can be deleted with it.
After account deletion, a limited abuse-prevention record helps stop people repeatedly claiming credits or avoiding a block. It uses a coded version of your email rather than a readable address, plus limited account, deletion and usage details. It does not keep your study content. Your nickname may also remain in another user’s block list.
Backups are kept for recovery, not everyday use. If we restore one, we reapply completed account deletions before using the restored data. If a legal or safety matter requires us to keep particular information longer, we explain what and why where we are allowed to.
8. Your choices and deletion
You can delete your account in Profile → Delete Account, or email info@moonjai.com. We aim to complete email requests within seven days after confirming your identity.
Deletion removes your account and associated information from our active systems, including saved work, posts, feedback, study progress and parent-approval records. The limited exceptions above still apply. Our account deletion page gives the steps and explains how to clear copies from your phone.
You can also:
- Use guest access without giving a name or email.
- Change AI permission, crash reports and usage measurement in Profile.
- Manage camera, file and microphone permissions in your phone’s settings.
- Ask for a copy of your information, a correction, or deletion.
- Ask us to stop or limit a use of your information, or provide a portable copy where that right applies.
Email us to make a request. We may need to confirm who you are. You can also complain to Tanzania’s Personal Data Protection Commission or another relevant privacy authority; contacting us first is not required.
9. Security and updates
We encrypt data in transit, use our providers’ encryption for stored data, restrict access and use security checks to help prevent abuse. No service can guarantee complete security. Contact info@moonjai.com if you notice a problem.
We update this page when our practices change, show the new date, and give additional notice of significant changes. Where fresh permission is needed, we ask for it.