Privacy Policy
Mox (dance.mox.app) is a dance practice app. It is built to work
without an account, and we collect as little as possible. This policy explains
what data the app and our service providers process when you use Mox.
What the app collects
- No account, no profile. Mox never asks you to sign up, and we do not collect your name, email, or contacts to use the app.
- Your music stays yours. Songs you import are stored on your device. When you analyze a song, its audio is uploaded to our processing server (hosted on Modal) to separate instruments and detect the beat; the separated audio is available only to your device installation and is automatically deleted from the server after 30 days of inactivity.
- Anonymous install ID. The app generates a random identifier (not linked to you) used to enforce fair-use processing quotas, to key access to your own processed audio, and to associate crash and analytics events with an anonymous installation (not with a person).
- Practice progress (streaks, drill scores, loops, notes) is stored only on your device.
Crash reporting (Sentry)
We use Sentry to diagnose crashes and errors so we can fix bugs. When the app crashes or hits a handled error, Sentry may receive:
- Device and OS version, app version, and an anonymous install/session id
- Stack traces, error messages, and related diagnostic breadcrumbs
- Approximate region derived from IP (used by Sentry for security and diagnostics; we do not use this to identify you)
We configure Sentry to avoid sending imported audio, song titles you import, or payment details. Sentry’s own policy: sentry.io/privacy.
Retention: crash events are kept long enough to debug releases (typically up to 90 days on our Sentry plan, unless we shorten it). You can limit diagnostic data by turning off crash reporting in the app’s settings when that toggle is available, or by uninstalling the app.
Product analytics (PostHog)
We use PostHog to understand how features are used (for example, whether the paywall or a drill screen was opened) so we can improve Mox. PostHog may receive:
- Anonymous install/distinct id
- Event names and properties (screen views, feature usage, funnel steps)
- Device and app version metadata
We do not use PostHog for advertising or cross-app tracking. We configure it to avoid sending raw audio or payment card data. PostHog’s policy: posthog.com/privacy.
Retention: analytics events are retained according to our PostHog project settings (target: ≤ 12 months). Where the app exposes an analytics opt-out, that setting stops further event capture on that installation.
The marketing site at mox.dance also uses PostHog for anonymous usage analytics (page views and CTA clicks). No account is required and we do not use this data for advertising.
Purchases
Subscriptions and lifetime purchases are processed by Google Play / the App Store and RevenueCat. We receive an anonymous purchase / entitlement record (no name, no full payment details) to unlock Pro features. See RevenueCat’s privacy policy.
Other processors you may encounter
- Modal — hosts the audio analysis / stem-separation worker. Audio you submit for analysis is processed there under the retention rules above.
- Google Cast (if you use Cast) — Google may process casting session data under Google’s policies when you cast to a Cast device.
- AcoustID / fingerprinting (if enabled in your build) — may send an audio fingerprint (not the full file) to help identify a track. Disabled builds send nothing.
- LaunchDarkly — if present in a build for remote flags; we intend to remove or replace it before public launch. If shipped, it may receive an anonymous key for flag evaluation.
What we don't do
- No ads, no ad tracking, no sale of personal data.
- No sharing of your audio with other users — one installation's separated audio is never served to another.
- No background location collection. Camera or microphone, if used by a feature you open, stay on-device unless that feature’s UI clearly says otherwise.
Legal bases / region notes
Where GDPR/UK GDPR applies, we process analytics and crash data on the basis of legitimate interests in running and improving a stable app, or consent where we show an in-app opt-in/opt-out. You may email info@mox.dance to object or request deletion to the extent we can match your request to an anonymous install ID you provide.
Children
Mox is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children.
Data deletion
Delete the app and everything on the device is gone. Server-side processed audio expires automatically after 30 days of inactivity; to request earlier deletion of server-side audio or analytics/crash records tied to an install ID, email us with that install ID (shown in Settings when available).
Changes
We'll update this page if the policy changes. Material changes will be noted in the app's release notes and by updating the effective date above.