Privacy Notice
Last updated: May 2026
This Privacy Notice explains how Bogdan Ionut Gheorghe ("Moroo", "we", "us") collects, uses and protects your personal data when you use the Moroo service ("Service"). Moroo acts as the data controller for the personal data described below.
1. Personal data we collect
- Account data: email address, display name, avatar, hashed password or OAuth identifier.
- User content: bear sightings you report, photos, location coordinates, route plans you save.
- Usage and telemetry: pages visited, features used, device type, browser, approximate location derived from IP address.
- Support communications: messages you send to us.
2. Purposes and legal bases
- Providing the Service, your account and Pro features — performance of a contract.
- Security, fraud prevention and abuse mitigation — legitimate interests.
- Product improvement and analytics — legitimate interests.
- Customer support — performance of a contract.
- Legal and tax compliance — legal obligation.
3. Sharing with third parties
We share personal data with the following categories of recipients:
- Service providers / subprocessors: hosting, database, storage, email and analytics providers acting on our instructions.
- Merchant of Record: Paddle.com Market Ltd handles the sale of subscriptions and day passes, payment processing, subscription management, tax compliance, invoicing and refunds. See Paddle's privacy policy.
- AI providers: photo verification uses third-party AI models that process the photo you upload solely to return a verification result.
- Professional advisers: legal, accounting and tax advisers where necessary.
- Authorities: where required by law or to protect our rights.
4. International transfers
Some recipients are located outside the EEA/UK. When data is transferred internationally we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
5. Retention
We keep personal data only as long as needed for the purposes above, or as required by law. Account data is kept while your account is active and for a reasonable period afterwards. Billing records kept by Paddle are retained according to Paddle's policies and applicable tax law.
6. Your rights
Subject to applicable law you have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, the right to withdraw consent and the right to lodge a complaint with your local data protection authority. To exercise these rights contact us at the email on this page; we will respond within one month.
7. Security
We use appropriate technical and organisational measures including encryption in transit, access controls and least-privilege database policies to protect your personal data.
8. Cookies
We use strictly necessary cookies for authentication and session management. We may use analytics cookies to understand product usage. You can manage cookies through your browser settings.
9. Contact
Controller: Bogdan Ionut Gheorghe. For privacy questions contact us via the Moroo support channels listed on the website.