Demo: no real money
DraftVersion 2026-10-08.4

Privacy policy

This policy explains how personal data is handled when you use a WiFi that runs on Moon Connect, or when you sell WiFi with it. It is written for the Data Privacy Act of 2012 (Republic Act No. 10173).

Draft
This is a plain-English draft. A lawyer in the Philippines is checking it.
On this page

The short version

  • The owner of the WiFi you use is in charge of your data for their WiFi. Moon helps them, and uses it for its own deals only if you say yes.
  • We collect only what the WiFi needs. Never the websites you visit.
  • Offers only with your consent. Stop at any time, for free.
  • You can see, correct, delete or take a copy of your data, and complain to the National Privacy Commission.

1.Who is in charge of your data

Moon Connect is run by MOONNET LTD, a UK company (number 16661802) ("Moon", "we").

If you use a WiFi that runs on Moon Connect, the owner of that WiFi (the business named on the WiFi page) is the personal information controller for running their WiFi and for their own offers. Moon is their personal information processor: we handle the data for them, keep it safe and use it only to run the service.

Moon is also a personal information controller for its own purposes: keeping the service safe, stopping abuse, keeping its business records, and sending deals from Moon WiFi and partner shops to people who said yes to them.

For owners and installers who use Moon Connect, Moon is the personal information controller.

2.What data we collect

From people who use the WiFi:

  • a device ID (a code that tells your phone apart, like the address of its WiFi chip);
  • session times: when you connected and for how long;
  • payments: package, amount, GCash or cash, your 3-digit code and the time;
  • what you choose to type into the owner's sign-in form, such as your name, mobile number, email, birthday or your answer to their question, or your name from Facebook or Google sign-in;
  • your consent choices and each change to them, with the time and the version of the terms.

From owners and installers: name, mobile number, email, business name, GCash name and number, the GCash QR, fees, Moon credit and top-ups (including GCash reference numbers and receipts), earnings and payouts, and which terms you accepted and when.

We never collect the websites you visit, your messages to other people, or your GCash PIN or passwords.

3.Why we use it, and on what basis

  • To run the WiFi and the app: start and end sessions, match payments, show owners their sales, charge fees and pay installers. Basis: the contract for the service.
  • To keep the service safe: stop fraud, fake payments and attacks. Basis: legitimate interest.
  • To send offers from the owner, and deals from Moon WiFi and partner shops. Basis: your consent, given separately for each kind, with "Accept all & connect" or by choosing.
  • To meet legal duties, such as tax records and lawful requests from the authorities. Basis: legal obligation.
  • To answer you in the help chat. Basis: legitimate interest (answering what you asked).

"Connect without offers" means you get online with no offers at all. Saying no to offers never stops you from using the WiFi.

If you leave your number, you may get a text when you're online. That's a receipt, not an offer.

4.Who we share it with

  • The owner of the WiFi you use. They see your sessions and payments, with device names masked, like "iPhone ••42". They also see what you typed into their sign-in form (for example your name, mobile number, email, birthday and your answer to their question) and when you visited. They may use it to run their WiFi and to contact you about your visit. They may send you promos only if you said yes to their offers. They never see your choice about Moon WiFi deals.
  • Moon, to run the service as explained here.
  • Partner shops (local businesses that work with Moon WiFi, like food places and load shops): they never get your details. If you said yes to Moon WiFi deals, Moon WiFi sends their deals to you itself.
  • Companies that host our systems or send our messages, under contracts that keep your data safe and let them use it only for us.
  • The authorities, when the law requires it.

We never sell personal data.

5.Data outside the Philippines

Moon is a UK company, and some of our systems are outside the Philippines. Wherever your data is kept, we protect it as this policy and the Data Privacy Act require.

6.Help chat

Our website and apps have a help chat. When you use it, we keep:

  • your messages and our replies;
  • your name, and your email or mobile number, only if you ask to talk to a person (if you are signed in, we use your account's details);
  • the page you were on and your language.

To answer you quickly, an automatic helper reads your messages. It runs on AI services (Google Gemini, OpenRouter and Groq). They get only the text of your messages, with email addresses and phone numbers taken out. We send them no other personal data.

The Moon team can read chats to help you.

We delete a chat and its messages after 365 days with no activity.

To have your chat deleted sooner, ask in the chat or write to [email protected].

7.How long we keep it

  • The record of who connected and when: 6 months.
  • Session and payment records: after 6 months, we remove your device ID and anything else that points to you. The amounts and times stay as long as tax and accounting laws require.
  • Contact details you gave on the WiFi page, if your offers are off: 6 months after your last visit.
  • Contact details, if you said yes to offers: 2 years after your last visit. If you stop offers, the line above applies.
  • Your consent choices and their history: as long as we keep the contact details they are about.
  • Owner and installer fee, top-up and payout records: as long as tax and accounting laws require.

After that, the data is deleted or made anonymous. This runs automatically every night.

8.Your rights

Under the Data Privacy Act, you have the right to:

  • be told how your data is used (this policy);
  • see the data we hold about you (access);
  • correct data that is wrong;
  • have your data deleted or blocked (erasure);
  • object, including to offers, at any time;
  • get a copy of your data in a common format (portability);
  • complain to the National Privacy Commission (privacy.gov.ph).

To use your rights, write to [email protected] or ask the owner of the WiFi. We will reply within 30 days. It is free.

9.Stopping offers

Withdrawing your consent is free and easy, and you can still use the WiFi: tap "Stop offers" on the WiFi page, go to connect.moonwebsites.co.uk/stop, reply STOP to any message, ask the owner, or write to [email protected]. Only you can switch offers on again, from your own phone.

10.Keeping it safe

We use encrypted connections (https), limit who can see data to the people who need it, and show device names masked. If a breach puts your data at risk, we will tell the National Privacy Commission and the people affected within 72 hours, as the law requires.

11.Cookies

We use a few small cookies that the service needs: one that tells your phone apart on the WiFi page, one that remembers your language (for 1 year), and one that keeps owners signed in. We do not use advertising cookies.

12.Children

If you are under 18, please do not sign up for offers. Ask a parent or guardian first.

13.Changes to this policy

We may update this policy. Each version has a date, and the version you agreed to is saved with your choice. We tell owners in the app before a change starts.

14.Contact and Data Protection Officer

For anything about your data, write to our Data Protection Officer at [email protected].