Privacy Policy

Effective 25 September 2026 · Wilding & mooneyecollective.com

The short version. We collect the least we can. You can use Wilding without an account, and your practice log (your days of practice, journey progress, and the offerings you mark) stays on your phone. Of your practice, only the Visions you commit to and the drum timer sessions you finish reach us. We run no advertising, no third-party analytics, and no tracking SDKs. We do not sell your information, and we never will.

01 Who we are

Moon Eye Collective LLC, an Idaho limited liability company, makes Wilding, an app for shamanic practice, collective dreaming, and the activism that grows out of both. This policy covers the Wilding mobile app and this website. Where this policy says "we" or "us," it means Moon Eye Collective. We are the controller of the information described here.

02 What we collect

Your account, if you make one

Wilding works without an account. On iPhone you can make one with Sign in with Apple, and Apple then gives us:

Your email address. If you choose Hide My Email, we receive Apple's private relay address instead of your real one, which is fine by us
An identifier Apple issues so that the same Apple ID always opens the same Wilding account
Your name, if you let Apple share it. Apple shares it only the first time you sign in

We keep these with your account, along with when it was made and when it last signed in. If you give Wilding a name while setting up and you have an account, that name is kept with your account too. Changing your name later in the app changes it on your phone only. Write to us if you want the name on your account changed or removed.

Email sign-in is paused during the beta. Accounts made with an email address in an earlier beta keep that address.

If you use Wilding without an account

Choosing Remain anonymous creates nothing on our servers. (If you tapped Sign in with Apple on that screen first, you already have an account, and it stays with us until you delete it. See How long we keep it.) The first time you commit to the day's Vision on the Dream tab (I Will Dream This Dream) without an account, the app creates an anonymous ID so that your commitment is counted with everyone else's. It is a random identifier with no email and no name, and only your phone holds the sign-in for it. We store it with an empty profile and the Visions you commit to.

Your practice

Only two kinds of practice record reach us:

The Visions you commit to, and when. This is how Wilding shows how many people are dreaming with you. They are linked to your account or, without one, to the anonymous ID described above
Drum timer sessions you finish: how long, which drum sound, and when. A session is linked to your account if you are signed in to one. Otherwise it is stored without a user ID

Everything else about your practice stays on your phone. See What stays on your phone.

If you allow notifications and leave New recordings on

A push token for your phone, with the platform, the release channel (TestFlight or the App Store), and the app version and build. It is not linked to your account. See Notifications.

Beta feedback

While Wilding is in beta, our beta builds (the ones we send out through TestFlight) have an in-app feedback tool. When you send feedback, it gives us your message, the category you pick, a name, and technical details such as the screen you were on, the app version, and your phone's system version. The name is filled in with the one you gave Wilding, and you can change or clear it. The feedback we store is not linked to your account. This tool is only present in beta builds.

If you test Wilding through TestFlight

Apple's TestFlight shows us what it shows every app developer: for example your name and email address if we invited you by email, which builds you installed, and any screenshots, comments, and crash reports you choose to send through TestFlight. Apple's own privacy policy covers what Apple collects there.

Sign-ins and request logs

Like most online services, our servers log each request the app makes: the IP address and the approximate location it indicates, the app and system version (the user agent), and the account or anonymous ID your phone is signed in with, if any. We keep these logs for no more than 30 days.

When you sign in, or when the app creates an anonymous ID, our sign-in system also keeps the IP address and user agent with that sign-in until it ends: when you sign out, or when the account or anonymous ID is deleted. A sign-in that nothing ends, such as the one left behind when you sign in with Apple on a phone that held an anonymous ID, is kept until we delete it. We use all of this only to keep Wilding working and secure.

03 What stays on your phone

Your practice log stays on your phone. Your days of practice and listening time, the Journeys you have begun and where to pick them up, the offerings you mark done, the intentions you choose, and the name you give Wilding are kept in the app's own storage on your phone: in app files and in the iOS Keychain. So are your settings, and any Journeys you keep for offline listening. None of this is uploaded to our servers, with two exceptions: the name you give Wilding is also kept with your account, if you have one, and it is filled in on beta feedback, if you send any. The only practice records that reach us are the ones listed under What we collect.

It is included in your phone's own backup if you back your phone up. Sign out, Delete account, and Erase this phone's practice in Wilding's Settings clear your practice, name, and intentions from the phone. Your settings, including the notification switches, stay. Deleting the app removes its files, but iOS can keep Keychain items, settings included, after an app is gone, so use Wilding's Settings first to clear your practice, name, and intentions.

04 How we use it

To give you an account, if you make one, and keep you signed in
To count your Vision commitments and show how many people are dreaming with you
To tell you about new recordings, if you have asked for that
To understand, in aggregate, which practices people actually use, so we know what to make more of
To fix things that break, and to answer you when you write to us or send beta feedback
To keep Wilding secure
To meet our legal obligations

We do not sell your information and we do not share it for advertising. We do use a small number of service providers to run the app. They process data on our instructions and for no purpose of their own, and we use only providers whose terms require them to protect it at least as well as this policy does.

Database and hosting: our database, accounts, and file storage (United States)
App delivery and notifications: delivers app updates and new-recording notices to your phone. It receives your IP address, an installation identifier for the app, and, for notices, the push token (United States)
Subscription management: tracks whether PRO is active, once subscriptions are live (United States)
Crash reporting: crash reports, once enabled. Personal data collection is switched off in our configuration
Website hosting: hosts this website, and so receives the IP address of each visit (United States)
Email: our email, if you write to us (United States)

If you would like the names of the providers we use now, write to us at hello@mooneyecollective.com and we will tell you.

We also use an AI assistant (United States) to help us sort the beta feedback you send and look into problems, which can mean it reads records in our database. For now we use it on its provider's plan for individual subscribers, not under a data processing agreement, so the promise above does not cover it. We have turned off the setting that would let its provider use our conversations to improve its models, and we plan to move it to a business agreement that covers it.

Apple is different: it works with us under its own privacy policy, not on our instructions. Apple provides Sign in with Apple, TestFlight, the Apple Push Notification service that delivers notifications to iPhones, and the App Store, which distributes Wilding and will bill PRO subscriptions.

We will also disclose information if the law genuinely requires it, or to protect someone's safety. If Moon Eye Collective is ever acquired or merged, information may transfer as part of that, and this policy travels with it.

06 What we don't do

No advertising, no ad networks, no advertising identifiers
No third-party analytics or tracking SDKs: there are none in the app
No location tracking. The app never asks for your location
No microphone or camera access. The app plays audio; it does not record
No selling or sharing of personal information, as those terms are used under California law
No mining what you send us for anything beyond running and improving Wilding and answering you

07 Notifications

Wilding can send four kinds of notification: the drum timer's completion cue, an evening practice reminder, moon-phase notices, and, on iPhone, a notice when a new recording is released. Only the timer's cue is ever set up before you have chosen: the other three wait until the app has shown them to you and you have said which you want. You can change them at any time in Wilding's Settings or in your phone's settings.

The timer cue, the evening reminder, and the moon notices are scheduled entirely on your device. We are never told when one fires.

New-recording notices come from us. If you allow notifications and leave New recordings on, the app sends us a push token: an address that Apple issues, through our notification provider, so that a notification can reach Wilding on your phone. With it we store the platform, the release channel, and the app version and build. The token is not linked to your account or to anything else we hold, and we use it only to tell you about new recordings. It is deleted when you turn New recordings off, when Apple tells us it no longer works, or once Wilding has not been opened on that phone for 180 days. The app sends it without your sign-in, so the request itself does not name your account. Like every request to our servers, it is logged as described under Sign-ins and request logs.

08 Purchases

When PRO opens, subscriptions are billed by Apple, not by us. We never see or handle your card details. We receive confirmation of whether your subscription is active and when it renews or lapses, so the app can unlock the right content. If Wilding comes to Android, Google Play will bill PRO there, and we will update this policy first.

09 How long we keep it

Your account, and the Vision commitments linked to it, are kept while the account exists. When you delete your account in Wilding's Settings, or ask us to, we delete the account, its profile, its Vision commitments, and the sign-ins kept with it. Timer sessions that were linked to it stay only as anonymous counts, with nothing that points back to you, like the timer sessions made without an account.

If you tap Sign in with Apple while setting up Wilding and then choose another way in, the account you signed in to stays with us until you delete it. Sign in with Apple again and use Delete account, or write to us.

An anonymous ID, its Vision commitments, and the sign-in kept with it are deleted when you use Erase this phone's practice on the phone that holds it. If your phone stops holding the ID, for example because you later sign in with Apple on that phone, the ID stays with us, with the Visions it committed to and the IP address and user agent recorded when it was created. It has no name or email. We do not yet delete these automatically, so for now they are kept indefinitely.

Beta feedback and push tokens are not stored with any account, so deleting an account does not remove them. A push token for new-recording notices is kept until you turn them off, Apple reports it invalid, or Wilding goes 180 days unopened on that phone. Beta feedback, and the copies we keep of anything you send through TestFlight, are deleted within 90 days after the beta closes, or sooner if you ask. Request logs are kept for no more than 30 days, and the IP address and user agent kept with a sign-in go when the sign-in ends (see Sign-ins and request logs). Backups roll off within 30 days.

10 Your choices and rights

Wherever you live, you can ask us to show you what we hold about you, correct it, delete it, or send you a copy. Write to hello@mooneyecollective.com and we will respond within 30 days. We will not treat you differently for asking.

To delete what we hold about you, open Settings in Wilding and tap Delete account, or, without an account, Erase this phone's practice. That deletes what we hold under the account or anonymous ID your phone holds now (see How long we keep it) and clears your practice from the phone. To remove your push token as well, turn off New recordings in Wilding's Settings first. If you can't get into the app, write to us and we will do it for you. If you used Sign in with Apple, you can also remove Wilding from the apps using Sign in with Apple in your Apple Account settings on your iPhone. Deleting your Wilding account does not do that for you.

If you are in the UK, EU, or EEA

Our legal bases are: contract, for your account, and the Vision commitments and other data needed to give you the app you asked for; legitimate interests, for keeping the service working, secure, and improving, including timer session counts, request logs, and beta feedback; consent, for notifications; and legal obligation where one applies. You may withdraw consent at any time (for notifications, with the switches in Wilding's Settings or in your phone's settings), object to processing based on legitimate interests, request portability, and complain to your local supervisory authority.

If you are in California

You have the rights to know, delete, correct, and to opt out of sale or sharing. There is nothing to opt out of: we do not sell or share personal information, and we have not in the preceding twelve months.

11 Children

Wilding is not directed to children under 13, and we do not knowingly collect information from them. If you are in the EEA or UK, the minimum age is 16. If you believe a child has given us information, write to us and we will delete it.

12 Security

Everything travels over TLS. Access to our database is restricted so that one person cannot read another person's records. Credentials on your device are held in the iOS Keychain or Android Keystore. No system is perfect, and we won't pretend otherwise. But we treat this as part of the practice, not an afterthought.

13 Where your data lives

Our servers are in the United States. If you use Wilding from outside the US, your information is transferred there. For transfers out of the UK, EU, or EEA we rely on the European Commission's Standard Contractual Clauses with our providers.

14 Changes

If we change this policy, we will post the new version on this page and update the date at the top. For a material change, we will post the new version here before it takes effect and mention it in the notes for Wilding's next update. If a change would affect information we already hold about you in a way that matters, we will ask for your consent first wherever the law requires it.

15 Contact

Moon Eye Collective LLC · 2317 W Madison Ave, Boise, ID 83702-4816 · hello@mooneyecollective.com

Write to us about anything in this policy. A real person reads it.