Privacy notice
Version: lc1-2026-11-11
Moojam is provided by Richard O'Connell, trading as Moojam ("we", "us"), who are responsible for your information. Questions or requests: support@moojam.ai.
The short version
- We keep what Moojam needs to work: your email address, your projects and the requests that made them, and what you used.
- We do not sell your information, show ads, use analytics or tracking cookies, or send marketing email.
- Your requests are sent to an AI model provider to build your project. Your email address is not.
- Moojam is a tool for making projects, not a chat or companion service.
What we keep, and why
| What | Why |
|---|---|
| Your email address | To sign you in with a one-time code and to recognise your account. We do not ask for a date of birth or a name. |
| Your adult confirmation, with the date and the versions of these terms | To record that an adult created or manages the account. |
| Sign-in codes and sessions | To keep you signed in. Codes and session tokens are stored only in a scrambled (hashed) form. |
| Your requests, projects (every version) and each project's history | To build your projects, show them to you, and let you change or go back to them. |
| Logs of failed builds (the request and the AI model's answer) | To find and fix problems. |
| Usage records: when something was made, which mode, what it cost us, whether it worked | To apply your plan's allowance and our spending limits. |
| Your Stripe customer number and plan status | To know whether your plan is active. Card details go only to Stripe; we never see them. |
| Server logs: IP address, browser type, the page requested and the time | To keep Moojam secure and working. They are not linked to your account and are not used to track you. |
We use one cookie, which keeps you signed in. There are no analytics or advertising cookies, and no device fingerprinting.
Our legal basis is providing the service you asked for (your account, projects and plan), and our legitimate interest in keeping it secure and working (logs, limits).
Children
Accounts are for adults. A young creator may use Moojam with the adult who manages the account, so projects may contain things a child typed. Please do not put personal information into a request: no full names, addresses, schools or photos.
Who we share it with
Only these service providers, only for what Moojam needs:
| Provider | What for | What they get |
|---|---|---|
| OpenRouter, and the AI model providers it routes to (currently Microsoft Azure, Amazon Bedrock or Google Cloud) | Building your projects | Your requests and the project being changed; not your email address |
| Stripe | Payments | What you enter at checkout, and your email address |
| Resend | Sending sign-in and billing codes | Your email address and the code |
| DigitalOcean (London) | The server Moojam runs on | Everything above, stored on our server |
| Backblaze (Amsterdam) | Backups | Encrypted copies they cannot read |
| Cloudflare | Our domain, and forwarding email sent to support | Messages you send us |
Your requests reach the AI models through OpenRouter. We have set our OpenRouter account to use only model providers that keep no copy of your requests (zero data retention) and do not use them to train AI models. OpenRouter keeps a record of each request's size and cost, not its content.
Some of these providers are based in, or process data in, the United States. They do so under their own data protection terms with us.
How long we keep it
| What | How long |
|---|---|
| Your account, projects, their versions and history | Until you delete them or your account |
| Sign-in codes and sessions | Codes work for 10 minutes and sessions for 30 days; both are removed 7 days after they stop working |
| Logs of failed builds | 30 days |
| Server logs | 30 days at most |
| Temporary files | About a day |
| Backups | 30 days |
| Usage records | Kept for our accounts; when you delete your account they are anonymised (no longer linked to you) |
| Payment records | Kept by Stripe under its own rules for tax and accounting |
Deleting your account
Email support@moojam.ai from the address you sign in with. We will confirm before deleting. When we delete an account:
- your sign-in identity, sessions and codes are removed, and you are signed out everywhere;
- your projects, all their versions, their history and any failed-build logs are deleted;
- an active plan is cancelled, and the link between your account and Stripe is removed;
- usage records are kept only in anonymised form;
- Stripe keeps its own record of past payments;
- copies can remain in our encrypted backups until those expire (30 days).
If you sign up again later with the same email address, you start with a new, empty account.
Your rights
You can ask to see, correct, download or delete your information, or object to how we use it, by emailing support@moojam.ai. You can download any project yourself from Moojam. If you are unhappy with how we handle your information, you can complain to the UK Information Commissioner's Office (ico.org.uk).
Security
Moojam is only served over an encrypted connection (HTTPS), the application is reachable only through that front end, and backups are encrypted before they leave it. No system is perfectly secure; if something goes wrong that affects you, we will tell you.
Changes
The version and date of this notice are shown at the top. If we change something that matters to you, we will tell you before it applies.