MoonlightJob privacy policy

Effective date: 23 October 2026

MoonlightJob ("Moonlight") helps hourly workers decide whether a shift at a nearby game, concert or show is worth more than the shift they already have. To do that it needs to know roughly where you are and what your job pays. People who run events can also post them in Moonlight for workers to see. This page says what the app keeps, what it sends, to whom, and how long they keep it.

Who is responsible

Moonlight is made and run by Himanshu Sanjay Joshi, who answers for this policy and runs Moonlight's server. To ask a question, or to ask us to delete something, write to the email address on the support page: https://moonlight-work.github.io/moonlightjob/support/

The short version

No ads, no tracking, and no account unless you post events. Your job, your shifts and what you made stay on your phone. Things leave it only to look up events, travel times, weather and gas prices near you, and when you report a post or post events of your own.

What stays on your phone

These are saved as files and settings in Moonlight's own folder. They leave only as described below, or if you send them somewhere yourself.

• Your setup. Your job, employer, pay, hours, notice days and workplace, whether you drive or take transit, your gas, MPG, wear and fare numbers, and your search radius.
• A place you typed. If you type a city or ZIP instead of sharing your location: the place and the map point Apple's geocoder gave it.
• Shifts you found. Every shift you add, with any phone, email or link you typed or pasted. A listing you share into Moonlight from another app waits on your phone until you finish adding it or throw it away.
• Nights you logged. What you actually made, including nights Moonlight never showed, and the work it showed you in the last 14 days so you can still log it. Moonlight can't fetch this again, so it also keeps a copy of the last good save.
• Reminders. "Remind me to leave", alerts before a crowd leaves and the Sunday evening reminder are set on the phone itself. There is no push server.
• The last answer, for the widget and Siri. Tonight's answer as the app last worked it out: the play, its figure, when to leave and when it was made. It is saved in Moonlight's own folder so the Home Screen widget, the leave-by reminder on the Lock Screen and Siri can show it. Nothing in it goes anywhere, and "Delete everything" removes it.
• Look-ups kept so they aren't asked for again. Venues Apple Maps found for events near you (name, map point, phone, website and city), for up to 30 days. The US Energy Information Administration's national gas-price table. Weather and the events list are kept only in memory while the app runs.
• Crash reports. If Moonlight crashes, iOS hands the app a report on its next launch. It stays in Moonlight's folder until you share the diagnostics file yourself (under Me → Diagnostics; the Me tab was called Profile before version 1.1) or delete it. That file holds the app and iOS versions, the iPhone model (like "iPhone17,1": the kind of phone, not its name), the reports and Moonlight's own log lines. Never your location or what you earned.
• A random ID. Made by the app and kept in the phone's keychain, which outlasts deleting the app. It never leaves the phone: reporting a post, or saying you're interested in one, sends a code made from it and that post, which can't be matched across posts or to each other. "Delete everything" replaces it with a new one.
• Organizers you hid, and posts you reported. Kept on your phone so they stay off your lists. The organizer isn't told you hid them. Posts you said you're interested in are kept too, so the button says so.
• If you post events: your organizer profile. A copy of your organization's details and your events, so the screen opens on them, and the sign-in code Moonlight's server gave this phone, kept in the keychain for this device only.
• Backups. "Back up my data" writes one file and hands it to the share sheet. Where you send it is up to you.

Deleting the app deletes all of this except what's in the keychain — the random ID and, if you post events, your sign-in code — which "Delete everything" removes.

What leaves your phone, and when

• Your location, while you use the app. Only while Moonlight is open, never in the background. With Precise Location off, iOS gives Moonlight only your approximate area. Your map point centres the event search, starts the Apple Maps trips and picks the weather. Moonlight's own server gets it rounded to about half a mile.
• Or a city or ZIP you type. Location is optional. Type a city or ZIP instead and Apple's geocoder turns it into a map point, kept on your phone. That map point then stands in for your location everywhere on this page.
• A listing you share into Moonlight. Using the share sheet in another app hands that page's link and up to 2,000 characters of its text to Moonlight only. It stays on your phone.
• Events near you. Moonlight's server gets your map point rounded to about half a mile, your search radius and the next week's dates. No name and no ID.
• Rideshare demand. The same server gets your map point rounded to about half a mile. Within 40 miles of Chicago it answers with the city's published trip pattern; the app also carries a copy.
• Typical pay. The US Bureau of Labor Statistics wage survey ships inside the app, so looking it up sends nothing. Once BLS can have published a newer survey (from March 2027), the app may ask BLS for it. That request names your metro area or state, not your location.
• Gas prices. Moonlight downloads the US Energy Information Administration's whole national table, at most once a day, so the request carries nothing about you or where you are.
• Posts from local organizers. Moonlight's server gets your map point rounded to about half a mile, your search radius and the next week's dates, as it does for events. No name and no ID.
• Reporting a post. A report sends Moonlight's server the post, the reason and a note if you write one, with a code made from your random ID and that post. The code lets the server count one report per phone; it can't be matched across posts or traced back to you. Hiding an organizer stays on your phone.
• Saying you're interested. "I'm interested" on an organizer's post sends the post and a code made from your random ID and that post, under a different label from a report's. The server keeps only a count; the organizer sees a number, not you. It can't be matched across posts or to a report.
• If you post events. Your organization's name, and the phone, email or link you give. For each event: its name, kind, place, times, the crowd you expect, your notes and, when you're hiring, the roles, how many people, the pay, the staff hours and how to apply. Workers see your events labelled with your organization's name, and the way to apply on events where you're hiring. Your organization's own contact details are seen only by Moonlight. For each event the server also keeps two numbers for you: how many phones said they're interested and how many times it was shown to workers' phones. Neither says who.
• Crash reports through Apple. If you chose to share with app developers in iOS Settings (Privacy & Security → Analytics & Improvements), Apple may pass us crash reports and app usage figures from your phone. That is Apple's setting; Moonlight has no crash-reporting service of its own.

Who we talk to, and how long they keep it

Each one gets only what it needs for the job described here, and has its own privacy policy. Fly.io hosts Moonlight's server and handles your requests for us as a processor, under its data-processing terms. Apple handles what it receives under Apple's privacy policy. Every service your phone contacts directly also sees the internet (IP) address the request comes from, as any website does.

• Moonlight's server. Run by Himanshu Sanjay Joshi, who makes Moonlight, on Fly.io in Chicago. It asks Ticketmaster for events so no phone needs a key, and one lookup serves everyone nearby. It writes nothing about your requests to disk, except what organizers post, the reports workers send and the interest codes, below. Its log line for each request names the route, the result and how long it took, never your map point; Fly keeps those logs for 7 days (fly.io's logging documentation, read 25 September 2026). The events it fetched stay in its memory for up to 12 hours, filed by an area about 7 miles across, not by who asked. To stop one phone flooding it, it counts requests by IP address in memory only, and forgets each address about a minute after its last request — or, after signing up as an organizer, which is limited by the hour, about an hour. Fly's network carries every request, including your IP address; Fly doesn't publish how long it keeps its own records of connections, so we can't tell you. If you post events, it keeps your organizer profile until you delete it, and each event, with any reports about it, the interest codes and a count of how often it was shown to workers' phones (no identifier behind that count), until 30 days after the event ends — in a file on its disk, of which Fly keeps a daily copy for 5 days.
• Alerts to Moonlight's owner. When an organizer signs up or changes their name, when an organizer who isn't approved yet posts, and when a post is reported, the server sends Moonlight's owner a short alert through the notification service the owner uses (ntfy, Slack or Discord): the organizer's name; the post's title, place, times and pay; a report's reason. Never contact details, notes, or who reported it.
• Ticketmaster. Games, concerts and shows. Asked only by Moonlight's server, with the server's own key. It gets an area about 7 miles across, a radius and a date range, never anything from your phone.
• Apple Maps. Finds venues and the places you search for, works out drive or transit times (to each venue, and from it to your workplace if you added one), turns your location into a city name, and turns a city or ZIP you type into a map point. For transit riders it also finds the next ride home after each shift, from the venue to your map point.
• Apple Weather. The weather now and the hourly forecast, for your map point and for the venues on your list, each rounded to about half a mile and sent by your phone to Apple. Moonlight keeps the answers in memory only, until Apple says they're out of date.
• Apple's age check. Where Apple says the law asks apps to check age (Texas, for now), iOS 26.2 and later ask whether to share your age range with Moonlight each time it opens. Moonlight learns only an age range split at 18, or that you'd rather not share it, never your birthday. It keeps only whether the app may open, in memory until the app closes, and sends it nowhere.
• US Bureau of Labor Statistics. Typical pay. The survey ships inside the app. From March 2027 the app may ask BLS for a newer one, naming your metro area or state.
• US Energy Information Administration. Weekly gas prices. Gets a request for the national table, nothing about you.
• City of Chicago. Rideshare trip data, asked for by Moonlight's server for the whole city. Nothing about you goes to the City.
• Tables inside the app. Which metro your county is in (Census Bureau and BLS files), typical pay (BLS), minimum wages and transit fares (each from the government or agency that sets them), and a week of Chicago trip data. Reading them sends nothing.

Nothing else. No analytics, no ads, no account unless you post events, and no code from other companies inside the app.

Tracking

Moonlight doesn't track you. No other company collects information about what you do across apps or websites through Moonlight. Because there is nothing to track, Moonlight has no setting that answers a browser's "Do Not Track" signal, and needs none.

Delete everything

Me → What we do with your data → Delete everything wipes your setup, a place you typed, shifts, logged nights, reminders, settings, organizers you hid, posts you reported or said you're interested in, saved venues, cached pay look-ups, crash reports and the random ID from your phone. If you post events and the phone is online, your organizer profile and every event you posted come off Moonlight's server too; offline, write to us and we'll remove them. Moonlight then starts over as new.

Moonlight's server has nothing else of yours to delete: it keeps no record of your requests, and the log lines that say one came in go after 7 days. "Delete everything" can't reach a backup you exported; that file is wherever you sent it. A report you sent stays with its post until the post goes, 30 days after the event at the latest: nothing in it points to you, so it can't be picked out.

To ask what we hold, or to ask us to delete something, write to the address on the support page. For a worker, the server keeps nothing tied to you, so the answer will usually be that nothing is there. For an organizer, it's your profile and your events, which you can also delete yourself: Settings → Delete my organizer profile.

If you post events

People who run events — a bar, a venue, a market, a team — can post them in Moonlight, and say whether they need staff. Signing up asks for your organization's name and a phone number, email address or link, and your agreement to the posting rules.

Moonlight checks every new organizer before anything they post is public, and may contact you on the details you gave to do it. Workers can report a post; Moonlight looks at every report, can remove a post that breaks the rules, and can suspend a profile.

Your events are public to anyone using Moonlight in their area, with your organization's name, and with the way to apply on events where you're hiring. Your organization's own phone, email and link are seen only by Moonlight.

Settings → Delete my organizer profile takes every event you posted down and deletes your details from Moonlight's server at once; the daily copy of its disk that Fly keeps goes within 5 days.

Adults only

Moonlight is for people 18 and over doing paid gig and event work. It is rated 18+ on the App Store, and where the law asks it checks Apple's age signal as described above. We do not knowingly keep data from anyone under 18.

Not in this version

Sharing shifts with other workers and the AI copilot are not in the App Store version of Moonlight. If either comes, this policy changes first, and the app asks you before anything is sent.

Changes

When this policy changes, the effective date above and the app's "Your data" screen change with it.