Privacy Policy

Last updated September 25, 2026

Short version: the free plan is paid for by ads, from Google and from sponsors we sign ourselves. They're non-personalized, so nobody builds a profile of you to pick them. Moguli Plus has no ads at all. Moguli runs no analytics of its own. It keeps your study progress so the app can do its job, and if you subscribe, an email address and your subscription status. We'd tell you if it were juicier. It isn't.

Moguli is a study app for the California real estate salesperson exam ("Moguli", "we", "us"). This policy covers the Moguli app and website. Questions: support@moguli.app.

1. What we collect, and why

What	Where it lives	Why
Study progress: which questions you answered and how, your streak and XP, practice-exam (Hearing) results, your chosen exam date, and app settings such as theme and sounds.	On your device. (The makers' own family profiles also sync to our server; a fresh install doesn't.)	To schedule your reviews, show your progress, and keep it in step across your devices.
Course final identity check. Only if you take a DRE course final, you enter your name as it appears on your photo ID, the ID type, the ID's last four digits, and an optional proctor name.	With your study progress on your device. For a profile that syncs, our server keeps it in a separate private record that the app never sends back to anyone, including you.	The California Department of Real Estate requires identity verification before a course final, and a record of each attempt.
Account, only if you sign in: your email address, the sign-in codes we email you, and when you signed in.	Supabase, the sign-in service we use.	To recognise you on every device, so a subscription follows you.
Subscription, only if you subscribe to Moguli Plus: the subscription's status and renewal date, whether you've cancelled, and a customer number from the processor. In the iPhone app that is Apple (through RevenueCat, which checks App Store receipts for us); on the web it is Stripe.	Apple and RevenueCat, or Stripe, and, as a status line, our database.	To unlock the paid parts of the app, and to let you manage or cancel.
Daily reminder, if you turn it on: a push subscription (an address and keys issued by your device's push service), the hour you picked, and your time zone.	Our server.	To send one reminder on days you haven't studied, and a Sunday recap.
Emails you send us, including flagged questions and beta feedback: your email address and whatever you write.	Our email inbox.	To answer you and fix the question you flagged.
Ads, on the free plan only: when an ad plays, Google (AdSense on the web, AdMob in the iPhone app) receives your IP address and basic device and browser details, and may use a cookie or your device's advertising identifier to cap how often an ad repeats, to measure it and to stop ad fraud. Sponsor cards are counted as plain totals (how many times each was shown and tapped, per day) with nothing about who saw them.	Google, under its own policy (how Google uses information from sites that use its services). The sponsor totals are on our hosting provider.	To pay for the free plan. Ads are requested as non-personalized: chosen from the page and your rough location, not from your history or a profile of you.
Technical request data: your IP address and basic request details, as with any website.	Our hosting provider. Moguli itself does not store it.	To deliver the app, and to rate-limit the sync and reminder services against abuse.

Things we don't collect: your location, contacts, photos, microphone, or camera. Moguli has no analytics or crash-reporting tools, and sets no cookies of its own. On the free plan Google's ad code runs when an ad is shown, as described above; on Moguli Plus no ad code loads at all. Sponsor pictures, the fonts and the app's own pictures come from our own server. The motion effect reads your phone's tilt on the device to move the light on the cards. That reading is never stored or sent anywhere.

2. What other people can see

Nothing. Your study progress, your email address, and your subscription are never shown to other users. The Ladder, a leaderboard of the makers' own family profiles, appears only on their devices. The identity details from a course final stay on the device that took the final and in our private record.

3. Who we share it with

We don't sell or rent your information, and we don't share it for personalized (cross-context behavioral) advertising. It goes only to:

Netlify, Inc., which hosts the app and stores synced progress and reminder subscriptions for us.
Supabase, Inc., which runs sign-in: it holds your email address and sends the sign-in emails.
Apple, which bills App Store subscriptions under its own terms, and RevenueCat, Inc., which verifies those purchases with Apple and tells us whether the subscription is active (revenuecat.com/privacy). Neither gives us your card details.
Stripe, Inc., which takes payment for Moguli Plus on the web. You enter your card on Stripe's own pages; we never see or store your card number. Stripe tells us whether the subscription is active. Stripe's privacy policy: stripe.com/privacy.
Google LLC, which serves the free plan's ads (AdSense on the web, AdMob in the iPhone app) and receives what the ads row above describes. Sponsors receive nothing from us: tapping a sponsor opens their site, and what you do there is between you and them.
Your device's push service (Apple, Google, or Mozilla, depending on your device and browser), which delivers the reminder. It sees the reminder text and your subscription address.
The California Department of Real Estate, only if a Moguli course is approved and the DRE asks to review or audit course records, as the law requires of course providers.
Anyone else only when the law requires it, such as a valid subpoena.

We require the service providers above to protect your information at least as well as this policy does, and to use it only to provide their service to us.

4. Payments

Moguli Plus is a monthly subscription. In the iPhone app it is bought through the App Store and billed to your Apple ID; Apple and RevenueCat tell us the subscription's status and renewal date, and you manage or cancel it in Settings → Apple ID → Subscriptions (File → Account → Manage subscription takes you there). On the web it is paid through Stripe, which receives your email address, your card details, and the amount; we receive the status, the renewal date, and Stripe's customer number for you. We will never see or store your full card number.

5. How long we keep it

Your account and subscription status stay until you delete the account (File → Account → Delete account), which also cancels a Stripe subscription. An App Store subscription is Apple's: cancel it in Settings, or it keeps renewing. Apple and Stripe keep their own payment records for as long as financial and tax law requires.
Synced progress stays until you ask us to delete it.
Course records. If Moguli becomes an approved course provider, the DRE requires student course records to be kept for five years. Your final attempts and certificate will be kept that long even if you ask us to delete everything else.
Reminder subscriptions are deleted when you turn the reminder off, or when your device's push service tells us the subscription has ended.
Emails stay in our inbox until they're no longer needed to help you.
Progress on your device stays until you delete the app, clear the site's data in your browser, or use a profile that doesn't sync.

6. Your choices and rights

No ads: Moguli Plus has none, and no ad code loads for subscribers. On the free plan you can also reset or limit your advertising identifier in your device's settings.
Stop the reminder: File → Daily reminder → Turn off, or deny notifications in your device settings.
Delete your account and cancel your subscription inside the app: File → Account → Delete account. Study progress kept on the phone stays on the phone until you delete the app.
Get a copy of your study progress: File → Back up exports it. For anything else, email us.
Correct or delete your information: email support@moguli.app from the address you want us to reply to, and tell us which profile is yours. We'll confirm within 30 days. The only exception is course records the law requires us to keep (section 5).

California residents have the right to know what personal information we collect, use, and disclose; to have it deleted or corrected; and not to be discriminated against for asking. We don't sell or share personal information as the California Consumer Privacy Act defines those terms. You can make any of these requests by email, and nobody needs to pay us or make an account first.

7. Children

Moguli is made for adults preparing for a professional license. It isn't directed at children under 13, and we don't knowingly collect information from them. If you believe a child has given us information, email us and we'll delete it.

8. Security

Everything travels over HTTPS. The site forbids scripts from other domains, and the sync and reminder services reject oversized or malformed requests and limit how fast anyone can call them. No system is perfectly secure.

9. Changes

If we change this policy, the date at the top will change. If a change affects how your existing information is used, we'll tell you in the app before it takes effect.

10. Contact

Moguli, California. support@moguli.app