Privacy

Mwoyo is for sending small feelings to the people you love. It keeps as little as it can, for as short a time as it can. This page says exactly what, in plain words.

Last updated 3 November 2026.

What Mwoyo keeps

• Your name and face colour, so your circle knows it's you.
• Your profile photo, if you add one. Only people in your circle can see it.
• Who is in your circle, who you've blocked, and your invite codes (each lasts 7 days).
• Mwoyo on their way: who it's from and to, which mwoyo, the time, any beat you tapped, and any few words you added (up to 20 characters). It's deleted as soon as their phone has it, or after 7 days.
• Photos you send, only until they've been seen (plus 10 minutes to keep it), or 7 days if never opened. If someone reports a photo, it's kept for 30 days so it can be reviewed, then deleted.
• A notification token for your phone, so Mwoyo can tell you something arrived, and your quiet-hours choice and time zone, so it stays quiet when you asked.
• Your birthday, if you add it: the day and month only, never the year. Your circle sees it so they can celebrate you, and sees your time zone so they know when it's night where you are.

What Mwoyo never collects

• No phone number, email address or password.
• No contacts list. People join your circle only through an invite you send.
• No location. Photos are redrawn on our server so the location and camera details inside them are removed before anyone sees them.
• No advertising, no tracking across apps, and nothing is sold.

What stays on your phone

Your memory jar, the keepsakes in it, the photos you keep, the faces you choose for people, and your settings all live on your phone. They aren't uploaded.

Who else is involved

Notifications are delivered by Google's Firebase Cloud Messaging and, on iPhone, Apple's push service. They receive only what's needed to wake your phone: by default the words "Someone sent you a mwoyo", and the sender's name only if you turned on "Show who sent it". The few words people add are never put in a notification. Mwoyo's server is run by the Mwoyo team; nobody else has access to it.

Your choices

• Mute, remove or block anyone from their face. They're never told.
• Quiet hours are on overnight by default.
• Your QR code carries your name and the mwoyo you picked, so someone next to you can join your circle even with no internet. Only show it to people you want in your circle.
• The widget and the Android pop-up show what's waiting on your home screen. They use the same choice as notifications: with Show who sent it off, they never show a name.
• Delete everything: in Mwoyo, open your profile and choose Delete everything. Your account, your place in every circle, your invites, anything on its way and every photo are deleted from the server at once, and the app's data is cleared from your phone.

Children

Mwoyo isn't meant for children under 13.

Changes and questions

If this changes, we'll update this page and the date above.