This Cookie Policy outlines how NinthMoon.AI ("NinthMoon", "we", "our", or "us") uses cookies and related technologies across our website (www.ninthmoon.ai) and the NinthMoon platform (collectively referred to as the "Site"). This Policy explains what cookies are, what types of information we gather through them, and how you can manage your preferences.

What are cookies?

Cookies are small pieces of data, typically text files, stored on your device when you visit websites. These allow the Site to recognize your browser, remember your preferences, and enhance your overall experience. Cookies may store device identifiers, IP addresses, session data, and other browsing behavior.

Cookies help us operate efficiently, improve platform performance, and personalise your experience, ranging from remembering language settings to information, including previous emotional check-ins or wellness content preferences on the Site.

Some cookies are stored only for the duration of your browser session (session cookies), while others remain saved across sessions (persistent cookies). We also work with third-party providers who may place cookies on your device for analytics, security, and advertising purposes.

Personal data collected through the platform

In connection with cookie usage and platform operations, we may collect certain personal information, either directly from you or indirectly via analytics. This may include:

Identification details: Full name, date of birth, gender, nationality, address.
Behavioral/emotional data: Mood check-in timestamps, journaling interaction patterns, app usage history.
Account or device details: IP address, browser information, OS, login timestamps, user IDs, and usage behavior.
Consent and preference data: Cookie selections, notification opt-ins, content preferences.
Legal and compliance data as per the applicable jurisdiction.
Any other data voluntarily shared via use of the NinthMoon.AI platform or requested by us.

This information may be used in connection with our cookie-based systems to deliver emotional wellness features, personalize content, and improve your experience on the platform.

Types of cookies we use

Strictly Necessary Cookies: These are essential for the core functions of the Site, such as security, page navigation, and load balancing.
Performance/Analytics Cookies: These help us understand traffic and improve the user experience by collecting information about how you use our Site (e.g., GA4 with IP anonymization).
Functional Cookies: These are used to remember the choices you make, such as your language preferences or saved settings.
Marketing/Advertising Cookies: These are used to measure and personalize advertising campaigns (e.g., Meta Pixel).
Social Media Cookies: These enable you to share content on social media platforms and embed social media content on our Site.

Cookies we use and why

Below is a list of cookies and similar tools used on our Site and platform, categorized by purpose. We maintain a live cookie list in our consent tool. Typical cookies include:

Cookie	Provider	Purpose	Expiry	Type
_ga / _ga*	Google Analytics 4	Usage stats (IP anonymized; no Ads features unless consented)	2 years	Performance
_gid	Google Analytics 4	24-hour visit differentiation	24 hours	Performance
_fbp	Meta Pixel	Ad reach/retargeting (only if consented)	3 months	Marketing
session_id	NinthMoon	Session continuity/security	Session	Necessary
consent_state	NinthMoon	Stores your cookie choices	12 months	Necessary

Note: exact names/expiries can change. The consent tool shows the current list and purposes.

How we use analytics & ads tools

Google Analytics 4 (GA4) is configured to anonymize IP addresses, respect user consent, and disable Google Signals/Ads features unless you opt-in. You can opt-out of Google Analytics by using their browser add-on: https://tools.google.com/dlpage/gaoptout

Meta Pixel and other marketing tags are only activated after you have given consent for marketing.

Legal Basis Under GDPR and DPDP

Strictly necessary cookies are used on the basis of legitimate interests (Art. 6(1)(f) GDPR) and/or to perform a contract (Art. 6(1)(b)).
All other cookies (analytics/performance, functional, marketing/advertising, social) are used only with your consent (Art. 6(1)(a)).

You can withdraw or change consent at any time via the "Cookie Preferences" link in the footer or through our banner. We do not set non-essential cookies until you opt in. NinthMoon.AI processes all cookie-derived personal data in accordance with the data protection regulatory framework.

Notice: Disclosing each cookie's name (or local-storage key), category, purpose, and precise retention period so that Data Principals can understand how their information will be used before providing consent.
Purpose Limitation: Cookies are deployed solely for the specific purposes stated at the time of consent. We shall not repurpose cookie data for any incompatible use without first obtaining fresh consent.
Retention: Session cookies expire automatically when you close your browser, while persistent cookies delete themselves at the end of their specified duration. No cookie or local-storage item is retained beyond its disclosed lifespan.
Data-Principal Rights: You may exercise your rights of access, correction, deletion, or withdrawal of consent at any time by opening the "Cookie Settings" panel (available via the shield or footer link), or emailing our Grievance Officer at legal@ninthmoon.ai. We will acknowledge your request within forty-eight (48) hours and provide a reasoned resolution within seven (7) working days.

Local Storage

NinthMoon.AI also uses browser-based local storage to enhance user experience and reduce server load. These values remain on your device until manually cleared. These are used to store authentication tokens, session info, UI preferences (such as dark mode), product usage metadata, and chat widget state.

Automatically collected information

Our systems may automatically log technical details such as:

Device type, browser, and operating system
IP address and geographical region
Time of access, pages visited, and exit routes
Session duration and user interaction metrics

This information is essential for platform diagnostics, monitoring service uptime, and optimizing user workflows.

Notifications and device-level data

We may occasionally send push notifications to your registered device to inform you of updates, reminders, or platform announcements. To deliver these notifications effectively, your device's OS version and device token may be recorded. You may disable such notifications at the system level if you prefer not to receive them.

How to manage your cookie preferences?

You are in control of your cookie preferences. Upon your first visit, you will be prompted with a cookie consent banner. You can:

Accept all cookies
Reject all non-essential cookies
Customize cookie categories (e.g., only allow functional or strictly necessary cookies)

You may update these preferences anytime by accessing the "Cookie Settings" link in the footer of the Site.

Additionally, your browser settings allow you to disable or delete cookies altogether. Please refer to your browser's Help or Settings section for instructions. Popular resources include Google Chrome Help, Mozilla Firefox Help, Safari, and Microsoft Edge.

International Transfers

Some of our service providers (e.g., Google LLC, Meta Platforms, Inc.) are located outside the European Economic Area (EEA) and the UK. Where your data is transferred internationally, we rely on adequacy decisions (where available) or Standard Contractual Clauses with supplementary measures to protect your data. For more details, please see our Privacy Notice.

Retention

The lifetime of each cookie is specified in our consent tool and in the table above. We keep a record of your consent choices (including the timestamp, categories you consented to, and the version of the policy) for up to 12 months. After this period, or if our purposes for using your data materially change, we will ask for your consent again.

Children's Privacy

Our Site is not directed to children under the age of consent for cookies in your jurisdiction (which is typically 16 in the EEA, but may vary). Where required by law, we will obtain consent from the holder of parental responsibility.

Your Rights

Under GDPR and the DPDP Act you have rights of access, correction, deletion, objection, and withdrawal of consent. You may exercise these rights by contacting us at the details below.

For any questions or grievances under Section 13 of the DPDP Act related to cookies or personal data, please write to our Grievance Officer at legal@ninthmoon.ai. We will acknowledge your request within 48 hours and provide a reasoned response within seven (7) working days.

Cookie Policy