Privacy Policy

1. Introduction

This privacy policy explains how mojo (hereinafter "the Service" or "we") collects, uses, stores, and protects your personal and health data. The Service employs a "local-first" architecture, where your core health data (weight, body fat, muscle mass, GLP-1 medication records, side effect records, etc.) is stored locally on your device by default and is not synced to our servers. In some situations data leaves your device. Backups, for example, copy data into your own cloud account, and AI analysis sends data to AI service providers. For the full picture of what we collect and where it goes, see Chapters 2 through 4 and Chapter 6. We commit to:

• Never selling your personal health data
• Respecting your complete control over your data

2. What Data We Collect

We collect the following types of data:

Health Data

• Body composition data such as weight, body fat percentage, muscle mass
• GLP-1 medication administration records (date, dosage, medication type)
• Side effect records (symptom type, severity, occurrence time)
• Health data synced from Apple Health (iOS) or Health Connect (Android) (diet, exercise, sleep, etc.)
• Other manually entered data and settings, such as weight loss pace, goals, diet, and water intake records

Account Data(When Login is Required)

• Email address (for account registration, subscription management, customer support)
• Subscription status and transaction records (managed through Apple App Store or Google Play Store)

Usage Analytics Data

• App usage statistics (feature usage frequency, session duration, navigation paths)
• Device information (OS version, app version, device model)
• Error logs and performance data (for debugging and optimization)

3. How We Collect Data

We collect data through the following methods:

User Input

• Data you manually record in the app (weight, medication administration, side effects, etc.)
• Email address you provide when registering an account, or obtained through Apple/Google account linking

Health Platform Integration

• iOS: Reading health data you authorize through Apple HealthKit API (e.g., steps, sleep, diet)
• Android: Reading health data you authorize through Health Connect API
• Important: We can only access this data after you explicitly grant authorization, which you can revoke anytime in system settings

Automatic Collection

• Usage statistics automatically collected by our self-hosted analytics system; a copy of website browsing statistics is also sent to the Amplitude analytics tool
• Error logs and performance data automatically generated by the app

4. Data Storage and Backups

The Service employs a "local-first" architecture: your health data stays on your device by default. Data leaves your device in some situations. The main paths are explained below.

Locally Stored Data

• All health data (weight, body fat, medication records, side effects, etc.) is stored locally on your device by default
• Data is stored in the app's private sandbox space, inaccessible to other apps
• Your device passcode/biometric authentication is the strongest data protection
• The health records on your device are not synced to our servers

Where Backups and Device Migration Take Your Data

None of these paths passes through our servers. Data goes from your device into your own cloud account, or straight into another device of yours.

• Android system backup (goes to the cloud): if device backup is turned on for your Android phone (whether it is on by default varies by manufacturer), the system backs up mojo's app data to your Google account, including the database that holds your health records. We are not involved in this and cannot read the backup contents
• Android device-to-device transfer (does not go to the cloud): when you use Android's phone-switching flow to move your data to a new phone, mojo's data is transferred straight to the new device
• iOS whole-device backup (goes to the cloud): if you use iCloud to back up your device, mojo's data is included
• iOS device-to-device transfer (does not go to the cloud): when you use iPhone Quick Start to move your data to a new phone, mojo's data is transferred straight to the new iPhone
• In-app iCloud automatic backup on iOS (goes to the cloud): if you turn this feature on in the app (it is off by default and requires you to enable it and sign in to a mojo account), the backup file is encrypted before it is stored in your own iCloud Drive

Other Situations Where Data Leaves Your Device

• AI analysis: when you use AI analysis, health data is sent to AI service providers. This is unrelated to backups; see Chapter 6
• Files you export yourself: when you use the app's export feature, the file is handed to you, and where it goes from there is your decision
• For account data, analytics, and diagnostics, see Chapters 2, 3, and 8 for what is collected and where it goes

Data Control

• Deleting the app removes the local data on your device, and you can delete individual records in the app at any time
• Data written into the system health app does not go away with it: if you granted mojo permission to write to Apple Health or Health Connect, a copy of your weight, body fat, waist, nutrition, and hydration records stays in that app and has to be deleted there
• Backups do not disappear with it, and each kind is deleted differently:
• In-app iCloud automatic backup: the files sit in iCloud Drive and remain after you delete the app, so you need to remove them yourself in the Files app
• iOS whole-device backup: mojo's data is bundled inside the device backup and is not visible in the Files app. You manage it in the iOS iCloud backup settings, where you can delete the whole device backup or exclude mojo from it
• Android system backup: governed by the backup settings of your Google account
• Device-to-device transfer leaves no copy in the cloud: the data sits on your new device, where you can delete individual records in the app or remove the app, exactly as on the old one
• Deleting your mojo account does not delete these cloud backup files either, because they live in your own cloud account and we have no access to them
• We cannot access or recover local data you have deleted

Limitations

• We do not offer real-time cross-device sync. Backups exist so you can bring your data back after switching phones or reinstalling, not so that several devices can share one live copy
• Files written by the in-app iCloud automatic backup are encrypted, but the key is built into the app rather than held by you alone; how safe a backup is where it sits still depends on how you protect your own cloud account. See Chapter 10 for the protection level of each path

5. How We Use Your Data

We use your data for purposes including but not limited to:

Core Functions

• Store and display your health records (weight trend charts, medication administration history, etc.)
• Calculate statistical data (average weight, body fat change rate, etc.)
• Provide aggregate statistics across all users (such as distributions of weight loss pace and goal achievement) so you can compare your progress with the overall user base
• Provide AI-native personalized health analysis and recommendations (see Chapter 6)

Service Improvement

• Perform statistical analysis to optimize app features and user experience
• Debug and fix technical issues
• Develop new features and improve existing ones

Customer Service

• Respond to your questions and support requests
• Send subscription-related notifications (paid users)
• Notify important service updates or security announcements

Legal Compliance

• Comply with applicable laws and regulations
• Protect the legitimate interests of the Service and users
• Respond to legal processes or lawful requests from government agencies

6. AI Data Processing

When you use AI analysis features, we transmit your health data to AI service providers. Here's the detailed process:

Before Transmission

Before transmission, we remove your email address.

Data Scope Transmitted

We transmit the data required for AI analysis:

• Weight, body fat, muscle mass values and time trends
• GLP-1 medication type, dosage, administration time
• Side effect type, severity, occurrence time
• Related diet, exercise, sleep, and other health data (if synced)

AI Service Providers

Your data is routed through OpenRouter, an AI request routing platform, to AI model providers. We adjust the mix of models we use as the service evolves; the current list of providers is available on request by email.

Data Usage Explanation

1. Personal AI analysis: generating your personalized reports 2. Service improvement: some requests (including pseudonymized health data) are retained in our tracing system (7 days) and evaluation dataset (retained until the data no longer has reference value for system optimization and debugging), used for optimizing AI prompts, debugging, and analytics 3. Using AI analysis implies consent to this retention

Your Control

• You can choose not to use AI analysis features; the app's basic recording functions are unaffected
• We will not train our own AI models
• The AI request routing platform and the AI model providers are bound by their privacy policies, which you can review at:
• OpenRouter: https://openrouter.ai/privacy
• Each AI model provider's privacy policy is available on its OpenRouter model page

7. Data Sharing Policy

Never Share Principles

• We never sell your personal health data

Limited Sharing Situations

We may share data in situations including, but not limited to, the following:

1. Third-Party Service Providers (See Chapter 8)

• AI request routing platform (OpenRouter) and the AI model providers it routes to: Health data
• Cloud database (Supabase): Registered users' email, subscription status, and AI analysis reports
• Analytics tool (Amplitude): Website browsing statistics; older app versions (iOS before 1.106, Android before mojo.v139) keep sending usage statistics until they are updated
• AI evaluation dataset (LangSmith): Some AI request and response content (including pseudonymized health data)

2. Legal Requirements

• Responding to court orders, subpoenas, or other lawful legal processes
• Protecting the legitimate interests of the Service or users
• Preventing fraud, security threats, or illegal activities

3. Business Transfer

• If the Service undergoes a merger, acquisition, or asset sale, your data may be transferred to the successor
• We will notify you before this happens and give you the option to delete your data

8. Third-Party Services Details

The Service integrates third-party services including, but not limited to, the following:

AI Service Providers

• OpenRouter (https://openrouter.ai/)
• Purpose: AI request routing platform that forwards analysis requests to the AI model providers that actually run them
• Data received: Health data
• Data retention: Does not store request content by default, keeping only usage metadata
• Privacy policy: https://openrouter.ai/privacy

• AI model providers (routed through OpenRouter)
• Purpose: Run the AI analysis and generate your personalized reports
• Data received: Health data
• Data retention: Per each provider's own policy
• Provider list: We adjust the mix of models we use as the service evolves; the current list of providers is available on request by email, and each provider's privacy policy is available on its OpenRouter model page

Cloud & Analytics Tools

• Supabase (https://supabase.com/)
• Purpose: User account management, AI analysis report storage
• Data received: Email, subscription status, OAuth identity from social login providers, and the content of your AI analysis reports. Apple refresh tokens are stored in Supabase Vault (encrypted).
• Data location: Cloud servers (encrypted storage)
• Privacy policy: https://supabase.com/privacy

• Amplitude (https://amplitude.com/)
• Purpose: Website browsing statistics analysis
• Data received: Website visitors' device information and browsing statistics; older app versions (iOS before 1.106, Android before mojo.v139) keep sending usage statistics until they are updated (newer versions send to our self-hosted analytics system instead)
• Data retention: per the retention policy of our Amplitude plan
• Privacy policy: https://amplitude.com/privacy

• LangSmith (https://www.langchain.com/langsmith)
• Purpose: AI evaluation dataset
• Data received: Some AI request and response content (including pseudonymized health data)
• Data retention: Retained until the data no longer has reference value for system optimization and debugging
• Privacy policy: https://www.langchain.com/privacy

• Subscription analytics and install attribution providers
• Purpose: Subscription status analytics and attribution of ad-driven installs
• Data received: Device technical information, in-app purchase transaction records, your mojo account identifier; on iOS this also includes Apple ad install attribution information (does not include the IDFA advertising identifier)
• Data retention: As agreed in the data processing agreement (DPA)

Health Platform Integration

• Apple Health (iOS)
• Purpose: Read health data you authorize (diet, exercise, sleep, etc.), and write your weight, body fat, waist, nutrition, and hydration back to Apple Health as you log them
• Control: You can manage read and write authorization separately in iPhone "Settings > Privacy & Security > Health"
• Data flow: Two-way, and only between your device and Apple Health. It does not pass through our servers

• Health Connect (Android)
• Purpose: Read health data you authorize, and write your nutrition and hydration back to Health Connect as you log them (weight, body fat, and waist are not written)
• Control: You can manage read and write authorization separately in Android "Settings > Apps > Health Connect"
• Data flow: Two-way, and only between your device and Health Connect. It does not pass through our servers

Authentication Services

• Sign in with Apple (https://support.apple.com/HT210318)
• Purpose: Account authentication via Apple ID
• Data received: Apple account identity, email address (may be a private relay address provided by Apple)
• Data storage: OAuth identity stored in Supabase; Apple refresh token stored server-side in Supabase Vault (encrypted)
• Privacy policy: https://www.apple.com/legal/privacy/

• Google Sign-In (https://developers.google.com/identity)
• Purpose: Account authentication via Google account
• Data received: Google account identity, email address
• Data storage: OAuth identity stored in Supabase
• Privacy policy: https://policies.google.com/privacy

9. Data Retention Periods

We only retain your data for the necessary period:

• Health data: stored locally on your device; cloud backup files live in your own iCloud or Google account, which we cannot access
• Account data (Supabase): retained until you delete your mojo account; audit records are retained separately for as long as necessary for security purposes
• AI analysis reports: up to 90 days, then deleted automatically
• Service quality tracing (our own servers): 7 days, including complete AI request and response content, then deleted automatically
• Analytics data (self-hosted): retained until you delete your mojo account, then removed by a daily cleanup job; backup copies are removed by rotation within 30 days; anonymous usage statistics not linked to an account (such as website visits) are retained until they no longer have reference value for statistical analysis; the copy sent to Amplitude is retained per the retention policy of our Amplitude plan
• AI evaluation dataset (LangSmith): some AI request and response content (including pseudonymized health data), retained until the data no longer has reference value for system optimization and debugging
• Subscription analytics and attribution data: as agreed in the data processing agreement (DPA)
• AI model providers: per each provider's own policy
• Where legally required (accounting regulations, tax requirements, legal proceedings), data may be retained longer

10. Data Security Measures

We employ multi-layered security measures to protect your data:

Device-Side Security

• Local data stored in app's private sandbox, inaccessible to other apps
• Supports iOS Keychain and Android KeyStore encryption for sensitive data

How Well Backups Are Protected

• The backup file produced by "Export Data" in the app is readable JSON, so keep it somewhere safe
• If you later turn on the in-app iCloud automatic backup, the files that feature writes are encrypted before they reach iCloud Drive
• The key for that encryption is built into the app rather than held by you alone
• Android system backups are handled by Android itself rather than by us
• Backups sit in your own Google or iCloud account, so their safety depends on how you protect that account (two-step verification, for example)

Transmission Security

• All network transmissions use TLS/SSL encryption (HTTPS)
• AI requests use industry-standard encryption protocols
• Prevents man-in-the-middle attacks and data eavesdropping

Cloud Security(Account Data)

• Supabase uses AES-256 encryption for data storage
• Database access controlled by strict permissions

Access Control

• Developers only access analytics data when necessary
• Employs Principle of Least Privilege

Incident Response

• Within 72 hours of becoming aware of a data breach, we will notify affected users by appropriate means; where individual contact is not possible, we will notify by in-app or website announcement
• If law enforcement asks us to delay notification for an investigation, we will notify as soon as that request is lifted
• Immediately take measures to prevent further damage
• Report to and cooperate with regulatory authorities as required by applicable law

11. Your Rights (GDPR/CCPA)

Under GDPR (EU General Data Protection Regulation) and CCPA (California Consumer Privacy Act), you have the following rights:

Right to Access

• You have the right to know what data we have collected about you
• You can request a copy of your data
• How: Use the "Export Data" feature in app settings (available to subscribers), or email hey@mojoapp.ai with a data rights request. That route is free of charge and needs no subscription; we will send you the health data and settings held on your device in a structured format (JSON). If you also need your account data, AI reports, or analytics records, say so in the same email and we will handle those separately

Right to Deletion (Right to be Forgotten)

• You have the right to request deletion of your personal data
• How:
• Local data: Delete individual records in the app, or remove the app to clear everything on your device
• Account data: Request account deletion in app settings, or contact hey@mojoapp.ai
• We will process your deletion request within 30 days

Right to Rectification

• You have the right to correct inaccurate or incomplete data
• How: Edit your records directly in the app

Right to Data Portability

• You have the right to obtain your data in a structured, commonly used format
• How: Use the app's "Export Data" feature (available to subscribers), or email hey@mojoapp.ai with a data rights request. We provide the health data and settings held on your device in a structured format (JSON) free of charge, with no subscription required. For account data, AI reports, and analytics records, mention them in the same email and we will handle those separately

Right to Object

• You have the right to object to our processing of your data (e.g., for analytics or marketing)
• How: Contact hey@mojoapp.ai with your request

Right to Restriction of Processing

• You have the right to request restrictions on how we use your data
• How: Contact hey@mojoapp.ai with your request

Right to Lodge a Complaint

• If you believe we have violated data protection regulations, you have the right to file a complaint with supervisory authorities
• Taiwan: National Development Council (https://www.ndc.gov.tw/)
• EU: Your country's data protection authority
• US California: California Attorney General's Office (https://oag.ca.gov/privacy/ccpa)

Exercising Your Rights

Please contact us at hey@mojoapp.ai, and we will respond to your request within 30 days. To protect your privacy, we may need to verify your identity.

12. Special Protection for Health Data

Health data is the most sensitive type of personal data, and we take special protection measures:

Legal Standards

The Service is not subject to HIPAA (Health Insurance Portability and Accountability Act) jurisdiction, because we are not a healthcare provider.

Sensitive Data Handling

GLP-1 medication usage records are highly sensitive health data, and we specifically:

• Local-first storage: medication records are stored on your device by default and are not synced to our servers; see Chapter 4 for the backup paths
• Do not share with insurance companies: We never share your medication records with insurance companies or employers
• No discrimination: Your health data will not be used for any discriminatory purposes

Minor Protection

GLP-1 medications typically require a doctor's prescription and have age restrictions. The Service requires users to be at least 18 years old (see Chapter 13).

Medical Disclaimer

Important Reminder:

• AI analysis provided by the Service is for reference only and does not constitute medical advice
• Any medication decisions should consult your physician or professional healthcare provider
• In case of medical emergency, immediately call local emergency services (Taiwan 119, US 911)
• We are not responsible for the accuracy of AI analysis or decisions you make based on the analysis

13. Children's Privacy Protection

The Service does not provide services to children under 18 years of age.

Age Restriction

• Minimum age requirement: 18 years
• Reasons:

1. GLP-1 medications typically require a doctor's prescription and most are only approved for adult use 2. The sensitivity of health data requires users to have full legal capacity 3. Compliance with Children's Online Privacy Protection Act (COPPA, US) and GDPR children's protection provisions

Handling Unknowingly Collected Children's Data

• If we discover we have inadvertently collected data from users under 18, we will immediately delete it
• If you are a parent/guardian and discover your child has used the Service without permission, please contact hey@mojoapp.ai, and we will immediately delete the related data

Age Verification

• Users must confirm they are 18 or older during registration
• We may require proof of age documentation (if suspicious registrations are detected)

14. International Data Transfers

The Service's app is developed and published by an individual developer located in Taiwan.

Data Transfer Locations

• Local data: Stored on your device, no international transfers involved
• Supabase (account data): Servers may be located in the US or EU
• Analytics data (self-hosted): Servers located in the US (AWS us-east-1)
• Amplitude (website browsing statistics and usage statistics from older app versions (iOS before 1.106, Android before mojo.v139)): Servers located in the US

Data Protection Measures

• All international transfers use TLS/SSL encryption

Special Note for EU Users

If you are located in the EU/European Economic Area (EEA), you still enjoy all rights provided by GDPR (see Chapter 11).

Special Note for US California Users

Under CCPA, you have the right to know if we sell your personal information. We explicitly state: We do not sell personal information.

15. Cookies & Tracking Technologies

The Service's use of tracking technologies:

Main Technologies We Use

1. Essential Technologies (Cannot be disabled)

• App Local Storage: Stores your health records and preference settings
• Session Management: Maintains your login status

2. Analytics Technologies

• Analytics SDK: Collects usage statistics
• Data collected includes: Feature usage frequency, session duration, navigation paths, device information

Mobile Device Identifiers

• iOS: We collect the IDFA (Identifier for Advertisers) for analytics statistics only if you agree in the system tracking permission prompt; you can withdraw it anytime in iOS Settings > Privacy & Security > Tracking
• Android: We do not collect AAID (Android Advertising ID)

16. Privacy Policy Changes

We may update this privacy policy from time to time to reflect service changes, legal requirements, or industry best practices. When we do, the "Last updated" date at the top of this page is updated accordingly.

Your Choices

• If you do not agree with the new privacy policy, you can choose to stop using the Service and delete your account and data
• Continued use of the Service indicates your acceptance of the new privacy policy

Historical Versions

We will retain historical versions of the privacy policy for reference. To review old versions, please contact hey@mojoapp.ai.

17. Data Controller Information

Under data protection regulations, here is the data controller's detailed information:

Data Controller Identity

The Service's app is developed and published by an individual developer. Developer: mojo Developer (Individual Developer) Location: Taiwan Contact Email: hey@mojoapp.ai

Individual Developer Explanation

• The Service is currently in early stages, independently developed and published by an individual developer
• We comply with all applicable data protection regulations (GDPR, CCPA, Taiwan Personal Data Protection Act, etc.)

18. Contact Us

If you have any questions, comments, or requests regarding this privacy policy, please contact us through the following methods:

General Inquiries

Email: hey@mojoapp.ai We will respond to general inquiries within 3 business days.

Data Rights Requests

If you wish to exercise data rights (access, deletion, rectification, export, etc.), please send an email to hey@mojoapp.ai with the subject line "Data Rights Request." We will respond to your request within 30 days. To protect your privacy, we may need to verify your identity (such as requesting your registration email or order number).

Data Breach Reports

If you discover any security vulnerabilities or signs of data breaches, please immediately contact hey@mojoapp.ai with the subject line "Security Issue." We will prioritize handling such reports.

Complaints & Disputes

If you are not satisfied with our response, you have the right to file a complaint with the following supervisory authorities:

• Taiwan Users:
• National Development Council (Personal Data Protection Section)
• Website: https://www.ndc.gov.tw/
• Phone: (02)2316-5300

• EU Users:
• Your country's data protection authority
• List: https://edpb.europa.eu/about-edpb/board/members_en

• US California Users:
• California Attorney General's Office
• Website: https://oag.ca.gov/privacy/ccpa
• Phone: 1-800-952-5225

Languages

We primarily provide customer service in Traditional Chinese and English. If you need assistance in other languages, please indicate in your message, and we will do our best to accommodate.