← Back to Mogify

Privacy Policy

Effective date: April 6, 2026 · Last updated: April 6, 2026

Mogify ("we," "us," or "our") operates the Mogify mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Please read this policy carefully. By using Mogify, you consent to the practices described here. If you do not agree, please discontinue use of the Service.

1. Information We Collect

Information You Provide

• Account information: Email address, name, and authentication credentials (via Apple Sign-In, Google Sign-In, or email one-time passcode).
• Profile & health data: Age, gender, height, weight, fitness goals, activity level, dietary preferences, allergies, and medical considerations you share during onboarding or coaching conversations.
• Meal photos: Images you capture or upload for food recognition and nutritional analysis.
• Coaching conversations: Messages you send to the AI coach, including questions, feedback, and progress updates.
• Tracking data: Meal logs, workout completions, water intake, and weekly check-in responses.

Information Collected Automatically

• Device information: Device model, operating system version, unique device identifiers, and app version.
• Usage data: Screens viewed, features used, interaction timestamps, and session duration.
• Location data: Approximate location (city-level) when you use restaurant discovery features. We do not track precise GPS location continuously.

2. How We Use Your Information

Purpose	Legal Basis
Provide AI coaching, meal plans, and workout plans	Contract performance
Analyze meal photos for nutritional content	Contract performance
Personalize recommendations based on your goals	Legitimate interest
Process authentication and maintain your account	Contract performance
Send service-related communications	Contract performance
Improve the Service's accuracy and features	Legitimate interest
Detect and prevent fraud or abuse	Legitimate interest
Comply with legal obligations	Legal obligation

We do not sell your personal data to third parties. We do not use your data for third-party advertising.

3. AI Processing & Health Data

Mogify uses artificial intelligence to provide personalized fitness and nutrition coaching. Here is how your data interacts with AI systems:

• Coaching conversations are processed by third-party AI language models (see Section 4) to generate responses. Your messages are sent to these providers in real time and are not used to train their models.
• Meal photos are analyzed using computer vision models to estimate nutritional content. Photos may be temporarily processed on our servers and are not shared with third parties beyond what is necessary for analysis.
• Health and fitness data (weight, goals, dietary restrictions, workout history) is used to personalize AI-generated plans and recommendations. This data is stored in our database and sent to AI providers only as needed to generate contextual responses.

Important: AI-generated nutritional estimates, meal plans, and workout suggestions are approximations and should not be treated as medical advice. Always consult a qualified healthcare professional before making significant changes to your diet or exercise routine.

4. Third-Party Services & Data Sharing

We share data with the following categories of service providers, solely to operate the Service:

Provider	Purpose	Data Shared
Supabase	Authentication & file storage	Email, auth tokens, uploaded photos
AI model providers (Anthropic, OpenAI, OpenRouter)	AI coaching responses & meal/workout plan generation	Conversation messages, health profile context
Cloud hosting (Railway)	Backend infrastructure	All service data (encrypted in transit & at rest)
USDA FoodData Central	Nutritional database lookups	Food search queries (no personal data)
RevenueCat	Subscription management	Anonymous user ID, purchase transactions

We require all service providers to maintain appropriate security measures and to process your data only as instructed by us. We do not sell or rent your personal information.

5. Data Retention

• Account data: Retained for as long as your account is active, plus 30 days after deletion request.
• Coaching conversations: Retained for the life of your account to maintain coaching context and history.
• Meal photos: Processed images are retained for service improvement. Original uploads may be deleted after analysis is complete.
• Usage analytics: Aggregated and anonymized after 12 months.

When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

6. Data Security

We implement industry-standard security measures to protect your data:

• All data transmitted between your device and our servers is encrypted via TLS/SSL.
• Database records are encrypted at rest.
• Authentication tokens are stored securely on your device using platform-native secure storage.
• Access to production systems is restricted and logged.

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data and account.
• Data portability: Request an export of your data in a machine-readable format.
• Objection: Object to processing of your data for certain purposes.
• Restriction: Request that we limit how we process your data.

To exercise any of these rights, contact us at privacy@mogify.io. We will respond within 30 days.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• The right to know what personal information we collect, use, and disclose.
• The right to request deletion of your personal information.
• The right to opt out of the sale of personal information. We do not sell personal information.
• The right to non-discrimination for exercising your privacy rights.

To submit a CCPA request, email privacy@mogify.io with the subject line "CCPA Request."

9. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the legal bases described in Section 2. You have the rights listed in Section 7, plus:

• The right to withdraw consent at any time (where processing is based on consent).
• The right to lodge a complaint with your local data protection authority.

Data transfers outside the EEA are protected by standard contractual clauses or equivalent safeguards.

10. Children's Privacy

Mogify is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children under 16. If we discover that we have collected data from a child under 16, we will delete it promptly. If you believe a child has provided us with personal data, please contact us at privacy@mogify.io.

11. Tracking & Analytics

Mogify does not use third-party advertising trackers. We do not participate in cross-app tracking. If prompted by iOS App Tracking Transparency, Mogify will request your permission before any tracking occurs.

We may use anonymized, aggregated analytics to understand how the Service is used and to improve features. This data cannot be used to identify you personally.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or by email. The "Last updated" date at the top of this page indicates when the policy was last revised. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at:

Mogify
Email: privacy@mogify.io
Website: mogify.io