Privacy policy

1. Who we are

MOOW (moow.dk) is operated from Denmark. We are the data controller for personal data collected through this app. Contact: hello@moow.dk.

2. What we collect

• Account data — email, display name, hashed password, language preference.
• Health and activity data — steps, exercise sessions, manually entered challenge progress, and (when you grant permission) data read from Apple Health or Health Connect. This is a special category of personal data under GDPR Article 9.
• Meal and nutrition data — meal logs, photos you upload for AI recognition, barcodes you scan, and ingredients you confirm or add.
• Group data — which challenge groups you are in, your role in them, and your progress on challenges you have opted into.
• Technical data — IP address, device type, push notification endpoint, basic crash logs.

3. What we use it for

• Running the service — showing your challenges, your group's progress, your meal history.
• Sending push and email notifications you have not turned off.
• Improving the platform — meal photos, barcodes, ingredient confirmations and other inputs are used to train and refine our recognition and the shared ingredient database. We strip account identifiers from data used for model improvement.
• Keeping the service safe and debugging.

4. Sharing

We do not sell your data. We do not share your health, meal or challenge data with third parties for advertising or marketing.

The only parties who process data on our behalf are processors strictly necessary to deliver the service:

• Our cloud database provider (MongoDB Atlas) — hosts the database.
• Email delivery provider — sends verification and password-reset emails.
• Push notification providers (Web Push, Apple Push Notification Service, Firebase Cloud Messaging) — deliver notifications to your devices.
• OpenAI — receives the meal photos you choose to scan, in order to return a structured ingredient guess. Photos are sent only when you tap "scan meal".

5. Group visibility

When you opt into a challenge inside a group, your progress on that specific challenge becomes visible to other members of that group. You can leave a challenge or a group at any time. Group membership is invite-only.

6. Storage and retention

Data is stored in the EU (or in EU/UK-adequate regions). We keep your data as long as your account exists. You can delete your account from settings; this also deletes your meal logs, challenge entries, and group memberships.

7. Your rights

You can request access, correction, deletion, and export of your data, and you can withdraw consent for optional processing (such as health-sync) at any time. Write to hello@moow.dk. You can also complain to the Danish Data Protection Authority (Datatilsynet) at datatilsynet.dk.

8. Changes

If we make material changes to this policy, we will notify you in the app before the changes take effect.