Moxy Privacy Policy

Effective Date: February 19, 2026

Moxy ("we", "us", "our") is committed to protecting your privacy. This policy explains what data we collect, why, and how we use it.

1. Information We Collect

We collect only what is needed to provide the app:

• Email address (for account creation and sign-in via Supabase Auth)
• Profile information you provide (username, age, weight, height, activity level, health goals)
• Meal logs and nutrition data you enter
• Recipes you create, import, or publish
• Subscription status (managed by RevenueCat through Apple)

2. AI-Powered Food Parsing

When you describe food using natural language (e.g. "2 eggs and toast"), your text is sent to OpenAI's servers for ingredient identification. OpenAI processes this text to return structured nutrition data.

We do not send your name, email, or any personal identifiers to OpenAI. Only the food description text is transmitted.

3. Analytics

We use PostHog to collect anonymous usage analytics such as which screens you visit and which features you use. This helps us understand how to improve the app. Analytics data is not linked to your identity and we do not track you across other apps or websites.

We use Sentry for crash and error reporting. Sentry receives error details and device information (OS version, app version) to help us fix bugs. We do not send personally identifiable information to Sentry.

4. Nutrition Data Sources

Moxy retrieves nutrition data from the USDA FoodData Central API. Your food search queries are sent to the USDA API to retrieve nutrition facts. No personal information is included in these requests.

Health goal scoring and nutrient targets are informed by published research from the NIH Office of Dietary Supplements and peer-reviewed studies indexed on PubMed Central. This research is processed offline — no user data is sent to academic databases or research services.

5. How We Use Your Data

• Provide personalized nutrition tracking and goal scoring
• Display your meal history and progress
• Power the recipe feed and recommendations
• Process subscriptions through Apple's In-App Purchase system
• Send you optional push notifications (if enabled)
• Improve the app through anonymous analytics

6. Data Storage and Security

Your data is stored securely in Supabase (hosted on AWS) with row-level security policies. Authentication tokens are stored on-device using secure storage. All network communication uses HTTPS.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

7. Data Retention and Deletion

You can delete your account at any time from Settings > Account > Delete Account. This permanently removes all your data from our servers, including your profile, meal logs, recipes, and any published content.

8. Third-Party Services

We use the following third-party services:

• Supabase — Authentication and database hosting
• OpenAI — Natural language food parsing
• USDA FoodData Central — Nutrition database
• RevenueCat — Subscription management (via Apple)
• PostHog — Anonymous usage analytics
• Sentry — Crash and error reporting

9. Children's Privacy

Moxy is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes through the app. Continued use of Moxy after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this privacy policy or your data, contact us at:

Kenneth Ma
contactkennma@gmail.com