moya
Back to moyahealth.app
Privacy Policy
This policy explains how Moya Health Technologies Ltd ("Moya", "we", "us") handles information when you use the Moya app and moyahealth.app. We are a company registered in England and Wales (company number 17322163), with our registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. We are registered with the UK Information Commissioner's Office (registration reference ICO/00014776996) and are the data controller for the personal data described below. You can reach us at hello@moyahealth.app.
In short: the health information you record in Moya stays on your device. We do not require an account, we do not sell your data, and we do not use it for advertising. The limited information that does leave your device is anonymous. The sections below set out the detail.
1. Information you store in the app
Everything you record in Moya, including your check-ins, symptom ratings, notes, journal entries, photos and lifestyle logs, is stored in a private database on your device. We do not receive this information, it is not stored on our servers, and it is not associated with your identity. If you delete the app, this information is deleted with it, so please keep your own device backups.
2. Apple Health and Health Connect
With your permission, Moya reads certain data from your phone's health store (such as sleep, activity and heart rate) to show alongside your entries. On iPhone this is Apple Health. On Android it is Health Connect. This is used only on your device. In line with Apple's requirements, data obtained from Apple Health is never written to iCloud and is never used for advertising or data mining. Data read from Health Connect is treated the same way: it stays on your device, and it is never used for advertising or data mining. Moya does not write any data back to either health store.
3. Information we collect
The only information that leaves your device is set out below. None of it identifies you.
3.1 Usage analytics
We use a privacy-focused analytics provider, hosted in the EU, to understand how the app is used so we can improve it, for example which screens are viewed and which features are used. This is linked to a random identifier generated by the app, not to you, and it never includes your health entries.
3.2 Aggregate statistics
When you complete onboarding, we collect a small amount of anonymous, aggregate information to help us understand who Moya is for and how people find us. This is collected as anonymous totals only and is not linked to you or your device.
3.3 Food photo scanning
If you choose to scan a meal photo, a single copy of that photo is sent, through our server, to a third-party AI provider to estimate the dish and its ingredients. The photo is used only to return that result and is not stored on our servers. We use a paid service tier under which your content is not used to train the provider's models. The photo you save in the app stays on your device.
3.4 Product barcode lookups
When you scan a product barcode, the barcode number is sent to an open product database to retrieve the product name. No personal information is sent.
3.5 Subscriptions
Premium subscriptions are processed by the store you bought them from, Apple on iPhone or Google Play on Android, and we never receive your payment details. We use a subscription management provider to confirm your subscription status, identified by an anonymous identifier and your store account (which Apple or Google manages). No health information is shared with these providers.
3.6 Website and waitlist
If you join a mailing list on moyahealth.app (for example the Android launch list, or the "what should Moya support next" list), we store the email address you provide so we can contact you about Moya. If you also vote for a condition you would like Moya to support, we store that choice with your email so we can tell you when it ships. This records a product preference you chose to share, not a diagnosis, and you can ask us to delete it at any time.
4. How we use information, and our legal bases
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Providing the core features you use in the app | Processed on your device; not processed by us as controller |
| Improving the app through anonymous analytics and statistics | Our legitimate interests in understanding and improving the service |
| Providing the AI and lookup features you choose to use | Providing a service you have requested |
| Contacting you about mailing lists you joined, including any condition preference you shared | Your consent |
5. Who we share information with
We use a small number of trusted service providers to run Moya. They may only process information on our instructions and for the purposes described above. They include our app store and payments providers (Apple and Google), a subscription management provider, a product analytics provider, an AI provider for food photo recognition, and open product databases for barcode lookups. We do not sell your personal data, and we do not share it for advertising.
6. International transfers
Our analytics are hosted in the EU. Some of our providers may process information outside the UK and EEA. Where that happens, we rely on appropriate safeguards, such as the UK's international data transfer arrangements.
7. How long we keep information
Information you store in the app is kept until you delete it. Anonymous analytics and aggregate statistics are retained as non-identifiable totals. Waitlist emails are kept until you ask us to remove them or we no longer need them.
8. Security
We use HTTPS for all connections, and third-party keys are held only as server-side secrets and never included in the app. Because your health information stays on your device, its security also depends on your own device protections, such as your passcode and backups.
9. Your rights
Under UK data protection law you have the right to access, correct, delete and port your personal data, and to object to or restrict certain processing. Because your health information is stored on your device, you can already view, edit, export and delete it at any time, including by deleting the app. To exercise any right in relation to information we hold, such as your waitlist email, contact us at hello@moyahealth.app. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
10. Children
The app is intended for users aged 13 and over and is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. Users under 18 may use the app only with the consent and supervision of a parent or legal guardian, and by using the app confirm that such consent has been given.
11. Changes to this policy
We may update this policy as Moya develops. If we make material changes, we will update this page and revise the date above.
12. Contact
Moya Health Technologies Ltd
71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
hello@moyahealth.app