Privacy Policy

This Privacy Policy explains how moonlight global s. r. o. processes personal data when you use moonScan, including our website, scan experience, account features, paid services, and related communications.

We believe privacy is part of the product. moonScan processes sensitive-feeling information, including camera-derived physiological signals, so we aim to be clear about what we collect, why we collect it, and how you can control it.

Data controller:

moonlight global s. r. o.
Registered address: Nemocničná 615/45, 924 01 Galanta, Slovakia
Company registration number / IČO: 54090067
Privacy contact: viktor@moonlightokuliare.sk

Depending on how you use moonScan, we may process the following categories of data.

Our preferred approach is to process scans in a privacy-preserving way and avoid storing raw face video unless it is clearly necessary, consented, and limited.

By default, moonScan should store extracted scan signals, metrics, quality data, and diagnostics rather than raw video.

If we ever ask to store raw images or video for validation, debugging, research, or product improvement, we will ask for separate consent and explain:

• why it is needed;
• what will be stored;
• who can access it;
• how long it will be kept;
• how to withdraw consent;
• how deletion works.

Sleep Plate is a separate public beta experiment at /sleep-plate. It does not require a moonScan account and does not add the submitted meal photo, recognition response, result, identity, or feedback to moonScan records, databases, object storage, or the filesystem. The image is validated, normalized, and cleared in memory on our server.

The Development and Production configurations use Google's Gemini API. After your explicit consent, the normalized meal photo is sent to Google for recognition. If you then confirm the meal, a second, text-only request is sent for the detailed report. It includes confirmed item names and corrections, estimated amounts and calorie ranges with their source and recognition confidence, meal preparation, portion, size, spice, digestive-load and uncertainty context, the interval between the meal and planned bedtime, your caffeine and alcohol answers, your optional estimate of added oil, butter, or rich dressing per serving, and the selected language. The second request does not include the photo. This service uses Gemini through a Google Cloud project with active billing. Under Google's paid-service terms, Google does not use prompts, images, or responses to improve its products, but may retain prompts and responses for a limited period solely for abuse monitoring. MoonScan does not persist the photo, meal content, recognition response, report response, or result; short-lived in-memory state supports the current session and explicit retries. Google's own processing and retention terms apply; moonScan does not promise provider-side deletion or zero retention. Do not include people or anything personal.

During meal review, you may separately opt in to an Open Food Facts lookup. If enabled, MoonScan's server sends only the names of kept items, including your corrections, and the selected market, along with ordinary request metadata such as the server IP address and User-Agent. Open Food Facts does not receive the meal photo, estimated amounts, recognition response, result, visitor IP address, or account identity. Product records are community-contributed and may be incomplete, inaccurate, or outdated. See the Open Food Facts terms of use.

The lookup query and response are handled transiently for that confirmation. MoonScan does not add item names, food references, or calorie results to account records, databases, object storage, the filesystem, or meal/result history, and the lookup adds no analytics event. The existing beta keeps only short-lived in-memory capability and retry state. MoonScan does not control Open Food Facts' own processing or retention of API requests.

Sleep Plate returns an experimental wellness heuristic. It does not predict how you will sleep and is not medical or nutritional advice. Do not include people or anything you do not want processed.

A company can pay for moonScan access for its people under moonScan for Business. If you accept a company's invite, the company pays for your seat. Your moonScan account, scans, and history stay yours.

This is what the company can and cannot see:

Your company can see that you hold a seat: your email, your role and whether you have joined.

It also sees anonymous team averages for completed weeks, and only once at least 5 people contribute to them.

It never sees your readings, your scans, or when you scan. You can leave at any time and keep your own scan history.

Beyond your seat, the company's owner and admins see billing facts about the company's own plan: the billing interval, the number of seats, the renewal date, and the payment status. moonScan staff who support a company see the same seat and billing information and the same anonymous averages, never a reading, a scan, or scan activity.

Anonymous team averages are calculated by moonScan from members' readings and shown only for completed weeks. Past weeks do not change when someone joins or leaves. A value is shown only when at least 5 people contribute to it, and the share of the team that scanned is shown only when at least 5 people scanned and at least 5 did not. No average comes with a name, an identifier, or a per-person count.

For the company side we process the company name, the emails and roles of owners, admins, and invited people, seat and invite status, membership events (joined, removed, left), and billing state. Payments are handled by Stripe, and invite emails are sent through our email provider. We use this to provide the seats the company buys (contract) and to keep the service secure (legitimate interests). The company's rights and ours are set out in the moonScan for Business Terms and the Data Processing Agreement.

You can leave a company at any time in Settings. You keep your scans and history, and your access returns to your own plan, if you have one.

We process personal data to:

• create and manage your account;
• provide the moonScan service;
• perform camera-based scans;
• estimate wellness and recovery-related physiological signals;
• show your results and trends;
• improve scan quality and reliability;
• process payments and subscriptions;
• provide customer support;
• maintain security;
• prevent fraud and misuse;
• debug errors and improve performance;
• comply with legal obligations;
• send you tips and offers by email, only if you opted in;
• send service emails, such as email verification, trial and billing notices and receipts.

Depending on the context, we process data based on:

Your device may ask for permission before allowing moonScan to access your camera.

Camera access is used to perform the scan. You can deny or revoke camera permission through your browser or device settings, but moonScan scans will not work without camera access.

We use scan data to:

• estimate physiological signals;
• determine scan quality;
• provide recovery and readiness-related insights;
• compare results to your baseline where available;
• improve reliability;
• detect failed or limited scans;
• support product debugging and quality control;
• develop and validate better scan algorithms, where allowed.

We do not use moonScan scans to identify you as a person unless we explicitly state otherwise and have an appropriate legal basis.

We do not sell your personal scan data to advertisers.

We do not allow employers, insurers, lenders, or other third parties to use your individual moonScan results to make decisions about you unless you explicitly authorize a legally reviewed use case. A company that pays for your seat under moonScan for Business is not an exception: it never receives your individual results (see the moonScan for Business section below).

We may use de-identified, aggregated, or pseudonymized data to improve moonScan.

If we want to use identifiable scan data, raw images, raw video, or sensitive research data beyond normal service operation, we will request separate consent where required.

You can opt out of optional product improvement or research uses by contactingviktor@moonlightokuliare.sk or using account settings if available.

We use cookies and similar technologies as described in our Cookie Policy.

Non-essential cookies, such as analytics or marketing cookies, are used only where legally allowed and, where required, after consent.

We may share data with trusted service providers that help us operate moonScan, including:

• hosting providers;
• payment processors;
• analytics providers;
• email providers;
• authentication providers;
• customer support tools;
• security and monitoring tools;
• legal, accounting, or compliance advisors.

These providers may only process data according to our instructions and applicable law.

Email provider. We send service and (if you opted in) marketing emails through Resend, which processes your email address, language and the email content for delivery on our behalf, and may process it outside the EEA under the safeguards described in section 11.

Support chat. Our website shows a support chat provided by Gorgias. When a page with the chat loads, your browser connects to Gorgias and to Google reCAPTCHA (used to prevent abuse) and loads fonts from Bunny Fonts, so these providers receive technical data such as your IP address and browser details. If you send a message, Gorgias processes its content and anything you choose to share on our behalf, and chats may be monitored and recorded for quality and security. We do not send your account details or scan data to the chat. Please do not share health details in the chat unless needed for your request.

Website analytics. Across moonScan we use PostHog, hosted in the EU, to understand how visitors use the service. Without your consent we only count page views and coarse interactions without cookies or similar storage, and without click maps or recordings. On scan, results, history, account, settings, admin, Sleep Plate, login and checkout-return screens we send only coarse page and event labels, never emails, names, user or scan IDs, health values, images, food details, typed text, page text or URL queries. If you accept analytics in the cookie banner, PostHog also sets analytics cookies, and records click maps and session recordings of public pages only (homepage, sales, coach, investor and expert-recruitment pages); anything you type and your account menu (name, email, photo) are hidden. Declining or withdrawing stops recordings and removes PostHog cookies and identifiers. We never link PostHog data to your account. The legal basis is your consent for cookies and recordings and our legitimate interest in cookieless visit counts. You can change your choice at any time with "Cookie settings" at the bottom of every page.

We may also share data if required by law, court order, legal process, or to protect rights, security, users, or the public.

Some providers may process data outside your country or outside the European Economic Area.

Where required, we use appropriate safeguards such as adequacy decisions, Standard Contractual Clauses, or other legally recognized transfer mechanisms.

We keep data only as long as needed for the purposes described in this Privacy Policy.

Retention may depend on:

• whether you have an active account;
• whether data is needed to provide trends;
• legal, tax, and accounting requirements;
• security and fraud prevention needs;
• consent choices;
• product validation and debugging requirements.

Suggested retention structure to confirm before publishing:

• Account data: until account deletion, unless legal retention applies.
• Payment and invoice data: retained as required by tax/accounting law.
• Scan metrics and extracted signals: retained while account is active or until deletion request, unless anonymized or legally retained.
• Collection baseline observations expire after 90 days; terminal collection evidence and status expire after 180 days. Unlinked collection attempts close after 24 hours, then follow terminal evidence retention.
• Raw images/video: not stored by default; if stored with consent, retain only for the specific stated period.
• Marketing email choices: your consent record is kept while your account exists, as proof of consent. The suppression hash is kept after account deletion so we do not email you again.
• Support messages: retained for customer support and legal record purposes.
• Security logs: retained for a limited security period.

Depending on where you live, you may have rights to:

• access your personal data;
• correct inaccurate data;
• delete your data;
• restrict processing;
• object to processing;
• receive a portable copy of your data;
• withdraw consent;
• object to marketing;
• lodge a complaint with a supervisory authority.

To exercise your rights, contact viktor@moonlightokuliare.sk.

We may need to verify your identity before responding.

The account download in Settings includes your available collection records, decrypts your observation values for the export, omits stored ciphertext and other owners' records, and marks a store if its per-store export limit is reached.

You can request deletion of your account and personal scan data by contactingviktor@moonlightokuliare.sk or using account deletion tools if available.

Deletion may not be immediate for all data if we need to retain certain records for legal, tax, security, or dispute purposes.

Deleting your account or a scan removes linked live collection records. Copies in backups may remain until those backups expire.

Where possible, we may anonymize data instead of deleting it if it can no longer identify you.

We use reasonable technical and organizational measures to protect personal data, including measures such as access controls, encryption in transit, restricted admin access, monitoring, and security procedures.

No system is perfectly secure. If you believe your account or data has been compromised, contact viktor@moonlightokuliare.sk.

moonScan is not intended for children. You must be at least 18 years old to use moonScan unless we provide a separate legally reviewed minor/guardian flow.

moonScan provides wellness and recovery-related insights. It does not make legally significant automated decisions about you.

moonScan results should not be used for employment, insurance, credit, healthcare access, hiring, or safety-critical decisions. This applies to companies that pay for seats under moonScan for Business too.

We may update this Privacy Policy from time to time.

If changes are material, we will provide notice where required by law.

Privacy questions and requests: viktor@moonlightokuliare.sk