Privacy Policy
Last updated: 30 September 2026
This explains what MOAI collects about you, why, who it's shared with and your rights. We collect only what's needed to run the app, and we never sell your data.
Who is responsible for your data
Jack Smith trading as Successfit, St Sampsons, Guernsey, GY2 4RQ, is the data controller for MOAI. Contact us about privacy at jack@successfit.net.
What we collect
| What | Examples | Why |
|---|---|---|
| Account details | Name, email address, password (stored encrypted; we can't see it) | To create and secure your account and contact you about it |
| Your answers and plan | Age range, goals, gender, work pattern, time available, struggles you choose to share | To build your personal plan |
| Wellbeing and activity data | Habits and streaks, habits you're breaking, workouts, meal and protein logs, mood check-ins, journal entries, meditation sessions | To run the features you use and show your progress |
| Rewards | XP, levels, medals, stickers, skins | To run the game features |
| Subscription status | Whether you're subscribed, renewal date, Paddle customer and subscription IDs | To give paying members access |
We never see or store your card details. Payments are handled entirely by Paddle (see below).
Health-related information
Some of what you log, such as meals, exercise, mood and habits you're working to break, may count as information about your health. We use it only to provide MOAI's features to you. We don't use it for advertising and we don't share it with anyone except the service providers below who store it for us. We rely on your explicit consent for this, which you give when you choose to enter it. You can withdraw that consent at any time by deleting the entries or asking us to delete your account.
Our legal reasons for using your data
- Contract: to provide the account and subscription you signed up for.
- Explicit consent: for health-related entries, as above.
- Legitimate interests: to keep MOAI secure, prevent fraud and fix problems.
- Legal obligation: where we must keep records by law.
Who we share it with
We use a small number of service providers to run MOAI. They may only use your data to provide their service to us.
- Supabase: account login and database. Your MOAI data is stored in their London (UK) data centre.
- Netlify: hosts the MOAI website.
- Paddle.com: our reseller and Merchant of Record. Paddle processes your payment, billing details and receipts as an independent controller under Paddle's privacy notice, and tells us your subscription status so we can give you access.
- Google Fonts, unpkg and Paddle: supply the app's fonts, code libraries and checkout script. Your browser connects to them directly when the app loads, which shares your IP address with them.
We don't sell your data, and we don't use advertising or tracking cookies.
Storage on your device
MOAI keeps a copy of your progress and your login session in your browser's local storage, so the app loads quickly and stays signed in. It isn't used for tracking. Paddle's checkout may set its own cookies when you pay.
How long we keep it
We keep your data while you have an account. If you ask us to delete your account, we delete your MOAI data within 30 days, except records we must keep by law (for example, billing records held by Paddle).
Your rights
You can ask us to:
- give you a copy of your data;
- correct anything that's wrong;
- delete your data;
- send your data to you or another service in a common format;
- stop or limit how we use it, or withdraw your consent.
Email jack@successfit.net and we'll respond within one month. If you're unhappy with how we've handled your data, you can complain to the Office of the Data Protection Authority in Guernsey (odpa.gg).
Children
MOAI isn't for anyone under 18, and we don't knowingly collect their data.
Changes
If we update this policy, we'll change the date at the top and tell you about important changes in the app or by email.