Privacy Policy

This Privacy Policy explains how moonlight global s. r. o. processes personal data when you use moonScan, including our website, scan experience, account features, paid services, and related communications.

We believe privacy is part of the product. moonScan processes sensitive-feeling information, including camera-derived physiological signals, so we aim to be clear about what we collect, why we collect it, and how you can control it.

Data controller:

moonlight global s. r. o.
Registered address: Nemocničná 615/45, 924 01 Galanta, Slovakia
Company registration number / IČO: 54090067
Privacy contact: viktor@moonlightokuliare.sk

Depending on how you use moonScan, we may process the following categories of data.

Our preferred approach is to process scans in a privacy-preserving way and avoid storing raw face video unless it is clearly necessary, consented, and limited.

By default, moonScan should store extracted scan signals, metrics, quality data, and diagnostics rather than raw video.

If we ever ask to store raw images or video for validation, debugging, research, or product improvement, we will ask for separate consent and explain:

• why it is needed;
• what will be stored;
• who can access it;
• how long it will be kept;
• how to withdraw consent;
• how deletion works.

Sleep Plate is a separate, invite-only experiment at /sleep-plate. It does not require a moonScan account and does not add the submitted meal photo, recognition response, result, identity, or feedback to moonScan records, databases, object storage, or the filesystem. The image is validated, normalized, and cleared in memory on our server.

After your explicit confirmation, the normalized image is securely sent once to OpenAI for this analysis. OpenAI may retain it for safety and abuse monitoring under its API policies. It is not used to train OpenAI models unless moonScan explicitly opts in. OpenAI's separate privacy and retention policy applies; moonScan does not promise provider-side deletion or zero retention.

During meal review, you may separately opt in to an Open Food Facts lookup. If enabled, MoonScan's server sends only the names of kept items, including your corrections, and the selected market, along with ordinary request metadata such as the server IP address and User-Agent. Open Food Facts does not receive the meal photo, estimated amounts, recognition response, result, visitor IP address, or account identity. Product records are community-contributed and may be incomplete, inaccurate, or outdated. See the Open Food Facts terms of use.

The lookup query and response are handled transiently for that confirmation. MoonScan does not add item names, food references, or calorie results to account records, databases, object storage, the filesystem, or meal/result history, and the lookup adds no analytics event. The existing beta keeps only short-lived in-memory capability and retry state. MoonScan does not control Open Food Facts' own processing or retention of API requests.

Sleep Plate returns an experimental wellness heuristic. It does not predict how you will sleep and is not medical or nutritional advice. Do not include people or anything you do not want processed.

We process personal data to:

• create and manage your account;
• provide the moonScan service;
• perform camera-based scans;
• estimate wellness and recovery-related physiological signals;
• show your results and trends;
• improve scan quality and reliability;
• process payments and subscriptions;
• provide customer support;
• maintain security;
• prevent fraud and misuse;
• debug errors and improve performance;
• comply with legal obligations;
• send product updates or marketing where allowed.

Depending on the context, we process data based on:

Your device may ask for permission before allowing moonScan to access your camera.

Camera access is used to perform the scan. You can deny or revoke camera permission through your browser or device settings, but moonScan scans will not work without camera access.

We use scan data to:

• estimate physiological signals;
• determine scan quality;
• provide recovery and readiness-related insights;
• compare results to your baseline where available;
• improve reliability;
• detect failed or limited scans;
• support product debugging and quality control;
• develop and validate better scan algorithms, where allowed.

We do not use moonScan scans to identify you as a person unless we explicitly state otherwise and have an appropriate legal basis.

We do not sell your personal scan data to advertisers.

We do not allow employers, insurers, lenders, or other third parties to use your individual moonScan results to make decisions about you unless you explicitly authorize a legally reviewed use case.

We may use de-identified, aggregated, or pseudonymized data to improve moonScan.

If we want to use identifiable scan data, raw images, raw video, or sensitive research data beyond normal service operation, we will request separate consent where required.

You can opt out of optional product improvement or research uses by contactingviktor@moonlightokuliare.sk or using account settings if available.

We use cookies and similar technologies as described in our Cookie Policy.

Non-essential cookies, such as analytics or marketing cookies, are used only where legally allowed and, where required, after consent.

We may share data with trusted service providers that help us operate moonScan, including:

• hosting providers;
• payment processors;
• analytics providers;
• email providers;
• authentication providers;
• customer support tools;
• security and monitoring tools;
• legal, accounting, or compliance advisors.

These providers may only process data according to our instructions and applicable law.

Support chat. Our website shows a support chat provided by Gorgias. When a page with the chat loads, your browser connects to Gorgias and to Google reCAPTCHA (used to prevent abuse) and loads fonts from Bunny Fonts, so these providers receive technical data such as your IP address and browser details. If you send a message, Gorgias processes its content and anything you choose to share on our behalf, and chats may be monitored and recorded for quality and security. We do not send your account details or scan data to the chat. Please do not share health details in the chat unless needed for your request.

Website analytics. Across moonScan we use PostHog, hosted in the EU, to understand how visitors use the service. Without your consent we only count page views and coarse interactions without cookies or similar storage, and without click maps or recordings. On scan, results, history, account, settings, admin, Sleep Plate, login and checkout-return screens we send only coarse page and event labels, never emails, names, user or scan IDs, health values, images, food details, typed text, page text or URL queries. If you accept analytics in the cookie banner, PostHog also sets analytics cookies, and records click maps and session recordings of public pages only (homepage, sales, coach, investor and expert-recruitment pages); anything you type and your account menu (name, email, photo) are hidden. Declining or withdrawing stops recordings and removes PostHog cookies and identifiers. We never link PostHog data to your account. The legal basis is your consent for cookies and recordings and our legitimate interest in cookieless visit counts. You can change your choice at any time with "Cookie settings" at the bottom of every page.

We may also share data if required by law, court order, legal process, or to protect rights, security, users, or the public.

Some providers may process data outside your country or outside the European Economic Area.

Where required, we use appropriate safeguards such as adequacy decisions, Standard Contractual Clauses, or other legally recognized transfer mechanisms.

We keep data only as long as needed for the purposes described in this Privacy Policy.

Retention may depend on:

• whether you have an active account;
• whether data is needed to provide trends;
• legal, tax, and accounting requirements;
• security and fraud prevention needs;
• consent choices;
• product validation and debugging requirements.

Suggested retention structure to confirm before publishing:

• Account data: until account deletion, unless legal retention applies.
• Payment and invoice data: retained as required by tax/accounting law.
• Scan metrics and extracted signals: retained while account is active or until deletion request, unless anonymized or legally retained.
• Collection baseline observations expire after 90 days; terminal collection evidence and status expire after 180 days. Unlinked collection attempts close after 24 hours, then follow terminal evidence retention.
• Raw images/video: not stored by default; if stored with consent, retain only for the specific stated period.
• Support messages: retained for customer support and legal record purposes.
• Security logs: retained for a limited security period.

Depending on where you live, you may have rights to:

• access your personal data;
• correct inaccurate data;
• delete your data;
• restrict processing;
• object to processing;
• receive a portable copy of your data;
• withdraw consent;
• object to marketing;
• lodge a complaint with a supervisory authority.

To exercise your rights, contact viktor@moonlightokuliare.sk.

We may need to verify your identity before responding.

The account download in Settings includes your available collection records, decrypts your observation values for the export, omits stored ciphertext and other owners' records, and marks a store if its per-store export limit is reached.

You can request deletion of your account and personal scan data by contactingviktor@moonlightokuliare.sk or using account deletion tools if available.

Deletion may not be immediate for all data if we need to retain certain records for legal, tax, security, or dispute purposes.

Deleting your account or a scan removes linked live collection records. Copies in backups may remain until those backups expire.

Where possible, we may anonymize data instead of deleting it if it can no longer identify you.

We use reasonable technical and organizational measures to protect personal data, including measures such as access controls, encryption in transit, restricted admin access, monitoring, and security procedures.

No system is perfectly secure. If you believe your account or data has been compromised, contact viktor@moonlightokuliare.sk.

moonScan is not intended for children. You must be at least 18 years old to use moonScan unless we provide a separate legally reviewed minor/guardian flow.

moonScan provides wellness and recovery-related insights. It does not make legally significant automated decisions about you.

moonScan results should not be used for employment, insurance, credit, healthcare access, hiring, or safety-critical decisions.

We may update this Privacy Policy from time to time.

If changes are material, we will provide notice where required by law.

Privacy questions and requests: viktor@moonlightokuliare.sk