Privacy Policy

Last updated 2026-09-06

Moojiw is a food diary made by Devpon. This policy describes what the Moojiw iPhone app and its API collect, why, and what you can do about it. It covers only Moojiw.

What we do not do

Moojiw does not track you. It does not use the advertising identifier, does not follow you across other companies' apps or websites, shows no ads, and sells no data. The app's privacy manifest declares no tracking and no tracking domains.

What we collect

This list is the same one Apple shows on the App Store listing, and it is generated from the app's privacy manifest. If something is not on this list, we do not collect it.

Linked to you

"Linked" means it is attached to a persistent identifier for your install or your account.

• Product interaction. Which screens you open, which buttons you tap, how far you get through setup, whether a share or a permission prompt succeeded, and counts of things. Used to understand and improve the app.
• Other usage data. App lifecycle events (opened, backgrounded, updated) recorded by our analytics SDK.
• User ID. An opaque identifier. If you sign in with Apple or LINE, we store the opaque subject identifier that provider gives us and nothing else about the account. Used to run your account and to attribute analytics events.
• Device ID. A push notification token when you turn notifications on, and a one-way digest of your install identity that we use to count how many AI guesses that install has used today.
• Photos. The meal photo you choose to send for an AI guess. See below.
• Purchase history. Whether a purchase started or completed, and which plan tier it was for.
• Performance data. How long a request took, plus sampled performance traces. Used to keep the app fast and to find what is slow.

Not linked to you

• Crash data. Stack traces and device state at the moment of a crash. We do not attach your identity to crash reports.

What we checked and do not collect

• Your diary. Dish names, calories, macros, prices, moods and notes stay in a database on your phone. Our API has no route that accepts a food entry.
• Anything you type. Your display name, dish names and entry notes are never sent as analytics.
• Health or fitness data. We do not read or write Apple Health.
• Money amounts. Your budget and your spending totals are never sent as analytics.
• Contacts. We never read your address book. An invite is an opaque code the server mints, and you share it yourself.
• Location. Nothing in the app reads your coordinates. Photos are re-encoded before upload, so GPS tags in the original do not travel with them.
• Email address or real name. We have no column for either.

Your meal photos

When you ask for a guess, the photo is sent to our API, which forwards it to a third-party AI vision provider to identify the dish and estimate calories and macros. Our own servers do not keep the photo: we return the estimate and cache only the parsed nutrition result. The AI provider's own retention terms apply to the copy it receives, which is why we declare the photo as collected rather than as processed and thrown away. The photo also stays on your phone as part of your diary until you delete the entry or the app.

Who else sees it

• Our analytics provider receives the product and usage events above.
• Our error-reporting provider receives crashes and sampled performance traces, with no user attached.
• Our subscription provider receives purchase events so we know whether your Pro subscription is active. Payment itself is handled by Apple; we never see your card.
• Apple or LINE, if you choose to sign in, tell us an opaque subject identifier and nothing more.
• Our AI vision provider receives the meal photos you send for a guess.
• Friends you share a bucket with see the meals you drop into that shared bucket, and your display name. They never see your budget or what you spent.

We do not sell your data, and we do not share it for advertising.

Analytics, and turning it off

We record the product and usage events listed above to see which parts of Moojiw work and which do not. An in-app switch to turn analytics off is not in this version of the app yet. It is being built. Until it ships, email notsu@devpon.com from the device you use and we will stop collecting analytics for that install and delete what has already been collected. When the switch ships it will live in Settings, and this page will say so.

Deleting your account

Open Moojiw, go to the Account tab and choose Delete account. This permanently deletes your account and its data on our servers: your sign-in identity, your friends, your bucket memberships, the meals you shared into buckets, your reactions and your push tokens. It cannot be undone. Your solo diary is on your phone, not on our servers, so it stays there; deleting the app removes it. You do not have to email anyone to do this, but if you cannot reach the app, write to notsu@devpon.com and we will do it for you.

Your rights

Depending on where you live, including under Thailand's PDPA and the EU's GDPR, you can ask us for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Write to notsu@devpon.com and we will answer.

Children

Moojiw is not intended for children under 13. We do not knowingly collect data from them. If you believe a child has given us data, write to us and we will delete it.

Changes

If this policy changes in a way that matters, we will update the date at the top and, for a material change, tell you in the app.

Contact

Devpon, Bangkok, Thailand. notsu@devpon.com