Privacy

Last updated 20 October 2026

The short version. Moderly keeps your data to run the app for you, in the EU. It leaves only when you use a feature that needs it: an AI estimate, a food search, the weather. No ads, no trackers, nothing sold. You can export everything or delete your account at any time, in the app.

What Moderly stores

• Your account: your email address, and your password stored as a hash by the sign-in service. If you start without an email (a trial), there is no email until you save the account.
• What you enter: weigh-ins, food, training, your plans and notes, weekly check-ins, back ratings and your settings, including your goal and the reason you wrote for it.
• From Health Connect, on Android, only if you allow it: steps, sleep, resting heart rate, heart-rate variability, and workouts with their duration, energy, distance and average heart rate.
• Photos you choose to keep (progress photos and body-fat check photos): stored privately; only your account can open them. Trials can't keep photos; saving the account unlocks them.
• Error reports: when something breaks, a short technical report (the error, the screen, the app version and the kind of device), so it can be fixed.
• Web notifications, if you turn them on in a browser: the address your browser gives for delivering them.
• Period start days, only if you turn on period-aware weight: the dates you mark, used to explain your own mornings and nothing else.
• Weigh-ins you import from another app: the file is read on your device, and only the dates and weights are saved, marked as imported so the import can be undone.

All of this is stored by Supabase in Frankfurt, Germany (EU). Your phone keeps a copy so the app works offline. The app itself is served by Vercel.

What leaves Moderly, and when

Only when you use the feature:

• An AI estimate (food from a photo or a description, a recipe idea): sent to Google's Gemini API. Moderly uses Gemini's free tier for now, but because Moderly is run from the EU, Google's terms give it the paid tier's data rules: Google does not use what is sent to improve its products, and keeps it only for a limited time, to detect misuse. Photos go only to Gemini. A text request (a description, a recipe) may go to Kilo's AI gateway or Pollinations when Gemini is busy. Moderly does not keep a photo sent only for an estimate.
• Body fat from a photo is switched off until Moderly's AI runs on Gemini's paid tier, where Google doesn't use what is sent to improve its products. Until then no body photo leaves Moderly.
• Food search and barcodes: your search words go to Open Food Facts.
• The weather in the morning briefing: your approximate location, rounded to about a kilometre, goes to Open-Meteo. Moderly does not store it.
• Exercise videos: play from YouTube in its privacy-enhanced mode; YouTube receives your request when you press play.
• App updates on Android download from GitHub.

Nothing else: no advertising, no analytics or tracking scripts, and your data is never sold or shared.

Health data and your consent

Weight, food and health information is special-category data under the EU's General Data Protection Regulation. Moderly uses it only with your explicit consent, given when you create your account, and only to run the app for you. You can withdraw that consent at any time by deleting your account.

Who it's for

Adults. Moderly is for people 18 and over: weight loss under 18 belongs with a doctor, and the AI services it uses are for adults only.

Your rights

• See and take everything: Settings → Export my data (JSON or a spreadsheet).
• Correct it: edit or delete any entry in the app.
• Delete it all: Settings → Delete my account removes your account, everything you entered and your photos, straight away.
• Ask or complain: write to the maintainer through the private report form (only the maintainer sees it). You can also complain to your data protection authority; in Slovakia, the Úrad na ochranu osobných údajov.

How long it's kept

For as long as you have an account. Deleting the account deletes it. A trial that isn't used for 30 days is deleted with everything in it.

Who runs Moderly

Moderly is run by Nikhil Shanbhag, in Slovakia, who is responsible for your data (the controller). To reach him, use the private report form; only he can read it. Moderly is open source (AGPL-3.0), so you can read exactly what it does with your data in its code.