Mori AI Privacy Policy

Effective Date: December 2, 2025

This Privacy Policy explains how Mori AI ("Mori AI," "we," "us," or "our") collects, uses, and shares information when you use our mobile application, Mori AI.

1. Data Collection and Usage

Mori AI collects information necessary to provide you with the core functionality of calculating your Speed of Aging score and providing personalized insights. We collect the following types of information:

Category	Types of Data Collected	Purpose of Collection	Legal Basis (GDPR)
User Provided Data (Health/Lifestyle)	Age, Biological Sex, Height, Weight, Diet choices, Sleep duration/quality, Vices (e.g., smoking status, alcohol use), Exercise frequency, Social health, Family history.	To calculate your proprietary Speed of Aging score, track daily progress, and provide tailored longevity recommendations.	Consent, Necessary for Contract
Account & Authentication	Anonymous User ID (UUID), or Email/Apple ID (if provided during sign-in), and Subscription Status.	To securely log you into the app, restore purchases, and ensure persistent access to your data history (Scan Feed).	Necessary for Contract
Usage & Analytics	App open/close times, Screen views, Button taps (e.g., 'Retake Quiz' clicks), Paywall views, and general app performance data.	To monitor app stability, diagnose bugs, improve app features, and optimize subscription conversion campaigns.	Legitimate Interest
Scan Data	Text input from manual scans, barcode data, and (if applicable) image data from the camera.	To analyze the nutritional or inflammatory markers of items and save a persistent history of your analysis feed.	Consent, Necessary for Contract

2. Data Storage and Security

Location: We store all user data (including survey answers, scores, and scan history) securely on Supabase servers. Supabase utilizes industry-standard encryption and security protocols.
Security Measures: We use encryption for data transmission (SSL/TLS) and Row-Level Security (RLS) within our database to ensure that users can only access their own data. Your sensitive inputs are stored separately from your public device data.

3. Data Retention and Deletion (Apple Requirement)

Retention: We retain user data for as long as your account is active, or as needed to provide you with the services.
Account Deletion (Mandatory): If you request account deletion through the app's settings menu, we will permanently delete all associated user data from our Supabase database within 30 days of the request.
- Process: The "Delete Account" button in the app's Settings section initiates the permanent deletion of your unique User ID and all linked profile, score, and scan history data.

4. Third-Party Services and Data Sharing

We utilize the following third-party services that may access or store data:

Service	Data Handled	Purpose
Supabase	All User Data (Health, Profile, Scans)	Backend-as-a-Service, Authentication, and Database hosting.
OpenAI / Vision APIs	Scan Text/Image Input	Processing image and text data for analysis and score generation. Data is processed temporarily to generate a response.
Superwall	Subscription Status, App Usage Events	Managing and presenting the paywall, tracking subscription events, and testing campaign optimization.

We do not sell, rent, or trade your personal health data to third parties.

5. Managing Your Subscription (Apple Requirement)

All subscription purchases and cancellations are handled directly by Apple's App Store.