Privacy Policy

Last Updated: July 9, 2026

This Privacy Policy describes how OriginMind Inc. ("moonbelt", "We", "Us", "Our") collects, uses, and protects Your information when You use the moonbelt mobile application and related services (the "Service"). By using the Service, You agree to the collection and use of information as described here.

1. Definitions

2. Data We Collect

Data You provide: name, email address, password, profile photo (optional), onboarding responses (such as Your commitment level and the obstacles You want help with), and Health Data including date of birth, gender, weight, height, goals, activity level, dietary restrictions, food allergies and intolerances, disliked ingredients, cuisine and meal preferences, meal logs, meal photos, voice input, and messages to the AI coach.

Data collected automatically: device model and identifier, OS version, app version, IP address, language, time zone, crash logs, push notification token, and usage analytics (screens viewed, features used, session duration).

Data from third parties: basic profile details from Sign in with Apple or Sign in with Google (if You choose to use those options); daily step count from Apple HealthKit (iOS) or Android Health Connect (if You grant permission); subscription status from Our payment infrastructure provider.

3. How We Use Your Data

We use data to:

We do not sell Your Personal Data. We do not share it for cross-context behavioural advertising.

4. Apple HealthKit & Android Health Connect

With Your permission, We read Your daily step count only — from Apple HealthKit on iOS, or from Health Connect on Android. We do not read any other health data from these platforms, and We do not write any data back to them.

We use this step data solely to show Your daily steps and progress toward Your step goals in the app. We do not use HealthKit or Health Connect data for advertising, marketing, or data brokerage; We do not sell it to any third party; and We do not share it with third parties except the service providers described in Section 5, who process it only on Our behalf.

You can revoke access at any time:

Revoking access stops future syncing; step data already synced remains in Your account until You delete it or delete Your account.

5. How We Share Data

We share data only with third-party service providers necessary to operate the Service. These providers fall into the following categories:

Each provider is bound by a data processing agreement and may not use Your data for their own purposes. We do not share Your data for advertising or marketing by third parties.

We may also share data if required by law, or as part of a business transfer such as a merger or acquisition.

6. AI Features and Your Data

Some features, including food photo recognition, voice meal logging, AI coaching, nutrition insights, and meal plan generation, are powered by third-party AI providers that process Your input to return a result to You.

We do not use Your identifiable content to train AI models without Your explicit consent, and Our AI providers do not use Your content to train theirs. Your meal photos, voice inputs, messages to the AI coach, and other content are sent to these providers only to generate the result You requested (for example, to identify a food or produce a meal plan), and are processed under agreements that prohibit using Your data to train or improve their models. We do not sell this content and We do not use it for advertising.

We may use data that has been aggregated or de-identified, so that it can no longer reasonably be linked to You, to improve the Service, including its AI features. If We wish to use Your identifiable content to improve or train Our AI features, We will ask for Your permission first, and declining will not affect Your access to the Service.

AI output can be inaccurate or incomplete. Please review the Medical Disclaimer, AI Features, and Nutrition Data sections of Our Terms of Service before relying on any AI-generated result.

7. Data Retention

We retain Account data while Your account is active and for 30 days after deletion. Subscription records are kept for 7 years for tax and accounting purposes. Crash and diagnostic logs are retained for 90 days. Analytics data is retained for 24 months.

8. Your Privacy Rights

Depending on where You live, You may have the right to access, correct, delete, or export Your Personal Data; to withdraw consent; and to lodge a complaint with Your local privacy authority. To exercise any right, email privacy@moonbelt.ai or use the in-app account deletion option.

moonbelt does not sell or share Personal Data for behavioural advertising. California residents may submit CCPA requests at the same address. Canadian residents may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca with unresolved concerns.

Washington and Nevada residents: Our Consumer Health Data Privacy Policy describes how We handle consumer health data and the additional rights You have under the Washington My Health My Data Act and Nevada law, including how to exercise them and how to appeal a decision.

9. Deleting Your Account

Go to Settings → Account → Delete account inside the app, or email privacy@moonbelt.ai. Deletion removes Your profile, meal logs, and weight history from active systems within 30 days.

10. Security

We use TLS encryption in transit, encryption at rest, hashed passwords, and least-privilege access controls. No system is entirely secure, but We continuously work to improve Our practices.

A note on sensitive information. The Service lets You record health-related information such as weight, body metrics, food logs, allergies, and goals. Please consider the sensitivity of what You choose to add. While We protect Your data as described above, no method of storage or transmission is completely secure, and in limited circumstances information may be subject to lawful access by courts, law enforcement, or regulators in jurisdictions where We or Our service providers operate.

11. Children's Privacy

The Service is intended for users aged 13 and older and is not directed to children under 13. We do not knowingly collect personal information from children under 13 (consistent with the U.S. Children's Online Privacy Protection Act) or from anyone under 16 in the EEA and UK. Users between 13 and 17 (or under the age of majority in their jurisdiction) may use the Service only with the consent and supervision of a parent or legal guardian, as described in our Terms of Service.

If You believe a child under 13 has provided Us with personal information, or that a minor is using the Service without parental consent, please contact privacy@moonbelt.ai and We will delete the account and associated data.

12. EEA & UK Residents (GDPR / UK GDPR)

If You are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the following additional information applies. OriginMind Inc. is the controller of Your Personal Data.

Legal bases for processing. We process Your Personal Data on the following bases:

Special-category data. Health Data is special-category data under Article 9 of the GDPR. We process it only with Your explicit consent, which You provide when You choose to enter it into the Service. You may withdraw that consent at any time by deleting the relevant data or Your account.

International data transfers. We are based in Canada and use service providers located in the United States and other countries. Where We transfer Personal Data outside the EEA, the UK, or Switzerland, We rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses (together with the UK International Data Transfer Addendum) and applicable adequacy decisions. You may request a copy of the safeguards We use by emailing privacy@moonbelt.ai.

Your rights. In addition to the rights described in Section 8, You have the right to lodge a complaint with Your local data protection supervisory authority.

EU / UK Representative. moonbelt is currently offered only to users in the United States and Canada and is not directed to individuals in the EEA, the UK, or Switzerland. Before We offer the Service in those regions, We will appoint a representative under Article 27 of the GDPR and the UK GDPR and identify them here.

13. Changes to This Policy

We may update this Policy from time to time. Material changes will be announced through the app or by email before taking effect. Continued use of the Service constitutes acceptance of the updated Policy.

14. Contact Us

OriginMind Inc.
2460, #4, POST Road, Oakville, Ontario Canada
Email: privacy@moonbelt.ai