Privacy Policy

MogMap (“MogMap,” “we,” “us,” or “our”) is a web application and progressive web app (the “Service”) operated by an individual located in the State of Florida, United States (the “operator of MogMap”). You can reach the operator at mogmap.app@gmail.com. A mailing address is available on written request to that address.

This Privacy Policy describes how we collect, use, store, share, and protect information when you access MogMap on the web, install it as a PWA, or otherwise interact with the Service. By using MogMap, you agree to this Policy and to our Terms of Service.

• Account data: email address and a hashed password (the plain-text password is never stored or visible to us). If you sign in with Google, we receive your Google account email and basic profile information from Google.
• Profile data: chosen username, optional bio, optional avatar photo (taken with your device camera), and the city / state / country you choose to associate with your profile.
• Location data: if you tap “Detect via GPS” we collect your precise latitude/longitude one time to derive your city, state, and country. Coordinates are sent to OpenStreetMap Nominatim for reverse geocoding. You can turn off leaderboard visibility at any time in Settings.
• Scan data (facial images and derived scores): photos of your face you choose to capture, the AI-generated facial-attribute scores and notes derived from them, and the timestamp of the scan. Scan photos are stored privately and are only shown to you — they are never displayed on leaderboards or on your public profile.
• Social data: the list of accounts you follow and that follow you.
• Billing data: if you purchase MogMap Pro or a Scan Pack, our payment processor (Stripe) collects payment details directly. We receive only a customer identifier, the product purchased, and the subscription/payment status. We do not receive or store your full card number.
• Device & usage data: IP address, user-agent string, approximate location derived from IP, basic event timestamps, and error/diagnostic logs. We do not run third-party advertising trackers.
• Cookies & local storage: we use first-party browser storage to keep you signed in and to remember your theme preference. We do not use third-party advertising cookies.

For California residents, in the last 12 months we have collected the following categories of personal information from the sources and for the purposes described in Section 3 and Section 5:

• Identifiers (email, account ID, IP address, username).
• Customer records (profile fields you provide).
• Internet or other electronic network activity (event and error logs).
• Geolocation (precise, one-time, only if you use GPS detection; otherwise the city/state/country you type).
• Biometric information (facial images you upload for a scan and the numeric scores derived from them). We do not create or store a biometric template used to identify you outside of MogMap.
• Inferences (algorithmic scores/tiers derived from your scans).
• Commercial information (subscription status, purchase history — held by our payment processor and reflected to us as billing state).

Sources: you, your device, and the third-party service providers listed in Section 10. We do not sell or share personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA.

MogMap is a social ranking app. By default, the following information about you is visible to every other signed-in MogMap user — through leaderboards, search, and your public profile page at /u/<your-username>:

• Your username and avatar photo.
• Your bio, if you set one.
• Your city, state, and country, if you set them.
• Your best tier (e.g. “LHTN”) — shown by default; can be hidden in Settings → Leaderboard Visibility.
• Your numeric best score (1–10) — off by default; shown only if you turn “Show numeric score” on in Settings.
• Your rank on the global, country, state, city, and radius leaderboards — shown if “Show on leaderboards” is on (default on).
• The list of accounts you follow and that follow you, visible to both sides of each follow relationship.

You can opt out of leaderboards, hide your tier, and hide your numeric score at any time in Settings → Leaderboard Visibility. Hiding yourself from leaderboards removes you from all of them — global, country, state, city, and radius. Your raw scan photos are never shared with other users. Your email address, precise location, subscription status, and billing history are never shown to other users.

• To create and maintain your account and profile.
• To produce face-scan results and rank you on leaderboards.
• To enable social features such as follows and search.
• To process subscription and one-time purchases through our payment processor.
• To monitor and protect the Service from abuse, fraud, and technical errors.
• To respond to your support requests.
• To comply with legal obligations.

We process personal data to perform our contract with you (providing the Service), based on our legitimate interests in securing and improving the Service, to comply with legal obligations, and with your consent for optional features such as camera access, GPS, and biometric processing of your face images.

MogMap analyzes the face photos you submit using an AI inference provider (the Lovable AI Gateway routing to Google Gemini models). When you run a scan, the photos are transmitted to that provider over TLS and processed to produce a JSON analysis. We do not use your photos to train any model, and per the current Gemini API terms Google states it does not use paid-tier API inputs to train its models. We cannot independently audit that provider’s internal use of content in transit; your use of the Service constitutes acceptance of that residual risk. Photos themselves are stored only in your own private scan history in our backend storage. You can delete any scan (which deletes the associated photo) from your profile at any time. You can also delete your entire account, which removes all of your scans and photos.

MogMap derives scores from photographs of your face. We collect and process facial images and derived facial-attribute scores solely to produce your scan results and your leaderboard tier. This notice satisfies applicable state biometric-privacy notice requirements, including the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act (CUBI), and Washington RCW 19.375.

Purpose and use. Facial images and derived scores are used only to compute your scan results, display them to you, and rank your profile on leaderboards. We do not use them for identification, verification of identity outside of MogMap, advertising, or profiling for consequential decisions.

No sale or disclosure. We do not sell, lease, trade, or otherwise profit from your biometric information, and we do not disclose it to any third party except (i) the AI inference provider described in Section 8 strictly to compute your scan, (ii) our hosting/storage provider that stores the file on our behalf, or (iii) as required by law or valid legal process.

Written retention schedule and destruction. Facial images and derived biometric scores are retained until the earliest of: (a) you delete the individual scan, (b) you delete your account, or (c) three (3) years after your last interaction with the Service — after which we will permanently delete them from active systems. Ordinary encrypted backups may persist for a limited additional period before rotation, after which they too are overwritten.

Consent. You consent to this collection and processing by accepting these Terms and Privacy Policy through the in-app acceptance prompt before creating scans. You may withdraw consent at any time by deleting your account, which will delete your facial images and derived biometric scores as described above.

We share information only with the following service providers:

• Lovable Cloud (Supabase): hosts our database, authentication, and file storage. Data may be processed in the regions where that provider operates.
• Lovable AI Gateway (Google Gemini): performs face-scan inference.
• Stripe: processes MogMap Pro subscriptions and Scan Pack purchases; collects payment details directly and returns only a customer/subscription identifier and status to us.
• Cloudflare: serves and protects our front-end edge. Traffic may be handled in Cloudflare edge regions outside your country.
• Google: only when you choose “Continue with Google” to sign in.
• OpenStreetMap Nominatim: reverse-geocodes coordinates to a city name when you use GPS detection.

We do not sell or share personal information for cross-context behavioral advertising. We may disclose information if required by law, valid legal process, or to protect the rights, property, or safety of MogMap, our users, or others.

Account and profile data are retained until you delete your account. Scans (including stored photos and derived biometric scores) are retained per the schedule in Section 9. Operational and security logs are retained for a limited period needed for security, abuse prevention, and debugging. Billing records held by our payment processor are retained by that provider under its own policies for tax and legal compliance.

You may at any time:

• Access, correct, or delete your profile data and scans in the in-app Settings and Profile screens.
• Hide yourself from leaderboards or hide your numeric score / tier in Settings.
• Request a copy of your data, request deletion of your data, or ask us a question by emailing mogmap.app@gmail.com.

California residents (CCPA / CPRA): you have the right to know what personal information we collect, the right to delete it, the right to correct it, the right to limit use of sensitive personal information (including biometric information), and the right not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined under the CCPA.

Global Privacy Control (GPC). We do not sell or share personal information for cross-context behavioral advertising, so there is nothing for a GPC signal to opt you out of; if that ever changes, we will honor GPC signals as an opt-out of sale and sharing under California law.

MogMap is intended for users age 13 and older and is not directed to children under 13. We do not knowingly collect personal information from children under 13 in violation of the U.S. Children’s Online Privacy Protection Act (COPPA). Users between 13 and the age of majority in their jurisdiction represent that they have permission from a parent or legal guardian to use the Service, including to have their face image processed as described in Section 9. If you are a parent or guardian and believe a child under 13 has provided us with personal information, email mogmap.app@gmail.com and we will delete the account.

We protect data in transit with TLS, store passwords using industry-standard salted hashing handled by our auth provider, gate all database access behind row-level security policies, and serve avatar and scan photos via short-lived signed URLs that expire after roughly one hour. Anyone who obtains such a signed URL during that window can view the file at that URL, so do not share signed URLs you receive. No method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

MogMap is operated from the United States. Information you provide is processed in the United States and may be processed in other countries where our service providers (including Supabase and Cloudflare) operate.

We may update this Policy from time to time. If we make material changes we will update the “Last updated” date and, where appropriate, prompt you to re-accept the Policy inside the app before continuing to use the Service.

All scores, tiers, and recommendations produced by MogMap are generated by an algorithm for entertainment and self-improvement purposes only. They are not medical, psychological, dating, hiring, or financial advice.

MogMap offers a free tier of 2 lifetime face scans per account. After that, scanning requires either a MogMap Pro subscription, currently $4.99 USD per month, which grants 8 face scans each billing month, or a one-time Scan Pack at $2.50 USD for 2 scans. Unused Pro scans stack across billing months, subject to the expiration below. Scan Pack scans never expire.

Expiration of Pro scans. Each Pro grant of 8 scans expires 3 months (90 days) from the date it was granted, regardless of your subscription status. After that date, any remaining scans from that grant are permanently revoked and cannot be recovered.

Scan Pack scans do not expire and remain on your account until used or until you delete your account.

Cancellation and no refunds. If you cancel your Pro subscription, Pro scans you have already been granted remain usable until their individual 90-day expiry, after which they are revoked as described above. Scan Pack purchases are final. All purchases are non-refundable and non-transferable, except where a refund is required by applicable law.

Leaderboard access is always free. Your profile remains visible on city, state, country and world leaderboards without a subscription.

Acceptance. By subscribing to MogMap Pro or purchasing a Scan Pack, you acknowledge and agree to these expiration, cancellation, and no-refund terms. Billing is handled by Stripe; payment card details are not stored on MogMap servers.

Questions, requests, or complaints? Email the operator at mogmap.app@gmail.com. You may also send written requests to the operator via that email; a mailing address will be provided on request.