Effective Date: January 1, 2025
Last Updated: October 6, 2026
Mocha's MindLab Inc. ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services (collectively, the "Service").
The app has no accounts and asks for none of this. There is no sign-up, no login, no password and no email address. We do not collect your name, your contact details, your demographic details or any contact preferences, and there is no mailing list to be added to.
The one time we hold anything personal is when you email support yourself. Then we have whatever you chose to put in that email, and we keep it only as long as it takes to answer you.
Our app may collect health-related information, including but not limited to:
Mocha does not collect mood data or mental health assessments. There is no dedicated sleep tracker; sleep appears only if you choose to create a sleep goal, and anything you record against it stays on your device like the rest of your data.
Much less than most apps. The complete list of what the app itself sends us is:
That is the whole list. The app does not send us your device model, your operating system version, an advertising identifier, or any device identifier issued by Apple or Google.
Two other things are worth naming plainly. Your IP address reaches our server whenever the app contacts it, because that is how the internet works; we use it only to stop one device from flooding the meal scanner, it is held in memory for that purpose, and it is never written into our records alongside your events or used to work out where you are. Crash reports go to Apple or Google, not to us, and only if you have turned on sharing with them at the operating system level.
The events described above are used for one purpose: to see, in aggregate, where people get stuck in the app so we can fix it. That is the entire use.
To be exact about what we do not do with them: we do not build a profile of you, we do not personalise what you see, we do not use them to target advertising, and we do not email you. The reminders the app can send are scheduled on your device by the app itself and never pass through us.
Separately, we use whatever you send us in a support email to answer that email, and we will comply with the law where it obliges us to.
We do not sell, trade, or otherwise transfer your personal information to third parties, except in the following circumstances:
We may share non-health information with trusted third-party service providers who assist us in operating our app, conducting our business, or serving our users, provided they agree to maintain confidentiality.
We may disclose your information when required by law, such as to comply with a subpoena or similar legal process, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the transaction, subject to the same privacy protections.
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure.
Because your data sits on your device rather than on our servers, most of these rights you exercise directly, without asking us.
There is no account to delete and no marketing to unsubscribe from, because neither exists.
Your health data is on your device and we hold no copy of it, so you do not have to ask us for it. Open More → Export Data, pick CSV or JSON and a date range, and the app writes a file you can send anywhere: your food diary, exercise, weight, water and supplements, with weights in whichever unit you have chosen.
If you also want a copy of the only records that sit on our side, the anonymous product events tied to your installation identifier, email privacy@mochasmindlab.com from the device in question and we will provide them.
Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.
If you are located outside of Canada, please note that your information may be transferred to and processed in countries that may have different privacy laws than your jurisdiction.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
We cannot notify you any other way, and we would rather say so than imply otherwise: the app has no account, no email address for you and no push notifications, so this page and the copy inside the app are the only places a change can be announced.
Your continued use of the Service after such modifications constitutes acceptance of the updated Privacy Policy.
This section provides additional disclosures specific to Mocha on iOS and Android.
Mocha integrates with your device's health platform, Apple HealthKit on iOS and Google Health Connect on Android, to read and write health metrics with your explicit permission.
Health data is processed entirely on your device and is never transmitted to our servers. You may revoke health permissions at any time through your device's privacy settings (iOS: Settings → Privacy & Security → Health; Android: Health Connect app → Permissions).
Mocha offers Pro features through a one-time in-app purchase processed by Apple's App Store (iOS) or Google Play Billing (Android). We receive a purchase confirmation from these platforms but do not collect or store your payment information. Refunds and billing inquiries are handled by Apple or Google directly per their respective platform policies.
In the app. Mocha records a small number of product events so we can see where people get stuck: completing onboarding, running a first meal scan, the upgrade screen appearing or being dismissed, tapping Buy, a purchase succeeding or failing, and which of the app's main screens you open. Each event is sent to our own endpoint at mochasmindlab.com together with a randomly generated installation identifier, the platform (iOS or Android), the app version and a timestamp. A screen event records only the name of the screen, such as the diary or the meal scanner, never what you entered on it. These events contain no health data, no food logs, no photos, and no name, email address or account, and the installation identifier is not tied to your identity. We use this only to understand how the app is used in aggregate.
On this website. Our website, which is separate from the app, uses Google Analytics 4, PostHog and Vercel Analytics to measure page visits and which pages lead to downloads. They record which pages you view, which download buttons and links you click, and how far down a page you scroll, along with general device and browser information. PostHog may also record how you move through a page (a session recording) so we can find parts of the site that are hard to use; anything typed into a field is hidden in those recordings. PostHog also records where visitors click and how far they scroll on each page, shown as heat maps. None of this includes your name or email address. These operate only in your browser when you visit the site, never inside the app, and they have no access to any data stored in the app. They use cookies and similar browser storage. If you open the site from one of our own test links, a cookie named traffic_type marks your visits as test traffic so we can leave them out of our numbers. Ordinary visitors never get it. We do not run advertising tags on this site, and if that changes we will update this policy first. You can block or delete analytics cookies in your browser settings (the site still works with them blocked), or install the Google Analytics opt-out browser add-on. Google describes its own handling of this information in How Google uses information from sites that use its services.
When you choose to scan a meal photo using the AI Meal Scanner feature, the photo is transmitted over a secure HTTPS connection to Anthropic (anthropic.com), our AI service provider, for analysis. Anthropic identifies foods in the photo and estimates nutrition values. Per Anthropic's API terms, photos are processed in real time and are not retained, logged, or used for model training. The nutrition results are returned to your device and stored locally; no copy of the photo or its analysis is kept on our servers.
If you do not use the AI Meal Scanner feature, no photos leave your device.
When you search for a food item or scan a barcode, Mocha queries one or more of the following third-party databases to retrieve nutrition or product information:
These queries contain only the search term or barcode you provided and do not include any identifying information about you. Barcode decoding itself runs on-device using Google ML Kit and never transmits the camera image; only the resulting numeric barcode value is sent to the lookup service.
If you choose to import a recipe by pasting a URL, Mocha fetches that URL directly from your device to extract the recipe. No personal information is sent, only a standard HTTP request to the URL you provided.
If you enable smart reminders (water, meals, weight, exercise), Mocha schedules local notifications on your device. These notifications are generated and delivered locally; no notification content is sent to our servers or to a push-notification service.
Apart from the third-party services listed above, all Mocha data (your food log, exercise log, supplements, body measurements, weight history, recipes, achievements) is stored exclusively on your device using the platform's standard storage (Core Data on iOS; Room database and DataStore on Android). We do not have a server that holds this data, and we cannot recover it if you uninstall the app.
Retention: Data is retained on your device for as long as you keep the app installed. We do not retain copies on our servers because no such servers exist for this data. Uninstalling the app, or using Settings → Clear Data, permanently removes all locally stored Mocha data.
Mocha, the app from Mocha's MindLab Inc., gives you complete control over your data. Because all data is stored on-device, you delete it directly from your device; there is no account to close and no server-side data to request.
How to delete your data:
What gets deleted: your food log, exercise log, supplement entries, body measurements, weight history, saved recipes, meal plans, goals, achievements, preferences, and any cached AI Meal Scanner results. All of this lives only on your device.
What is kept: nothing; there is no server-side copy. The AI Meal Scanner photos you scanned were processed in real-time by Anthropic and are not retained by Anthropic or by us, so there is nothing to delete there.
If you need help with deletion, email privacy@mochasmindlab.com and we will walk you through it.
Vancouver, British Columbia, Canada
Email: privacy@mochasmindlab.com
Address: 244-1231 Pacific Blvd, Vancouver, BC V6Z 2E2
Phone: 236-885-9577
For privacy complaints: www.priv.gc.ca
By using our Service, you consent to the collection and use of your information as described in this Privacy Policy.
Mocha: Food Diary & Tracker
A food diary and calorie counter with no subscription, from Mocha's MindLab Inc. in Vancouver, British Columbia, Canada.
© 2026 Mocha's MindLab Inc. Built with AI, directed and tested by a human.
Also from us: Mindful Meal Plans · Happy Grants · Certalot · Mocha Shmigelsky
